This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json) Hash identifier: +vAWdBlqeHGuivLzPCjTbALG+A2cqVN+ixU0SkGnzOk= Subject key identifier: 08:5E:89:82:0E:F4:69:4B:95:4E:D4:7E:84:1B:31:56:84:AF:59:58 Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Certificate serial: 019BF318C9C0E4AFAED5422D955CFF04BC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft Manifest number: 17E4 Signing time: Sun 25 Jan 2026 03:00:46 +0000 Manifest this update: Sun 25 Jan 2026 03:00:46 +0000 Manifest next update: Mon 26 Jan 2026 03:00:46 +0000 Files and hashes: 1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: HP8foIVP6/1MOOqMg7oOvQIdqYwV6QfDWBTZyh5qpvc=) 2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=) 3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=) 4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:c9:c0:e4:af:ae:d5:42:2d:95:5c:ff:04:bc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Validity Not Before: Jan 25 03:00:46 2026 GMT Not After : Jan 26 03:00:46 2026 GMT Subject: CN=085e89820ef4694b954ed47e841b315684af5958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:11:99:79:4f:de:9a:2a:fe:16:fa:d6:c3:26: 09:ec:4d:87:28:45:a9:f4:ec:4f:99:6a:be:38:50: ff:3a:8c:b6:5d:d8:aa:e9:f2:48:87:d7:88:d3:ae: fa:49:50:1e:a8:c2:08:80:56:ee:32:80:53:eb:23: a9:50:f2:85:58:23:3e:9e:db:00:3c:24:65:c3:7a: 20:90:f0:7d:62:f3:58:9d:71:5e:7e:33:ca:12:b8: 26:64:bc:99:eb:7b:2e:d0:26:ed:8e:82:ae:4e:ab: 93:3d:d0:53:f9:9f:09:54:f5:ac:8c:ce:ca:02:28: ae:86:ee:d4:44:5f:a4:ec:e6:69:e7:cd:47:56:b7: ca:d3:22:72:dd:e6:23:27:70:cb:d1:c8:d1:4f:4c: 51:37:f3:52:d3:b5:17:a8:ce:ea:68:ba:15:76:2c: de:f4:fc:e8:6b:75:40:1b:28:8a:32:76:25:bf:b5: 8d:17:46:26:ad:5a:ca:f9:dc:97:8e:9d:c5:31:ac: f2:f0:af:95:11:e5:ec:0d:56:52:06:20:fd:81:dc: 51:a5:1c:0d:0a:76:6b:12:ca:ed:0c:0d:da:67:44: 18:ab:a1:d0:0e:cd:e2:54:07:ba:03:b1:66:e1:ba: 1e:28:cd:d2:40:47:01:66:bc:ac:9c:dc:76:67:3c: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:89:82:0E:F4:69:4B:95:4E:D4:7E:84:1B:31:56:84:AF:59:58 X509v3 Authority Key Identifier: keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a3:73:de:4e:9a:63:11:9c:71:1b:0d:65:35:78:96:00:35: d7:b6:e2:aa:45:d1:8b:a8:9e:f4:97:5e:cd:bf:b8:89:93:6c: 39:8b:e9:c1:de:7a:97:34:93:44:d7:dc:8c:7a:1c:4e:14:9d: c7:5d:35:23:94:6e:6b:30:ce:4d:40:ab:b2:73:a3:30:df:c7: a9:22:d8:50:43:e4:d0:f1:7e:95:8f:eb:42:75:7a:e8:22:d4: 5e:9f:eb:ea:14:31:17:ba:70:42:4c:68:74:71:4c:0f:01:a3: 37:88:78:5d:61:1f:e3:16:1a:22:75:65:b1:1f:41:1c:39:8e: 8e:a8:5d:21:1c:a6:65:2a:20:01:d7:1c:65:88:17:c7:e6:91: 87:72:7d:21:45:50:9e:f1:48:f7:16:45:eb:39:c0:3f:1e:02: bd:fb:3f:1b:8e:ae:17:3d:fb:cd:69:f1:71:ee:f1:f7:69:8a: 06:b8:31:d8:dd:50:85:09:4e:8b:df:1d:b4:55:74:c5:73:5f: c1:37:59:23:24:a3:7a:63:60:c8:22:fa:5c:1d:64:16:3b:6f: a0:d3:1f:e1:9c:71:1a:fe:9b:5e:0a:d1:89:66:8d:eb:e0:b9: 6c:a0:88:f2:95:29:51:bd:a0:1b:1e:0f:d0:04:dd:e7:bb:25: e5:0d:b3:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGMnA5K+u1UItlVz/BLx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz YTEyNTQwHhcNMjYwMTI1MDMwMDQ2WhcNMjYwMTI2MDMwMDQ2WjAzMTEwLwYDVQQD EygwODVlODk4MjBlZjQ2OTRiOTU0ZWQ0N2U4NDFiMzE1Njg0YWY1OTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGZeU/emir+FvrWwyYJ7E2HKEWp 9OxPmWq+OFD/Ooy2Xdiq6fJIh9eI0676SVAeqMIIgFbuMoBT6yOpUPKFWCM+ntsA PCRlw3ogkPB9YvNYnXFefjPKErgmZLyZ63su0CbtjoKuTquTPdBT+Z8JVPWsjM7K Aiiuhu7URF+k7OZp581HVrfK0yJy3eYjJ3DL0cjRT0xRN/NS07UXqM7qaLoVdize 9Pzoa3VAGyiKMnYlv7WNF0YmrVrK+dyXjp3FMazy8K+VEeXsDVZSBiD9gdxRpRwN CnZrEsrtDA3aZ0QYq6HQDs3iVAe6A7Fm4boeKM3SQEcBZrysnNx2ZzyekQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAheiYIO9GlLlU7UfoQbMVaEr1lYMB8GA1UdIwQY MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaNz3k6a YxGccRsNZTV4lgA117biqkXRi6ie9Jdezb+4iZNsOYvpwd56lzSTRNfcjHocThSd x101I5RuazDOTUCrsnOjMN/HqSLYUEPk0PF+lY/rQnV66CLUXp/r6hQxF7pwQkxo dHFMDwGjN4h4XWEf4xYaInVlsR9BHDmOjqhdIRymZSogAdccZYgXx+aRh3J9IUVQ nvFI9xZF6znAPx4Cvfs/G46uFz37zWnxce7x92mKBrgx2N1QhQlOi98dtFV0xXNf wTdZIySjemNgyCL6XB1kFjtvoNMf4ZxxGv6bXgrRiWaN6+C5bKCI8pUpUb2gGx4P 0ATd57sl5Q2zXw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:50:31 2026 by rpki-client