This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: rzjBGgiaOQZThZKFPlyuLii+dRlr7fcQcoEtyt2/tgk= Subject key identifier: CF:4B:80:47:BD:29:7A:2A:DC:56:C0:A6:DC:46:6C:5D:B9:DE:E4:BD Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BF38707EA62923B297808D6786D3FCB91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 01B3 Signing time: Sun 25 Jan 2026 05:01:11 +0000 Manifest this update: Sun 25 Jan 2026 05:01:11 +0000 Manifest next update: Mon 26 Jan 2026 05:01:11 +0000 Files and hashes: 1: 1eImrMrLwn99tL6hWUH7PV1l9KM.roa (hash: 5rLdj8XDGdl2PEbYTH8muFitzQHXbsXem0uaX7yA7eQ=) 2: 5ovyXW66FMFmM04hnCYQuTdPbDs.roa (hash: SJtk0xAZ//VsBgvIWTtE8Cera1hdejrKmhHRvfx1y+Y=) 3: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: LYXnc0eI/gEMKdu5Kz/lEQtokze4BMEqLarfO2883gM=) 4: OOyqRP0gd9tRLzkY54anBAAI-Ts.roa (hash: mWMdkSR/gQ5UfnlPmZfRMxuxRlkVUgWwnFMsgx7vcjU=) 5: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 6: _n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa (hash: FG3nlGn4KT8ZKEdCyWE6nrHnRcSjZ6JVs88QiZJqA1U=) 7: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 8: dqaulTVaJdxe0Se94TESS0Xu5Tk.roa (hash: nLinLeHvfWZfhWqocoBwHCFEyZWPv+TO3g4L1fui8n4=) 9: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 10: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (hash: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY=) 11: komjT8O821bHvm5KoIcSK9RLwFg.roa (hash: XiZH/CbY0Sotg650d8Q01CbsjUqKfb4sXPg9XUzPS6Q=) 12: o8UxQ3a2n9kEjcAUYeME6BdSwgU.roa (hash: jVCIyXg4cflFe4QRKBmdG7+ZUZqcWZ/CfJby4iYt/TM=) 13: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:07:ea:62:92:3b:29:78:08:d6:78:6d:3f:cb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 25 05:01:11 2026 GMT Not After : Jan 26 05:01:11 2026 GMT Subject: CN=cf4b8047bd297a2adc56c0a6dc466c5db9dee4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:95:5c:f5:70:c2:84:7e:73:19:7b:f3:b0: 15:9a:bf:37:23:71:4b:70:54:32:ba:50:64:0a:1f: 03:0a:bd:53:63:a8:7c:49:fa:86:6a:1e:bf:1b:b2: 5f:14:97:66:3c:aa:96:21:f5:b2:cf:ff:ee:2f:ac: a9:4f:29:46:8b:02:30:8a:c9:a9:65:2d:a2:00:b5: 0f:2e:37:43:01:ee:cd:0c:f4:78:d3:8f:80:04:bf: 2b:f7:cf:17:c1:a2:47:a5:ec:6a:a8:b1:e4:b9:fa: 6c:75:af:e9:d7:f5:1d:af:47:03:76:49:dd:c2:04: fa:34:e2:cd:7a:0f:ae:76:c2:0a:2f:73:ae:ca:00: 5b:1f:8a:6a:a7:40:b1:e1:7f:d0:3a:e5:59:4e:6f: e8:ff:cb:c6:90:fd:ae:a5:c0:0a:2e:83:d6:59:be: 17:55:68:5b:47:d2:5f:34:8e:48:12:4d:2d:97:ce: 0d:49:10:fb:e7:3c:c9:cb:b7:3c:8f:b3:71:fb:62: 2a:50:75:e6:0a:35:5f:47:74:7c:30:2d:06:a1:fd: 57:90:9a:50:36:05:d8:b6:e3:67:b4:6c:0f:2b:01: 33:54:1f:4a:80:16:d5:bb:41:79:64:20:e1:f7:ef: 47:ff:0d:39:18:53:d5:b6:ce:85:b2:e1:5a:9a:d4: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:80:47:BD:29:7A:2A:DC:56:C0:A6:DC:46:6C:5D:B9:DE:E4:BD X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:df:1f:34:77:7d:d0:05:53:2e:fb:f3:6f:43:e8:b0:20: 05:e6:f6:4c:6f:57:ef:d0:c6:02:14:9d:99:0b:12:3e:52:63: 67:8a:18:0b:62:de:62:da:21:8a:dc:ed:c1:38:70:a6:49:c6: 49:4a:8a:09:28:a2:b7:bc:2f:35:d2:2b:ff:34:df:a4:22:6e: 43:b0:bd:29:80:87:8c:62:38:0e:4d:bd:d2:f2:40:6a:ad:58: 8a:f6:9e:65:a6:1a:9c:c3:23:bb:c6:e4:37:8b:34:e4:d5:1d: 37:2e:5e:65:4f:aa:28:53:a9:aa:43:e5:e9:c1:27:b5:10:0c: 43:2f:f7:71:fd:05:1d:0d:43:f1:32:eb:8d:7f:fb:4b:c4:72: 0b:70:8e:82:04:7e:8d:da:4e:0b:18:69:cf:c1:c5:b7:32:06: 9a:a8:0c:ca:5a:00:e9:d1:9f:45:02:55:fa:a9:3b:39:0f:6d: d8:2e:3f:ad:54:a8:1f:14:62:b0:a7:23:72:d0:7e:e7:50:36: 5e:29:6d:bf:5d:a8:6c:51:e6:e6:63:e4:5a:28:09:5e:ef:c6: 27:ac:8a:00:7b:75:d6:b5:99:ab:b9:ff:cf:6b:80:ec:09:a4: f2:a0:e2:6e:0b:6c:a2:4c:06:00:39:d0:d4:80:47:02:33:31: 3a:9f:bc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwfqYpI7KXgI1nhtP8uRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTI1MDUwMTExWhcNMjYwMTI2MDUwMTExWjAzMTEwLwYDVQQD EyhjZjRiODA0N2JkMjk3YTJhZGM1NmMwYTZkYzQ2NmM1ZGI5ZGVlNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w2VXPVwwoR+cxl787AVmr83I3FL cFQyulBkCh8DCr1TY6h8SfqGah6/G7JfFJdmPKqWIfWyz//uL6ypTylGiwIwismp ZS2iALUPLjdDAe7NDPR404+ABL8r988XwaJHpexqqLHkufpsda/p1/Udr0cDdknd wgT6NOLNeg+udsIKL3OuygBbH4pqp0Cx4X/QOuVZTm/o/8vGkP2upcAKLoPWWb4X VWhbR9JfNI5IEk0tl84NSRD75zzJy7c8j7Nx+2IqUHXmCjVfR3R8MC0Gof1XkJpQ NgXYtuNntGwPKwEzVB9KgBbVu0F5ZCDh9+9H/w05GFPVts6FsuFamtSZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9LgEe9KXoq3FbAptxGbF253uS9MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhavfHzR3 fdAFUy77829D6LAgBeb2TG9X79DGAhSdmQsSPlJjZ4oYC2LeYtohitztwThwpknG SUqKCSiit7wvNdIr/zTfpCJuQ7C9KYCHjGI4Dk290vJAaq1YivaeZaYanMMju8bk N4s05NUdNy5eZU+qKFOpqkPl6cEntRAMQy/3cf0FHQ1D8TLrjX/7S8RyC3COggR+ jdpOCxhpz8HFtzIGmqgMyloA6dGfRQJV+qk7OQ9t2C4/rVSoHxRisKcjctB+51A2 Xiltv12obFHm5mPkWigJXu/GJ6yKAHt11rWZq7n/z2uA7Amk8qDibgtsokwGADnQ 1IBHAjMxOp+85A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:12 2026 by rpki-client