This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json) Hash identifier: 2zJWgI/sqzOmPiM4Q7gb/k4xK/GZyGa0VO1a/wLZat8= Subject key identifier: EA:9C:54:D3:53:9B:F1:3C:31:6B:95:95:E0:49:20:FD:06:A2:7F:92 Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Certificate serial: 019BF79AB7E79236B9BB1205C38BEFA3166D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft Manifest number: 0CBA Signing time: Mon 26 Jan 2026 00:01:10 +0000 Manifest this update: Mon 26 Jan 2026 00:01:10 +0000 Manifest next update: Tue 27 Jan 2026 00:01:10 +0000 Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: BI1IvCG2vQt2cLveH/keugA67BOBv5JuYpofGfQ+dwI=) 2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:b7:e7:92:36:b9:bb:12:05:c3:8b:ef:a3:16:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Validity Not Before: Jan 26 00:01:10 2026 GMT Not After : Jan 27 00:01:10 2026 GMT Subject: CN=ea9c54d3539bf13c316b9595e04920fd06a27f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:74:70:70:ac:30:b6:e1:6b:d4:f9:ac:e7: 9c:6f:e4:79:1d:91:94:f0:90:a2:1a:d3:bc:08:a3: 6c:db:5f:4f:7c:c2:9d:0c:e1:73:4a:cc:ea:d2:7d: 50:5f:d2:b0:6c:b5:da:12:b4:67:b1:c4:49:f7:7c: d9:d3:b7:17:f8:c0:1f:1a:c9:07:0c:9f:03:1b:b7: 3b:68:e9:1c:49:66:d7:83:07:40:8a:19:66:74:42: 71:f8:fd:75:ef:e0:c1:2a:54:e3:94:c0:ca:d5:2d: 45:72:1d:62:2a:8c:ec:96:19:e3:23:c2:52:12:90: 9e:e9:64:bc:3d:d0:15:5a:1c:6f:d1:bc:9f:f4:c7: f8:4b:7a:82:4e:f6:50:0c:ec:9b:84:5b:1a:ae:df: 1f:32:00:c5:04:0a:b0:5e:a8:7b:6d:c0:8c:f7:c5: e6:ce:1e:01:27:0f:97:0c:a3:4a:25:aa:17:7c:4a: d0:58:46:11:c4:64:cc:6c:4d:d7:85:84:07:c3:7f: 12:21:d5:fc:b9:1d:d7:2d:2a:43:76:b6:bb:56:7f: ed:26:3f:49:30:fc:c3:f1:74:dd:79:b5:9f:ec:41: 76:03:01:f0:3a:82:69:e4:84:3f:9a:7b:66:5b:e5: 72:b7:c7:eb:3d:e7:27:ef:ff:bf:61:af:81:e7:14: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:54:D3:53:9B:F1:3C:31:6B:95:95:E0:49:20:FD:06:A2:7F:92 X509v3 Authority Key Identifier: keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:42:6f:6a:96:4a:f3:ef:a6:f6:d7:72:0e:0b:cd:d8:8a:26: 3a:2a:e6:dd:03:d1:fd:44:81:0c:50:9d:07:3a:cc:22:75:f5: 93:03:28:1a:d5:0f:0f:b9:12:28:06:3a:26:9e:93:00:0a:40: 2a:26:c9:b3:f6:47:de:03:f9:8a:92:f6:2a:29:9b:d7:93:66: 9f:40:47:50:4a:79:b2:03:5b:94:8c:db:1b:ec:4a:54:91:ae: 8b:23:6d:64:f9:b4:db:0d:5e:72:83:14:55:e1:b3:2f:64:47: 12:07:85:5b:56:46:57:97:08:da:d4:48:bb:52:ed:01:c8:07: 0f:9c:e7:00:21:75:14:f0:cc:39:fc:37:c6:ec:91:68:0c:5b: d3:fd:45:bb:5e:04:6e:85:ca:3f:f8:0d:04:9b:85:bc:d4:c9: 72:ca:28:30:82:f9:f9:88:96:7b:f7:69:ce:eb:2f:08:c0:34: b8:d4:56:a4:02:f9:0f:f1:d0:32:88:4e:3e:2c:60:56:51:cf: f9:92:3f:cd:05:cf:2b:86:89:df:61:ab:52:fd:ea:ff:cf:27: 45:ca:d2:06:5b:cf:d0:ee:d6:2a:2a:86:09:7e:23:8a:e5:4a: d1:3e:7a:de:d1:06:e4:c8:46:7d:67:c4:6e:1e:00:c8:1e:04: cb:8b:3f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrfnkja5uxIFw4vvoxZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy YzExNWMwHhcNMjYwMTI2MDAwMTEwWhcNMjYwMTI3MDAwMTEwWjAzMTEwLwYDVQQD EyhlYTljNTRkMzUzOWJmMTNjMzE2Yjk1OTVlMDQ5MjBmZDA2YTI3ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs550cHCsMLbha9T5rOecb+R5HZGU 8JCiGtO8CKNs219PfMKdDOFzSszq0n1QX9KwbLXaErRnscRJ93zZ07cX+MAfGskH DJ8DG7c7aOkcSWbXgwdAihlmdEJx+P117+DBKlTjlMDK1S1Fch1iKozslhnjI8JS EpCe6WS8PdAVWhxv0byf9Mf4S3qCTvZQDOybhFsart8fMgDFBAqwXqh7bcCM98Xm zh4BJw+XDKNKJaoXfErQWEYRxGTMbE3XhYQHw38SIdX8uR3XLSpDdra7Vn/tJj9J MPzD8XTdebWf7EF2AwHwOoJp5IQ/mntmW+Vyt8frPecn7/+/Ya+B5xT0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqcVNNTm/E8MWuVleBJIP0Gon+SMB8GA1UdIwQY MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkJvapZK 8++m9tdyDgvN2IomOirm3QPR/USBDFCdBzrMInX1kwMoGtUPD7kSKAY6Jp6TAApA KibJs/ZH3gP5ipL2Kimb15Nmn0BHUEp5sgNblIzbG+xKVJGuiyNtZPm02w1ecoMU VeGzL2RHEgeFW1ZGV5cI2tRIu1LtAcgHD5znACF1FPDMOfw3xuyRaAxb0/1Fu14E boXKP/gNBJuFvNTJcsooMIL5+YiWe/dpzusvCMA0uNRWpAL5D/HQMohOPixgVlHP +ZI/zQXPK4aJ32GrUv3q/88nRcrSBlvP0O7WKiqGCX4jiuVK0T563tEG5MhGfWfE bh4AyB4Ey4s/5g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:10 2026 by rpki-client