This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json) Hash identifier: pHPFgrg6w82aMVXRRHxW0lylbVh9cqOae2snzcG07Kg= Subject key identifier: 9A:F9:96:7F:C6:F1:72:9F:75:8E:19:7C:44:03:7F:98:0C:0E:43:90 Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Certificate serial: 019BF650AEB3923EBEB2621E5187BB9678A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 18:00:41 +0000 Manifest this update: Sun 25 Jan 2026 18:00:41 +0000 Manifest next update: Mon 26 Jan 2026 18:00:41 +0000 Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: +OlUTkYMw3uXu2TYfNbPfX5MS50YPsP3Afy0QgkiT4c=) 2: LDyfR2ZtnYNbloHwNFDlP56jAsw.roa (hash: inTNdVNnUzE3++ozBBAiNTKzryuD+atj6L3dBuSWD7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ae:b3:92:3e:be:b2:62:1e:51:87:bb:96:78:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Validity Not Before: Jan 25 18:00:41 2026 GMT Not After : Jan 26 18:00:41 2026 GMT Subject: CN=9af9967fc6f1729f758e197c44037f980c0e4390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:42:07:c4:03:2f:e6:d4:eb:d7:1a:c1:80:2f: 9a:1f:85:d9:de:d7:87:bc:09:61:b0:eb:44:95:27: ef:83:f5:cc:51:9d:a0:59:14:e5:71:4d:d9:0f:dc: 56:c3:89:7f:ae:f9:3d:aa:45:61:cb:98:0c:c0:e2: 49:b7:51:c5:af:63:d4:03:44:83:69:7e:b8:00:af: cd:bf:a5:98:5d:76:2a:72:bc:a2:02:34:e1:63:93: 4e:a8:7b:b3:10:bd:64:dd:41:55:e5:f6:22:39:3a: 7c:07:69:20:4f:64:be:4d:58:4b:5c:c6:4b:fa:65: 35:f2:c8:5f:73:9d:37:d7:30:78:1c:5a:3a:12:c7: bf:0f:22:35:08:9d:75:60:4d:43:66:eb:84:5f:ee: 74:f3:fd:0c:89:a1:37:06:ae:75:49:11:79:23:75: 25:85:84:76:e8:28:98:39:aa:39:d0:b9:e9:a2:a4: 6e:83:e2:48:99:a6:38:76:bc:2f:f9:e9:fc:3b:15: 75:ae:f3:a5:ee:6f:53:a5:85:c8:a2:d3:11:0c:d7: 38:3f:03:b2:68:fd:13:98:27:26:38:7b:4b:b2:57: 3e:c0:c1:ce:6a:f2:43:73:fa:2b:50:06:7e:0d:97: 93:e3:23:0e:a8:de:79:d9:52:94:fc:5b:d2:3c:f9: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F9:96:7F:C6:F1:72:9F:75:8E:19:7C:44:03:7F:98:0C:0E:43:90 X509v3 Authority Key Identifier: keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:03:5f:c4:e7:87:c0:f6:26:27:7e:98:e1:09:e8:8c:a4:58: 02:b3:cb:e3:34:41:07:75:e3:f6:54:13:45:55:3a:a1:2d:47: 13:92:3d:a0:35:eb:88:9a:69:74:ad:23:10:ee:8e:3b:6f:a5: 42:d7:75:ef:91:bf:26:d8:11:f0:1d:7a:0a:ac:3b:e1:de:24: 4f:76:e5:83:9f:e3:05:62:ee:46:0a:4f:cf:47:27:fa:7f:36: 95:d3:2c:7c:18:a0:9e:23:59:30:63:81:e0:53:9e:75:f1:25: fe:02:b5:0a:b6:36:f4:1e:ac:d3:a3:a8:4c:d4:09:8d:8d:c1: ca:39:f1:da:29:93:91:9f:01:97:d3:2e:30:aa:0d:f5:1c:83: 2a:fc:8b:88:aa:c0:b1:83:73:30:ea:9a:3f:a9:b2:ba:e6:21: 67:bd:9a:c6:fc:b4:6a:9d:9a:ab:60:e5:e2:3c:49:ae:10:63: f5:8c:97:d5:d4:bd:06:43:59:83:df:40:04:e4:f6:c2:20:cd: 3a:51:20:24:28:83:9a:cd:9e:75:2c:67:41:3e:42:14:1e:e5: 0d:9e:d6:66:5b:94:cf:ee:1f:85:0a:38:52:da:03:49:18:b9: e8:d4:98:21:3b:af:ba:5a:4c:3a:bf:9e:33:ff:94:c2:ac:01: 50:8d:7e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UK6zkj6+smIeUYe7lnioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4 NTk2MTcwHhcNMjYwMTI1MTgwMDQxWhcNMjYwMTI2MTgwMDQxWjAzMTEwLwYDVQQD Eyg5YWY5OTY3ZmM2ZjE3MjlmNzU4ZTE5N2M0NDAzN2Y5ODBjMGU0MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EIHxAMv5tTr1xrBgC+aH4XZ3teH vAlhsOtElSfvg/XMUZ2gWRTlcU3ZD9xWw4l/rvk9qkVhy5gMwOJJt1HFr2PUA0SD aX64AK/Nv6WYXXYqcryiAjThY5NOqHuzEL1k3UFV5fYiOTp8B2kgT2S+TVhLXMZL +mU18shfc5031zB4HFo6Ese/DyI1CJ11YE1DZuuEX+508/0MiaE3Bq51SRF5I3Ul hYR26CiYOao50LnpoqRug+JImaY4drwv+en8OxV1rvOl7m9TpYXIotMRDNc4PwOy aP0TmCcmOHtLslc+wMHOavJDc/orUAZ+DZeT4yMOqN552VKU/FvSPPk25wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJr5ln/G8XKfdY4ZfEQDf5gMDkOQMB8GA1UdIwQY MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt NzlkNTJkYzY2OTI2LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2 LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwNfxOeH wPYmJ36Y4QnojKRYArPL4zRBB3Xj9lQTRVU6oS1HE5I9oDXriJppdK0jEO6OO2+l Qtd175G/JtgR8B16Cqw74d4kT3blg5/jBWLuRgpPz0cn+n82ldMsfBigniNZMGOB 4FOedfEl/gK1CrY29B6s06OoTNQJjY3Byjnx2imTkZ8Bl9MuMKoN9RyDKvyLiKrA sYNzMOqaP6myuuYhZ72axvy0ap2aq2Dl4jxJrhBj9YyX1dS9BkNZg99ABOT2wiDN OlEgJCiDms2edSxnQT5CFB7lDZ7WZluUz+4fhQo4UtoDSRi56NSYITuvulpMOr+e M/+UwqwBUI1+Dg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:48 2026 by rpki-client