This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json) Hash identifier: /gOy3voWWNwvH5UztdT/RJ7l/Ab4wcf8MgcTWvbxSjY= Subject key identifier: F6:6D:B9:33:55:6B:FE:2F:38:43:59:FF:51:1C:B6:1B:C4:BA:BB:65 Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d Certificate serial: 019BF83F8A8F14A64F27C07B84C90FC20CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft Manifest number: 1048 Signing time: Mon 26 Jan 2026 03:01:12 +0000 Manifest this update: Mon 26 Jan 2026 03:01:12 +0000 Manifest next update: Tue 27 Jan 2026 03:01:12 +0000 Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: 2timSi1n1MMPPDeWlychmZ9p3B2UwMGfUxBWmYVnua8=) 2: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (hash: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:8a:8f:14:a6:4f:27:c0:7b:84:c9:0f:c2:0c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d Validity Not Before: Jan 26 03:01:12 2026 GMT Not After : Jan 27 03:01:12 2026 GMT Subject: CN=f66db933556bfe2f384359ff511cb61bc4babb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:a2:6f:0e:f6:04:ec:64:21:29:9d:be:3d: d9:43:ac:0a:00:b6:de:92:f0:79:52:dc:e5:c0:b7: b1:20:48:d0:5a:bb:cb:4a:be:84:5e:62:92:d4:b5: 8e:24:f0:5f:b7:05:83:46:76:97:dc:39:98:cd:db: dc:6e:00:b8:33:41:f0:8f:44:92:10:a4:5a:a6:bb: e1:b1:84:35:38:62:e5:cb:07:8c:26:30:4a:c7:22: 3b:ec:ae:9e:03:4b:eb:43:5c:be:a5:e5:c8:6d:94: 61:e4:8e:63:21:dd:bf:c5:54:80:3c:99:1f:c6:c8: 94:94:d3:02:2a:b1:ec:c6:e1:87:04:83:ff:7a:b2: 3c:72:2d:bc:01:59:1b:52:8d:5b:75:11:f3:89:a2: eb:bb:03:85:82:9b:65:ff:b3:7e:5b:60:72:54:97: 38:fa:ae:58:32:dd:84:33:3f:04:b4:c6:2f:d9:cd: d5:eb:91:d6:5c:42:64:9b:0c:e1:3a:9f:92:c0:dd: b6:03:f4:cb:38:94:a4:59:a0:41:aa:55:be:0d:a6: 76:01:f2:6b:96:dc:a8:b3:b6:fc:bf:52:67:c6:b3: 3c:cf:48:c8:03:77:c0:fa:07:80:93:da:c6:7d:6e: f2:3b:5e:16:e4:c4:0c:fb:e0:96:7a:0e:73:8c:5b: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6D:B9:33:55:6B:FE:2F:38:43:59:FF:51:1C:B6:1B:C4:BA:BB:65 X509v3 Authority Key Identifier: keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e9:b2:f0:67:b0:67:32:9b:39:13:f4:4b:24:e3:29:00:9f: 55:5f:ac:d5:f2:58:32:1e:90:73:fc:9b:98:24:08:eb:06:3e: bc:2e:44:a1:80:31:9c:ec:31:49:31:a0:de:d5:37:cf:4e:42: 69:2e:cc:ef:11:8a:1a:0c:f1:d0:fe:69:c5:3e:b9:19:8e:b7: 37:7f:e7:da:26:93:e8:ce:02:6e:8e:f4:59:05:ab:8e:2f:dd: 02:47:a9:bc:f1:81:87:d3:56:74:89:4a:f3:93:fd:4a:ba:64: a0:a1:d5:af:23:70:76:93:3b:83:fe:d1:df:f1:07:a6:d0:54: 3b:f5:29:45:53:53:08:51:d9:e8:ef:2e:10:d8:fd:21:1a:d6: b8:13:86:42:63:39:1f:3d:37:47:53:2c:e0:aa:1b:18:b5:72: 9d:94:55:d9:ec:f3:22:9b:88:ea:67:74:e1:4b:3f:22:5a:27: cb:6d:c3:42:ec:5c:9b:1d:8f:13:98:9f:19:b3:df:ac:7a:78: 6c:d0:fb:87:fd:e5:64:28:3a:ad:ec:b5:b3:59:bf:71:84:3d: 44:d0:7a:2f:2a:58:d6:3f:87:73:26:14:fc:33:80:bb:98:be: 98:5d:8d:39:ad:09:a1:c1:f5:27:3f:79:b0:27:47:29:28:7d: d0:34:47:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P4qPFKZPJ8B7hMkPwgziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWM3ZWI4NjIyNGFkYjM4NDA4ODQ3ZGVlNGNmYzRjNDAw M2FkNWQwHhcNMjYwMTI2MDMwMTEyWhcNMjYwMTI3MDMwMTEyWjAzMTEwLwYDVQQD EyhmNjZkYjkzMzU1NmJmZTJmMzg0MzU5ZmY1MTFjYjYxYmM0YmFiYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cyibw72BOxkISmdvj3ZQ6wKALbe kvB5UtzlwLexIEjQWrvLSr6EXmKS1LWOJPBftwWDRnaX3DmYzdvcbgC4M0Hwj0SS EKRaprvhsYQ1OGLlyweMJjBKxyI77K6eA0vrQ1y+peXIbZRh5I5jId2/xVSAPJkf xsiUlNMCKrHsxuGHBIP/erI8ci28AVkbUo1bdRHziaLruwOFgptl/7N+W2ByVJc4 +q5YMt2EMz8EtMYv2c3V65HWXEJkmwzhOp+SwN22A/TLOJSkWaBBqlW+DaZ2AfJr ltyos7b8v1JnxrM8z0jIA3fA+geAk9rGfW7yO14W5MQM++CWeg5zjFumBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZtuTNVa/4vOENZ/1EcthvEurtlMB8GA1UdIwQY MBaAFPacfrhiJK2zhAiEfe5M/ExAA61dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEt ZjYxNmQ5MzE4MDg3LzEvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEtZjYxNmQ5MzE4MDg3 LzEvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOmy8Gew ZzKbORP0SyTjKQCfVV+s1fJYMh6Qc/ybmCQI6wY+vC5EoYAxnOwxSTGg3tU3z05C aS7M7xGKGgzx0P5pxT65GY63N3/n2iaT6M4Cbo70WQWrji/dAkepvPGBh9NWdIlK 85P9SrpkoKHVryNwdpM7g/7R3/EHptBUO/UpRVNTCFHZ6O8uENj9IRrWuBOGQmM5 Hz03R1Ms4KobGLVynZRV2ezzIpuI6md04Us/Ilony23DQuxcmx2PE5ifGbPfrHp4 bND7h/3lZCg6rey1s1m/cYQ9RNB6LypY1j+HcyYU/DOAu5i+mF2NOa0JocH1Jz95 sCdHKSh90DRH+w== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:39 2026 by rpki-client