This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft File: 9vSDrNiLUfXUf1d_EBtUV3heDts.mft (raw, json) Hash identifier: W3gbXnGu8hEOhiiBT3AtGoJdajjNioTFkrk+PcT4RrE= Subject key identifier: AD:37:7D:C3:69:FC:33:CA:8E:00:9D:97:1B:AB:A2:A0:4B:24:58:E0 Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb Certificate serial: 019BF462E094C48311C8F1A6B88322B4EFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft Manifest number: 29 Signing time: Sun 25 Jan 2026 09:01:19 +0000 Manifest this update: Sun 25 Jan 2026 09:01:19 +0000 Manifest next update: Mon 26 Jan 2026 09:01:19 +0000 Files and hashes: 1: 9vSDrNiLUfXUf1d_EBtUV3heDts.crl (hash: CZcPEEFxnbxCnfnrDSnC/i2MQ+qGtTvH8X20MEanslA=) 2: h9dclcnj73gGMmqKRNemWaDpAK4.roa (hash: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU=) 3: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (hash: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:e0:94:c4:83:11:c8:f1:a6:b8:83:22:b4:ef:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb Validity Not Before: Jan 25 09:01:19 2026 GMT Not After : Jan 26 09:01:19 2026 GMT Subject: CN=ad377dc369fc33ca8e009d971baba2a04b2458e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:64:fd:85:f5:a4:5d:81:58:03:80:4d:de: 60:07:a6:d6:81:de:8a:79:97:84:1f:58:0f:75:44: d0:99:50:fa:7a:07:14:6a:b9:1e:36:30:22:46:79: 9a:1f:3c:08:0f:9e:36:27:69:ff:57:51:6a:3e:88: 0b:35:5d:a0:2c:21:27:93:7c:88:1b:8f:8f:df:f9: e0:64:06:40:f3:f2:2f:1b:0a:b8:ad:6d:82:2f:59: e2:2e:8d:c0:84:d1:df:aa:a7:c0:75:b6:d1:10:cc: 7a:41:71:31:7f:60:1c:64:56:a4:9d:18:73:ef:72: e3:54:e3:ab:16:17:08:09:cc:cd:f3:89:88:e1:71: f2:db:bb:07:77:67:9b:3c:a8:df:4e:42:0c:5e:f6: 57:6f:ae:50:b1:10:3e:10:d0:f8:f7:ea:6b:f0:a6: 74:eb:3e:56:0c:66:ef:32:a5:06:a4:64:b1:96:ec: 7a:d9:de:1b:23:c3:74:d8:d4:45:d9:c7:bd:2e:96: a4:a3:6e:97:c7:cb:15:9a:28:3e:77:59:73:be:dc: 14:ad:bb:a2:98:34:27:62:94:1d:04:19:75:5b:b3: 18:3c:c5:b6:50:28:e1:7a:7f:2a:01:ac:9a:2b:17: ef:15:cd:70:c3:ab:ed:48:71:8b:1a:39:71:82:f4: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:7D:C3:69:FC:33:CA:8E:00:9D:97:1B:AB:A2:A0:4B:24:58:E0 X509v3 Authority Key Identifier: keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:87:24:55:a5:c2:98:d2:3e:13:78:62:ce:09:73:3d:b9:02: 49:5f:28:6c:ad:3f:a3:e3:46:6c:f6:c6:db:69:13:6a:98:3c: 13:a5:8e:d6:68:3a:f9:4b:12:01:32:a0:92:88:0d:9e:c9:5b: 44:ae:6b:92:0e:9f:1f:8f:a2:8c:88:bc:25:29:c9:ff:e4:a0: 51:fb:41:94:9a:f3:dd:a4:f0:bf:b4:63:43:69:80:46:9a:1a: c0:e1:a7:24:84:34:48:4e:4c:15:57:92:51:e6:07:8c:48:25: de:ef:8c:d0:c1:85:66:55:84:26:33:ec:8a:08:d8:c0:7d:c4: fb:40:ce:83:bf:64:47:94:2e:30:96:d3:c4:b2:cf:02:85:eb: bb:46:f7:2e:9c:ed:e9:e2:a7:2f:ad:8f:d2:f8:aa:a9:32:14: b8:cd:60:93:65:36:34:7c:08:64:85:7a:a5:96:1d:26:a3:7a: 9b:7c:0a:82:d9:d6:dd:9f:c6:94:2f:07:3a:9a:ba:0e:da:9f: d7:81:7e:96:1e:32:2b:26:a8:7b:4d:8a:9f:83:8b:76:f2:50: ef:49:09:c8:0d:70:2d:19:79:5c:eb:8d:85:14:5e:2b:60:51: 8c:cf:47:e4:23:80:38:21:43:dc:33:d1:51:73:6f:e9:25:bc: 2a:c8:e3:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YuCUxIMRyPGmuIMitO+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjQ4M2FjZDg4YjUxZjVkNDdmNTc3ZjEwMWI1NDU3Nzg1 ZTBlZGIwHhcNMjYwMTI1MDkwMTE5WhcNMjYwMTI2MDkwMTE5WjAzMTEwLwYDVQQD EyhhZDM3N2RjMzY5ZmMzM2NhOGUwMDlkOTcxYmFiYTJhMDRiMjQ1OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuZk/YX1pF2BWAOATd5gB6bWgd6K eZeEH1gPdUTQmVD6egcUarkeNjAiRnmaHzwID542J2n/V1FqPogLNV2gLCEnk3yI G4+P3/ngZAZA8/IvGwq4rW2CL1niLo3AhNHfqqfAdbbREMx6QXExf2AcZFaknRhz 73LjVOOrFhcICczN84mI4XHy27sHd2ebPKjfTkIMXvZXb65QsRA+END49+pr8KZ0 6z5WDGbvMqUGpGSxlux62d4bI8N02NRF2ce9Lpako26Xx8sVmig+d1lzvtwUrbui mDQnYpQdBBl1W7MYPMW2UCjhen8qAayaKxfvFc1ww6vtSHGLGjlxgvQFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK03fcNp/DPKjgCdlxuroqBLJFjgMB8GA1UdIwQY MBaAFPb0g6zYi1H11H9XfxAbVFd4Xg7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjIt NTJhMTVkNzg1NDAzLzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjItNTJhMTVkNzg1NDAz LzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYckVaXC mNI+E3hizglzPbkCSV8obK0/o+NGbPbG22kTapg8E6WO1mg6+UsSATKgkogNnslb RK5rkg6fH4+ijIi8JSnJ/+SgUftBlJrz3aTwv7RjQ2mARpoawOGnJIQ0SE5MFVeS UeYHjEgl3u+M0MGFZlWEJjPsigjYwH3E+0DOg79kR5QuMJbTxLLPAoXru0b3Lpzt 6eKnL62P0viqqTIUuM1gk2U2NHwIZIV6pZYdJqN6m3wKgtnW3Z/GlC8HOpq6Dtqf 14F+lh4yKyaoe02Kn4OLdvJQ70kJyA1wLRl5XOuNhRReK2BRjM9H5COAOCFD3DPR UXNv6SW8KsjjOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:26 2026 by rpki-client