This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft File: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json) Hash identifier: rDt3nzKOXQhyRKJKk/M+FBIVb4Cf99jQj1vBT1iFhNU= Subject key identifier: 13:99:91:AC:74:EE:3A:14:C0:CC:DC:7F:1E:04:00:20:91:35:67:60 Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873 Certificate serial: 019BF4632D10D0B20DA2A66D234C67280714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 09:01:38 +0000 Manifest this update: Sun 25 Jan 2026 09:01:38 +0000 Manifest next update: Mon 26 Jan 2026 09:01:38 +0000 Files and hashes: 1: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (hash: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo=) 2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: 9err+yQMnVpayMCKet1g6VkIGI9BLz5GnCveYHF/DtY=) 3: Njus34_tWTQbMZlE1tRpeQUdH2I.roa (hash: 87ImyGsbG7v1MN92b3+FnhDyYHAWQQrZK7ULWDILgcQ=) 4: _DgxgPBMn4GEtr1HFV4lxED-jk0.roa (hash: 7MO54lxduq+XFWhLRW9Dq64qSqZFXeJN+DNM88s/Oz4=) 5: bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa (hash: fXQllw8VZVYHGOPsqntwHwX5QpNIrlOnadEQ+JteA+I=) 6: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (hash: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2d:10:d0:b2:0d:a2:a6:6d:23:4c:67:28:07:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873 Validity Not Before: Jan 25 09:01:38 2026 GMT Not After : Jan 26 09:01:38 2026 GMT Subject: CN=139991ac74ee3a14c0ccdc7f1e04002091356760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:28:37:a2:a3:cc:df:2c:cd:e4:5f:c9:d6: 82:88:82:0a:bd:cf:50:85:e3:60:c1:a8:fb:e7:e9: 0e:76:e5:a1:23:32:13:f8:c2:c0:7d:45:bf:08:23: a6:a7:b7:61:93:86:6d:8b:fb:eb:66:d9:54:36:5c: 11:66:df:e2:91:5f:80:57:c1:75:3a:16:52:32:8a: ec:b9:4a:7c:bb:f9:dc:d4:a0:45:a4:81:6d:fa:2b: 48:f2:b2:69:c6:1b:0a:c3:d1:08:db:7f:7e:5b:08: 37:e3:47:82:a1:44:33:36:7b:3f:0e:32:19:d1:f0: 17:7a:c0:4f:e4:d6:12:32:f6:94:35:e3:86:e6:f7: 35:ac:27:35:08:d6:e5:00:ed:0d:b1:20:d7:0f:9c: f0:c0:d4:71:d6:87:9d:f4:27:16:e3:52:95:77:76: 61:29:58:98:4d:64:7b:59:71:dc:e6:83:d5:4a:9c: 9c:28:14:07:73:a5:66:49:fc:43:d0:cd:27:b1:e6: 8f:50:d8:c4:ef:22:28:cd:c2:10:7b:d3:5e:5a:5f: 3f:61:8f:a3:03:53:0e:75:44:e3:e5:1e:a0:dc:03: dc:7e:ff:fc:9c:5b:36:b2:cb:a6:56:d4:d7:f9:88: 78:42:20:5d:3f:53:72:8d:6e:de:8a:01:be:da:96: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:91:AC:74:EE:3A:14:C0:CC:DC:7F:1E:04:00:20:91:35:67:60 X509v3 Authority Key Identifier: keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:eb:e2:0b:34:42:43:fa:5c:31:d1:5e:40:2f:34:c7:50:8d: fd:dc:e8:ba:92:ba:c8:cb:f9:b4:db:b2:79:5d:b8:66:b6:3e: c6:d7:10:73:b7:c6:a9:eb:73:a2:46:9f:be:a1:3d:dd:00:cb: 4e:63:99:6d:db:f5:7c:04:62:50:c5:ec:4c:b3:d7:a7:4c:89: 98:1e:f7:a1:d0:87:8d:53:59:f0:e4:26:e1:31:71:e7:23:8d: 6d:0f:18:2c:5e:4f:06:4a:59:40:3c:95:3e:e5:ed:ce:27:aa: 26:c6:54:00:ab:c5:ea:47:c9:2a:30:13:1e:be:a4:e9:c6:d4: 04:94:3b:73:b9:12:fb:55:22:32:d1:37:15:11:70:f6:d1:92: 2f:f4:ec:63:6b:f8:54:46:28:71:d0:a1:72:65:f6:89:79:0f: c1:43:fd:9d:7f:31:81:85:67:b0:c2:9c:58:63:d2:4e:a0:20: f6:b0:29:4b:32:4b:ff:15:22:5a:01:c7:49:d2:7d:27:2c:a3: ef:87:d3:0f:2b:ed:8a:cd:fb:d2:cf:dd:49:79:fe:5f:b5:4b: 0d:f8:08:1b:99:2b:80:ab:a7:51:65:f5:83:05:52:66:86:a0: 5b:47:d3:23:de:8f:3e:d6:b6:d6:20:8d:83:d8:0e:c2:e5:9a: 01:37:6c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yy0Q0LINoqZtI0xnKAcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4 MjA4NzMwHhcNMjYwMTI1MDkwMTM4WhcNMjYwMTI2MDkwMTM4WjAzMTEwLwYDVQQD EygxMzk5OTFhYzc0ZWUzYTE0YzBjY2RjN2YxZTA0MDAyMDkxMzU2NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcYoN6KjzN8szeRfydaCiIIKvc9Q heNgwaj75+kOduWhIzIT+MLAfUW/CCOmp7dhk4Zti/vrZtlUNlwRZt/ikV+AV8F1 OhZSMorsuUp8u/nc1KBFpIFt+itI8rJpxhsKw9EI239+Wwg340eCoUQzNns/DjIZ 0fAXesBP5NYSMvaUNeOG5vc1rCc1CNblAO0NsSDXD5zwwNRx1oed9CcW41KVd3Zh KViYTWR7WXHc5oPVSpycKBQHc6VmSfxD0M0nseaPUNjE7yIozcIQe9NeWl8/YY+j A1MOdUTj5R6g3APcfv/8nFs2ssumVtTX+Yh4QiBdP1NyjW7eigG+2pZnUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOZkax07joUwMzcfx4EACCRNWdgMB8GA1UdIwQY MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt ZDY3YTYxZDU0MTZkLzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOviCzRC Q/pcMdFeQC80x1CN/dzoupK6yMv5tNuyeV24ZrY+xtcQc7fGqetzokafvqE93QDL TmOZbdv1fARiUMXsTLPXp0yJmB73odCHjVNZ8OQm4TFx5yONbQ8YLF5PBkpZQDyV PuXtzieqJsZUAKvF6kfJKjATHr6k6cbUBJQ7c7kS+1UiMtE3FRFw9tGSL/TsY2v4 VEYocdChcmX2iXkPwUP9nX8xgYVnsMKcWGPSTqAg9rApSzJL/xUiWgHHSdJ9Jyyj 74fTDyvtis370s/dSXn+X7VLDfgIG5krgKunUWX1gwVSZoagW0fTI96PPta21iCN g9gOwuWaATds5w== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:06 2026 by rpki-client