This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json) Hash identifier: Qsd2gkk/dP42aENMdxbRk9wYRQRkjvh7sDl05Q8UA7Y= Subject key identifier: F2:E8:47:AD:7D:70:36:3B:74:0F:89:DC:50:8F:43:1C:5E:E4:92:D3 Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed Certificate serial: 019BB139CA0F80CCAD6852FB62866003A1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft Manifest number: 17C6 Signing time: Mon 12 Jan 2026 08:01:53 +0000 Manifest this update: Mon 12 Jan 2026 08:01:53 +0000 Manifest next update: Tue 13 Jan 2026 08:01:53 +0000 Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: jxzzPk6rJkpBm3M01dnLMrrpz2FzwDTb3IjStb7tVPo=) 2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:ca:0f:80:cc:ad:68:52:fb:62:86:60:03:a1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed Validity Not Before: Jan 12 08:01:53 2026 GMT Not After : Jan 13 08:01:53 2026 GMT Subject: CN=f2e847ad7d70363b740f89dc508f431c5ee492d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:82:57:7d:95:6e:2b:2c:b2:fd:88:36:ea: 4c:33:7f:c2:81:9b:92:48:06:52:b5:43:c4:32:84: 79:8b:ea:f8:f7:3a:f0:bf:1c:a8:44:e4:b7:db:17: f5:27:41:c6:dd:83:5f:b5:e4:de:0d:f5:df:c5:b2: 52:a0:6c:86:5c:dd:75:b2:bf:5e:33:b2:32:2f:1e: 3b:21:5c:92:a8:ec:5c:9d:6a:47:a2:b3:95:d8:4d: c9:14:3f:a4:79:07:c0:ff:fb:fd:f2:b2:fa:dc:de: 1f:10:83:84:c8:93:6a:5c:59:59:b9:c7:09:ad:e3: ed:59:bd:19:11:50:72:0b:80:44:c3:f5:51:c0:29: e7:d4:e8:ce:85:3f:9f:b8:fb:99:48:84:6f:03:02: 3d:b3:18:d2:79:b3:c9:0f:a0:af:de:7c:79:0c:6e: 9d:cd:fe:69:20:a1:c6:ac:50:92:a1:d6:7a:c9:89: d0:c1:59:44:d4:7b:67:5c:2a:25:c1:06:a4:03:b1: 52:2e:84:16:ae:2c:0a:e2:d6:f9:f6:33:b5:d4:9c: 4f:8b:cf:9f:4a:82:da:a6:80:54:c5:2d:11:ba:9d: b4:14:fb:01:28:61:69:5f:46:a3:8e:8b:aa:8b:9f: 2b:3c:08:77:6d:08:e6:19:96:c4:f9:aa:91:65:38: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E8:47:AD:7D:70:36:3B:74:0F:89:DC:50:8F:43:1C:5E:E4:92:D3 X509v3 Authority Key Identifier: keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ae:32:7e:51:06:1c:bb:3f:cb:12:d1:24:f5:83:65:f9:53: 0f:3f:a9:0b:b0:77:1f:f8:03:60:d7:59:dc:6e:ee:02:aa:dd: 88:d7:71:cd:dc:93:12:44:f2:74:d6:86:2e:b4:c0:b3:79:94: a9:c9:1e:fe:b7:1b:e2:ac:5f:0d:63:d5:44:21:cd:54:32:65: 35:fb:b8:db:a9:dd:4d:69:e8:9e:ed:f2:b5:66:bf:fc:c0:88: 0d:78:59:06:9f:57:79:7d:69:07:c4:c2:1b:61:a2:16:d9:f5: 7e:8c:5a:7a:24:7e:69:17:60:f4:2a:56:0f:23:5b:13:78:c6: 97:16:85:98:4f:fc:a7:ef:7e:85:0b:97:5e:0e:98:e4:72:4d: 3b:df:42:20:46:0c:d8:15:7e:07:17:ae:47:64:a3:8d:f7:9b: dd:21:59:e5:a6:27:51:54:df:50:78:46:9c:b1:10:e4:5c:4d: c4:d5:66:7a:9f:31:e7:c0:c0:23:14:23:30:09:2a:b3:fd:12: a2:55:cc:d1:2b:4b:31:1d:b0:5e:e1:8e:19:8a:ad:11:60:37: 7f:0d:53:bf:71:77:5b:22:36:6e:d1:1f:37:74:48:98:dc:99: 67:a2:a9:67:14:5c:e2:00:b4:e1:b0:48:12:62:a6:de:84:2b: 8c:15:22:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOcoPgMytaFL7YoZgA6H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj ZDVmZWQwHhcNMjYwMTEyMDgwMTUzWhcNMjYwMTEzMDgwMTUzWjAzMTEwLwYDVQQD EyhmMmU4NDdhZDdkNzAzNjNiNzQwZjg5ZGM1MDhmNDMxYzVlZTQ5MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeOCV32Vbisssv2INupMM3/CgZuS SAZStUPEMoR5i+r49zrwvxyoROS32xf1J0HG3YNfteTeDfXfxbJSoGyGXN11sr9e M7IyLx47IVySqOxcnWpHorOV2E3JFD+keQfA//v98rL63N4fEIOEyJNqXFlZuccJ rePtWb0ZEVByC4BEw/VRwCnn1OjOhT+fuPuZSIRvAwI9sxjSebPJD6Cv3nx5DG6d zf5pIKHGrFCSodZ6yYnQwVlE1HtnXColwQakA7FSLoQWriwK4tb59jO11JxPi8+f SoLapoBUxS0Rup20FPsBKGFpX0ajjouqi58rPAh3bQjmGZbE+aqRZTjvcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLoR619cDY7dA+J3FCPQxxe5JLTMB8GA1UdIwQY MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2 LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq4yflEG HLs/yxLRJPWDZflTDz+pC7B3H/gDYNdZ3G7uAqrdiNdxzdyTEkTydNaGLrTAs3mU qcke/rcb4qxfDWPVRCHNVDJlNfu426ndTWnonu3ytWa//MCIDXhZBp9XeX1pB8TC G2GiFtn1foxaeiR+aRdg9CpWDyNbE3jGlxaFmE/8p+9+hQuXXg6Y5HJNO99CIEYM 2BV+BxeuR2Sjjfeb3SFZ5aYnUVTfUHhGnLEQ5FxNxNVmep8x58DAIxQjMAkqs/0S olXM0StLMR2wXuGOGYqtEWA3fw1Tv3F3WyI2btEfN3RImNyZZ6KpZxRc4gC04bBI EmKm3oQrjBUiQQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:03:36 2026 by rpki-client