This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json) Hash identifier: HNwduCvdK1HoHu8JVKmYCf0fGhhSYa1cNWazLORuKac= Subject key identifier: 11:25:33:40:43:3D:56:24:FC:49:79:76:71:B5:1D:20:58:8A:FD:51 Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Certificate serial: 019BF8E472AC9F8C191A2C2B8BAB65EAC152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft Manifest number: 9F Signing time: Mon 26 Jan 2026 06:01:19 +0000 Manifest this update: Mon 26 Jan 2026 06:01:19 +0000 Manifest next update: Tue 27 Jan 2026 06:01:19 +0000 Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: ewr60ZD+YGbicsNpphqnhydjk71ZWFd5kZw2wGck4sg=) 2: u5edTuljBCCJBf9W6EAHQV2CNPw.roa (hash: jqinwrBu4D7iWXcGSCGFj/hxHpnAa/aUznIYkR3cYp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:72:ac:9f:8c:19:1a:2c:2b:8b:ab:65:ea:c1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Validity Not Before: Jan 26 06:01:19 2026 GMT Not After : Jan 27 06:01:19 2026 GMT Subject: CN=11253340433d5624fc49797671b51d20588afd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:1b:46:39:48:7e:9a:e8:af:85:cb:f5:49: e3:20:45:33:60:c9:e8:07:65:12:8a:fb:de:9b:6d: 65:09:ed:e4:09:7c:d9:b4:e3:ea:53:9a:f0:86:96: 76:8d:14:5a:9e:93:11:26:28:63:d7:94:de:39:b6: 46:26:1b:b7:a5:81:47:ac:12:d7:74:98:fb:82:cc: 90:b1:70:5d:b4:04:34:3b:ea:7f:c1:8c:24:f4:a7: e3:c7:72:1f:93:8f:a6:c3:f6:f9:bd:60:87:17:78: 9a:e2:24:2e:c5:1f:c4:c1:cb:cc:77:7d:1c:64:d3: bb:cd:6a:0f:10:d6:d2:cd:7b:45:78:fb:ea:a4:19: 92:51:61:76:75:bb:bd:4d:2c:c8:b3:12:d6:a4:1c: 80:c6:fe:b5:7b:1a:14:64:22:59:a7:83:0b:b1:8a: d2:a5:88:29:7d:e9:d8:f4:6c:ea:b3:59:bf:33:6c: 43:de:c8:51:8a:33:86:b9:9b:2b:2d:99:d0:a4:ae: 84:ab:a4:76:b0:78:67:ad:d0:44:30:ba:f8:bd:13: 5c:21:de:c5:26:22:c6:84:4e:67:f4:b5:a2:26:b0: 22:e5:a8:c9:e5:8a:c1:6b:81:07:48:51:d3:9b:12: 0b:44:cd:92:9d:5b:21:04:dd:e2:73:bb:25:d6:ac: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:25:33:40:43:3D:56:24:FC:49:79:76:71:B5:1D:20:58:8A:FD:51 X509v3 Authority Key Identifier: keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2e:ca:b0:8f:8b:31:d1:f2:71:b7:a4:aa:38:8e:bb:65:05: 23:be:93:c2:68:b7:24:dd:57:eb:df:e6:ae:71:39:85:7d:fe: 98:d2:bf:e0:6f:91:98:d6:cc:23:76:e5:6d:a4:7c:d3:54:af: 4c:6a:4f:3e:4c:d5:e7:5a:67:c7:69:2e:d3:11:0b:28:f3:20: b6:f3:db:66:98:64:57:d8:c7:a1:43:f5:2c:ee:d4:1f:41:ea: f1:33:04:94:e7:ff:b4:48:a1:ac:e8:44:9a:a9:31:fb:01:29: bb:14:c7:bd:d0:7d:dd:f0:b5:02:58:5e:10:6c:06:1f:2c:69: f8:2f:81:77:56:9d:48:78:5d:12:d9:e5:7f:56:98:93:8f:5f: 98:5c:9a:99:f6:50:88:1f:82:f5:1f:95:d5:43:3b:a2:7d:75: 9b:40:c7:a4:0e:d5:81:11:e3:8f:77:70:0d:df:d9:eb:1c:64: e5:77:7f:ec:68:78:10:af:23:de:f6:10:b8:0c:33:c0:c7:cc: 7b:03:a1:88:99:7c:92:ea:ee:89:e4:fb:85:7f:a2:ed:6d:97: 4b:3b:75:6d:27:ef:cf:11:08:50:c7:30:15:69:8f:5c:15:99: 1e:f3:7b:0a:71:9e:55:ba:7f:8c:be:be:3e:b0:0e:c4:32:f9: 84:33:68:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45HKsn4wZGiwri6tl6sFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4 ZTNhMWMwHhcNMjYwMTI2MDYwMTE5WhcNMjYwMTI3MDYwMTE5WjAzMTEwLwYDVQQD EygxMTI1MzM0MDQzM2Q1NjI0ZmM0OTc5NzY3MWI1MWQyMDU4OGFmZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqosbRjlIfpror4XL9UnjIEUzYMno B2USivvem21lCe3kCXzZtOPqU5rwhpZ2jRRanpMRJihj15TeObZGJhu3pYFHrBLX dJj7gsyQsXBdtAQ0O+p/wYwk9Kfjx3Ifk4+mw/b5vWCHF3ia4iQuxR/EwcvMd30c ZNO7zWoPENbSzXtFePvqpBmSUWF2dbu9TSzIsxLWpByAxv61exoUZCJZp4MLsYrS pYgpfenY9Gzqs1m/M2xD3shRijOGuZsrLZnQpK6Eq6R2sHhnrdBEMLr4vRNcId7F JiLGhE5n9LWiJrAi5ajJ5YrBa4EHSFHTmxILRM2SnVshBN3ic7sl1qz33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBElM0BDPVYk/El5dnG1HSBYiv1RMB8GA1UdIwQY MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt M2ZmYTM5YjRkYzBiLzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC7KsI+L MdHycbekqjiOu2UFI76Twmi3JN1X69/mrnE5hX3+mNK/4G+RmNbMI3blbaR801Sv TGpPPkzV51pnx2ku0xELKPMgtvPbZphkV9jHoUP1LO7UH0Hq8TMElOf/tEihrOhE mqkx+wEpuxTHvdB93fC1AlheEGwGHyxp+C+Bd1adSHhdEtnlf1aYk49fmFyamfZQ iB+C9R+V1UM7on11m0DHpA7VgRHjj3dwDd/Z6xxk5Xd/7Gh4EK8j3vYQuAwzwMfM ewOhiJl8kuruieT7hX+i7W2XSzt1bSfvzxEIUMcwFWmPXBWZHvN7CnGeVbp/jL6+ PrAOxDL5hDNoQw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:24 2026 by rpki-client