This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json) Hash identifier: Wimsp+80G6JDZmZoB5yIFaiyiihZzToM6JeW1mS3Yos= Subject key identifier: 3E:3B:A1:4C:65:86:94:C7:BF:2C:9C:91:A7:ED:C9:08:98:60:BD:EC Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019BFAD2A1C1E7A4BE4D02A09851E125431D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 15:01:06 +0000 Manifest this update: Mon 26 Jan 2026 15:01:06 +0000 Manifest next update: Tue 27 Jan 2026 15:01:06 +0000 Files and hashes: 1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=) 2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=) 3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=) 4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=) 5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=) 6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 2pD6zwqA1MI3FR0/g83CihP1CUObvjym00QtC+e6Bu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:a1:c1:e7:a4:be:4d:02:a0:98:51:e1:25:43:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Jan 26 15:01:06 2026 GMT Not After : Jan 27 15:01:06 2026 GMT Subject: CN=3e3ba14c658694c7bf2c9c91a7edc9089860bdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:74:59:d1:06:a5:19:b6:19:75:2e:be:ce: 91:26:61:e1:e1:fe:74:3e:b3:0d:f3:3e:73:06:27: 66:a0:6b:c4:40:40:f5:f1:47:72:08:80:9a:9c:8e: 1c:79:ad:d8:40:dc:85:c9:1c:6e:a3:5a:a1:4c:6d: ab:1a:88:21:ce:4e:dc:94:2d:5c:f4:b2:3d:94:df: df:78:9a:20:1b:21:8d:f2:c2:36:fc:7e:cc:b4:fa: b9:e8:74:f1:6e:e1:04:0b:fb:16:34:02:52:f7:2b: 59:7d:4a:dc:e7:aa:74:29:9f:3c:4a:7e:43:d0:3b: 7b:95:62:ea:aa:98:ad:d8:1d:f6:bc:35:b5:cf:ba: 7e:f4:ec:f7:d7:9d:fd:70:09:f3:da:99:03:f3:32: 5a:0b:78:4b:97:ac:05:59:d1:89:27:97:19:79:7c: 90:6c:f2:8c:b8:5e:48:ae:b3:24:af:f5:c7:6a:44: a9:6f:0e:17:eb:1a:33:06:7f:e8:a1:0f:e7:30:74: 38:92:72:42:05:71:a5:27:90:a6:b5:63:82:47:ea: 43:4f:eb:5d:09:1c:11:e5:13:e6:ab:07:f6:f3:04: b4:51:08:14:e1:df:0c:04:c0:93:ff:16:cf:b9:d2: 0d:58:10:00:23:00:8f:7d:54:60:26:d0:53:b8:f6: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:A1:4C:65:86:94:C7:BF:2C:9C:91:A7:ED:C9:08:98:60:BD:EC X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:94:7a:25:34:4f:46:f8:7c:a6:75:89:a8:93:0e:5c:07:39: 62:c2:9b:e9:d4:82:ae:26:4f:00:b6:51:d5:4e:22:29:02:9e: 30:59:ed:ae:74:2c:9a:a2:fc:47:a2:1a:bd:e8:e1:e5:65:21: f9:a5:f6:c3:19:c2:57:ec:3f:70:d9:6d:63:32:db:a9:7c:cb: d3:d3:75:6d:94:cf:ea:9d:72:5a:dd:e4:2a:54:78:54:9c:90: 5e:27:7b:78:91:fe:f4:a8:bc:96:e3:30:6c:1c:9c:43:b4:40: 71:0f:87:eb:f0:bc:d6:c0:26:c5:7b:fa:b6:81:37:b0:e7:a9: 13:2a:f9:b5:e0:d8:41:98:95:e6:0f:ae:0e:11:02:67:91:ee: 02:f3:b6:90:f9:3d:12:2d:a6:e1:27:10:f8:64:e6:b0:c5:b3: a0:21:77:e3:08:51:28:04:c3:dc:eb:22:25:ea:f5:1f:90:d5: 8b:ed:c2:b2:a8:3a:85:60:85:c4:cd:bc:d9:2d:46:40:a4:09: 2c:18:30:1a:ad:06:bf:ee:dc:28:c1:98:29:cd:eb:1b:34:5f: 84:61:07:05:73:c1:bf:e9:12:28:f9:4a:82:47:2e:f4:0f:1f: 7c:12:11:35:5d:ca:3c:1e:78:a2:ae:85:55:33:88:08:e1:03: 29:57:3c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60qHB56S+TQKgmFHhJUMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjYwMTI2MTUwMTA2WhcNMjYwMTI3MTUwMTA2WjAzMTEwLwYDVQQD EygzZTNiYTE0YzY1ODY5NGM3YmYyYzljOTFhN2VkYzkwODk4NjBiZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nR0WdEGpRm2GXUuvs6RJmHh4f50 PrMN8z5zBidmoGvEQED18UdyCICanI4cea3YQNyFyRxuo1qhTG2rGoghzk7clC1c 9LI9lN/feJogGyGN8sI2/H7MtPq56HTxbuEEC/sWNAJS9ytZfUrc56p0KZ88Sn5D 0Dt7lWLqqpit2B32vDW1z7p+9Oz31539cAnz2pkD8zJaC3hLl6wFWdGJJ5cZeXyQ bPKMuF5IrrMkr/XHakSpbw4X6xozBn/ooQ/nMHQ4knJCBXGlJ5CmtWOCR+pDT+td CRwR5RPmqwf28wS0UQgU4d8MBMCT/xbPudINWBAAIwCPfVRgJtBTuPbBiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD47oUxlhpTHvyyckaftyQiYYL3sMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5R6JTRP Rvh8pnWJqJMOXAc5YsKb6dSCriZPALZR1U4iKQKeMFntrnQsmqL8R6Iavejh5WUh +aX2wxnCV+w/cNltYzLbqXzL09N1bZTP6p1yWt3kKlR4VJyQXid7eJH+9Ki8luMw bBycQ7RAcQ+H6/C81sAmxXv6toE3sOepEyr5teDYQZiV5g+uDhECZ5HuAvO2kPk9 Ei2m4ScQ+GTmsMWzoCF34whRKATD3OsiJer1H5DVi+3Csqg6hWCFxM282S1GQKQJ LBgwGq0Gv+7cKMGYKc3rGzRfhGEHBXPBv+kSKPlKgkcu9A8ffBIRNV3KPB54oq6F VTOICOEDKVc86Q== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:13 2026 by rpki-client