This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json) Hash identifier: cYuCjYkwCpQmHFar4cF0XuTkJdoOc47ZhxXjrtDT2/w= Subject key identifier: DF:7F:57:10:20:02:69:B8:7F:5D:4E:3A:00:1D:1D:12:82:36:77:F2 Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Certificate serial: 019BF575695C8E98FB4158BB8DAE9E0BA370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft Manifest number: 0D95 Signing time: Sun 25 Jan 2026 14:01:11 +0000 Manifest this update: Sun 25 Jan 2026 14:01:11 +0000 Manifest next update: Mon 26 Jan 2026 14:01:11 +0000 Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: 3UFUzFmwJDdNsoz+Wdz7tRk6YvExPRXBuBTiGzTgBVk=) 2: i98BdSWrylmIpwd0WO9-Lb6hQBo.roa (hash: 83hgwfdE90Sqn7kTtBLvA4AFMcG3JNT7E8mAR3Newj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:69:5c:8e:98:fb:41:58:bb:8d:ae:9e:0b:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Validity Not Before: Jan 25 14:01:11 2026 GMT Not After : Jan 26 14:01:11 2026 GMT Subject: CN=df7f5710200269b87f5d4e3a001d1d12823677f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:c8:23:51:6a:5d:b1:26:bf:ba:d0:d2:44: e1:1f:47:67:58:8c:06:a9:7e:9c:b5:20:4b:ca:e3: 08:30:55:ae:6b:f0:2d:3b:ee:83:8a:dc:be:e0:19: ef:18:e4:26:89:ad:ad:f7:68:5a:e5:46:98:62:9d: bd:0e:98:34:ce:ac:a7:0b:bd:bf:0f:2a:92:6d:b4: 3a:ba:98:1b:de:e9:0e:79:bb:be:81:0e:f3:69:34: e7:ea:c7:0b:0b:19:2a:6a:be:be:18:0c:52:36:dd: fb:e3:f0:c2:4e:59:9f:2c:44:1f:8f:9a:c7:a6:23: 76:f4:80:08:dd:28:68:a7:25:c2:c2:6d:a7:a2:bb: 76:f9:db:32:c3:10:67:99:51:3e:2c:33:8e:8d:66: 1b:23:73:fa:17:54:38:18:dc:60:22:bb:ab:9a:a3: 9d:19:f0:96:49:b1:17:17:a6:cf:d3:6b:27:7c:93: 2c:83:79:84:13:31:99:b8:18:f3:de:eb:4b:d6:b4: 2d:d8:71:4a:b1:1f:60:ec:61:d3:cb:c6:b3:2b:60: 82:49:7c:1b:1d:e1:7d:49:51:34:47:d6:a0:10:77: 19:3d:13:8b:ef:b1:87:c5:5a:ff:48:63:2a:37:78: 80:c6:6a:29:3c:e2:f1:92:ba:b0:16:89:f2:02:24: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:57:10:20:02:69:B8:7F:5D:4E:3A:00:1D:1D:12:82:36:77:F2 X509v3 Authority Key Identifier: keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:e5:60:a4:58:39:fb:1b:80:81:13:09:e7:c3:ba:7f:4f: 37:3a:29:0a:16:27:c7:84:c1:ec:5e:28:bc:4b:b4:89:57:f7: d9:ad:41:79:0c:5a:f5:77:d4:8c:92:9c:29:af:3e:40:9f:fb: 7b:dc:99:51:bb:a5:b3:5b:12:ba:86:13:74:fe:90:d5:12:e1: a8:ce:8c:8f:dc:25:c7:27:f7:dd:f1:2c:84:6a:91:76:d1:63: c6:31:6a:f6:48:21:f1:cb:d7:27:a5:ca:6b:99:6b:99:44:c7: 3f:e3:44:74:48:94:59:6b:95:2c:7f:83:6a:0d:a1:33:c9:97: 64:20:b4:29:f2:09:0f:09:25:3f:4f:b8:9b:68:5d:14:75:ab: c9:d5:b1:ba:d7:f3:5c:cd:d8:e0:99:3e:09:50:5e:91:95:92: 7a:8d:d3:1e:6c:11:47:22:1d:d1:26:12:8a:d0:63:c4:7a:dc: ca:7d:58:66:c1:07:4e:aa:ed:ac:13:1e:1e:95:7e:a4:d3:fe: a2:0b:f4:d0:c1:1f:d7:07:5b:f2:4b:b0:b0:73:e8:f3:ff:63: dc:df:5f:c0:0c:f5:a4:8a:0e:77:4f:fb:c2:e5:87:5d:09:57: 00:68:b0:a0:d7:2d:8a:16:17:ba:b4:84:9e:66:68:7f:65:79: 1a:38:fd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWlcjpj7QVi7ja6eC6NwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ0MmNjZDEzZDdmOGE3YzNlZGE1YjU1MDJkOGQ2ZGNi YmJlMTEwHhcNMjYwMTI1MTQwMTExWhcNMjYwMTI2MTQwMTExWjAzMTEwLwYDVQQD EyhkZjdmNTcxMDIwMDI2OWI4N2Y1ZDRlM2EwMDFkMWQxMjgyMzY3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnII1FqXbEmv7rQ0kThH0dnWIwG qX6ctSBLyuMIMFWua/AtO+6Dity+4BnvGOQmia2t92ha5UaYYp29Dpg0zqynC72/ DyqSbbQ6upgb3ukOebu+gQ7zaTTn6scLCxkqar6+GAxSNt374/DCTlmfLEQfj5rH piN29IAI3ShopyXCwm2nort2+dsywxBnmVE+LDOOjWYbI3P6F1Q4GNxgIrurmqOd GfCWSbEXF6bP02snfJMsg3mEEzGZuBjz3utL1rQt2HFKsR9g7GHTy8azK2CCSXwb HeF9SVE0R9agEHcZPROL77GHxVr/SGMqN3iAxmopPOLxkrqwFonyAiSs7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9/VxAgAmm4f11OOgAdHRKCNnfyMB8GA1UdIwQY MBaAFEvdQszRPX+KfD7aW1UC2Nbcu74RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUt MWNhMjEyMGVlNDM2LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUtMWNhMjEyMGVlNDM2 LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdXlYKRY OfsbgIETCefDun9PNzopChYnx4TB7F4ovEu0iVf32a1BeQxa9XfUjJKcKa8+QJ/7 e9yZUbuls1sSuoYTdP6Q1RLhqM6Mj9wlxyf33fEshGqRdtFjxjFq9kgh8cvXJ6XK a5lrmUTHP+NEdEiUWWuVLH+Dag2hM8mXZCC0KfIJDwklP0+4m2hdFHWrydWxutfz XM3Y4Jk+CVBekZWSeo3THmwRRyId0SYSitBjxHrcyn1YZsEHTqrtrBMeHpV+pNP+ ogv00MEf1wdb8kuwsHPo8/9j3N9fwAz1pIoOd0/7wuWHXQlXAGiwoNctihYXurSE nmZof2V5Gjj9Bw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:23 2026 by rpki-client