This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json) Hash identifier: UXKe8Og3anYr8J11MRsDukHEWf8xgMjqGO4u/aMfW2Y= Subject key identifier: 72:8E:A0:13:BC:0F:90:01:B6:7A:8D:2E:CD:55:B6:ED:AF:FA:2E:39 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019BF2E1C5E7C6409FC4A0D995982645A03F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft Manifest number: 128E Signing time: Sun 25 Jan 2026 02:00:41 +0000 Manifest this update: Sun 25 Jan 2026 02:00:41 +0000 Manifest next update: Mon 26 Jan 2026 02:00:41 +0000 Files and hashes: 1: GfskLOZoVhgQg_wzxEm8GfZcHM4.roa (hash: ofrsA1DT7Aku9raL2XzjxdFLHd4Z33+79Febk9dotIQ=) 2: L_HXYmOHhoM2YRE97tQgr7r3-SI.roa (hash: FgKVtJ0H+q1J3xzFBhPOLkROSf4gdoaYW3BrXLNdbVA=) 3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: lABHKYvFfSfDA94gTjFD+xqwdTAN6r43NZpw8LY015k=) 4: YFarakxWfFYCLAQp5ljHgqOhWAE.roa (hash: RE/+b+N1gEHRcglkBMv26yH60CrY4s//QKu/NgO0inU=) 5: ikavjZ5f6GJawA563R9lfvFF_yw.roa (hash: xj6NjfSn9z5nQZs/dmQKm0hr04bNYyjHHm+s3X5QLbI=) 6: qQfpp7t9DK9V6gL_8q23BxXNnRw.roa (hash: lJumWK87pFOc6ZFcfXBZ+TluPfr8swJRdJzi3gOyHEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:c5:e7:c6:40:9f:c4:a0:d9:95:98:26:45:a0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Jan 25 02:00:41 2026 GMT Not After : Jan 26 02:00:41 2026 GMT Subject: CN=728ea013bc0f9001b67a8d2ecd55b6edaffa2e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:33:77:28:72:c5:ec:47:b1:25:7c:71:de: 7f:57:07:47:75:cd:63:4b:b9:e9:66:39:5c:e1:9a: 80:70:6b:7c:fb:52:b0:8f:99:f4:b4:fa:36:f8:06: a7:7f:0f:c1:86:1c:c1:81:16:e5:24:1e:64:c6:69: 76:fe:c9:5e:c3:7f:3f:ee:cf:31:4b:de:d1:ea:f1: cf:32:0e:ef:36:fc:5b:cc:d1:c4:08:a5:cc:f7:53: 99:6b:64:c5:db:86:7e:06:4c:6e:a9:3e:73:a2:8e: b2:54:00:ff:6d:eb:6b:8b:89:b4:3b:11:a7:31:0d: 01:12:ed:c3:7d:2d:af:5f:cd:7f:60:95:b9:0f:15: 53:1c:78:ce:32:bc:8a:54:4e:ba:d0:93:cf:a1:eb: d5:f4:5e:44:6c:ad:f3:92:ac:51:78:9c:92:f8:69: 21:b0:0c:73:a9:24:fe:c9:cd:9c:d4:9c:1c:ec:79: a1:fb:fa:13:8a:f5:ce:97:51:1b:3f:c6:29:cc:a0: e7:bd:71:8f:6f:de:0c:98:05:88:38:ab:b5:ba:0d: cc:b9:0b:f1:c9:10:f0:02:94:f2:70:f8:9d:b9:aa: 16:7e:15:97:31:bc:86:eb:91:93:da:e4:a0:d5:0f: b0:57:fc:25:96:80:a4:0a:64:8b:14:0d:67:f2:46: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:A0:13:BC:0F:90:01:B6:7A:8D:2E:CD:55:B6:ED:AF:FA:2E:39 X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2e:e6:59:99:e4:89:9a:67:34:3a:77:3c:77:f4:f5:8f:2b: 07:ee:45:d5:c2:79:dd:40:90:3f:44:7b:a9:06:8b:0c:2b:0a: 23:d8:26:b1:ae:59:c4:82:df:cc:e8:e4:54:70:72:ce:5c:26: e5:c0:b5:58:ac:dd:ad:e0:a7:31:15:68:eb:70:f3:30:88:f3: 5f:c9:27:d3:9e:cf:0e:41:2e:d8:a0:93:66:40:c6:13:c6:77: 0b:a9:84:3b:38:c1:e6:9c:18:41:d0:48:7d:54:8f:e8:59:a3: 5d:c4:bc:51:5a:3d:c6:19:c7:33:1f:07:ee:7e:53:38:dd:21: b2:53:16:7e:58:c8:79:86:83:1e:3c:73:86:bc:2e:a1:f9:1e: c0:2b:2f:8f:0a:1f:07:41:1f:fb:55:2c:cb:f3:be:fa:d3:04: 88:99:7f:c1:e3:eb:ea:9e:ba:20:c1:07:9f:c4:07:00:cc:66: 56:2f:cc:d1:e8:d2:9d:e8:f6:b9:ac:4c:eb:47:01:fd:a3:c9: f5:13:35:45:ef:23:84:65:0a:e7:95:4b:7b:88:dd:e3:d3:ee: 74:c0:96:fb:40:79:19:6b:09:b8:9f:69:ab:6c:72:03:95:bc: 74:82:6d:c5:81:5b:43:44:88:fe:77:97:8b:51:f2:c7:c7:e6: 50:2a:83:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4cXnxkCfxKDZlZgmRaA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjYwMTI1MDIwMDQxWhcNMjYwMTI2MDIwMDQxWjAzMTEwLwYDVQQD Eyg3MjhlYTAxM2JjMGY5MDAxYjY3YThkMmVjZDU1YjZlZGFmZmEyZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+MzdyhyxexHsSV8cd5/VwdHdc1j S7npZjlc4ZqAcGt8+1Kwj5n0tPo2+Aanfw/BhhzBgRblJB5kxml2/slew38/7s8x S97R6vHPMg7vNvxbzNHECKXM91OZa2TF24Z+BkxuqT5zoo6yVAD/betri4m0OxGn MQ0BEu3DfS2vX81/YJW5DxVTHHjOMryKVE660JPPoevV9F5EbK3zkqxReJyS+Gkh sAxzqST+yc2c1Jwc7Hmh+/oTivXOl1EbP8YpzKDnvXGPb94MmAWIOKu1ug3MuQvx yRDwApTycPiduaoWfhWXMbyG65GT2uSg1Q+wV/wlloCkCmSLFA1n8kZkVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKOoBO8D5ABtnqNLs1Vtu2v+i45MB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC7mWZnk iZpnNDp3PHf09Y8rB+5F1cJ53UCQP0R7qQaLDCsKI9gmsa5ZxILfzOjkVHByzlwm 5cC1WKzdreCnMRVo63DzMIjzX8kn057PDkEu2KCTZkDGE8Z3C6mEOzjB5pwYQdBI fVSP6FmjXcS8UVo9xhnHMx8H7n5TON0hslMWfljIeYaDHjxzhrwuofkewCsvjwof B0Ef+1Usy/O++tMEiJl/wePr6p66IMEHn8QHAMxmVi/M0ejSnej2uaxM60cB/aPJ 9RM1Re8jhGUK55VLe4jd49PudMCW+0B5GWsJuJ9pq2xyA5W8dIJtxYFbQ0SI/neX i1Hyx8fmUCqDtA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:50 2026 by rpki-client