This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json) Hash identifier: ahEV3dtliK6f4kgC5ZIi2Y5RP03gk4Nzx+dzSQfoncs= Subject key identifier: B9:F2:6C:CB:03:5A:7E:87:36:B7:0B:DC:35:B2:F0:FE:76:1B:27:2D Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70 Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70 Certificate serial: 019BB05E1159894AEEAFCD55D9C6B9D5939B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft Manifest number: 0972 Signing time: Mon 12 Jan 2026 04:01:53 +0000 Manifest this update: Mon 12 Jan 2026 04:01:53 +0000 Manifest next update: Tue 13 Jan 2026 04:01:53 +0000 Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: zE5+ovigochwqeb9+LIsWDe3dcFgYWVG4sOOqhuTfAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5e:11:59:89:4a:ee:af:cd:55:d9:c6:b9:d5:93:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70 Validity Not Before: Jan 12 04:01:53 2026 GMT Not After : Jan 13 04:01:53 2026 GMT Subject: CN=b9f26ccb035a7e8736b70bdc35b2f0fe761b272d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:d4:83:7f:65:7e:1b:64:63:56:5f:7c:07: 82:06:e5:6a:03:09:f2:57:29:49:fd:2a:a1:f4:21: ad:e4:d7:f4:fb:bf:8e:01:25:47:a2:ae:e6:53:62: 66:25:0d:25:ab:df:40:d1:8d:77:fa:25:8b:7d:16: f3:14:48:4d:0a:e6:c0:0c:08:93:6e:47:15:b9:e7: aa:40:9a:eb:80:73:79:c4:a6:f7:05:c3:8c:55:bc: b3:2d:d1:70:c8:0a:85:65:be:09:47:39:d5:99:28: f4:31:81:d8:3d:61:80:3f:3b:0f:07:e4:4e:66:bd: 02:1f:4c:de:16:5c:7c:c3:28:7d:c9:56:79:55:5c: 07:d5:13:3e:cd:b0:c9:9a:17:06:89:08:19:40:33: 0d:2d:cb:90:b1:b5:3f:6a:01:6e:73:45:f0:b1:1c: 11:12:f3:e1:d6:9e:61:c9:6c:8f:4a:67:88:9d:01: f1:c7:c6:d7:8c:90:a1:e7:fe:f5:24:cc:f5:f7:19: ff:4d:8c:23:26:c7:b8:d7:0c:53:4b:3b:65:cd:7f: 93:79:c1:70:85:e5:95:f2:a2:7f:ca:c3:73:ad:cb: d6:d9:e0:b3:05:ff:91:84:f8:88:32:0f:17:38:87: f1:b1:57:5d:ef:b5:14:83:c8:e3:9d:75:97:60:c6: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:6C:CB:03:5A:7E:87:36:B7:0B:DC:35:B2:F0:FE:76:1B:27:2D X509v3 Authority Key Identifier: keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:dd:c9:45:ca:5c:c3:a6:84:ea:50:c2:39:9a:9f:e8:6a:f7: 29:89:25:36:9f:11:bb:e9:4c:7c:b1:0c:60:6c:6c:76:af:fc: f8:41:d2:3c:31:44:cd:6b:bc:30:87:66:fb:b7:c4:a9:1e:bd: 59:7f:10:7a:b0:4a:d7:83:80:d2:e0:a3:c5:db:50:3c:d8:4f: 19:3f:ce:25:07:8f:ba:10:47:b5:d0:06:f0:e3:5f:c3:09:6f: a3:92:ed:bc:81:56:e3:4f:9d:bd:22:32:a4:35:dc:ca:94:9f: 63:62:b6:c8:b8:ad:63:2a:76:9d:19:f9:97:e1:4c:b0:d6:40: 02:ac:d0:09:c4:15:4a:b2:8d:34:e5:f1:d4:48:bb:4f:af:65: f5:05:d5:31:5f:5c:f5:5d:76:04:b7:9a:b6:f7:d2:16:5b:e6: ca:0a:a6:d2:cf:03:77:55:cf:23:1b:af:a4:33:33:2f:f8:e5: a9:bc:88:d2:7b:0b:30:80:88:de:57:97:90:cc:54:f2:87:81: 7e:04:38:7e:1b:c7:13:d7:a9:35:25:10:82:16:c1:d9:f0:e7: 01:a0:36:bb:3e:ff:f2:3c:43:38:59:ec:29:5f:8d:59:dd:e0: d4:3a:6e:db:eb:39:3a:74:08:ff:18:41:8f:ff:4e:a0:ab:5e: 47:a7:40:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXhFZiUrur81V2ca51ZObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZTBiZDRmZWMyOGM0MWM3ZGY4MjE0OGYwOTFlYzNmMzkx YmRiNzAwHhcNMjYwMTEyMDQwMTUzWhcNMjYwMTEzMDQwMTUzWjAzMTEwLwYDVQQD EyhiOWYyNmNjYjAzNWE3ZTg3MzZiNzBiZGMzNWIyZjBmZTc2MWIyNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+/Ug39lfhtkY1ZffAeCBuVqAwny VylJ/Sqh9CGt5Nf0+7+OASVHoq7mU2JmJQ0lq99A0Y13+iWLfRbzFEhNCubADAiT bkcVueeqQJrrgHN5xKb3BcOMVbyzLdFwyAqFZb4JRznVmSj0MYHYPWGAPzsPB+RO Zr0CH0zeFlx8wyh9yVZ5VVwH1RM+zbDJmhcGiQgZQDMNLcuQsbU/agFuc0XwsRwR EvPh1p5hyWyPSmeInQHxx8bXjJCh5/71JMz19xn/TYwjJse41wxTSztlzX+TecFw heWV8qJ/ysNzrcvW2eCzBf+RhPiIMg8XOIfxsVdd77UUg8jjnXWXYMYtywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnybMsDWn6HNrcL3DWy8P52GyctMB8GA1UdIwQY MBaAFJ7gvU/sKMQcffghSPCR7D85G9twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYt ZWRmYmFiMzM2MWJiLzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYtZWRmYmFiMzM2MWJi LzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU93JRcpc w6aE6lDCOZqf6Gr3KYklNp8Ru+lMfLEMYGxsdq/8+EHSPDFEzWu8MIdm+7fEqR69 WX8QerBK14OA0uCjxdtQPNhPGT/OJQePuhBHtdAG8ONfwwlvo5LtvIFW40+dvSIy pDXcypSfY2K2yLitYyp2nRn5l+FMsNZAAqzQCcQVSrKNNOXx1Ei7T69l9QXVMV9c 9V12BLeatvfSFlvmygqm0s8Dd1XPIxuvpDMzL/jlqbyI0nsLMICI3leXkMxU8oeB fgQ4fhvHE9epNSUQghbB2fDnAaA2uz7/8jxDOFnsKV+NWd3g1Dpu2+s5OnQI/xhB j/9OoKteR6dArQ== -----END CERTIFICATE-----Generated at Mon Jan 12 09:24:16 2026 by rpki-client