This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json) Hash identifier: rGt2XLN5zIHs5AeZuyCk16dmmtBOL+M4p/QTEb97+cE= Subject key identifier: 8A:FE:AB:92:EE:F1:18:7C:E6:21:65:97:A8:BC:5A:5E:10:07:CA:F3 Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Certificate serial: 019BF1CF95DF5D95D3E15D86F9B51E55E72C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft Manifest number: 043A Signing time: Sat 24 Jan 2026 21:01:11 +0000 Manifest this update: Sat 24 Jan 2026 21:01:11 +0000 Manifest next update: Sun 25 Jan 2026 21:01:11 +0000 Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: DTi5Vu4DMEDOFWLQ8qhYquLle1EHwBvKiJ65B6pv9S8=) 2: SkhFbOk8Q8jf5sneshEiRz3bSQA.roa (hash: RJ9KM//Nku3tlDNUzKokzT0RDJoaE+avUqxbNPNx9lI=) 3: iAWiwffF86_QIBQ4X1gfjcEItDE.roa (hash: Iv0B/B+2zc8cn3sWe9D30nXND8TdD/dY+sOwCzKpdxw=) 4: zeU1Vaq8dXip9dmrsScfYVM7AP0.roa (hash: BQS+K71JMdJLJ7pEgI44nP9dmqlZHXq/BC5e2KQgEmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:95:df:5d:95:d3:e1:5d:86:f9:b5:1e:55:e7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Validity Not Before: Jan 24 21:01:11 2026 GMT Not After : Jan 25 21:01:11 2026 GMT Subject: CN=8afeab92eef1187ce6216597a8bc5a5e1007caf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:e3:0a:ed:ef:1a:d8:09:8a:77:85:95:e4: 49:26:89:a5:ec:79:b2:3b:8c:10:ca:7d:2f:1c:96: e3:e8:43:f2:81:3d:65:ac:e6:bf:22:18:b9:3d:5d: 04:31:8e:51:47:6a:25:47:56:d5:4c:f4:b2:4d:7b: 6f:78:ba:27:ea:73:28:e3:99:3c:98:ab:94:8a:c0: 22:84:7f:26:4f:e5:f7:9a:80:8e:83:bd:ed:08:a7: 9c:61:65:3e:21:df:b5:d4:a3:df:df:d5:f0:aa:d2: 45:4e:c9:85:4c:3e:70:77:29:e8:ff:19:ea:01:6b: 3a:8d:ea:42:ad:59:31:ad:0f:34:8d:d6:54:20:13: 8c:06:f5:ee:18:7d:6b:73:a3:17:74:83:2c:ae:b9: 7c:77:04:ff:46:23:45:95:57:c1:a2:aa:cf:89:9b: ba:39:4c:26:ba:78:54:96:57:9d:6a:4d:08:3c:4c: 7d:11:0c:37:70:d7:78:68:33:8b:cc:d9:b5:60:54: 25:95:b2:c1:e1:4d:40:57:2a:13:0b:c4:4a:ba:69: 2a:3f:80:5e:c1:dc:71:6b:43:d0:42:db:53:15:af: e1:da:d0:39:28:4b:74:26:c4:32:71:ae:18:05:ed: 01:25:38:37:0e:42:b8:cf:4c:5c:a1:d6:e1:ed:b7: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FE:AB:92:EE:F1:18:7C:E6:21:65:97:A8:BC:5A:5E:10:07:CA:F3 X509v3 Authority Key Identifier: keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d9:d2:e6:80:5e:8d:55:5f:0e:9b:a4:1f:d7:cd:25:c9:da: e6:8e:35:5f:68:f1:15:2e:f4:bb:7e:27:55:c9:77:53:3d:95: 8b:49:97:d6:60:84:d1:62:cd:48:2c:81:7a:e8:2b:c7:02:6b: 25:f2:28:0d:7a:b7:cd:8b:7f:dc:8d:6f:32:84:2c:54:96:bf: 3c:d7:60:16:c4:ed:de:e0:b4:20:33:58:0f:6a:62:fa:51:b7: 6e:f7:db:e2:21:77:5f:be:93:20:99:58:87:bf:c1:e9:90:89: ba:a1:26:7d:c0:e6:80:12:97:de:7f:52:de:44:a0:95:41:0b: 4a:ad:a9:13:3a:f4:5a:fb:04:7d:f5:bb:29:d9:46:22:5f:3a: 7d:59:a4:a4:d6:50:a7:5f:0b:20:63:9a:04:75:29:65:3b:c3: d8:17:a9:98:8c:19:38:6a:8b:9d:54:af:72:44:d2:40:ab:ff: 95:e3:b9:8b:df:36:c1:cb:58:64:f3:e0:35:30:88:fc:72:8d: 9d:b2:fb:e4:97:d6:40:76:ab:7b:a4:ef:1c:88:f2:a1:ea:9d: 16:04:b4:6a:df:0c:84:b1:23:87:d7:a3:47:06:f4:71:e5:54: 8d:da:75:70:0a:4a:75:dc:0b:aa:80:ed:c4:54:71:ab:a4:39: 86:9a:b2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz5XfXZXT4V2G+bUeVecsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2 OTUzMmEwHhcNMjYwMTI0MjEwMTExWhcNMjYwMTI1MjEwMTExWjAzMTEwLwYDVQQD Eyg4YWZlYWI5MmVlZjExODdjZTYyMTY1OTdhOGJjNWE1ZTEwMDdjYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQrjCu3vGtgJineFleRJJoml7Hmy O4wQyn0vHJbj6EPygT1lrOa/Ihi5PV0EMY5RR2olR1bVTPSyTXtveLon6nMo45k8 mKuUisAihH8mT+X3moCOg73tCKecYWU+Id+11KPf39XwqtJFTsmFTD5wdyno/xnq AWs6jepCrVkxrQ80jdZUIBOMBvXuGH1rc6MXdIMsrrl8dwT/RiNFlVfBoqrPiZu6 OUwmunhUlledak0IPEx9EQw3cNd4aDOLzNm1YFQllbLB4U1AVyoTC8RKumkqP4Be wdxxa0PQQttTFa/h2tA5KEt0JsQyca4YBe0BJTg3DkK4z0xcodbh7bd8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr+q5Lu8Rh85iFll6i8Wl4QB8rzMB8GA1UdIwQY MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9nS5oBe jVVfDpukH9fNJcna5o41X2jxFS70u34nVcl3Uz2Vi0mX1mCE0WLNSCyBeugrxwJr JfIoDXq3zYt/3I1vMoQsVJa/PNdgFsTt3uC0IDNYD2pi+lG3bvfb4iF3X76TIJlY h7/B6ZCJuqEmfcDmgBKX3n9S3kSglUELSq2pEzr0WvsEffW7KdlGIl86fVmkpNZQ p18LIGOaBHUpZTvD2BepmIwZOGqLnVSvckTSQKv/leO5i982wctYZPPgNTCI/HKN nbL75JfWQHare6TvHIjyoeqdFgS0at8MhLEjh9ejRwb0ceVUjdp1cApKddwLqoDt xFRxq6Q5hpqy4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 07:50:47 2026 by rpki-client