This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json) Hash identifier: WG/lTOEkylq15lwd/UXM9rRbmsjHcrhmva+e0faOEvQ= Subject key identifier: 20:8C:79:BD:F9:05:5D:82:7B:0E:46:D8:4D:18:27:E3:07:1B:96:6B Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Certificate serial: 019B9A0D185DAEB5D4B032713851630EB2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft Manifest number: 17B8 Signing time: Wed 07 Jan 2026 20:01:47 +0000 Manifest this update: Wed 07 Jan 2026 20:01:47 +0000 Manifest next update: Thu 08 Jan 2026 20:01:47 +0000 Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: L78effsBggBVN3FH5e3XOdchY9N2UYmYgqyBDiQ3qY0=) 2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:0d:18:5d:ae:b5:d4:b0:32:71:38:51:63:0e:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Validity Not Before: Jan 7 20:01:47 2026 GMT Not After : Jan 8 20:01:47 2026 GMT Subject: CN=208c79bdf9055d827b0e46d84d1827e3071b966b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:bc:6d:5a:8e:2a:68:75:d2:17:58:cb:85: 64:fc:86:7d:36:fc:df:51:58:74:64:7a:0b:69:b4: c8:03:6c:0d:4a:70:15:31:1e:cb:ba:f0:79:18:c1: af:d8:e8:c4:b9:6f:14:79:b2:3d:50:54:bb:fb:cd: a0:50:68:fa:87:4b:1e:12:3f:d6:56:9a:b9:7a:8e: 5d:8c:a4:18:1d:f9:77:26:45:85:ba:76:96:7f:82: 88:c4:b5:49:44:80:c3:ac:a3:11:da:36:7c:f8:e3: ef:db:bc:63:a7:4a:51:40:52:68:8d:bf:17:70:98: c2:96:84:22:02:af:2d:89:c2:16:fd:b1:40:7c:c1: 23:d2:96:6f:96:98:4d:26:c1:cd:70:ae:22:cb:4c: 34:ea:1a:a0:91:8d:2f:a5:fa:82:59:92:f3:19:d1: bf:07:6a:06:fb:7f:a2:96:0e:f1:51:8d:8a:81:79: 2e:ac:d3:71:19:83:90:00:36:6f:b3:97:1e:c0:3c: 0c:35:7c:63:e5:d1:9a:a9:05:a3:ed:4a:4a:87:4b: f7:f0:34:52:0d:c4:a5:d6:3d:f3:12:eb:d4:12:5b: cc:65:86:c0:16:af:3f:9b:4e:6a:24:78:78:aa:e8: ee:f2:b2:ca:2d:4b:b1:8a:a1:c7:40:70:1a:86:c8: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:79:BD:F9:05:5D:82:7B:0E:46:D8:4D:18:27:E3:07:1B:96:6B X509v3 Authority Key Identifier: keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:01:f3:1c:38:48:29:51:ee:7e:12:8d:d1:c9:7f:56:19:8c: 93:1b:dd:67:27:17:83:a5:ca:85:e9:e5:67:77:66:1c:c6:79: b3:f8:6e:25:83:04:49:c2:76:cf:c1:47:67:25:b7:8f:1d:24: 55:a4:c0:e4:07:2b:4d:fc:81:5b:cf:71:ba:40:6a:93:e1:20: 4e:af:5b:4f:16:c7:e9:38:76:cc:01:a4:35:ba:e9:6e:4e:51: 7e:46:36:4b:8f:75:3f:62:ef:25:d3:d2:ba:28:4b:ce:ce:dc: 08:e0:2c:ba:41:8d:be:55:2c:3c:30:0c:18:e7:7a:e4:c3:5e: 25:19:c8:69:80:1a:7d:92:38:6c:e5:8d:49:76:51:01:11:10: 49:fd:f3:2f:0c:10:f4:f8:66:4d:41:6e:ce:4c:dc:cf:5c:da: f7:13:32:03:47:fe:fb:ad:e5:7b:34:e0:97:88:b0:83:b8:91: 8e:27:96:46:23:84:bd:69:a8:ff:56:35:a2:3f:84:bc:27:8e: 2f:72:82:be:52:a2:6c:f1:d7:a4:64:f6:76:dd:36:93:c2:4d: cc:00:8a:3e:bc:f4:2c:8b:53:dd:a6:22:72:33:cd:e6:23:f2: 94:34:06:2e:98:26:10:b1:51:73:4d:09:93:ad:c8:9b:c1:d3: 73:1e:92:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuaDRhdrrXUsDJxOFFjDrKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh NzI4MjgwHhcNMjYwMTA3MjAwMTQ3WhcNMjYwMTA4MjAwMTQ3WjAzMTEwLwYDVQQD EygyMDhjNzliZGY5MDU1ZDgyN2IwZTQ2ZDg0ZDE4MjdlMzA3MWI5NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qq8bVqOKmh10hdYy4Vk/IZ9Nvzf UVh0ZHoLabTIA2wNSnAVMR7LuvB5GMGv2OjEuW8UebI9UFS7+82gUGj6h0seEj/W Vpq5eo5djKQYHfl3JkWFunaWf4KIxLVJRIDDrKMR2jZ8+OPv27xjp0pRQFJojb8X cJjCloQiAq8ticIW/bFAfMEj0pZvlphNJsHNcK4iy0w06hqgkY0vpfqCWZLzGdG/ B2oG+3+ilg7xUY2KgXkurNNxGYOQADZvs5cewDwMNXxj5dGaqQWj7UpKh0v38DRS DcSl1j3zEuvUElvMZYbAFq8/m05qJHh4quju8rLKLUuxiqHHQHAahsjfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCMeb35BV2Cew5G2E0YJ+MHG5ZrMB8GA1UdIwQY MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAHzHDhI KVHufhKN0cl/VhmMkxvdZycXg6XKhenlZ3dmHMZ5s/huJYMEScJ2z8FHZyW3jx0k VaTA5AcrTfyBW89xukBqk+EgTq9bTxbH6Th2zAGkNbrpbk5RfkY2S491P2LvJdPS uihLzs7cCOAsukGNvlUsPDAMGOd65MNeJRnIaYAafZI4bOWNSXZRAREQSf3zLwwQ 9PhmTUFuzkzcz1za9xMyA0f++63lezTgl4iwg7iRjieWRiOEvWmo/1Y1oj+EvCeO L3KCvlKibPHXpGT2dt02k8JNzACKPrz0LItT3aYicjPN5iPylDQGLpgmELFRc00J k63Im8HTcx6SQQ== -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:02 2026 by rpki-client