This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft File: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json) Hash identifier: cnIBYKHYZj9JWJm/5LCAKir1TjB8mC9zCfA31oGxjYQ= Subject key identifier: 09:92:29:C9:E4:32:E9:64:5E:89:5A:C4:84:73:72:B9:7C:D7:B4:25 Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 Certificate issuer: /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Certificate serial: 019BF5ABCD1D1C61132D4469EB4720A554EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft Manifest number: 12F9 Signing time: Sun 25 Jan 2026 15:00:35 +0000 Manifest this update: Sun 25 Jan 2026 15:00:35 +0000 Manifest next update: Mon 26 Jan 2026 15:00:35 +0000 Files and hashes: 1: Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa (hash: PF/ed+k7gtadd5HsxTcEuV0PkSMYqzIOsEkgaO30wiM=) 2: M3kEZhwNAZH2MoRits4PT4v1XYY.roa (hash: 9BRevnCxVw2l/jCPOd7XDBAI+hID2up62MsIMKdFJLE=) 3: Ugs1R72eLpNOvqQLq80_hJnxxCs.roa (hash: HAAX/DAdp/HiBc6dDbGVPO1NxsuLn8+Z1EDMvgnvFTM=) 4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: Nkc6rEASyNVEB6VYW3uaI/XGqXNx5UkGc/73b2RH5po=) 5: d1DdXgc0G77dhrd6ZdfdSd_hf70.roa (hash: VPxYVo5tR4ALJMz9uvC5RMlfofG9QR9Ag17Z6g94IPk=) 6: ldHMEOJiE59-H0cOPRmvSFACx0s.roa (hash: mOMIPtr1abOjWcrfM5eKbECfrNaucrP77WVejoM6ds4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:cd:1d:1c:61:13:2d:44:69:eb:47:20:a5:54:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Validity Not Before: Jan 25 15:00:35 2026 GMT Not After : Jan 26 15:00:35 2026 GMT Subject: CN=099229c9e432e9645e895ac4847372b97cd7b425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:d2:01:89:9f:18:19:8e:31:35:a2:33:c4: 47:cc:1d:bc:c8:32:a7:6e:b9:24:7d:7a:b3:45:73: bb:21:6f:09:c4:89:d3:7d:97:ad:5d:1d:a7:d1:f3: eb:1c:44:92:98:94:9f:25:23:ca:e3:72:12:ec:e1: bb:7c:34:93:67:05:03:c4:6f:5e:e3:f5:9d:b4:fa: b0:9d:ae:ac:fd:e6:0a:cc:8a:7b:77:f7:19:30:23: 52:83:73:a5:8f:74:81:06:2e:04:13:79:1e:da:c0: 92:0b:9e:a2:44:08:a7:e4:d9:68:cd:4b:49:0c:d4: 82:17:5c:e3:9d:19:b6:cd:34:af:6c:73:c6:83:cd: b4:58:3b:e3:8b:86:e7:a4:20:8d:b7:dc:4c:60:01: 7e:c2:4a:f3:30:4d:19:11:19:50:a4:df:56:8c:42: 86:79:c8:30:e2:c1:10:fe:ba:31:7a:7f:16:8c:1a: 8c:55:de:08:0f:b5:21:43:99:4f:4f:b9:a5:18:a6: c2:6b:18:a3:a2:4f:8c:4f:b4:ba:c9:23:13:20:e5: 2a:05:1b:ad:b4:3b:72:84:1b:a6:75:8b:3b:14:f1: e0:6b:12:e2:aa:7f:f5:3c:0a:7b:69:cc:f9:86:bf: c5:b9:44:05:be:54:01:fb:71:de:e7:c1:8a:b1:22: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:92:29:C9:E4:32:E9:64:5E:89:5A:C4:84:73:72:B9:7C:D7:B4:25 X509v3 Authority Key Identifier: keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:50:eb:c6:b0:e8:ef:ed:4e:38:22:3d:57:09:73:84:71:7c: 1f:dc:a0:93:36:06:d4:10:66:f6:20:ef:72:55:f4:0b:22:fb: 03:fd:8a:6b:cf:8b:14:5a:d9:33:6d:f3:fc:a2:18:4a:ac:3f: cd:9b:84:c7:52:15:e3:5c:56:24:8d:16:e7:dc:77:69:62:b7: da:c4:46:eb:c6:45:a5:f0:84:33:c9:7c:b6:88:06:1e:05:8b: cd:c1:b6:70:c9:73:46:90:3a:92:4e:9b:84:ba:bd:47:69:84: 93:1b:e8:10:4d:19:85:19:cc:bd:c4:b5:8d:aa:71:c5:79:66: 60:4d:dc:20:46:3f:b7:e6:a4:2d:f5:d0:53:e2:bb:d3:a1:f9: 17:ce:12:e5:90:bd:09:cc:70:40:94:24:2c:28:a2:1e:e4:db: c0:83:f7:d6:60:46:15:00:b4:62:8a:d4:9b:db:27:85:b9:27: 9e:41:e0:52:41:55:5c:84:33:6f:46:90:b8:99:f1:9b:f0:5f: e4:e1:09:c7:0c:3d:fe:12:50:a6:18:01:8a:81:44:2e:71:04: f7:e1:4c:0b:ed:5b:8e:21:be:16:31:c3:25:7e:fe:0d:47:96: 43:5e:5d:3d:da:f3:4d:e9:12:b9:ba:0c:a3:89:e4:d5:9e:ec: a0:9b:23:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q80dHGETLURp60cgpVTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm YzI0ZDQwHhcNMjYwMTI1MTUwMDM1WhcNMjYwMTI2MTUwMDM1WjAzMTEwLwYDVQQD EygwOTkyMjljOWU0MzJlOTY0NWU4OTVhYzQ4NDczNzJiOTdjZDdiNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCrSAYmfGBmOMTWiM8RHzB28yDKn brkkfXqzRXO7IW8JxInTfZetXR2n0fPrHESSmJSfJSPK43IS7OG7fDSTZwUDxG9e 4/WdtPqwna6s/eYKzIp7d/cZMCNSg3Olj3SBBi4EE3ke2sCSC56iRAin5NlozUtJ DNSCF1zjnRm2zTSvbHPGg820WDvji4bnpCCNt9xMYAF+wkrzME0ZERlQpN9WjEKG ecgw4sEQ/roxen8WjBqMVd4ID7UhQ5lPT7mlGKbCaxijok+MT7S6ySMTIOUqBRut tDtyhBumdYs7FPHgaxLiqn/1PAp7acz5hr/FuUQFvlQB+3He58GKsSLt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmSKcnkMulkXolaxIRzcrl817QlMB8GA1UdIwQY MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt YmU1NTIwYTVjODIxLzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1DrxrDo 7+1OOCI9VwlzhHF8H9ygkzYG1BBm9iDvclX0CyL7A/2Ka8+LFFrZM23z/KIYSqw/ zZuEx1IV41xWJI0W59x3aWK32sRG68ZFpfCEM8l8togGHgWLzcG2cMlzRpA6kk6b hLq9R2mEkxvoEE0ZhRnMvcS1japxxXlmYE3cIEY/t+akLfXQU+K706H5F84S5ZC9 CcxwQJQkLCiiHuTbwIP31mBGFQC0YorUm9snhbknnkHgUkFVXIQzb0aQuJnxm/Bf 5OEJxww9/hJQphgBioFELnEE9+FMC+1bjiG+FjHDJX7+DUeWQ15dPdrzTekSuboM o4nk1Z7soJsjUg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:44 2026 by rpki-client