This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: p0Jy7H4RRCcEqvMKGXpgSmzRiInTslZCDQ9cmC3PffA= Subject key identifier: B6:5D:24:05:D9:6D:0C:E7:42:85:84:04:45:DA:7A:21:67:17:03:9D Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BF57546185F14D1092024994D42514371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 01B4 Signing time: Sun 25 Jan 2026 14:01:02 +0000 Manifest this update: Sun 25 Jan 2026 14:01:02 +0000 Manifest next update: Mon 26 Jan 2026 14:01:02 +0000 Files and hashes: 1: 1eImrMrLwn99tL6hWUH7PV1l9KM.roa (hash: 5rLdj8XDGdl2PEbYTH8muFitzQHXbsXem0uaX7yA7eQ=) 2: 5ovyXW66FMFmM04hnCYQuTdPbDs.roa (hash: SJtk0xAZ//VsBgvIWTtE8Cera1hdejrKmhHRvfx1y+Y=) 3: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: D09crdWGFE+l2OYkD60gk8As3Uco6+8smFVTSFrHuiE=) 4: OOyqRP0gd9tRLzkY54anBAAI-Ts.roa (hash: mWMdkSR/gQ5UfnlPmZfRMxuxRlkVUgWwnFMsgx7vcjU=) 5: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 6: _n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa (hash: FG3nlGn4KT8ZKEdCyWE6nrHnRcSjZ6JVs88QiZJqA1U=) 7: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 8: dqaulTVaJdxe0Se94TESS0Xu5Tk.roa (hash: nLinLeHvfWZfhWqocoBwHCFEyZWPv+TO3g4L1fui8n4=) 9: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 10: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (hash: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY=) 11: komjT8O821bHvm5KoIcSK9RLwFg.roa (hash: XiZH/CbY0Sotg650d8Q01CbsjUqKfb4sXPg9XUzPS6Q=) 12: o8UxQ3a2n9kEjcAUYeME6BdSwgU.roa (hash: jVCIyXg4cflFe4QRKBmdG7+ZUZqcWZ/CfJby4iYt/TM=) 13: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:46:18:5f:14:d1:09:20:24:99:4d:42:51:43:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 25 14:01:02 2026 GMT Not After : Jan 26 14:01:02 2026 GMT Subject: CN=b65d2405d96d0ce74285840445da7a216717039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:6f:56:31:69:36:25:2a:b4:3c:0e:c1:a8: 12:86:24:7a:98:2c:36:71:39:4e:b2:e2:01:f9:37: 5b:f2:59:80:ca:6d:1f:6b:81:71:b5:c0:89:64:78: 27:8c:fb:a4:6c:b9:77:18:be:b9:42:00:63:ab:77: 76:4b:a0:ee:d6:80:bc:ed:84:2c:7e:41:bc:92:1a: c9:d8:74:80:cf:79:88:a2:34:7c:04:33:c8:8f:ab: c6:47:d0:18:36:53:4d:20:83:20:d3:e6:91:d0:90: c4:1d:30:a5:85:bd:15:35:53:b6:15:01:d0:81:71: 9f:20:f2:88:61:5f:f1:b0:0d:d0:21:7a:e0:d9:f5: 58:8b:18:a2:ae:3b:14:4f:8e:f1:61:c8:33:c7:d6: 9b:f4:f2:44:47:db:cb:3a:02:db:9c:82:26:1f:b1: 08:4d:9d:ad:83:8c:89:30:45:84:87:2b:1b:21:d5: 89:c5:4d:c6:f4:27:fd:3e:5a:11:94:85:88:96:15: 14:9f:11:22:8f:8d:e1:7b:35:f7:6f:7b:60:c6:c4: 86:8c:1e:1d:4c:28:3d:c4:4d:89:b4:5f:a9:ce:29: 0d:25:9d:06:16:d7:fa:d9:c5:ef:37:ad:d3:4b:c1: 75:12:e4:79:8a:d1:7f:84:74:8a:00:19:66:ce:f7: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:24:05:D9:6D:0C:E7:42:85:84:04:45:DA:7A:21:67:17:03:9D X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fe:96:d2:f3:5c:9b:6b:f6:f9:a6:16:03:a5:79:b6:43:f6: b0:42:fd:04:99:ee:35:4f:30:ec:38:11:5b:57:9d:c7:ca:e8: c7:aa:99:57:39:2c:77:10:04:9a:0d:fb:ff:b3:35:6e:f5:45: 25:bf:6d:65:cd:0d:fb:e4:de:fb:02:f2:fd:26:f6:c7:fd:3a: 1f:42:5d:4a:a9:d9:5c:3e:15:ff:0c:e7:63:ed:53:7b:27:bc: 11:a5:b3:29:2c:a7:6c:85:cc:9a:3d:4a:32:40:0a:51:22:f7: 42:08:30:25:51:64:73:2d:d7:4d:ea:17:dc:98:67:e3:0d:fb: da:c1:58:cc:7e:b8:44:d5:8d:3e:f4:da:0b:fb:00:40:64:c2: 77:f4:c2:28:9f:2b:38:11:28:1b:18:d2:1c:1d:1e:28:1b:da: bd:6d:b6:3c:f8:98:16:a1:bc:cd:24:d3:18:c2:9b:65:69:41: a7:e2:5c:f3:9d:3c:c9:20:c1:ff:c1:e2:72:88:0c:66:5b:17: 39:be:33:b6:be:c7:db:5d:30:d6:b2:b6:1f:68:db:7a:f0:06: 3b:3c:3d:23:0c:b1:6d:17:d6:80:d1:39:76:31:66:08:c3:cc: 5d:2e:a3:91:93:1c:8d:05:e6:ab:b7:91:d0:69:cb:f5:3b:8d: 71:fb:90:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dUYYXxTRCSAkmU1CUUNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTI1MTQwMTAyWhcNMjYwMTI2MTQwMTAyWjAzMTEwLwYDVQQD EyhiNjVkMjQwNWQ5NmQwY2U3NDI4NTg0MDQ0NWRhN2EyMTY3MTcwMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GtvVjFpNiUqtDwOwagShiR6mCw2 cTlOsuIB+Tdb8lmAym0fa4FxtcCJZHgnjPukbLl3GL65QgBjq3d2S6Du1oC87YQs fkG8khrJ2HSAz3mIojR8BDPIj6vGR9AYNlNNIIMg0+aR0JDEHTClhb0VNVO2FQHQ gXGfIPKIYV/xsA3QIXrg2fVYixiirjsUT47xYcgzx9ab9PJER9vLOgLbnIImH7EI TZ2tg4yJMEWEhysbIdWJxU3G9Cf9PloRlIWIlhUUnxEij43hezX3b3tgxsSGjB4d TCg9xE2JtF+pzikNJZ0GFtf62cXvN63TS8F1EuR5itF/hHSKABlmzvcTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZdJAXZbQznQoWEBEXaeiFnFwOdMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv6W0vNc m2v2+aYWA6V5tkP2sEL9BJnuNU8w7DgRW1edx8rox6qZVzksdxAEmg37/7M1bvVF Jb9tZc0N++Te+wLy/Sb2x/06H0JdSqnZXD4V/wznY+1Teye8EaWzKSynbIXMmj1K MkAKUSL3QggwJVFkcy3XTeoX3Jhn4w372sFYzH64RNWNPvTaC/sAQGTCd/TCKJ8r OBEoGxjSHB0eKBvavW22PPiYFqG8zSTTGMKbZWlBp+Jc8508ySDB/8HicogMZlsX Ob4ztr7H210w1rK2H2jbevAGOzw9IwyxbRfWgNE5djFmCMPMXS6jkZMcjQXmq7eR 0GnL9TuNcfuQ7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:53 2026 by rpki-client