This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json) Hash identifier: 3cig6rCoghFbn/1s6chljZ7oaPOyifOC+JcEUaMRfh4= Subject key identifier: FE:09:02:52:23:6A:B0:84:8B:8D:78:C2:26:F8:40:61:A7:53:6F:5D Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40 Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640 Certificate serial: 019BAEDCB787BF43ECE4B9229A4D2F6D401C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft Manifest number: 14FF Signing time: Sun 11 Jan 2026 21:00:59 +0000 Manifest this update: Sun 11 Jan 2026 21:00:59 +0000 Manifest next update: Mon 12 Jan 2026 21:00:59 +0000 Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: EP7RZnAVq0npu1E/iZSkg+gk3AIOTTPFpahq5iIT0rA=) 2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:b7:87:bf:43:ec:e4:b9:22:9a:4d:2f:6d:40:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f501b9e20616d686b405da906afa597635063640 Validity Not Before: Jan 11 21:00:59 2026 GMT Not After : Jan 12 21:00:59 2026 GMT Subject: CN=fe090252236ab0848b8d78c226f84061a7536f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:af:1b:d8:83:4c:ab:03:63:07:c1:32:62: d7:f3:35:ce:0c:1d:88:a6:a3:37:77:fa:2b:c8:8f: 71:ce:da:bd:b1:25:74:d6:21:fb:6c:7b:d5:a5:9c: 4c:b9:c7:09:cb:66:10:16:bc:28:c1:30:03:19:56: 2f:80:b9:f8:dc:6c:d2:fb:d6:16:5e:5a:7c:f3:db: 6c:64:94:2c:d2:bf:96:be:b2:9b:04:82:cd:21:47: 18:5b:c8:e6:a5:89:90:b2:0c:40:70:3f:ea:88:37: ef:1b:f8:47:b0:9e:4e:66:5a:30:1c:75:3b:0d:df: db:35:6f:0f:a4:92:3b:f9:db:c9:cb:20:16:84:28: 01:95:ff:0b:74:52:c8:f2:d7:7f:f0:4c:4a:f8:0c: a9:c8:94:2c:20:e5:27:ab:25:cf:a2:e0:a6:1f:dd: 01:ff:8b:47:e9:6e:aa:74:f7:20:64:ce:64:05:b2: 3e:f6:bc:b9:ae:4f:73:3d:3c:04:1c:72:65:f3:34: b2:0c:d8:35:9f:40:2f:cb:e5:c1:2b:b9:53:48:53: 16:9b:ca:7a:cf:5c:ed:5f:49:8b:b2:0e:87:12:36: 8a:32:e7:2d:e7:43:e0:9d:ff:26:ab:82:70:67:a2: 91:cd:d0:da:53:d1:56:f8:e5:f5:2f:e0:2e:09:df: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:09:02:52:23:6A:B0:84:8B:8D:78:C2:26:F8:40:61:A7:53:6F:5D X509v3 Authority Key Identifier: keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:27:92:60:f8:32:f9:d8:11:25:c5:49:81:ec:9a:a7:f6: bb:8e:66:bd:b7:b8:4b:37:5e:72:47:54:47:3d:28:36:6d:82: 5f:55:b2:a7:b5:f6:61:8f:38:91:e0:51:e1:76:8d:c9:58:82: f8:43:60:a6:42:a9:35:60:80:70:1b:06:fc:cc:cb:9f:9e:72: d7:ee:06:31:b7:27:42:27:2a:3d:14:cd:82:5a:15:22:d4:54: 5a:f0:9f:f0:75:ee:c9:f8:41:b7:84:a4:2c:2a:4d:9e:c6:de: 41:08:3c:e2:e4:c4:90:4d:09:0e:61:d8:02:b2:b7:4a:46:e6: 40:f3:55:9d:9c:70:4f:42:83:e9:52:b6:02:3f:c2:99:fe:21: 91:69:48:e7:f4:e6:cc:8b:59:67:fa:fc:43:21:85:f5:47:0f: 6e:ae:d3:38:d2:65:7c:88:22:36:76:eb:0c:c9:03:84:09:b2: bc:71:30:c1:9d:69:1f:8e:58:11:3b:d3:1f:91:02:5f:31:21: 2c:0d:1f:3e:6d:89:a9:bf:88:50:bf:d2:1e:0d:cf:65:6e:ea: a9:27:76:51:86:1d:27:ea:d0:eb:d5:3f:23:69:99:4d:1d:3d: 18:6d:ad:55:cb:f5:e7:ce:60:50:d3:4f:72:24:4b:84:52:35: 3e:d5:8c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3LeHv0Ps5Lkimk0vbUAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw NjM2NDAwHhcNMjYwMTExMjEwMDU5WhcNMjYwMTEyMjEwMDU5WjAzMTEwLwYDVQQD EyhmZTA5MDI1MjIzNmFiMDg0OGI4ZDc4YzIyNmY4NDA2MWE3NTM2ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1evG9iDTKsDYwfBMmLX8zXODB2I pqM3d/oryI9xztq9sSV01iH7bHvVpZxMuccJy2YQFrwowTADGVYvgLn43GzS+9YW Xlp889tsZJQs0r+WvrKbBILNIUcYW8jmpYmQsgxAcD/qiDfvG/hHsJ5OZlowHHU7 Dd/bNW8PpJI7+dvJyyAWhCgBlf8LdFLI8td/8ExK+AypyJQsIOUnqyXPouCmH90B /4tH6W6qdPcgZM5kBbI+9ry5rk9zPTwEHHJl8zSyDNg1n0Avy+XBK7lTSFMWm8p6 z1ztX0mLsg6HEjaKMuct50Pgnf8mq4JwZ6KRzdDaU9FW+OX1L+AuCd+UfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4JAlIjarCEi414wib4QGGnU29dMB8GA1UdIwQY MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5 LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw0nkmD4 MvnYESXFSYHsmqf2u45mvbe4SzdeckdURz0oNm2CX1Wyp7X2YY84keBR4XaNyViC +ENgpkKpNWCAcBsG/MzLn55y1+4GMbcnQicqPRTNgloVItRUWvCf8HXuyfhBt4Sk LCpNnsbeQQg84uTEkE0JDmHYArK3SkbmQPNVnZxwT0KD6VK2Aj/Cmf4hkWlI5/Tm zItZZ/r8QyGF9UcPbq7TONJlfIgiNnbrDMkDhAmyvHEwwZ1pH45YETvTH5ECXzEh LA0fPm2Jqb+IUL/SHg3PZW7qqSd2UYYdJ+rQ69U/I2mZTR09GG2tVcv1585gUNNP ciRLhFI1PtWMAw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:28:13 2026 by rpki-client