This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json) Hash identifier: G0DbJQF1Y65renOr1aOa/tZK5MeuTRhCjSRF2WDImSk= Subject key identifier: 76:27:25:CA:62:AC:C9:30:45:9D:05:4B:EE:B4:AA:30:4C:13:07:52 Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Certificate serial: 019BAD5D4AE018216BD3F899C51F02AFD82C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft Manifest number: 17C2 Signing time: Sun 11 Jan 2026 14:02:10 +0000 Manifest this update: Sun 11 Jan 2026 14:02:10 +0000 Manifest next update: Mon 12 Jan 2026 14:02:10 +0000 Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: WaAno5zp+QQE0X+FJNCluULNsZxNnX96qHM+Bx9kdlk=) 2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5d:4a:e0:18:21:6b:d3:f8:99:c5:1f:02:af:d8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Validity Not Before: Jan 11 14:02:10 2026 GMT Not After : Jan 12 14:02:10 2026 GMT Subject: CN=762725ca62acc930459d054beeb4aa304c130752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:7d:50:d6:8a:a3:3e:bf:50:65:4c:2d:7f: 3b:ff:aa:a4:0d:ef:06:6d:9f:79:cf:56:74:78:b8: fb:6e:42:39:21:a3:1e:33:71:be:7a:ea:e1:cf:e6: 1b:71:27:c1:18:d2:8b:16:9b:a5:ff:0a:1d:6b:06: 02:ec:f2:9b:fb:c0:61:98:29:86:e4:74:c8:6d:17: a6:92:a6:99:d6:0a:31:88:ab:27:38:44:bd:fc:37: 76:55:a7:df:5d:27:81:d9:83:d1:c0:9d:1f:85:77: b9:20:10:33:32:30:dc:d0:65:21:f7:3d:60:d9:f9: 48:47:56:59:c8:78:21:8b:51:b1:cc:ea:52:08:95: d3:ff:24:06:fa:34:36:17:bb:9a:e3:36:9e:f6:b4: a4:9b:a1:dd:35:f9:3e:dd:fa:b9:82:8c:39:22:2b: 46:39:e1:2e:ab:b0:d4:ba:c0:5a:bd:78:db:c3:c6: 83:0d:cb:9a:05:d3:02:a9:c6:43:e5:73:53:ef:ab: 6b:4b:b3:6f:42:4b:ef:38:55:2c:2b:fe:95:ec:0c: 53:eb:33:d0:25:8c:3b:a1:3b:df:a3:dd:04:d2:90: 48:6c:c9:0e:e4:3c:87:e9:67:cd:e6:d5:66:8a:52: ad:8c:af:bc:16:c5:1e:3a:f0:23:54:65:71:ff:24: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:25:CA:62:AC:C9:30:45:9D:05:4B:EE:B4:AA:30:4C:13:07:52 X509v3 Authority Key Identifier: keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:31:10:1e:0d:4b:86:1b:23:49:cb:be:0e:02:47:6a:b4: 78:c0:49:4e:39:20:78:de:e2:c4:e1:6b:3f:fc:1e:86:c2:86: 76:ba:8f:8f:84:65:46:19:b2:5a:48:e8:ec:aa:cb:d0:16:90: 17:d4:c3:cc:90:c1:d8:83:e7:1c:29:0b:18:98:07:6e:68:b9: ab:3a:00:a9:92:a4:03:29:3e:c1:d3:90:aa:13:b6:47:1c:20: 03:30:cd:c5:9c:1e:16:35:94:34:62:59:49:a0:a4:6c:cf:80: 17:98:3f:19:64:50:82:73:d0:23:79:15:75:c6:39:0c:35:d4: 0f:d3:a5:2c:7f:e3:ff:0f:2d:4f:c3:d2:85:e3:a6:74:a0:5e: 00:cd:a4:dd:51:4d:a5:f2:31:69:12:03:0c:78:29:7a:67:db: 15:de:a4:f9:b1:10:66:4d:a2:24:53:56:44:82:b8:c4:73:a0: 0b:a8:47:d9:ec:81:19:c6:22:23:f4:26:44:5f:5e:e4:e8:9e: 30:19:47:d9:d3:42:ed:ef:7d:44:a6:4d:6f:15:78:d9:2e:c3: 03:95:48:76:0e:1a:c1:31:67:7f:0a:03:67:6d:ab:fa:13:f6: 26:49:db:41:a7:ff:24:30:2e:05:83:79:19:09:e0:0e:3e:8e: ae:04:a8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXUrgGCFr0/iZxR8Cr9gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi ODJhYjYwHhcNMjYwMTExMTQwMjEwWhcNMjYwMTEyMTQwMjEwWjAzMTEwLwYDVQQD Eyg3NjI3MjVjYTYyYWNjOTMwNDU5ZDA1NGJlZWI0YWEzMDRjMTMwNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy859UNaKoz6/UGVMLX87/6qkDe8G bZ95z1Z0eLj7bkI5IaMeM3G+eurhz+YbcSfBGNKLFpul/wodawYC7PKb+8BhmCmG 5HTIbRemkqaZ1goxiKsnOES9/Dd2VaffXSeB2YPRwJ0fhXe5IBAzMjDc0GUh9z1g 2flIR1ZZyHghi1GxzOpSCJXT/yQG+jQ2F7ua4zae9rSkm6HdNfk+3fq5gow5IitG OeEuq7DUusBavXjbw8aDDcuaBdMCqcZD5XNT76trS7NvQkvvOFUsK/6V7AxT6zPQ JYw7oTvfo90E0pBIbMkO5DyH6WfN5tVmilKtjK+8FsUeOvAjVGVx/yQwLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYnJcpirMkwRZ0FS+60qjBMEwdSMB8GA1UdIwQY MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0 LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI4xEB4N S4YbI0nLvg4CR2q0eMBJTjkgeN7ixOFrP/wehsKGdrqPj4RlRhmyWkjo7KrL0BaQ F9TDzJDB2IPnHCkLGJgHbmi5qzoAqZKkAyk+wdOQqhO2RxwgAzDNxZweFjWUNGJZ SaCkbM+AF5g/GWRQgnPQI3kVdcY5DDXUD9OlLH/j/w8tT8PSheOmdKBeAM2k3VFN pfIxaRIDDHgpemfbFd6k+bEQZk2iJFNWRIK4xHOgC6hH2eyBGcYiI/QmRF9e5Oie MBlH2dNC7e99RKZNbxV42S7DA5VIdg4awTFnfwoDZ22r+hP2JknbQaf/JDAuBYN5 GQngDj6OrgSojA== -----END CERTIFICATE-----Generated at Sun Jan 11 20:06:49 2026 by rpki-client