This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json) Hash identifier: FQGQkekTQlSV88haOtW0n5kEQb6ChyFJk4bBYR4UIss= Subject key identifier: E7:88:94:DF:E3:ED:C3:32:51:26:2E:FC:A3:73:71:7C:43:0F:6C:66 Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019BF650B1B09466A5DCF86848D4DCD83CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft Manifest number: 0150 Signing time: Sun 25 Jan 2026 18:00:41 +0000 Manifest this update: Sun 25 Jan 2026 18:00:41 +0000 Manifest next update: Mon 26 Jan 2026 18:00:41 +0000 Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: B5CJkwGxwSLU4mdsEYzh/qJadrPK58llBdMnI5O6Bv8=) 2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=) 3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=) 4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:b1:b0:94:66:a5:dc:f8:68:48:d4:dc:d8:3c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Jan 25 18:00:41 2026 GMT Not After : Jan 26 18:00:41 2026 GMT Subject: CN=e78894dfe3edc33251262efca373717c430f6c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:5a:9f:4a:de:8a:6b:4d:32:16:95:ae:7f: c4:89:59:d2:21:ff:0e:5f:fd:a0:b6:54:53:b6:8b: 13:4c:08:b7:8a:17:e2:81:15:17:c1:65:5a:0f:ab: a2:ba:04:b1:fb:f2:da:45:64:1a:3e:d5:20:da:48: 3d:b7:3f:36:92:ab:d9:92:b4:3f:5d:71:ee:d2:b1: 6c:47:5e:f7:8c:4e:2c:1a:1b:61:bd:5b:c2:c0:85: d6:4a:0a:c6:d3:ef:bc:d9:95:e7:09:77:aa:b9:8f: b1:e1:dd:db:22:ba:c7:46:e3:8d:8e:02:b4:f1:a7: d2:d1:72:d0:31:cf:d1:a5:59:51:d7:c6:e5:09:23: 5e:09:42:b9:b7:2c:5d:43:fe:3d:8b:99:92:c1:c9: 48:67:e7:c3:da:69:62:16:cd:b5:7d:c9:54:c2:52: 53:a4:3d:ab:57:0c:d3:70:c0:eb:a7:4b:6d:8e:33: 74:50:01:7a:ea:06:9a:57:3f:1f:0f:9e:6a:71:44: 01:bf:a3:a2:b6:20:96:ac:f5:39:c4:11:c4:f4:a1: 93:cf:36:6b:95:de:1c:78:3a:c1:07:d2:7d:48:99: c5:b4:90:a6:20:9a:b9:50:9e:04:e0:da:17:a8:9f: 4d:88:ff:c5:ff:3b:10:e7:5b:27:21:ab:df:a9:19: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:88:94:DF:E3:ED:C3:32:51:26:2E:FC:A3:73:71:7C:43:0F:6C:66 X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e6:1d:de:c3:d9:3b:7b:31:1e:2c:c1:eb:f4:0d:2c:63:1b: 29:4f:44:dc:54:c9:d7:28:5f:aa:bd:ba:08:75:fb:25:95:de: d4:43:a0:7e:7d:cc:55:0b:a9:2b:e0:5d:78:9e:1c:28:69:5a: 8c:b1:63:f5:18:1c:9f:9a:75:9f:fe:90:8a:53:21:c5:a1:d8: 69:5a:4e:2c:d2:2c:a4:93:97:92:11:da:35:43:7d:89:c4:f2: 05:9b:52:6b:25:ab:bc:fd:03:ec:8b:3c:a7:83:d5:bf:9f:73: ff:f1:10:03:ee:ed:72:2b:12:72:d6:6c:16:4c:cb:f8:3a:64: a1:66:f5:bb:a1:ca:f4:97:80:c1:aa:91:76:9c:fe:61:37:e9: 27:d9:d5:93:2f:9c:d2:92:e6:69:00:f8:3c:a7:17:e7:dc:45: fe:f8:2d:5d:07:27:65:5f:88:e9:f1:c4:56:0f:6d:84:30:36: 4d:40:c6:ee:7b:90:cf:19:2f:6d:6d:6c:71:29:cf:99:6f:b2: 26:9c:78:4e:94:63:e1:db:ee:99:7d:50:df:73:13:86:bb:20: 15:f7:6c:b4:0f:ba:89:9b:4b:f9:a5:f3:c0:03:79:84:44:9c: 2f:57:01:8c:c3:16:fc:bd:d1:df:b0:6f:f7:7d:18:54:91:12: 51:9c:88:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2ULGwlGal3PhoSNTc2DzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjYwMTI1MTgwMDQxWhcNMjYwMTI2MTgwMDQxWjAzMTEwLwYDVQQD EyhlNzg4OTRkZmUzZWRjMzMyNTEyNjJlZmNhMzczNzE3YzQzMGY2YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd9an0reimtNMhaVrn/EiVnSIf8O X/2gtlRTtosTTAi3ihfigRUXwWVaD6uiugSx+/LaRWQaPtUg2kg9tz82kqvZkrQ/ XXHu0rFsR173jE4sGhthvVvCwIXWSgrG0++82ZXnCXequY+x4d3bIrrHRuONjgK0 8afS0XLQMc/RpVlR18blCSNeCUK5tyxdQ/49i5mSwclIZ+fD2mliFs21fclUwlJT pD2rVwzTcMDrp0ttjjN0UAF66gaaVz8fD55qcUQBv6OitiCWrPU5xBHE9KGTzzZr ld4ceDrBB9J9SJnFtJCmIJq5UJ4E4NoXqJ9NiP/F/zsQ51snIavfqRkHZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeIlN/j7cMyUSYu/KNzcXxDD2xmMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuYd3sPZ O3sxHizB6/QNLGMbKU9E3FTJ1yhfqr26CHX7JZXe1EOgfn3MVQupK+BdeJ4cKGla jLFj9Rgcn5p1n/6QilMhxaHYaVpOLNIspJOXkhHaNUN9icTyBZtSayWrvP0D7Is8 p4PVv59z//EQA+7tcisSctZsFkzL+DpkoWb1u6HK9JeAwaqRdpz+YTfpJ9nVky+c 0pLmaQD4PKcX59xF/vgtXQcnZV+I6fHEVg9thDA2TUDG7nuQzxkvbW1scSnPmW+y Jpx4TpRj4dvumX1Q33MThrsgFfdstA+6iZtL+aXzwAN5hEScL1cBjMMW/L3R37Bv 930YVJESUZyI6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:54 2026 by rpki-client