This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json) Hash identifier: jGwbsVnUeTECs1afJ780RcCb3sn99cVUGAxhrIb9l88= Subject key identifier: 54:64:59:96:77:C8:BD:A6:A7:A9:92:4E:DC:8B:CC:1B:F3:6B:10:CD Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Certificate serial: 019BA34759B503E6FE1912683754F92CD032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft Manifest number: 03D5 Signing time: Fri 09 Jan 2026 15:02:00 +0000 Manifest this update: Fri 09 Jan 2026 15:02:00 +0000 Manifest next update: Sat 10 Jan 2026 15:02:00 +0000 Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: ci2EnEKI/xDiw1vsTLCEJZaERfb7lj9wQPjtDEnoZO8=) 2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:47:59:b5:03:e6:fe:19:12:68:37:54:f9:2c:d0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Validity Not Before: Jan 9 15:02:00 2026 GMT Not After : Jan 10 15:02:00 2026 GMT Subject: CN=5464599677c8bda6a7a9924edc8bcc1bf36b10cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:07:b5:0c:a2:49:86:a3:ed:54:d1:66:28: b3:8b:a0:79:68:0a:ca:8d:26:60:fd:37:84:39:5f: ba:e8:ad:de:c4:5e:35:95:43:12:c6:48:ac:84:f8: c4:91:ac:95:b3:05:b8:79:73:50:07:18:63:13:be: 39:4f:10:d5:fd:49:9c:ae:c2:30:41:0c:3b:72:26: be:a8:fb:0c:d5:af:8e:c9:53:4f:db:c4:e4:f5:4f: 12:9a:da:73:93:8e:33:a6:0f:94:6d:16:4f:0f:4b: b0:78:50:42:b5:14:92:69:3e:1f:32:e2:16:e2:dc: 55:1d:cb:a1:73:a5:bc:8b:e1:29:10:61:44:70:a8: 02:f4:3f:ff:9c:40:8c:c3:42:e1:0e:60:26:70:b3: 51:de:21:b2:00:0d:c7:80:84:fa:54:7d:6f:74:6b: 1b:d3:ab:11:b2:bc:61:54:46:f5:3d:a4:67:b8:a3: b7:7d:c6:d7:f2:4b:60:6b:4a:b2:4f:cb:26:20:7f: 01:1b:01:16:83:b5:5f:98:fe:50:a1:0e:ae:00:fa: e2:b2:84:f7:51:a3:4c:fa:77:4a:90:60:5f:f7:a7: 3e:84:8b:b2:98:e5:f0:59:2b:ce:d2:6e:79:89:0b: d1:bc:6a:ca:b9:0e:7f:9e:5e:f3:ff:7e:94:75:62: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:64:59:96:77:C8:BD:A6:A7:A9:92:4E:DC:8B:CC:1B:F3:6B:10:CD X509v3 Authority Key Identifier: keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:32:32:00:55:14:66:9f:c9:02:46:1b:16:66:f5:b1:da:b0: 9c:fb:a5:11:f8:99:21:e4:80:90:0d:23:1b:f2:23:d4:60:0c: 12:b9:b8:b2:79:16:29:e1:9d:6a:2e:ef:f0:1c:0b:a3:6f:f7: ec:91:cf:e7:94:d0:26:ea:56:57:68:24:ef:a5:8d:94:a2:90: 93:fd:60:55:56:8a:17:81:a9:47:8a:d5:cd:76:2e:99:04:8f: 54:8c:f5:dd:67:b8:80:dc:3e:ca:fb:7c:a2:79:27:86:19:26: ff:9d:8e:96:f4:64:28:56:f6:6b:15:4f:41:f9:04:79:54:09: ee:7a:56:0f:3f:11:7f:37:f9:a4:10:c2:cc:ed:ef:bc:26:42: a1:c9:9b:4b:b6:4e:1d:a3:83:f5:24:92:12:dd:2d:b3:e6:21: c5:eb:99:4a:31:85:69:e9:fe:85:f2:31:02:63:ae:47:fd:19: 8d:1d:70:24:5c:b0:d4:69:10:f3:36:72:a5:a9:c5:9a:ab:e8: e7:47:a0:7a:95:e6:a4:24:9e:b6:91:58:31:10:75:45:75:6e: 93:65:92:0a:c6:45:59:0e:f4:06:30:bd:16:5f:b6:8e:fa:fe: 20:3e:2b:da:de:cc:66:66:47:c7:77:26:65:9a:b1:bf:d0:c5: 75:5c:9b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujR1m1A+b+GRJoN1T5LNAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZTdkODExOTU0OTkzYTk1M2I3OTQ4ZGQwNjc2NWNiYzA5 MGRjZjcwHhcNMjYwMTA5MTUwMjAwWhcNMjYwMTEwMTUwMjAwWjAzMTEwLwYDVQQD Eyg1NDY0NTk5Njc3YzhiZGE2YTdhOTkyNGVkYzhiY2MxYmYzNmIxMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLEHtQyiSYaj7VTRZiizi6B5aArK jSZg/TeEOV+66K3exF41lUMSxkishPjEkayVswW4eXNQBxhjE745TxDV/UmcrsIw QQw7cia+qPsM1a+OyVNP28Tk9U8Smtpzk44zpg+UbRZPD0uweFBCtRSSaT4fMuIW 4txVHcuhc6W8i+EpEGFEcKgC9D//nECMw0LhDmAmcLNR3iGyAA3HgIT6VH1vdGsb 06sRsrxhVEb1PaRnuKO3fcbX8ktga0qyT8smIH8BGwEWg7VfmP5QoQ6uAPrisoT3 UaNM+ndKkGBf96c+hIuymOXwWSvO0m55iQvRvGrKuQ5/nl7z/36UdWLLdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRkWZZ3yL2mp6mSTtyLzBvzaxDNMB8GA1UdIwQY MBaAFPbn2BGVSZOpU7eUjdBnZcvAkNz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEt MTA3ODkwODAxMjEzLzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEtMTA3ODkwODAxMjEz LzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazIyAFUU Zp/JAkYbFmb1sdqwnPulEfiZIeSAkA0jG/Ij1GAMErm4snkWKeGdai7v8BwLo2/3 7JHP55TQJupWV2gk76WNlKKQk/1gVVaKF4GpR4rVzXYumQSPVIz13We4gNw+yvt8 onknhhkm/52OlvRkKFb2axVPQfkEeVQJ7npWDz8Rfzf5pBDCzO3vvCZCocmbS7ZO HaOD9SSSEt0ts+YhxeuZSjGFaen+hfIxAmOuR/0ZjR1wJFyw1GkQ8zZypanFmqvo 50egepXmpCSetpFYMRB1RXVuk2WSCsZFWQ70BjC9Fl+2jvr+ID4r2t7MZmZHx3cm ZZqxv9DFdVyb3w== -----END CERTIFICATE-----Generated at Fri Jan 9 23:44:08 2026 by rpki-client