This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json) Hash identifier: Nb/U5Pci8V1znV3HiWhMaLsSDFGpZW1SZ3aVG/M696A= Subject key identifier: A3:11:C6:D2:91:F7:24:79:50:A3:8F:AE:2A:C5:4D:99:72:FA:88:94 Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55 Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455 Certificate serial: 019BACEED86169580F00127BBBAC40D9603C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft Manifest number: 17BF Signing time: Sun 11 Jan 2026 12:01:32 +0000 Manifest this update: Sun 11 Jan 2026 12:01:32 +0000 Manifest next update: Mon 12 Jan 2026 12:01:32 +0000 Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: R1tgYzCG76vAT4sg1iScsaGw73Lm5B+4fZDDN2tXoJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:d8:61:69:58:0f:00:12:7b:bb:ac:40:d9:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455 Validity Not Before: Jan 11 12:01:32 2026 GMT Not After : Jan 12 12:01:32 2026 GMT Subject: CN=a311c6d291f7247950a38fae2ac54d9972fa8894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:a9:5f:a0:60:49:b2:f8:92:46:4f:a4:44: 1a:85:4d:bf:df:00:6c:de:3a:75:9d:94:f8:77:bf: d9:8f:96:c8:26:98:56:67:37:8d:37:32:81:44:21: 75:a7:aa:8b:aa:67:f6:1a:0a:11:32:c8:c6:c2:76: 28:86:9c:c8:e5:29:5f:35:fe:84:6f:80:35:72:f2: 78:b5:a4:bd:6d:3e:e4:80:59:ec:d4:9b:53:01:cc: c2:6b:96:ce:17:be:83:b2:cc:54:2c:6b:3d:77:7f: d3:1d:61:fd:13:81:2e:d3:27:2c:05:6c:56:e5:0f: b7:15:4d:e2:50:d2:f4:81:67:0f:7d:dc:1f:1e:3a: 04:43:93:85:86:2a:8a:7e:ff:ca:58:a4:f5:30:99: 8b:c1:82:36:65:bc:86:f6:10:fd:9b:70:43:bd:2d: c9:de:1a:d9:6e:04:dc:19:06:4d:ff:c3:18:dd:4b: 28:aa:0b:4d:42:c6:0b:26:f8:34:98:66:bd:fc:ab: 7c:1f:aa:e3:c2:a4:df:83:7f:70:a5:28:fd:48:dc: cf:b6:b8:a5:b0:ba:d2:a1:72:3b:15:32:a6:2a:ee: 15:1e:be:f8:31:a7:db:86:95:f3:88:9d:3d:8a:dd: 13:aa:fd:a2:1b:f6:68:4a:7d:df:17:88:6a:73:0e: 32:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:C6:D2:91:F7:24:79:50:A3:8F:AE:2A:C5:4D:99:72:FA:88:94 X509v3 Authority Key Identifier: keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:29:ec:4a:8a:b9:cc:65:aa:b5:24:7f:89:d6:8a:b5:c2:0d: bc:59:dc:e9:54:74:e7:22:73:8e:19:5a:5e:a2:bf:0f:fc:76: 9e:da:5d:57:18:a1:ab:b9:eb:4c:f7:08:9e:58:93:bd:ef:11: e3:79:6e:c9:37:f3:89:a5:12:a5:bb:87:1e:b1:26:9b:a7:0e: 85:2a:b5:0c:14:a1:5b:57:39:9a:05:27:22:42:26:46:dd:57: 18:ef:ba:b6:12:61:55:c0:fc:c6:73:5f:83:0f:55:90:75:8e: ed:90:47:02:79:0a:45:94:10:f6:f4:48:b0:6e:ff:f2:e7:28: 2e:ed:4f:24:e1:4e:09:fa:6b:e7:5f:02:a0:e0:6b:d7:1a:3f: 6e:66:6e:8e:b3:5a:df:4f:53:50:db:77:5a:9e:7b:d7:3d:68: 2f:bd:28:c5:c2:d4:1b:ff:cc:29:8c:46:d5:e6:4f:a2:1f:e1: 38:f6:bd:8b:e9:9e:06:17:5e:bb:94:e6:83:54:2d:1c:96:02: 0c:b2:6f:1c:e1:03:3f:59:8c:c8:d1:3c:73:d5:c8:65:7f:30: 82:ee:b0:1c:bb:5c:24:9d:de:8a:9f:00:3e:c4:ea:db:fc:6d: e2:2f:83:f9:b4:4c:cb:2d:aa:63:53:f8:ac:9e:5e:7d:50:dd: 80:4b:60:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7thhaVgPABJ7u6xA2WA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk NmQ0NTUwHhcNMjYwMTExMTIwMTMyWhcNMjYwMTEyMTIwMTMyWjAzMTEwLwYDVQQD EyhhMzExYzZkMjkxZjcyNDc5NTBhMzhmYWUyYWM1NGQ5OTcyZmE4ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iWpX6BgSbL4kkZPpEQahU2/3wBs 3jp1nZT4d7/Zj5bIJphWZzeNNzKBRCF1p6qLqmf2GgoRMsjGwnYohpzI5SlfNf6E b4A1cvJ4taS9bT7kgFns1JtTAczCa5bOF76DssxULGs9d3/THWH9E4Eu0ycsBWxW 5Q+3FU3iUNL0gWcPfdwfHjoEQ5OFhiqKfv/KWKT1MJmLwYI2ZbyG9hD9m3BDvS3J 3hrZbgTcGQZN/8MY3UsoqgtNQsYLJvg0mGa9/Kt8H6rjwqTfg39wpSj9SNzPtril sLrSoXI7FTKmKu4VHr74MafbhpXziJ09it0Tqv2iG/ZoSn3fF4hqcw4yDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMRxtKR9yR5UKOPrirFTZly+oiUMB8GA1UdIwQY MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYinsSoq5 zGWqtSR/idaKtcINvFnc6VR05yJzjhlaXqK/D/x2ntpdVxihq7nrTPcInliTve8R 43luyTfziaUSpbuHHrEmm6cOhSq1DBShW1c5mgUnIkImRt1XGO+6thJhVcD8xnNf gw9VkHWO7ZBHAnkKRZQQ9vRIsG7/8ucoLu1PJOFOCfpr518CoOBr1xo/bmZujrNa 309TUNt3Wp571z1oL70oxcLUG//MKYxG1eZPoh/hOPa9i+meBhdeu5Tmg1QtHJYC DLJvHOEDP1mMyNE8c9XIZX8wgu6wHLtcJJ3eip8APsTq2/xt4i+D+bRMyy2qY1P4 rJ5efVDdgEtg2Q== -----END CERTIFICATE-----Generated at Sun Jan 11 15:11:23 2026 by rpki-client