This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json) Hash identifier: c+PjOGmspCCII3QgrMfmAWEmzs9yeBNcpyRTwUpjlGs= Subject key identifier: 06:D8:C5:8A:47:F4:C8:75:88:21:96:27:7E:BC:7C:82:CC:05:C6:4B Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Certificate serial: 019BAF820EBB13A23C031AE612D596BDC505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft Manifest number: 0ABE Signing time: Mon 12 Jan 2026 00:01:34 +0000 Manifest this update: Mon 12 Jan 2026 00:01:34 +0000 Manifest next update: Tue 13 Jan 2026 00:01:34 +0000 Files and hashes: 1: 99vNYm11Abb46yGkbIvnhElSUKk.roa (hash: kaM8j0/7vV6OtesnBvSal75AKpJWv23ajsp4aKhWL4M=) 2: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: /+NFRrIwFFjHcK3lzXsBwUBkz6hvhb6l0e3clwjt+CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:82:0e:bb:13:a2:3c:03:1a:e6:12:d5:96:bd:c5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Validity Not Before: Jan 12 00:01:34 2026 GMT Not After : Jan 13 00:01:34 2026 GMT Subject: CN=06d8c58a47f4c875882196277ebc7c82cc05c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:e2:66:14:ff:58:41:4e:a5:b1:b0:8c:8e: dc:04:2d:d6:6c:4d:58:ba:d7:6a:7b:9a:ba:4d:66: aa:95:92:b3:61:50:71:3e:2e:21:87:c6:6b:d2:9b: 5c:63:af:3c:da:98:90:37:46:e0:50:a5:26:31:19: 69:17:6d:3e:f4:c1:a6:6d:bd:d2:32:40:c4:9b:4e: 82:b1:f9:4b:32:0b:23:21:8a:21:af:f9:b7:36:89: 9e:1f:d6:23:ad:14:89:f8:ec:e0:ba:8e:c6:b3:15: 19:c0:5a:4a:cc:aa:48:a2:1e:ef:6a:4e:4e:3e:01: 84:93:1d:c8:56:09:c1:19:0f:d8:a3:86:e5:95:6a: 87:52:c6:fa:a8:b4:e3:f4:b8:2b:9f:3c:f8:99:b7: 8c:7d:31:55:2e:e0:78:5e:48:ee:f5:06:fd:51:51: 38:76:6a:48:f8:b6:0f:6d:ff:7d:ae:b1:19:c7:cc: a6:0e:1a:f2:6e:ff:04:a5:3e:c9:5c:42:41:ad:d5: c3:78:84:38:08:68:a3:d0:66:13:12:6e:d9:09:22: c1:a0:32:2c:5b:ea:b9:e8:b7:b4:50:8e:bd:b6:2c: cc:53:b6:4f:53:af:5c:14:99:c9:57:90:ae:60:1a: 0f:79:1f:12:f0:27:e7:f0:01:ab:f0:fd:55:15:e9: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D8:C5:8A:47:F4:C8:75:88:21:96:27:7E:BC:7C:82:CC:05:C6:4B X509v3 Authority Key Identifier: keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:20:3a:e8:4f:74:e6:bb:4f:ab:db:e5:dd:89:b2:fa:88:b6: c6:a9:82:e6:ff:d7:98:21:8c:93:80:a3:21:39:f8:89:a3:d9: fc:db:45:cb:b7:cd:66:09:93:eb:79:df:db:1d:50:b1:cd:61: b8:d8:c9:2d:71:1c:7c:8e:17:67:56:28:b7:4f:5a:df:4f:4b: 86:14:fa:7b:0b:3f:c5:24:7d:8e:65:7f:ee:b1:a3:62:74:52: 4c:08:b1:bc:59:c7:34:cb:31:79:83:45:d3:7b:83:fd:c4:91: 7b:d6:e0:c6:1b:38:bd:c4:68:63:f0:0e:bc:ce:87:1b:3f:46: bd:3b:1a:ba:54:78:b6:53:08:7a:a0:4f:59:45:64:4c:04:93: 75:71:42:b5:a3:0a:49:bb:d1:0e:e2:b8:71:5f:df:20:4b:d3: e1:11:a8:e9:ac:12:68:e8:8f:83:02:a4:e6:ee:ed:96:e0:7d: d2:77:b2:89:10:d5:13:27:ac:ad:c2:ee:a8:9b:e2:1c:bf:eb: b1:a6:53:76:24:77:05:46:7a:1f:9f:5e:e4:c9:5f:e2:13:b9: 0b:fa:9f:15:40:ae:e3:6d:4d:2e:e6:7c:6c:73:59:e4:52:f3: c6:ac:26:9a:c0:91:d1:fd:2c:1d:b0:4a:a9:05:6f:21:96:06: d5:77:e0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvgg67E6I8AxrmEtWWvcUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw YmUwOWYwHhcNMjYwMTEyMDAwMTM0WhcNMjYwMTEzMDAwMTM0WjAzMTEwLwYDVQQD EygwNmQ4YzU4YTQ3ZjRjODc1ODgyMTk2Mjc3ZWJjN2M4MmNjMDVjNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/XiZhT/WEFOpbGwjI7cBC3WbE1Y utdqe5q6TWaqlZKzYVBxPi4hh8Zr0ptcY6882piQN0bgUKUmMRlpF20+9MGmbb3S MkDEm06CsflLMgsjIYohr/m3NomeH9YjrRSJ+Ozguo7GsxUZwFpKzKpIoh7vak5O PgGEkx3IVgnBGQ/Yo4bllWqHUsb6qLTj9Lgrnzz4mbeMfTFVLuB4Xkju9Qb9UVE4 dmpI+LYPbf99rrEZx8ymDhrybv8EpT7JXEJBrdXDeIQ4CGij0GYTEm7ZCSLBoDIs W+q56Le0UI69tizMU7ZPU69cFJnJV5CuYBoPeR8S8Cfn8AGr8P1VFekuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbYxYpH9Mh1iCGWJ368fILMBcZLMB8GA1UdIwQY MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4 LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyA66E90 5rtPq9vl3Ymy+oi2xqmC5v/XmCGMk4CjITn4iaPZ/NtFy7fNZgmT63nf2x1Qsc1h uNjJLXEcfI4XZ1Yot09a309LhhT6ews/xSR9jmV/7rGjYnRSTAixvFnHNMsxeYNF 03uD/cSRe9bgxhs4vcRoY/AOvM6HGz9GvTsaulR4tlMIeqBPWUVkTASTdXFCtaMK SbvRDuK4cV/fIEvT4RGo6awSaOiPgwKk5u7tluB90neyiRDVEyesrcLuqJviHL/r saZTdiR3BUZ6H59e5Mlf4hO5C/qfFUCu421NLuZ8bHNZ5FLzxqwmmsCR0f0sHbBK qQVvIZYG1XfgxA== -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:55 2026 by rpki-client