This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft File: 9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json) Hash identifier: cKuClrdHxB9mrFT1Z6LOtGBBfTv/20u9q/MdhIhUY40= Subject key identifier: 8A:77:5E:85:5A:2A:62:AD:23:3D:D6:36:6F:9D:E8:90:45:89:90:08 Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29 Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29 Certificate serial: 019BF7D1C31F1203F94163F2B49CC03699F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft Manifest number: 14D5 Signing time: Mon 26 Jan 2026 01:01:17 +0000 Manifest this update: Mon 26 Jan 2026 01:01:17 +0000 Manifest next update: Tue 27 Jan 2026 01:01:17 +0000 Files and hashes: 1: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: L9hq5sZQjz0XgMxRPnCfT/9uExrXy/GpV7JOaLkpDgw=) 2: QPsr2i1RyOFWh9h0vLQW-AzMqTs.roa (hash: fRTp8Q4JuvU4hBelJIWwwPHlYhJ0Jk+mXQELhbP//iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:c3:1f:12:03:f9:41:63:f2:b4:9c:c0:36:99:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29 Validity Not Before: Jan 26 01:01:17 2026 GMT Not After : Jan 27 01:01:17 2026 GMT Subject: CN=8a775e855a2a62ad233dd6366f9de89045899008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:0d:79:cc:a3:c0:5f:61:34:58:29:8c:58: db:af:76:1f:e7:d2:0f:43:a8:26:b2:90:5e:c7:d6: e8:40:1d:ad:d7:f7:dc:04:c7:15:cc:4c:fc:88:8f: 5b:aa:ac:04:c4:6a:c9:d9:92:ec:63:eb:92:b9:c8: bd:67:4f:bf:74:a9:28:92:27:bc:ad:87:96:9f:94: bd:dd:4e:88:c3:50:48:61:7c:bc:64:8a:5f:c7:15: 3e:01:7b:21:06:76:e0:24:82:da:90:0c:81:38:2d: 45:d7:36:b6:7d:55:5b:44:c8:1f:dc:75:1b:31:7f: 63:fe:c7:c2:2a:77:2a:c5:af:84:98:8a:18:eb:78: 59:83:7a:96:79:7e:51:7b:65:c8:fb:d2:0d:49:1f: 18:cf:d3:bd:70:80:e9:05:6e:d0:64:c8:97:b6:17: a3:6b:3c:2f:15:6d:23:a5:da:bf:fc:b0:c6:fb:6f: e3:fc:2d:cc:bd:79:74:2f:4e:df:55:4c:9a:a9:eb: 3d:2f:ba:f2:50:0f:fa:7f:06:29:1a:42:63:8e:a4: fb:ce:6c:1e:4e:36:8c:8f:86:ca:74:de:be:a9:7b: 24:b7:4f:15:d9:50:99:ec:ee:3d:b4:57:07:b2:a4: f3:4d:b7:d8:39:a2:ad:89:ff:6f:dc:de:90:75:1e: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:5E:85:5A:2A:62:AD:23:3D:D6:36:6F:9D:E8:90:45:89:90:08 X509v3 Authority Key Identifier: keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:40:fd:f8:ce:2b:98:ee:5b:10:a7:66:1b:b5:be:e0:fa:54: 98:f0:71:cd:ef:40:d6:db:3c:59:d9:d4:f8:af:33:b5:73:a2: ce:5e:52:dd:34:84:2e:dd:46:67:e9:b1:9a:28:10:9d:f8:56: bc:a0:76:08:15:c7:8b:ef:19:ad:a2:b6:55:dd:ec:96:30:5c: 51:bc:ac:63:5d:2b:ff:fd:c1:44:ed:f1:70:f2:ac:36:b7:94: 3f:90:62:c2:ac:91:ab:e4:d5:b5:40:f9:a6:5b:ab:8b:ce:f8: a5:e1:85:9a:e8:c4:43:21:a7:e4:83:ef:92:2a:2c:21:88:19: 8b:9a:ee:40:f0:d3:5d:b0:66:f3:b8:2c:6f:47:23:36:5c:88: 82:0a:f7:76:56:70:a6:90:4a:42:f4:49:59:e3:46:d8:13:e0: 23:a4:5b:3b:68:44:54:b0:20:5f:d7:c2:a6:a2:31:25:3c:56: 7b:ca:85:1c:8e:f5:d8:d6:4d:d1:9d:96:bf:89:26:92:fa:88: 4b:5a:4e:c7:96:db:b2:47:0e:9c:94:e1:60:89:ae:2a:20:0f: 31:5c:6c:17:79:b3:7f:1a:69:37:04:75:0c:3a:31:7d:8c:1c: 26:f2:85:5f:fa:71:db:91:ab:c1:56:42:6f:88:c4:7c:f6:86: 91:ee:d8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cMfEgP5QWPytJzANpn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjRjYjhjNTIwMmNjNTM1ZWRhZmQyMGFjYjZhODA1MDJl NGZkMjkwHhcNMjYwMTI2MDEwMTE3WhcNMjYwMTI3MDEwMTE3WjAzMTEwLwYDVQQD Eyg4YTc3NWU4NTVhMmE2MmFkMjMzZGQ2MzY2ZjlkZTg5MDQ1ODk5MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkncNecyjwF9hNFgpjFjbr3Yf59IP Q6gmspBex9boQB2t1/fcBMcVzEz8iI9bqqwExGrJ2ZLsY+uSuci9Z0+/dKkokie8 rYeWn5S93U6Iw1BIYXy8ZIpfxxU+AXshBnbgJILakAyBOC1F1za2fVVbRMgf3HUb MX9j/sfCKncqxa+EmIoY63hZg3qWeX5Re2XI+9INSR8Yz9O9cIDpBW7QZMiXthej azwvFW0jpdq//LDG+2/j/C3MvXl0L07fVUyaqes9L7ryUA/6fwYpGkJjjqT7zmwe TjaMj4bKdN6+qXskt08V2VCZ7O49tFcHsqTzTbfYOaKtif9v3N6QdR5qGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp3XoVaKmKtIz3WNm+d6JBFiZAIMB8GA1UdIwQY MBaAFPf0y4xSAsxTXtr9IKy2qAUC5P0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMt Y2YzYmRiMzJmZDY0LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMtY2YzYmRiMzJmZDY0 LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUD9+M4r mO5bEKdmG7W+4PpUmPBxze9A1ts8WdnU+K8ztXOizl5S3TSELt1GZ+mxmigQnfhW vKB2CBXHi+8ZraK2Vd3sljBcUbysY10r//3BRO3xcPKsNreUP5BiwqyRq+TVtUD5 pluri874peGFmujEQyGn5IPvkiosIYgZi5ruQPDTXbBm87gsb0cjNlyIggr3dlZw ppBKQvRJWeNG2BPgI6RbO2hEVLAgX9fCpqIxJTxWe8qFHI712NZN0Z2Wv4kmkvqI S1pOx5bbskcOnJThYImuKiAPMVxsF3mzfxppNwR1DDoxfYwcJvKFX/px25GrwVZC b4jEfPaGke7Y6w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:00 2026 by rpki-client