This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json) Hash identifier: FOlxia67ESdkwsvmWTRrb3dsErTFmH1P0GKw8pNE+x8= Subject key identifier: CC:CD:90:10:6C:D7:85:23:46:ED:7B:68:A4:5A:45:BB:7B:01:C3:62 Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0 Certificate serial: 019BB35E513164007A04E1428F717F69E4C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 18:01:01 +0000 Manifest this update: Mon 12 Jan 2026 18:01:01 +0000 Manifest next update: Tue 13 Jan 2026 18:01:01 +0000 Files and hashes: 1: _V7Cb-NwO8anySMSbrwiBhmYglM.roa (hash: Ahe9bG/97BT0KbQWugP0o5eBZCTOE3ZbuxcW7SXy2go=) 2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: 9ojwVVV/TSQQ6HLDrUbsrse8KzBjGgBfdGHsI0zY4OM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5e:51:31:64:00:7a:04:e1:42:8f:71:7f:69:e4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0 Validity Not Before: Jan 12 18:01:01 2026 GMT Not After : Jan 13 18:01:01 2026 GMT Subject: CN=cccd90106cd7852346ed7b68a45a45bb7b01c362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:27:e6:b9:61:b4:e4:d3:f9:d6:90:ce:99:6e: e9:1b:48:c9:47:4c:2b:02:6a:75:a7:90:32:33:41: 40:95:f5:0a:e1:e4:0f:02:23:24:4a:c3:4e:d4:d7: 35:8d:d0:74:df:1a:8e:75:be:cf:a4:02:fa:f7:89: be:7d:98:53:ac:31:76:9b:6c:8a:dc:5a:6b:5a:52: 6d:62:4b:02:de:12:cc:a7:ed:0c:0c:03:e9:c9:1d: 14:cb:55:61:4b:a7:fe:80:0a:80:f2:40:e0:68:05: f5:2a:ba:20:89:f2:3a:18:6a:be:65:5b:6a:ae:78: 5b:7b:1c:f1:28:fb:ec:c5:c9:be:63:56:45:6e:91: 17:71:71:2f:41:35:4e:02:83:3b:f3:66:09:96:0f: 1c:52:fc:5b:43:24:fe:03:5b:73:72:12:7b:56:bb: 38:20:a4:48:99:0e:38:9a:72:83:16:7a:6b:89:a4: 39:82:55:42:a8:8c:be:2b:fc:7b:de:b6:6e:6e:e4: a9:ec:d9:00:35:85:a6:e3:ec:5e:f7:4d:79:dc:a0: 38:f4:7a:90:85:9d:25:9e:cd:4e:47:44:dd:5a:a5: 6e:0d:92:54:eb:d7:a0:06:8a:6c:56:3c:61:ef:8c: ec:b9:5d:f0:43:64:9c:5d:17:f5:3a:5e:83:72:b4: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:90:10:6C:D7:85:23:46:ED:7B:68:A4:5A:45:BB:7B:01:C3:62 X509v3 Authority Key Identifier: keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:04:4a:ef:67:f4:24:3b:57:23:6e:f8:8f:fe:83:2e:d5:70: bc:65:f6:bf:e4:52:62:43:c5:31:3d:47:71:95:3a:a9:bc:ba: 80:29:0f:af:86:cc:94:c5:14:49:8b:4e:ab:1d:77:60:66:51: f4:35:24:3f:ab:22:e0:59:6c:01:53:38:00:45:f2:4b:31:9e: 2e:1b:91:3f:63:fa:55:6a:87:4c:02:79:a9:37:60:20:4b:89: 36:94:51:53:65:28:80:7f:61:98:42:bf:54:6d:b5:7c:6f:ef: 69:21:8e:8e:e6:94:fc:8f:f2:1c:a8:13:92:f9:42:e0:c2:72: fd:83:a4:69:df:3f:6b:48:7b:86:91:f9:db:ce:73:ca:28:8d: 4f:45:c3:7e:9e:27:f1:55:9c:b2:4b:67:9b:d8:b5:09:e0:4a: 06:31:b8:35:ce:74:b4:ff:1e:6d:d2:2f:c5:cf:e2:a8:ab:49: d7:7d:c1:9c:a9:53:67:7c:1e:84:af:fe:21:dd:ab:d9:a9:5d: 14:d6:81:a0:3e:ea:4d:4d:86:c0:3d:b3:98:c5:46:92:95:5a: 71:e3:b3:d0:32:75:82:84:c5:d7:b3:ff:60:db:f8:54:5f:b3: ed:ab:7c:d8:05:42:29:00:b1:9b:99:56:c4:fc:23:df:28:8f: 69:2c:12:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXlExZAB6BOFCj3F/aeTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOGY0YjAyOWUyOWVlZGYyN2Q0NWNkNGQzOTAxMDgzMjZi ZTI2ZjAwHhcNMjYwMTEyMTgwMTAxWhcNMjYwMTEzMTgwMTAxWjAzMTEwLwYDVQQD EyhjY2NkOTAxMDZjZDc4NTIzNDZlZDdiNjhhNDVhNDViYjdiMDFjMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SfmuWG05NP51pDOmW7pG0jJR0wr Amp1p5AyM0FAlfUK4eQPAiMkSsNO1Nc1jdB03xqOdb7PpAL694m+fZhTrDF2m2yK 3FprWlJtYksC3hLMp+0MDAPpyR0Uy1VhS6f+gAqA8kDgaAX1KrogifI6GGq+ZVtq rnhbexzxKPvsxcm+Y1ZFbpEXcXEvQTVOAoM782YJlg8cUvxbQyT+A1tzchJ7Vrs4 IKRImQ44mnKDFnpriaQ5glVCqIy+K/x73rZubuSp7NkANYWm4+xe90153KA49HqQ hZ0lns1OR0TdWqVuDZJU69egBopsVjxh74zsuV3wQ2ScXRf1Ol6DcrSRaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzNkBBs14UjRu17aKRaRbt7AcNiMB8GA1UdIwQY MBaAFJqPSwKeKe7fJ9Rc1NOQEIMmvibwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMt MTM5NTI2NDNmMTE0LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMtMTM5NTI2NDNmMTE0 LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgRK72f0 JDtXI274j/6DLtVwvGX2v+RSYkPFMT1HcZU6qby6gCkPr4bMlMUUSYtOqx13YGZR 9DUkP6si4FlsAVM4AEXySzGeLhuRP2P6VWqHTAJ5qTdgIEuJNpRRU2UogH9hmEK/ VG21fG/vaSGOjuaU/I/yHKgTkvlC4MJy/YOkad8/a0h7hpH5285zyiiNT0XDfp4n 8VWcsktnm9i1CeBKBjG4Nc50tP8ebdIvxc/iqKtJ133BnKlTZ3wehK/+Id2r2ald FNaBoD7qTU2GwD2zmMVGkpVaceOz0DJ1goTF17P/YNv4VF+z7at82AVCKQCxm5lW xPwj3yiPaSwS2Q== -----END CERTIFICATE-----Generated at Tue Jan 13 02:56:11 2026 by rpki-client