This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json) Hash identifier: HM0PqcLOXPMZrAndGfxYNT0pm72EWjPbyec5K811JSc= Subject key identifier: 3C:81:EC:49:29:30:62:8B:C6:03:12:6C:A4:5A:21:96:23:42:28:CE Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019BF5ABFF982FA7D2A6566F21CAD64B12ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft Manifest number: 0140 Signing time: Sun 25 Jan 2026 15:00:48 +0000 Manifest this update: Sun 25 Jan 2026 15:00:48 +0000 Manifest next update: Mon 26 Jan 2026 15:00:48 +0000 Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: /GLO1Gub5XB0aH7jrEwqH5RVs4m9L+pBHszhhsrJ83w=) 2: 9ytNS5oWF0Dofvp07seNAbOfsfs.roa (hash: dAfwMIMO/yjbSqKuKKIufpTCmJ3XiRW1JiSNz+s0AGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:ff:98:2f:a7:d2:a6:56:6f:21:ca:d6:4b:12:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Jan 25 15:00:48 2026 GMT Not After : Jan 26 15:00:48 2026 GMT Subject: CN=3c81ec492930628bc603126ca45a2196234228ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:53:ad:c4:b3:08:d1:63:45:18:62:0d:8a: f4:db:51:78:30:9b:e7:2d:04:d7:95:25:21:54:3f: 62:60:28:13:27:a5:50:2f:7d:f2:ac:bc:b3:5a:a8: 47:21:eb:8c:74:35:00:50:d3:7e:e1:5e:f7:e5:92: 40:da:31:4b:38:51:c3:0f:4b:f8:fe:21:e9:a2:03: 52:c0:b5:51:a9:a9:59:c3:49:a1:fb:78:d0:24:c9: 95:79:fb:cd:0c:af:a6:7e:6f:ff:3f:57:77:b9:e1: 2f:e1:a7:ce:24:a3:e1:b4:b9:2c:00:fa:15:75:a4: 35:a8:e6:dc:6e:2e:d4:87:dd:eb:51:41:a6:02:82: 44:b3:90:31:d1:6d:33:ed:60:91:30:70:b7:28:54: a6:a0:fc:49:99:7c:7d:40:5e:8c:a7:df:15:a9:9e: 8c:2a:fe:06:05:d2:94:7e:79:5b:de:94:e9:41:9e: 34:29:e2:46:ac:8a:76:82:e3:0c:f5:e2:28:78:e0: da:50:ce:a1:be:30:b8:d2:ee:53:2a:d0:a8:0c:f6: 5f:03:c9:ff:14:0b:44:62:36:a1:e5:ac:43:12:9e: f1:7c:18:2d:ec:45:78:81:9d:92:12:27:79:8b:62: 2f:79:11:7a:38:e4:fc:4a:43:47:ab:47:0c:8f:4b: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:EC:49:29:30:62:8B:C6:03:12:6C:A4:5A:21:96:23:42:28:CE X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c4:74:9c:7f:3d:99:86:1c:fc:dc:43:da:2c:b1:cc:de:5c: 42:ca:67:4b:2b:4e:28:3b:51:58:c1:fd:13:1e:65:40:cb:2a: 96:ad:44:73:74:2a:8c:e0:47:23:80:0e:52:c6:47:9d:5b:56: ac:fb:7d:4e:7c:92:7b:c6:3e:c7:62:97:ef:4d:c3:c9:a9:7d: af:e1:01:46:a5:be:90:bb:93:cc:90:56:86:a5:93:4c:de:4a: 89:b0:03:cc:68:67:b2:70:15:60:a2:06:2c:8b:84:a7:c9:a6: 06:08:15:e2:d1:c8:33:ca:09:2c:b1:2f:52:cc:8f:f6:f0:b8: 2d:40:d5:77:20:b2:37:c4:e2:c6:5b:ab:92:d7:c9:54:ce:f1: 1f:12:ab:12:6a:81:54:2d:c2:fa:b7:11:b9:8b:a4:04:8e:b5: a6:d8:e5:e9:5c:dd:70:cf:cc:b7:a1:3a:e2:a9:62:2e:a5:2f: 5d:a8:3b:08:eb:65:27:6a:09:f3:52:a3:8c:ef:c9:04:ce:15: bf:a9:32:a6:f0:1d:11:78:76:84:7b:98:6f:f6:63:aa:3e:cc: 0f:a4:36:c9:25:5f:dc:3a:b7:e7:29:55:ba:45:62:46:0a:c7: 6e:64:91:14:93:11:99:fe:75:f2:bf:ca:2a:e5:f1:f8:14:bc: 41:cf:62:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/+YL6fSplZvIcrWSxLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjYwMTI1MTUwMDQ4WhcNMjYwMTI2MTUwMDQ4WjAzMTEwLwYDVQQD EygzYzgxZWM0OTI5MzA2MjhiYzYwMzEyNmNhNDVhMjE5NjIzNDIyOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh5TrcSzCNFjRRhiDYr021F4MJvn LQTXlSUhVD9iYCgTJ6VQL33yrLyzWqhHIeuMdDUAUNN+4V735ZJA2jFLOFHDD0v4 /iHpogNSwLVRqalZw0mh+3jQJMmVefvNDK+mfm//P1d3ueEv4afOJKPhtLksAPoV daQ1qObcbi7Uh93rUUGmAoJEs5Ax0W0z7WCRMHC3KFSmoPxJmXx9QF6Mp98VqZ6M Kv4GBdKUfnlb3pTpQZ40KeJGrIp2guMM9eIoeODaUM6hvjC40u5TKtCoDPZfA8n/ FAtEYjah5axDEp7xfBgt7EV4gZ2SEid5i2IveRF6OOT8SkNHq0cMj0uJ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyB7EkpMGKLxgMSbKRaIZYjQijOMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcR0nH89 mYYc/NxD2iyxzN5cQspnSytOKDtRWMH9Ex5lQMsqlq1Ec3QqjOBHI4AOUsZHnVtW rPt9TnySe8Y+x2KX703Dyal9r+EBRqW+kLuTzJBWhqWTTN5KibADzGhnsnAVYKIG LIuEp8mmBggV4tHIM8oJLLEvUsyP9vC4LUDVdyCyN8TixlurktfJVM7xHxKrEmqB VC3C+rcRuYukBI61ptjl6VzdcM/Mt6E64qliLqUvXag7COtlJ2oJ81KjjO/JBM4V v6kypvAdEXh2hHuYb/Zjqj7MD6Q2ySVf3Dq35ylVukViRgrHbmSRFJMRmf518r/K KuXx+BS8Qc9i+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:59 2026 by rpki-client