This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json) Hash identifier: pFeo/Fz2bLWCiZF21CVEbXRj+5F5AS3CYBnCN1T7YcE= Subject key identifier: 55:D5:E5:2A:0D:A7:A0:F3:15:24:78:68:CA:69:37:96:7D:90:02:45 Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Certificate serial: 019BF687C933B2DCCB239E71BE1B1003FA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft Manifest number: 0AF8 Signing time: Sun 25 Jan 2026 19:00:52 +0000 Manifest this update: Sun 25 Jan 2026 19:00:52 +0000 Manifest next update: Mon 26 Jan 2026 19:00:52 +0000 Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=) 2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=) 3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: RKjjBp+vehkAX1b/e1xUiopmkK65wBV1andjibDb/lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:c9:33:b2:dc:cb:23:9e:71:be:1b:10:03:fa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Validity Not Before: Jan 25 19:00:52 2026 GMT Not After : Jan 26 19:00:52 2026 GMT Subject: CN=55d5e52a0da7a0f315247868ca6937967d900245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:e8:90:df:18:e5:ad:ef:97:d3:af:17:06: 94:c9:93:18:8c:9f:c8:3d:cc:0f:c8:a4:94:5b:ee: cd:cf:49:9a:8d:38:3c:15:f5:b7:b7:36:65:14:77: d9:03:e6:9b:5a:86:c2:9b:0c:ea:2b:cd:11:43:b2: a3:a3:f9:bc:be:5e:88:2c:f8:27:4d:1a:0f:af:af: 60:c6:a9:12:3f:34:71:f4:bb:4b:ba:82:85:73:d6: b0:a2:98:d9:57:7c:79:be:b4:c6:05:59:f1:a7:6d: 7c:1d:ee:6d:af:85:ea:2b:74:5c:a9:79:5d:46:e5: 5b:9f:dc:6a:ca:96:e3:64:f3:32:d0:e4:96:63:ba: a8:eb:2a:2d:53:46:d0:2d:3a:f9:ba:61:e9:1d:a7: 16:72:5c:5e:04:d1:a2:fa:52:f5:ca:23:26:51:7e: 0f:9c:e5:3e:fb:52:29:88:10:e4:6b:a5:ab:2c:74: ad:37:73:0f:2e:7a:b1:62:25:92:d4:9a:a9:6f:00: ed:31:a6:1d:94:ee:d0:57:9e:d5:57:0b:04:42:ff: 8d:c7:6b:23:51:44:d1:d2:93:ca:83:f7:c2:48:24: 60:83:a0:da:bd:76:e4:47:83:6d:0a:77:6e:42:15: 46:15:b1:a2:67:5e:59:8c:14:7c:bb:67:7e:a8:30: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:E5:2A:0D:A7:A0:F3:15:24:78:68:CA:69:37:96:7D:90:02:45 X509v3 Authority Key Identifier: keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b4:34:fa:3b:d9:e6:e6:9c:61:e4:70:ec:c7:cb:a8:fe:63: a3:70:aa:d1:2c:5b:ed:80:7f:7a:14:42:85:a1:7d:44:b1:52: 3b:0d:d0:9d:8f:35:dd:a4:73:73:62:3e:7d:31:89:e4:3c:67: 73:cc:dd:7d:14:d1:44:fe:36:05:9e:0b:17:81:e1:3d:1b:db: 00:16:98:67:36:99:e7:1f:1e:e3:e3:46:47:25:b5:a4:12:20: 2e:70:3a:94:25:39:00:2f:30:2d:8b:f1:4c:0f:42:74:07:95: e9:c8:30:35:44:b9:69:5d:4b:1b:a4:06:b8:e4:0a:79:10:2c: 88:64:a7:9c:4e:68:b7:aa:05:44:d4:b6:4e:d5:7c:22:44:da: 05:cb:a7:9b:00:f5:2a:0f:4e:96:b4:bf:c1:ec:69:24:cd:3a: 09:a3:89:f0:4c:d8:33:1f:9e:7a:10:e4:04:5a:9f:ab:9e:79: eb:e6:d9:7a:08:5e:7c:3e:6a:2f:6f:9a:06:07:8b:1b:df:c3: 14:f7:99:54:4b:bc:32:fc:d0:d2:66:1e:57:91:1b:22:25:3f: 18:11:f6:66:93:fe:0c:3a:79:70:5e:b9:86:44:97:cf:e0:ea: e6:1c:fd:bb:85:07:b5:52:17:4a:20:af:16:35:2d:66:20:d9: e2:7f:e8:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h8kzstzLI55xvhsQA/oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0 ZGM5MjgwHhcNMjYwMTI1MTkwMDUyWhcNMjYwMTI2MTkwMDUyWjAzMTEwLwYDVQQD Eyg1NWQ1ZTUyYTBkYTdhMGYzMTUyNDc4NjhjYTY5Mzc5NjdkOTAwMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLnokN8Y5a3vl9OvFwaUyZMYjJ/I PcwPyKSUW+7Nz0majTg8FfW3tzZlFHfZA+abWobCmwzqK80RQ7Kjo/m8vl6ILPgn TRoPr69gxqkSPzRx9LtLuoKFc9awopjZV3x5vrTGBVnxp218He5tr4XqK3RcqXld RuVbn9xqypbjZPMy0OSWY7qo6yotU0bQLTr5umHpHacWclxeBNGi+lL1yiMmUX4P nOU++1IpiBDka6WrLHStN3MPLnqxYiWS1JqpbwDtMaYdlO7QV57VVwsEQv+Nx2sj UUTR0pPKg/fCSCRgg6DavXbkR4NtCnduQhVGFbGiZ15ZjBR8u2d+qDC/swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXV5SoNp6DzFSR4aMppN5Z9kAJFMB8GA1UdIwQY MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerQ0+jvZ 5uacYeRw7MfLqP5jo3Cq0Sxb7YB/ehRChaF9RLFSOw3QnY813aRzc2I+fTGJ5Dxn c8zdfRTRRP42BZ4LF4HhPRvbABaYZzaZ5x8e4+NGRyW1pBIgLnA6lCU5AC8wLYvx TA9CdAeV6cgwNUS5aV1LG6QGuOQKeRAsiGSnnE5ot6oFRNS2TtV8IkTaBcunmwD1 Kg9OlrS/wexpJM06CaOJ8EzYMx+eehDkBFqfq5556+bZeghefD5qL2+aBgeLG9/D FPeZVEu8MvzQ0mYeV5EbIiU/GBH2ZpP+DDp5cF65hkSXz+Dq5hz9u4UHtVIXSiCv FjUtZiDZ4n/o1g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:24 2026 by rpki-client