This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json) Hash identifier: qxb80Y0dbjJNoAwa7PghpCSyCFDwCJY6kqgLSD3TZfM= Subject key identifier: BD:D3:11:E6:70:6F:AA:8C:39:0F:CE:36:24:0C:DD:EA:D4:9B:93:97 Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37 Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137 Certificate serial: 019BF688382E43C1EEE3C2AA4A64A2E63696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft Manifest number: 25 Signing time: Sun 25 Jan 2026 19:01:20 +0000 Manifest this update: Sun 25 Jan 2026 19:01:20 +0000 Manifest next update: Mon 26 Jan 2026 19:01:20 +0000 Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: f7Jy/wRosEZmE9Cc/PwiYecRB86V6mveIwSljY42fvA=) 2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:38:2e:43:c1:ee:e3:c2:aa:4a:64:a2:e6:36:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137 Validity Not Before: Jan 25 19:01:20 2026 GMT Not After : Jan 26 19:01:20 2026 GMT Subject: CN=bdd311e6706faa8c390fce36240cddead49b9397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:35:d4:c3:84:56:d6:b5:c4:56:6d:db:40: 59:29:7d:b3:a6:dd:57:60:0c:d3:92:04:0b:5d:b0: ff:67:e8:c6:e5:9b:63:93:30:5b:c4:09:28:9b:5d: db:46:42:41:b8:bf:56:c4:43:38:46:dc:2d:3c:71: c8:b7:09:8b:40:d0:20:36:89:74:4f:51:3a:f4:c2: a2:5c:95:89:23:4f:96:86:fe:11:6a:f7:58:35:08: a3:65:47:1a:ca:5a:e4:56:92:ac:8b:7b:4d:1d:99: 81:d3:54:a2:46:ce:d0:f1:80:dd:c7:61:c5:85:d9: 04:3a:2a:ab:68:3b:27:30:5f:db:96:f5:76:9c:46: f3:ba:47:da:fa:ca:04:2a:c5:c9:f2:c5:15:05:8c: b1:16:c7:db:7e:4c:d3:2e:05:40:ee:65:3d:89:32: 36:ba:ca:e3:97:bc:0e:08:2c:35:ad:3d:53:70:0e: 24:a5:28:89:fe:9b:2a:68:b5:0f:ae:50:ae:21:f9: 5d:36:eb:c7:30:44:45:86:45:22:00:a4:87:9b:fc: 69:6a:95:1f:e1:ca:6b:9e:e3:22:45:5f:cb:90:ef: 66:82:2a:f5:9b:20:59:32:8b:01:4c:bd:fc:c4:2d: d7:a7:02:48:ab:9e:83:14:65:1a:a5:5e:61:fb:78: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:11:E6:70:6F:AA:8C:39:0F:CE:36:24:0C:DD:EA:D4:9B:93:97 X509v3 Authority Key Identifier: keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:f5:78:47:aa:b2:b1:b7:56:12:2f:01:fc:ac:12:8a:bc: be:76:05:3c:b5:7d:3b:40:86:86:34:b0:34:9f:84:70:28:4e: e6:19:a5:b9:4e:f4:4e:0e:44:94:7c:bb:11:62:91:6f:d1:f8: f9:54:43:2d:2e:4d:9a:9d:d4:c8:4f:ef:e8:8f:2e:6c:e5:39: 8d:4f:d5:b7:8a:2c:41:8c:ad:e2:9b:9a:a7:92:f2:0c:2b:c2: 89:bd:aa:49:7b:7e:4d:b7:4b:06:4f:da:be:56:ed:6a:87:a6: 38:88:30:24:b5:08:62:b2:d9:89:5d:0d:09:63:63:3b:13:33: c5:88:b6:08:05:68:f9:d4:e3:58:e3:ba:4f:60:9d:1a:69:55: 8a:e2:58:57:51:70:3c:85:4b:cb:1b:46:bb:5b:06:5e:41:d3: b8:b4:fb:48:a6:89:25:f3:a0:94:97:69:b3:d0:b3:89:78:b2: 3f:79:e4:49:fc:84:56:e4:75:ee:5f:6b:02:cb:0d:a1:dc:22: 1b:5d:cf:50:a6:9f:c5:e0:8e:14:6c:3b:64:db:29:79:f6:8c: 6c:2c:88:83:ee:ab:4b:03:2b:08:1e:66:99:b1:4a:58:9a:a5: 1d:57:c7:90:dc:c9:a5:9a:9d:ca:d6:4a:04:1d:bf:2d:2c:d7: a8:18:16:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iDguQ8Hu48KqSmSi5jaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjI1MTFmYjA3NGY1ZTE2NTg1MzViYTQ2MWU0NTgwZGJk ODQxMzcwHhcNMjYwMTI1MTkwMTIwWhcNMjYwMTI2MTkwMTIwWjAzMTEwLwYDVQQD EyhiZGQzMTFlNjcwNmZhYThjMzkwZmNlMzYyNDBjZGRlYWQ0OWI5Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3811MOEVta1xFZt20BZKX2zpt1X YAzTkgQLXbD/Z+jG5ZtjkzBbxAkom13bRkJBuL9WxEM4RtwtPHHItwmLQNAgNol0 T1E69MKiXJWJI0+Whv4RavdYNQijZUcaylrkVpKsi3tNHZmB01SiRs7Q8YDdx2HF hdkEOiqraDsnMF/blvV2nEbzukfa+soEKsXJ8sUVBYyxFsfbfkzTLgVA7mU9iTI2 usrjl7wOCCw1rT1TcA4kpSiJ/psqaLUPrlCuIfldNuvHMERFhkUiAKSHm/xpapUf 4cprnuMiRV/LkO9mgir1myBZMosBTL38xC3XpwJIq56DFGUapV5h+3jgmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3TEeZwb6qMOQ/ONiQM3erUm5OXMB8GA1UdIwQY MBaAFPSyUR+wdPXhZYU1ukYeRYDb2EE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYt MDE5Mjk0Mzc5NmMxLzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYtMDE5Mjk0Mzc5NmMx LzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkr1eEeq srG3VhIvAfysEoq8vnYFPLV9O0CGhjSwNJ+EcChO5hmluU70Tg5ElHy7EWKRb9H4 +VRDLS5Nmp3UyE/v6I8ubOU5jU/Vt4osQYyt4puap5LyDCvCib2qSXt+TbdLBk/a vlbtaoemOIgwJLUIYrLZiV0NCWNjOxMzxYi2CAVo+dTjWOO6T2CdGmlViuJYV1Fw PIVLyxtGu1sGXkHTuLT7SKaJJfOglJdps9CziXiyP3nkSfyEVuR17l9rAssNodwi G13PUKafxeCOFGw7ZNspefaMbCyIg+6rSwMrCB5mmbFKWJqlHVfHkNzJpZqdytZK BB2/LSzXqBgWIg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:57 2026 by rpki-client