This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json) Hash identifier: ZYfmEkzqfdeg2RVV6m2lDxDoxjShGEO2AbBynAHVLKE= Subject key identifier: F1:FE:38:F6:96:CA:59:1E:6A:E7:EF:38:4C:3A:1E:09:54:1B:7B:BA Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3 Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3 Certificate serial: 019BF619DF92F6C1D6A928731BA7C627C0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 17:00:49 +0000 Manifest this update: Sun 25 Jan 2026 17:00:49 +0000 Manifest next update: Mon 26 Jan 2026 17:00:49 +0000 Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=) 2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: 8fVZeTk4PW3uowPdKxmTvyCNeygsWOqMkp5K80sgSH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:df:92:f6:c1:d6:a9:28:73:1b:a7:c6:27:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3 Validity Not Before: Jan 25 17:00:49 2026 GMT Not After : Jan 26 17:00:49 2026 GMT Subject: CN=f1fe38f696ca591e6ae7ef384c3a1e09541b7bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:83:9a:d6:b5:b4:7c:81:3d:c2:20:91:62: 82:e7:8b:7d:f3:d3:d2:c8:c0:d5:00:7e:f2:6a:f7: a2:6f:c5:85:69:f8:c6:5a:09:8d:a9:d1:cd:78:57: a2:2e:2f:72:b0:bd:ec:2b:1a:15:39:c2:7d:23:41: 86:ec:d7:b5:5c:96:47:a8:24:e7:2e:f2:5e:27:9c: 7c:9a:48:e2:a1:2b:6c:29:d1:3b:f4:25:fa:35:2f: e4:ec:d6:53:fc:d9:c3:7a:81:aa:43:ca:e3:69:3e: ab:eb:2c:ff:2e:d3:9f:8f:35:35:d5:62:2e:dc:ba: 92:80:9c:b4:06:9c:49:0b:2d:54:bf:34:b8:e1:75: 33:4d:2b:d7:56:de:75:c0:5b:e5:7c:46:d6:30:80: d3:4e:73:66:d9:99:e5:6f:dc:d8:d4:e9:67:79:9a: 1c:81:0d:f1:0b:75:1e:87:cd:57:16:ae:33:6d:0c: 74:4a:8f:b6:84:66:67:97:81:1f:e1:a0:8c:ae:51: b8:15:da:e9:28:5e:64:6b:18:c9:85:e2:0d:14:f5: f9:ec:7c:e3:4b:b8:52:b1:1a:c7:a8:ad:d2:fa:fe: 32:61:c3:21:85:b1:1f:27:41:1b:49:89:de:ee:16: 61:dd:2f:05:0d:cd:db:df:95:9b:2e:c2:76:c2:d6: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FE:38:F6:96:CA:59:1E:6A:E7:EF:38:4C:3A:1E:09:54:1B:7B:BA X509v3 Authority Key Identifier: keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d5:a4:0a:4b:fe:c1:fb:b6:23:12:a0:dc:b3:f3:32:e0:9e: b7:ca:c0:58:d8:be:0c:45:9e:46:9f:8e:67:c4:22:8d:b9:b9: f4:4d:65:b0:08:2d:59:c5:2d:f8:74:21:05:fa:e8:62:a0:5a: 28:0a:f7:2e:34:2c:1a:8a:84:8d:47:5f:80:ce:da:8a:5b:44: c3:eb:9e:16:66:75:93:85:04:28:67:16:c6:f0:f8:90:bc:df: 3e:4b:77:13:97:1d:cf:96:4d:88:fb:4d:83:fe:c6:f5:71:68: 88:34:d7:e5:36:1d:fa:bb:b9:ef:b9:bc:f4:77:b5:81:6d:e1: e8:6f:d5:19:b2:d3:a4:21:84:63:70:5c:03:5e:4e:07:40:31: 53:00:c2:02:bf:e0:e4:64:72:c0:7d:19:4c:ac:9e:69:39:fb: 7f:9b:2a:80:1c:6e:85:19:10:3d:78:7a:82:bf:82:51:2c:63: 9a:72:3c:7f:ca:22:ff:e1:27:11:ff:a8:0e:8f:6a:6e:40:b5: 02:6a:5e:bd:6c:de:2e:08:27:65:a5:89:b0:79:03:00:c4:f7: 74:46:49:7a:94:c0:89:4c:4f:61:da:86:59:ed:8f:4b:a2:f4: 5f:b0:a4:39:1e:42:5d:64:c7:d9:02:21:0b:33:66:f1:76:9d: 09:c9:35:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gd+S9sHWqShzG6fGJ8DwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3 ZDYyZTMwHhcNMjYwMTI1MTcwMDQ5WhcNMjYwMTI2MTcwMDQ5WjAzMTEwLwYDVQQD EyhmMWZlMzhmNjk2Y2E1OTFlNmFlN2VmMzg0YzNhMWUwOTU0MWI3YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeDmta1tHyBPcIgkWKC54t989PS yMDVAH7yaveib8WFafjGWgmNqdHNeFeiLi9ysL3sKxoVOcJ9I0GG7Ne1XJZHqCTn LvJeJ5x8mkjioStsKdE79CX6NS/k7NZT/NnDeoGqQ8rjaT6r6yz/LtOfjzU11WIu 3LqSgJy0BpxJCy1UvzS44XUzTSvXVt51wFvlfEbWMIDTTnNm2Znlb9zY1OlneZoc gQ3xC3Ueh81XFq4zbQx0So+2hGZnl4Ef4aCMrlG4FdrpKF5kaxjJheINFPX57Hzj S7hSsRrHqK3S+v4yYcMhhbEfJ0EbSYne7hZh3S8FDc3b35WbLsJ2wtY6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH+OPaWylkeaufvOEw6HglUG3u6MB8GA1UdIwQY MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3 LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9WkCkv+ wfu2IxKg3LPzMuCet8rAWNi+DEWeRp+OZ8Qijbm59E1lsAgtWcUt+HQhBfroYqBa KAr3LjQsGoqEjUdfgM7ailtEw+ueFmZ1k4UEKGcWxvD4kLzfPkt3E5cdz5ZNiPtN g/7G9XFoiDTX5TYd+ru577m89He1gW3h6G/VGbLTpCGEY3BcA15OB0AxUwDCAr/g 5GRywH0ZTKyeaTn7f5sqgBxuhRkQPXh6gr+CUSxjmnI8f8oi/+EnEf+oDo9qbkC1 AmpevWzeLggnZaWJsHkDAMT3dEZJepTAiUxPYdqGWe2PS6L0X7CkOR5CXWTH2QIh CzNm8XadCck1qg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:27 2026 by rpki-client