This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json) Hash identifier: CVoqI5xETFukcy6a91P5vSCf7M320Lj/Cg/tJRsh5fI= Subject key identifier: 3D:B3:66:0D:E3:E5:CE:44:EB:93:44:F3:F7:55:53:32:43:6B:57:18 Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Certificate serial: 019BF651B15D92A72DB28911C80264514C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft Manifest number: 10 Signing time: Sun 25 Jan 2026 18:01:47 +0000 Manifest this update: Sun 25 Jan 2026 18:01:47 +0000 Manifest next update: Mon 26 Jan 2026 18:01:47 +0000 Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=) 2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: GAJu8JyJjbAbOOUyNASC0koZquTr3UM2yaHwZ6YKCTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:b1:5d:92:a7:2d:b2:89:11:c8:02:64:51:4c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Validity Not Before: Jan 25 18:01:47 2026 GMT Not After : Jan 26 18:01:47 2026 GMT Subject: CN=3db3660de3e5ce44eb9344f3f7555332436b5718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:df:45:30:c3:dd:f1:2c:e6:12:36:cd:5c: 28:29:65:6d:cc:6e:22:2a:e2:bc:f6:af:e2:a0:5a: 0f:55:4a:1f:9c:92:e6:dc:85:95:69:8d:bb:fa:60: 99:3f:50:c4:ed:f1:c2:74:ed:f1:ca:72:be:2d:26: 6a:63:03:4e:41:cb:4c:fb:87:fa:5d:1e:4f:6c:93: 04:07:1e:e7:dc:a9:6c:73:6f:e0:f2:d8:38:aa:b8: 53:7a:80:a4:10:73:8a:09:10:6a:55:47:7b:39:56: 1b:bb:29:8d:80:7e:3a:5d:7e:96:e5:bd:32:81:e7: e8:f8:c9:f6:e6:49:da:0d:c8:36:94:c5:e3:69:7a: 0f:b1:73:7e:13:9f:67:75:fc:59:96:30:a8:5f:21: 04:a2:56:27:63:2f:96:2d:9f:55:71:94:80:3a:54: 06:a8:4f:60:22:ad:bf:2e:8f:f6:7c:68:78:0c:b2: b7:2e:ef:b0:99:ae:8d:c5:4c:60:fe:25:63:b5:64: 1c:98:7a:c9:12:b1:49:4f:6b:89:f4:01:e6:46:fc: fc:70:a1:83:15:11:97:45:13:74:09:99:13:6e:bf: 80:2f:14:62:75:ac:68:1a:e5:5a:f5:76:78:06:4a: 5d:0b:bb:aa:25:9c:7b:2a:b9:f1:3d:3d:d8:43:a8: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:66:0D:E3:E5:CE:44:EB:93:44:F3:F7:55:53:32:43:6B:57:18 X509v3 Authority Key Identifier: keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:df:e5:22:3f:bd:dd:ee:d6:f3:1b:f3:aa:e5:8d:24:d8:36: 35:cb:0c:21:49:87:31:21:f4:f1:6f:a0:ad:f5:ef:25:79:dc: fb:ad:88:67:3c:cd:c9:6b:5f:8e:01:4d:3d:c6:de:ae:7a:a3: fd:b9:75:f6:b2:3f:d1:7a:c6:86:50:bd:7e:e2:fb:e0:7f:b0: cf:a1:cd:91:b7:0b:c8:d6:85:11:3f:9f:4a:24:74:46:ea:0c: bf:80:40:02:e4:84:ac:68:df:55:c9:ce:8f:15:de:57:47:b3: ed:af:19:45:d3:c3:89:26:f5:4f:52:33:f6:55:e1:45:93:cf: 7e:2e:54:f3:ad:2b:c1:7d:e4:fd:0f:e1:fd:e9:3d:8e:44:82: 4e:cf:8f:ce:f1:d0:a1:f5:a8:3b:c1:d6:fb:b5:93:23:18:df: 64:d7:8b:9b:f2:4f:79:dc:74:7a:66:96:91:2d:d1:e3:3b:97: a1:2e:59:ec:d2:39:4d:66:e3:22:5e:b1:e7:e1:8f:db:77:69: 4d:1c:ac:9b:c2:11:96:0b:87:be:aa:00:7b:c3:51:28:33:d7: b8:8f:97:55:a2:f3:38:10:f3:72:2f:a4:ff:5a:80:d8:cc:cc: 7f:85:b9:58:5d:5d:aa:c9:36:e1:63:9b:d0:ba:c2:2d:75:03: 03:26:b3:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UbFdkqctsokRyAJkUUx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4 NTYzZGEwHhcNMjYwMTI1MTgwMTQ3WhcNMjYwMTI2MTgwMTQ3WjAzMTEwLwYDVQQD EygzZGIzNjYwZGUzZTVjZTQ0ZWI5MzQ0ZjNmNzU1NTMzMjQzNmI1NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN3fRTDD3fEs5hI2zVwoKWVtzG4i KuK89q/ioFoPVUofnJLm3IWVaY27+mCZP1DE7fHCdO3xynK+LSZqYwNOQctM+4f6 XR5PbJMEBx7n3Klsc2/g8tg4qrhTeoCkEHOKCRBqVUd7OVYbuymNgH46XX6W5b0y gefo+Mn25knaDcg2lMXjaXoPsXN+E59ndfxZljCoXyEEolYnYy+WLZ9VcZSAOlQG qE9gIq2/Lo/2fGh4DLK3Lu+wma6NxUxg/iVjtWQcmHrJErFJT2uJ9AHmRvz8cKGD FRGXRRN0CZkTbr+ALxRidaxoGuVa9XZ4BkpdC7uqJZx7KrnxPT3YQ6hWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2zZg3j5c5E65NE8/dVUzJDa1cYMB8GA1UdIwQY MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt MGY0NzViZjE0NjAzLzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN/lIj+9 3e7W8xvzquWNJNg2NcsMIUmHMSH08W+grfXvJXnc+62IZzzNyWtfjgFNPcbernqj /bl19rI/0XrGhlC9fuL74H+wz6HNkbcLyNaFET+fSiR0RuoMv4BAAuSErGjfVcnO jxXeV0ez7a8ZRdPDiSb1T1Iz9lXhRZPPfi5U860rwX3k/Q/h/ek9jkSCTs+PzvHQ ofWoO8HW+7WTIxjfZNeLm/JPedx0emaWkS3R4zuXoS5Z7NI5TWbjIl6x5+GP23dp TRysm8IRlguHvqoAe8NRKDPXuI+XVaLzOBDzci+k/1qA2MzMf4W5WF1dqsk24WOb 0LrCLXUDAyaz5g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:33 2026 by rpki-client