This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json) Hash identifier: OqhdRpFfjTogBLPM3CtYQ9PgIJ5BGp7gVxkm1TPTPaE= Subject key identifier: 23:85:EC:4D:5F:C7:AF:D0:AE:4E:65:A3:B3:A7:20:E7:DA:35:A4:3C Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019BF3BD5BC8DD091790329E4F71779CD1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft Manifest number: 1091 Signing time: Sun 25 Jan 2026 06:00:31 +0000 Manifest this update: Sun 25 Jan 2026 06:00:31 +0000 Manifest next update: Mon 26 Jan 2026 06:00:31 +0000 Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=) 2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: kjOWoKg6S/BtY637JZQlpDulQpDj6qTCROiP0geGd64=) 3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=) 4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=) 5: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=) 6: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=) 7: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:5b:c8:dd:09:17:90:32:9e:4f:71:77:9c:d1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 25 06:00:31 2026 GMT Not After : Jan 26 06:00:31 2026 GMT Subject: CN=2385ec4d5fc7afd0ae4e65a3b3a720e7da35a43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:f9:50:88:d4:a0:61:43:7b:3f:27:2d:69: f8:ae:1a:2d:0d:5b:f5:f4:13:9c:74:2f:08:7b:16: 18:b7:d3:47:a2:f2:78:7e:02:f7:8c:66:2b:b1:b8: 0b:d6:1b:c1:bd:83:54:cf:2c:79:38:5e:be:87:16: b3:df:4c:33:d0:a2:fe:cf:ca:b1:52:99:8d:30:3d: 17:13:c8:2b:fe:7b:16:76:b7:b9:d3:51:90:c6:13: b2:9a:24:45:a3:ed:c4:40:b5:60:16:9b:26:7f:d2: 2d:6e:73:73:ab:e7:a5:bd:e0:bd:01:e6:01:e3:6c: 97:db:e2:a6:5e:8f:85:3e:70:05:24:0a:62:70:78: 49:37:5f:b8:22:5b:9f:4e:38:ca:8f:31:60:0a:2f: 93:b2:64:4e:ef:e0:bf:fc:3a:13:16:3d:0c:e2:b1: 24:e3:bc:1c:4e:24:17:88:89:4a:ce:0d:38:fc:39: 9f:58:c9:28:b8:5d:d3:b7:dd:ae:12:9a:fd:b6:b2: 5b:a9:06:37:69:29:c4:50:05:b1:63:af:86:01:a9: 3f:45:f8:f5:c9:81:e7:1e:46:a0:48:85:4c:7c:9d: 70:4a:df:e8:ad:31:fc:c1:e8:1e:3b:3c:d9:bb:c2: 06:e5:dd:0c:55:03:17:76:93:b2:36:de:28:b5:dc: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:EC:4D:5F:C7:AF:D0:AE:4E:65:A3:B3:A7:20:E7:DA:35:A4:3C X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0f:0d:d9:d0:54:1e:92:e6:3c:4c:26:6d:23:d1:03:db:a8: 15:cd:af:c7:65:cf:8f:cf:9e:b4:2a:d1:36:ea:40:e1:91:56: 47:1d:6a:ac:d5:51:f3:a7:b6:b1:c9:da:81:fe:c0:68:06:0f: f6:cf:67:b5:a3:c1:14:84:2a:d4:53:25:6d:97:88:fe:21:f9: a7:9e:ca:1f:83:78:85:f3:38:08:42:fc:b6:ab:a5:4e:17:fa: 41:fe:66:c7:47:8a:50:61:06:8a:c1:cb:6c:52:fa:a5:35:c2: fc:48:46:23:3b:c6:ec:18:1d:47:5c:c2:8a:c5:0f:16:3e:be: fa:1b:62:ae:24:b0:e3:38:9b:69:b6:8c:f5:27:77:77:dd:b1: 6e:69:9e:55:01:7f:1d:e4:d5:7c:6b:2c:a8:f0:c5:d0:8d:53: 28:d7:02:3f:6f:ea:cc:b0:b5:ed:6d:d6:75:b4:af:a3:f9:d7: 0a:16:74:67:6f:4b:36:30:cb:e9:7e:6d:e6:ca:00:b9:bc:5e: d8:38:25:f5:e3:0e:16:ac:eb:58:05:a9:7d:5d:bd:7f:8c:41: 6d:80:e5:16:7e:65:f9:a8:21:89:47:d3:a6:ac:f2:9a:c4:57: 1c:0a:39:fb:0c:df:15:42:b3:a6:71:ef:4e:62:bd:3e:b2:dc: 7e:57:f1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvVvI3QkXkDKeT3F3nNGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTI1MDYwMDMxWhcNMjYwMTI2MDYwMDMxWjAzMTEwLwYDVQQD EygyMzg1ZWM0ZDVmYzdhZmQwYWU0ZTY1YTNiM2E3MjBlN2RhMzVhNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDL5UIjUoGFDez8nLWn4rhotDVv1 9BOcdC8IexYYt9NHovJ4fgL3jGYrsbgL1hvBvYNUzyx5OF6+hxaz30wz0KL+z8qx UpmNMD0XE8gr/nsWdre501GQxhOymiRFo+3EQLVgFpsmf9ItbnNzq+elveC9AeYB 42yX2+KmXo+FPnAFJApicHhJN1+4IlufTjjKjzFgCi+TsmRO7+C//DoTFj0M4rEk 47wcTiQXiIlKzg04/DmfWMkouF3Tt92uEpr9trJbqQY3aSnEUAWxY6+GAak/Rfj1 yYHnHkagSIVMfJ1wSt/orTH8wegeOzzZu8IG5d0MVQMXdpOyNt4otdyRZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOF7E1fx6/Qrk5lo7OnIOfaNaQ8MB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg8N2dBU HpLmPEwmbSPRA9uoFc2vx2XPj8+etCrRNupA4ZFWRx1qrNVR86e2scnagf7AaAYP 9s9ntaPBFIQq1FMlbZeI/iH5p57KH4N4hfM4CEL8tqulThf6Qf5mx0eKUGEGisHL bFL6pTXC/EhGIzvG7BgdR1zCisUPFj6++htiriSw4zibabaM9Sd3d92xbmmeVQF/ HeTVfGssqPDF0I1TKNcCP2/qzLC17W3WdbSvo/nXChZ0Z29LNjDL6X5t5soAubxe 2Dgl9eMOFqzrWAWpfV29f4xBbYDlFn5l+aghiUfTpqzymsRXHAo5+wzfFUKzpnHv TmK9PrLcflfxuw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:47 2026 by rpki-client