This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json) Hash identifier: 5U4WgSFYsh9+ExyYw/wjOoRuyjY4VtSKfrzV7kWh8q4= Subject key identifier: 46:02:8F:54:3D:5B:4B:11:C7:AE:95:95:5B:A8:AE:9B:D2:DF:8E:EB Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Certificate serial: 019BF5AC8947C657DFC67104FBFF95065CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft Manifest number: 0123 Signing time: Sun 25 Jan 2026 15:01:23 +0000 Manifest this update: Sun 25 Jan 2026 15:01:23 +0000 Manifest next update: Mon 26 Jan 2026 15:01:23 +0000 Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: lfjVoUD2eY2l7pAmjexL+mEDdAC8zV6TXgRnVMdc5JE=) 2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:89:47:c6:57:df:c6:71:04:fb:ff:95:06:5c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Validity Not Before: Jan 25 15:01:23 2026 GMT Not After : Jan 26 15:01:23 2026 GMT Subject: CN=46028f543d5b4b11c7ae95955ba8ae9bd2df8eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:48:dd:4b:44:6c:6d:71:91:9c:a1:2e:da: 4b:45:79:40:9a:ed:09:29:0c:2d:0f:e8:74:9c:2b: 1c:96:6a:25:c1:25:5e:cf:a3:3f:96:39:c1:25:2f: 55:5e:33:45:17:44:35:d2:b3:bd:b9:4e:8a:16:64: ed:a3:83:2d:92:07:0d:dc:c9:38:5e:20:ea:a6:a9: 7c:28:50:f6:ea:80:31:e9:2c:87:7f:82:a3:c6:0d: 9f:cd:21:f8:73:78:46:ba:44:01:51:ef:02:80:71: 59:0e:10:51:cb:1e:3e:90:73:60:66:85:7b:05:54: 56:67:81:c4:4e:08:6d:26:9a:33:7b:7d:99:53:21: 4e:f7:39:24:dd:c0:96:e0:10:27:3d:cd:b6:96:33: bb:45:c7:06:80:fd:60:fd:71:85:7c:a8:ce:c0:56: 52:bc:b1:d9:19:a6:f3:55:c5:78:2b:f2:23:75:16: 64:92:38:4f:b3:1e:09:1a:ac:93:15:74:c6:ec:e1: 02:c2:60:11:f8:dc:b0:7e:aa:37:fa:b6:e7:49:9e: 9a:76:0c:85:2a:16:6a:11:6a:83:2d:b0:a2:93:62: 05:ce:3c:fa:1b:57:30:fc:16:5f:e9:48:5c:2f:27: 62:92:54:0d:51:5e:85:7b:f9:b9:ba:f1:16:d7:70: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:8F:54:3D:5B:4B:11:C7:AE:95:95:5B:A8:AE:9B:D2:DF:8E:EB X509v3 Authority Key Identifier: keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5c:1d:b8:a6:2d:88:f5:db:5d:63:40:93:e9:81:47:67:f6: 58:59:1e:b3:a7:bc:2e:55:0a:07:06:3f:01:bc:bd:65:fd:19: af:c5:3b:3a:7f:7b:09:4c:68:3c:d2:c8:89:15:4d:b8:45:f3: fd:c2:20:7e:6c:20:ba:ad:e7:e8:60:bd:2e:19:c3:c6:6b:8e: 04:79:da:b2:6b:ad:41:b2:b8:e3:f0:1a:d2:c2:28:5e:dd:9e: 3d:8c:f0:47:04:df:ea:d9:ee:0f:be:e0:de:be:b3:c3:29:63: 09:83:85:4f:93:d6:e5:b0:7c:b4:67:e1:b5:33:c0:0e:45:b1: ef:90:e9:f1:1f:10:aa:ee:1f:56:d1:c2:fc:ef:1c:d8:f3:65: 37:c9:71:4d:1a:65:d7:6a:b6:48:1e:33:aa:33:62:c0:14:0a: 11:e2:02:5e:2b:f0:e8:b0:6d:6b:ad:4d:24:9c:93:27:25:7d: ed:86:7f:e2:d9:cb:06:c4:a4:45:7d:50:2c:b5:f8:09:60:df: 02:11:1f:81:35:5f:97:f4:cf:9a:05:da:76:b4:f1:96:03:70: cb:65:8a:4c:9d:4c:a1:a0:d1:c1:81:ad:f4:0c:01:33:b4:42: f8:a1:f7:e4:7a:88:82:db:8c:04:e5:da:57:86:8d:90:6e:b0: b8:c7:b3:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIlHxlffxnEE+/+VBlyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzI4NjVmODE1MTBiOTQ1NWI3ZWE5YmM4YzdkYWQ3OTkz ZDUzOWEwHhcNMjYwMTI1MTUwMTIzWhcNMjYwMTI2MTUwMTIzWjAzMTEwLwYDVQQD Eyg0NjAyOGY1NDNkNWI0YjExYzdhZTk1OTU1YmE4YWU5YmQyZGY4ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tI3UtEbG1xkZyhLtpLRXlAmu0J KQwtD+h0nCsclmolwSVez6M/ljnBJS9VXjNFF0Q10rO9uU6KFmTto4MtkgcN3Mk4 XiDqpql8KFD26oAx6SyHf4Kjxg2fzSH4c3hGukQBUe8CgHFZDhBRyx4+kHNgZoV7 BVRWZ4HETghtJpoze32ZUyFO9zkk3cCW4BAnPc22ljO7RccGgP1g/XGFfKjOwFZS vLHZGabzVcV4K/IjdRZkkjhPsx4JGqyTFXTG7OECwmAR+Nywfqo3+rbnSZ6adgyF KhZqEWqDLbCik2IFzjz6G1cw/BZf6UhcLydiklQNUV6Fe/m5uvEW13C8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYCj1Q9W0sRx66VlVuorpvS347rMB8GA1UdIwQY MBaAFPZyhl+BUQuUVbfqm8jH2teZPVOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQt YTE5MjI3MDk3ZmYzLzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQtYTE5MjI3MDk3ZmYz LzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVwduKYt iPXbXWNAk+mBR2f2WFkes6e8LlUKBwY/Aby9Zf0Zr8U7On97CUxoPNLIiRVNuEXz /cIgfmwguq3n6GC9LhnDxmuOBHnasmutQbK44/Aa0sIoXt2ePYzwRwTf6tnuD77g 3r6zwyljCYOFT5PW5bB8tGfhtTPADkWx75Dp8R8Qqu4fVtHC/O8c2PNlN8lxTRpl 12q2SB4zqjNiwBQKEeICXivw6LBta61NJJyTJyV97YZ/4tnLBsSkRX1QLLX4CWDf AhEfgTVfl/TPmgXadrTxlgNwy2WKTJ1MoaDRwYGt9AwBM7RC+KH35HqIgtuMBOXa V4aNkG6wuMezeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:27 2026 by rpki-client