This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json) Hash identifier: zGIMp0Q4UvOOCVddaSs910GFM1abWLyKI3hoC1hffJw= Subject key identifier: 1A:11:15:16:3D:04:5D:47:44:D2:DE:BD:76:6C:5E:FA:33:2C:F2:5C Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Certificate serial: 019BF951C11A02EF616E8CE86268C73C95C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft Manifest number: 01DD Signing time: Mon 26 Jan 2026 08:00:43 +0000 Manifest this update: Mon 26 Jan 2026 08:00:43 +0000 Manifest next update: Tue 27 Jan 2026 08:00:43 +0000 Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: kEVS/7+jWA8R1ojTfOJojsHD8fU5XmZ9uNvt44iLxow=) 2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:c1:1a:02:ef:61:6e:8c:e8:62:68:c7:3c:95:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Validity Not Before: Jan 26 08:00:43 2026 GMT Not After : Jan 27 08:00:43 2026 GMT Subject: CN=1a1115163d045d4744d2debd766c5efa332cf25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:3d:a0:68:0c:e8:24:57:76:57:7c:c4:b3: 46:03:2a:b9:a4:de:07:e7:5b:44:4f:f7:26:9e:85: cb:e7:c5:80:2a:ab:db:a9:1c:c9:0c:87:61:9a:69: 75:72:4c:02:56:db:86:4d:b3:e4:77:4c:65:e9:a3: bc:b3:6b:0b:10:40:9e:72:46:d6:e8:53:8c:ce:90: 61:7a:6a:a7:5e:41:f2:77:1d:79:e7:bb:a7:a4:4d: e4:11:d6:52:6f:ef:58:76:5d:1d:fa:a7:9a:77:07: f0:1d:2c:c4:f0:43:23:7c:3e:9d:3f:9e:01:cf:1f: 80:6f:97:1a:46:3f:9f:fe:d8:60:81:8f:61:c4:d6: d7:59:64:87:9b:75:7a:16:05:13:2d:41:37:69:02: c2:2f:68:e0:c9:57:67:34:bd:a7:bc:fa:ac:c1:e4: 97:bd:ed:36:56:14:19:62:a6:ea:42:22:8c:6e:7c: 3f:91:37:10:93:8f:3c:bc:f0:0d:18:5f:e3:7f:fa: 62:b8:50:bf:32:8e:9c:2a:b3:d9:80:7c:17:c0:e7: 00:1c:d4:5d:89:8c:86:16:6d:4e:64:46:f5:72:c9: 26:63:68:98:2b:e1:bf:cc:e4:ed:6c:ce:4b:d1:ef: 30:04:e7:4f:08:8f:94:3b:fe:ba:d8:c5:02:c2:d0: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:15:16:3D:04:5D:47:44:D2:DE:BD:76:6C:5E:FA:33:2C:F2:5C X509v3 Authority Key Identifier: keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:96:eb:22:3e:ff:e2:df:9d:d8:07:ce:f2:b4:7a:70:3b:c9: fc:43:44:44:90:00:c9:43:e6:76:b6:14:ed:4d:eb:22:da:da: 40:75:76:db:ac:6b:a5:5b:e7:e2:4e:b8:e3:97:61:39:33:65: e2:2e:b3:f0:cc:87:a1:5b:14:ee:5a:2a:7f:67:6e:96:17:2a: 58:a9:ed:d1:4a:60:70:d4:95:d5:ad:4b:1d:37:41:09:7f:95: 8e:63:22:80:dd:75:80:af:ac:dd:76:d3:38:05:e9:3c:b6:20: cd:6a:b9:2f:1e:ae:35:55:a6:ea:ca:c5:da:d1:e3:89:88:1b: 7c:48:28:0f:e3:75:d7:32:64:0b:4b:e4:c7:97:a0:dd:16:77: 08:09:08:09:04:57:d3:bc:b6:e5:95:00:22:60:c9:22:fc:a9: 84:e7:be:b6:2b:a3:8b:01:94:36:34:1c:9e:38:2b:2f:ff:c0: 5e:4b:34:66:55:ef:21:b1:d6:5e:2a:7a:e7:b4:15:0d:9c:bb: ec:07:c9:4e:5e:1d:3b:bf:9c:57:7c:f6:3f:82:9a:d7:ed:1b: fd:65:b1:31:3a:22:bb:48:73:38:96:ac:83:6e:ba:b2:21:55: 1d:24:01:9f:ed:66:06:c5:da:34:97:75:ff:f0:47:b8:5f:d9: e3:50:4d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UcEaAu9hbozoYmjHPJXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk NGZiMzAwHhcNMjYwMTI2MDgwMDQzWhcNMjYwMTI3MDgwMDQzWjAzMTEwLwYDVQQD EygxYTExMTUxNjNkMDQ1ZDQ3NDRkMmRlYmQ3NjZjNWVmYTMzMmNmMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZA9oGgM6CRXdld8xLNGAyq5pN4H 51tET/cmnoXL58WAKqvbqRzJDIdhmml1ckwCVtuGTbPkd0xl6aO8s2sLEECeckbW 6FOMzpBhemqnXkHydx1557unpE3kEdZSb+9Ydl0d+qeadwfwHSzE8EMjfD6dP54B zx+Ab5caRj+f/thggY9hxNbXWWSHm3V6FgUTLUE3aQLCL2jgyVdnNL2nvPqsweSX ve02VhQZYqbqQiKMbnw/kTcQk488vPANGF/jf/piuFC/Mo6cKrPZgHwXwOcAHNRd iYyGFm1OZEb1cskmY2iYK+G/zOTtbM5L0e8wBOdPCI+UO/662MUCwtBx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoRFRY9BF1HRNLevXZsXvozLPJcMB8GA1UdIwQY MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpbrIj7/ 4t+d2AfO8rR6cDvJ/ENERJAAyUPmdrYU7U3rItraQHV226xrpVvn4k6445dhOTNl 4i6z8MyHoVsU7loqf2dulhcqWKnt0UpgcNSV1a1LHTdBCX+VjmMigN11gK+s3XbT OAXpPLYgzWq5Lx6uNVWm6srF2tHjiYgbfEgoD+N11zJkC0vkx5eg3RZ3CAkICQRX 07y25ZUAImDJIvyphOe+tiujiwGUNjQcnjgrL//AXks0ZlXvIbHWXip657QVDZy7 7AfJTl4dO7+cV3z2P4Ka1+0b/WWxMToiu0hzOJasg266siFVHSQBn+1mBsXaNJd1 //BHuF/Z41BNIg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:35:23 2026 by rpki-client