This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: iSTEklwZeGgoh0FbEDr0vdM46vaSJCA4dGE6uz7EfTk= Subject key identifier: 68:C4:BE:CC:B9:FC:64:B0:AA:E1:FB:7E:27:A0:68:07:ED:95:AB:FA Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019BF5ABB9F89985877E8997E8D9AB54A396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 168B Signing time: Sun 25 Jan 2026 15:00:30 +0000 Manifest this update: Sun 25 Jan 2026 15:00:30 +0000 Manifest next update: Mon 26 Jan 2026 15:00:30 +0000 Files and hashes: 1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=) 2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: SsSRk8T2MgNWajpxr3Zxbqh7jReMD3lJ0FxkWr51VHs=) 5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 6: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 7: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 8: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 9: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 10: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:b9:f8:99:85:87:7e:89:97:e8:d9:ab:54:a3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 25 15:00:30 2026 GMT Not After : Jan 26 15:00:30 2026 GMT Subject: CN=68c4beccb9fc64b0aae1fb7e27a06807ed95abfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:96:50:a0:30:61:54:b8:37:6a:31:ec:bc: 62:5c:20:c0:57:6e:ce:1c:f1:bf:b6:1b:f0:19:5d: 13:c1:36:17:e3:cd:09:b4:6c:ef:5a:ee:1d:22:68: 43:9d:5a:b9:10:25:62:fc:c2:d8:c7:dc:d2:5c:63: df:a1:7b:b6:fb:4a:1a:4e:54:f0:e8:b7:a8:fc:9c: bd:bf:c4:2b:33:3f:ec:09:50:15:0d:71:a7:78:bb: 54:57:48:5b:cf:fb:75:d9:64:52:fb:bf:d5:3d:34: d8:9c:8b:7d:3b:b0:ab:32:e9:11:49:c1:f8:6e:36: d5:c3:30:53:b5:a5:b1:74:e4:9b:aa:dd:64:8d:6b: 3b:f4:23:e2:9b:d7:9c:55:c1:8d:2b:55:f6:6e:ce: 64:e3:44:ed:3e:fe:e4:aa:d3:c9:8a:6e:f3:81:c3: 1c:e9:c6:18:45:89:d0:b4:95:c1:be:c2:1c:27:8b: 92:66:f8:ce:f1:2e:f3:3c:1a:03:e0:a6:5c:21:3d: db:ed:68:54:62:dd:f9:9b:70:48:92:3f:b0:0d:01: aa:87:cc:53:36:b5:db:f2:ae:58:ff:47:f7:fa:55: a5:48:fc:b2:b6:da:e5:71:29:48:16:b0:92:67:1b: 36:0d:dd:0c:90:c4:0b:aa:3a:23:79:cb:1f:3e:1e: cb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:BE:CC:B9:FC:64:B0:AA:E1:FB:7E:27:A0:68:07:ED:95:AB:FA X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:43:74:aa:3f:d3:c1:f8:32:cb:06:1f:3f:96:b9:1e:ef:50: 0c:02:b3:0b:53:83:2e:1e:3b:90:b2:c5:3e:9d:fa:90:a5:0c: 17:40:10:da:0c:40:28:b4:5c:0f:d3:c9:e0:bb:fd:49:18:3d: d7:23:a8:72:cd:9a:63:5e:d5:24:78:70:e3:36:65:fe:93:fe: 53:11:b6:df:b2:8f:5a:77:05:47:ac:54:6d:bd:8f:7a:3a:ec: 79:e8:b2:fd:fc:3e:ff:af:79:d3:3f:01:b6:6f:75:ce:76:c2: 6d:f4:d4:13:da:bb:5b:00:19:ac:e7:62:a7:3d:e2:5b:7c:8d: 24:b0:0e:f0:bf:33:9c:84:54:c1:c8:8f:31:a4:82:73:b3:e0: 03:3c:3b:5b:f1:7c:ba:3c:15:77:d1:aa:0f:5c:eb:bc:50:0a: 60:12:68:0a:80:2d:43:76:f0:92:2a:fa:d2:a5:12:3b:ab:74: 89:bb:51:50:4a:9e:ba:de:bb:57:c1:b6:68:ad:ca:fc:7a:6c: cc:78:4c:43:21:e7:79:b2:31:81:bb:c7:da:58:b7:dc:df:f1: b8:16:fb:a8:0a:63:55:e1:41:f8:90:a9:61:76:c7:96:c7:2f: 6e:35:52:0d:9a:0e:5b:cf:5b:b3:a1:47:64:7d:2d:f3:e2:d4: bc:bd:de:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q7n4mYWHfomX6NmrVKOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTI1MTUwMDMwWhcNMjYwMTI2MTUwMDMwWjAzMTEwLwYDVQQD Eyg2OGM0YmVjY2I5ZmM2NGIwYWFlMWZiN2UyN2EwNjgwN2VkOTVhYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cmWUKAwYVS4N2ox7LxiXCDAV27O HPG/thvwGV0TwTYX480JtGzvWu4dImhDnVq5ECVi/MLYx9zSXGPfoXu2+0oaTlTw 6Leo/Jy9v8QrMz/sCVAVDXGneLtUV0hbz/t12WRS+7/VPTTYnIt9O7CrMukRScH4 bjbVwzBTtaWxdOSbqt1kjWs79CPim9ecVcGNK1X2bs5k40TtPv7kqtPJim7zgcMc 6cYYRYnQtJXBvsIcJ4uSZvjO8S7zPBoD4KZcIT3b7WhUYt35m3BIkj+wDQGqh8xT NrXb8q5Y/0f3+lWlSPyyttrlcSlIFrCSZxs2Dd0MkMQLqjojecsfPh7LfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjEvsy5/GSwquH7fiegaAftlav6MB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkN0qj/T wfgyywYfP5a5Hu9QDAKzC1ODLh47kLLFPp36kKUMF0AQ2gxAKLRcD9PJ4Lv9SRg9 1yOocs2aY17VJHhw4zZl/pP+UxG237KPWncFR6xUbb2Pejrseeiy/fw+/6950z8B tm91znbCbfTUE9q7WwAZrOdipz3iW3yNJLAO8L8znIRUwciPMaSCc7PgAzw7W/F8 ujwVd9GqD1zrvFAKYBJoCoAtQ3bwkir60qUSO6t0ibtRUEqeut67V8G2aK3K/Hps zHhMQyHnebIxgbvH2li33N/xuBb7qApjVeFB+JCpYXbHlscvbjVSDZoOW89bs6FH ZH0t8+LUvL3eQg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:29 2026 by rpki-client