This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json) Hash identifier: nlaDHGlrNj938BGbKOHHxBRaXsDdXBCm275mZoMmALc= Subject key identifier: DA:6E:3D:9C:53:73:7A:A2:12:C7:D9:F3:B7:96:C2:5A:32:DA:43:F0 Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Certificate serial: 019BF7D2436CA04616C37D2C83692E6E6ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 01:01:50 +0000 Manifest this update: Mon 26 Jan 2026 01:01:50 +0000 Manifest next update: Tue 27 Jan 2026 01:01:50 +0000 Files and hashes: 1: ePJZJNhpApp5V_50Q_hot0iS_wU.roa (hash: QR4bO1N17271c13+CycjZX16iUUkNqGxGT5DNiVyLsU=) 2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: TtqyBOfZhBXg2Ejs2OzK9hlEtwQWibL17iqiYQCNcZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:43:6c:a0:46:16:c3:7d:2c:83:69:2e:6e:6a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Validity Not Before: Jan 26 01:01:50 2026 GMT Not After : Jan 27 01:01:50 2026 GMT Subject: CN=da6e3d9c53737aa212c7d9f3b796c25a32da43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:f4:90:14:ae:a2:70:be:2e:17:39:6f:40: 8b:0d:c4:83:23:ff:98:2a:5e:95:b5:37:97:90:67: 0a:d4:89:55:bf:51:24:62:a9:64:39:04:87:0c:e1: 82:82:1c:c4:7c:ab:03:6c:db:eb:c2:a9:d5:76:04: 79:19:bc:39:20:da:cc:68:eb:e4:89:0d:b2:a7:de: 97:b7:6d:d2:02:6d:51:ba:74:c8:77:45:a2:79:ef: e1:80:a5:a0:6b:47:8f:bd:c5:64:68:d2:29:ad:c2: 35:a9:35:0c:b1:6c:1a:b1:ad:6d:80:88:95:3c:ff: 45:73:dc:cb:9b:f5:2e:66:05:ad:bd:02:eb:84:5f: fd:a5:34:92:71:cb:da:02:b9:9a:fe:71:ad:d6:a4: fd:59:4e:ac:2b:22:c1:84:97:95:7a:f8:fc:6e:bd: e6:bf:68:93:05:cf:7f:ed:5b:92:80:1b:0b:b0:29: 9e:6f:d1:2d:f6:0f:a4:a9:b2:c1:62:f7:38:c7:7e: f9:85:67:8a:d4:31:13:ae:3b:d5:22:90:07:f3:80: 12:c1:6d:e5:1d:98:ac:27:6e:04:24:6e:ed:84:97: 3a:27:f1:11:01:fb:0d:6e:df:88:7f:9c:a7:90:10: 54:f4:b6:bd:bf:33:b7:c3:32:bb:9a:7e:94:05:0d: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:3D:9C:53:73:7A:A2:12:C7:D9:F3:B7:96:C2:5A:32:DA:43:F0 X509v3 Authority Key Identifier: keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:48:71:d0:44:0e:39:55:c4:af:4c:91:df:0b:58:78:46:9f: f0:a9:5b:37:de:22:45:67:4e:1a:dd:2a:91:e1:78:17:ab:cd: e4:56:fc:f9:58:26:f3:59:ff:b3:56:63:3a:93:1a:71:5d:ff: ed:4d:54:67:6f:a2:37:d4:86:ea:70:77:8a:61:7e:6c:75:56: f8:17:2d:55:b4:c7:72:ad:00:b0:52:f7:09:c1:1e:f7:3b:97: 22:18:26:64:06:2d:69:fc:36:03:15:11:ef:ad:82:b4:04:2a: 51:8e:e8:9e:9f:ac:f2:bf:bc:7a:70:52:59:b8:5d:2a:a6:9a: ec:ba:d7:5e:30:c0:f6:5d:50:4d:bd:6c:67:f0:06:d3:6f:8c: c6:4c:28:1f:f5:f8:f6:5d:14:85:a3:69:cf:9a:de:db:b1:b8: cc:4a:02:f9:c3:5d:6e:13:de:6b:90:b0:78:db:a3:38:ea:4d: 3f:37:41:81:8c:74:24:57:2b:3a:e6:0a:17:3e:69:ea:97:48: 7c:7a:7b:d4:0c:c6:70:ae:cc:3f:50:22:1a:bf:16:df:8b:c6: 04:dd:fa:72:1f:cb:47:fe:f0:88:7d:a7:15:b0:a8:57:1a:e6: fe:28:60:f7:83:37:2f:f4:3b:a5:b3:d2:56:b6:3b:8d:14:6b: 0d:0b:9b:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kNsoEYWw30sg2kubmq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDBmOGI0MjA0NWM3Mzg3MDIxNmNlMDM2OWNiZDFhODBi Yzg5OTUwHhcNMjYwMTI2MDEwMTUwWhcNMjYwMTI3MDEwMTUwWjAzMTEwLwYDVQQD EyhkYTZlM2Q5YzUzNzM3YWEyMTJjN2Q5ZjNiNzk2YzI1YTMyZGE0M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwb0kBSuonC+Lhc5b0CLDcSDI/+Y Kl6VtTeXkGcK1IlVv1EkYqlkOQSHDOGCghzEfKsDbNvrwqnVdgR5Gbw5INrMaOvk iQ2yp96Xt23SAm1RunTId0Wiee/hgKWga0ePvcVkaNIprcI1qTUMsWwasa1tgIiV PP9Fc9zLm/UuZgWtvQLrhF/9pTSSccvaArma/nGt1qT9WU6sKyLBhJeVevj8br3m v2iTBc9/7VuSgBsLsCmeb9Et9g+kqbLBYvc4x375hWeK1DETrjvVIpAH84ASwW3l HZisJ24EJG7thJc6J/ERAfsNbt+If5ynkBBU9La9vzO3wzK7mn6UBQ3FowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpuPZxTc3qiEsfZ87eWwloy2kPwMB8GA1UdIwQY MBaAFJvQ+LQgRcc4cCFs4DacvRqAvImVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEt OTJmMWQ3ZGZjODE3LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEtOTJmMWQ3ZGZjODE3 LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUhx0EQO OVXEr0yR3wtYeEaf8KlbN94iRWdOGt0qkeF4F6vN5Fb8+Vgm81n/s1ZjOpMacV3/ 7U1UZ2+iN9SG6nB3imF+bHVW+BctVbTHcq0AsFL3CcEe9zuXIhgmZAYtafw2AxUR 762CtAQqUY7onp+s8r+8enBSWbhdKqaa7LrXXjDA9l1QTb1sZ/AG02+MxkwoH/X4 9l0UhaNpz5re27G4zEoC+cNdbhPea5CweNujOOpNPzdBgYx0JFcrOuYKFz5p6pdI fHp71AzGcK7MP1AiGr8W34vGBN36ch/LR/7wiH2nFbCoVxrm/ihg94M3L/Q7pbPS VrY7jRRrDQub/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:53 2026 by rpki-client