This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json) Hash identifier: ybr5XYV2awk59CXfNM+7UkLFljEM48MRnfQP379Pi9I= Subject key identifier: A6:2D:DB:5C:E4:A8:14:D6:D0:05:EB:DF:A2:12:A3:E5:81:1B:A3:AD Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6 Certificate serial: 019BF83FED8AACF369F10F1CEC6197ED431E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft Manifest number: 0909 Signing time: Mon 26 Jan 2026 03:01:37 +0000 Manifest this update: Mon 26 Jan 2026 03:01:37 +0000 Manifest next update: Tue 27 Jan 2026 03:01:37 +0000 Files and hashes: 1: 3GgVbsdNTqu2-B0T8Y_NIhcstT0.roa (hash: Cfn/SPWXrVuwuM1Ty4dMpe8+JSfhaIfbzq40+DUYybI=) 2: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: FnaYpYvItd37SoNBtjkae2FhvqtsMWcAuIjAFdVGisE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:ed:8a:ac:f3:69:f1:0f:1c:ec:61:97:ed:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6 Validity Not Before: Jan 26 03:01:37 2026 GMT Not After : Jan 27 03:01:37 2026 GMT Subject: CN=a62ddb5ce4a814d6d005ebdfa212a3e5811ba3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:46:1f:7e:bc:d8:d4:2c:96:9a:6b:af:93: 6f:03:b4:43:4e:df:8e:ab:9a:66:b5:ba:34:2e:24: 71:1c:b1:32:5a:e6:f3:31:fe:12:39:0c:0d:21:a8: 2a:0b:e4:e6:10:27:25:a8:30:d2:8e:fe:ab:17:b0: 9a:25:5b:3a:65:32:44:ae:67:a0:cb:4e:dc:0d:50: e0:cb:d0:30:03:96:2a:77:71:a1:e2:dd:47:f0:34: 4b:f6:65:01:ed:59:39:06:71:a9:1b:de:d6:b7:f4: 2c:21:3e:25:7f:48:01:e2:a6:74:56:ea:d7:0d:26: 67:83:8a:a1:a4:9e:cb:29:36:43:3d:a8:2e:71:fc: f7:96:e1:fc:8e:fc:0b:aa:2a:29:47:c5:bb:96:0f: 17:d3:b3:33:a0:6b:1d:36:59:f3:1d:0e:c7:fb:35: 70:12:d3:62:da:e9:24:68:23:f1:3a:ce:9a:ba:43: b2:6e:ae:e8:40:c7:61:11:da:7f:a6:0f:ae:43:68: 50:eb:67:7e:53:1c:ea:c7:6c:a7:53:a5:fa:c5:31: 7b:8e:72:d0:41:02:82:9a:ba:83:48:cc:d4:81:aa: d5:cf:d4:97:15:a2:de:79:17:4d:9c:0a:d2:b8:11: a2:d1:90:9d:f9:86:23:7b:11:2a:1d:8e:5a:bf:f3: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2D:DB:5C:E4:A8:14:D6:D0:05:EB:DF:A2:12:A3:E5:81:1B:A3:AD X509v3 Authority Key Identifier: keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5e:c5:99:60:d6:4f:9f:a1:77:67:d6:29:c7:d6:7b:5a:37: 9a:90:f0:d1:d8:f1:92:5d:6e:5f:c7:e0:02:56:f4:c4:f0:80: 3d:d3:ae:07:1d:81:a3:05:23:fd:c7:26:66:9d:a9:ae:71:42: 04:22:bb:96:ec:6f:3f:c1:3e:1e:55:d5:59:81:c9:f1:d6:78: 4e:f8:1a:97:34:75:8a:91:df:b7:2a:32:10:94:94:4d:2f:49: ab:f8:85:bc:63:6c:ff:8c:ee:5a:7e:14:17:75:31:e0:b6:4d: 58:b3:0d:15:7c:04:6b:dc:82:ca:a8:5f:7e:ad:71:50:bf:db: c7:65:c6:43:b1:10:14:f8:3c:0c:1a:13:4b:7b:fa:49:39:41: e3:d2:a2:cd:54:3e:d6:7b:66:f6:24:34:2f:72:24:7f:b8:e6: d7:da:4e:d4:ac:46:2d:4d:35:37:5e:32:d4:cf:74:7c:81:e8: fb:e4:ca:40:4e:3b:0d:87:1f:e9:9d:85:8e:ed:43:21:e9:7e: bf:30:12:8f:d6:a9:e4:0d:e7:61:b2:93:12:73:41:04:ef:16: 91:6b:c1:bd:9e:53:26:39:53:38:2a:af:52:96:b1:a1:c8:00: 93:13:8e:c7:71:67:bd:ba:ae:3a:6c:7c:8b:e2:14:71:7c:51: 28:a1:3f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P+2KrPNp8Q8c7GGX7UMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTFhYjMyNDVmZjg5NWE3MmRkNmZmMDc0M2MzNzdiNmYw Zjg5YTYwHhcNMjYwMTI2MDMwMTM3WhcNMjYwMTI3MDMwMTM3WjAzMTEwLwYDVQQD EyhhNjJkZGI1Y2U0YTgxNGQ2ZDAwNWViZGZhMjEyYTNlNTgxMWJhM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlGH3682NQslpprr5NvA7RDTt+O q5pmtbo0LiRxHLEyWubzMf4SOQwNIagqC+TmECclqDDSjv6rF7CaJVs6ZTJErmeg y07cDVDgy9AwA5Yqd3Gh4t1H8DRL9mUB7Vk5BnGpG97Wt/QsIT4lf0gB4qZ0VurX DSZng4qhpJ7LKTZDPagucfz3luH8jvwLqiopR8W7lg8X07MzoGsdNlnzHQ7H+zVw EtNi2ukkaCPxOs6aukOybq7oQMdhEdp/pg+uQ2hQ62d+Uxzqx2ynU6X6xTF7jnLQ QQKCmrqDSMzUgarVz9SXFaLeeRdNnArSuBGi0ZCd+YYjexEqHY5av/NH5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYt21zkqBTW0AXr36ISo+WBG6OtMB8GA1UdIwQY MBaAFPaRqzJF/4lact1v8HQ8N3tvD4mmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUt ZGZlM2M0YzUyODhjLzEvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUtZGZlM2M0YzUyODhj LzEvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl17FmWDW T5+hd2fWKcfWe1o3mpDw0djxkl1uX8fgAlb0xPCAPdOuBx2BowUj/ccmZp2prnFC BCK7luxvP8E+HlXVWYHJ8dZ4TvgalzR1ipHftyoyEJSUTS9Jq/iFvGNs/4zuWn4U F3Ux4LZNWLMNFXwEa9yCyqhffq1xUL/bx2XGQ7EQFPg8DBoTS3v6STlB49KizVQ+ 1ntm9iQ0L3Ikf7jm19pO1KxGLU01N14y1M90fIHo++TKQE47DYcf6Z2Fju1DIel+ vzASj9ap5A3nYbKTEnNBBO8WkWvBvZ5TJjlTOCqvUpaxocgAkxOOx3FnvbquOmx8 i+IUcXxRKKE/0w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:24 2026 by rpki-client