This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json) Hash identifier: 4ia9AiVz3zjJiuXjH94ong0BuBDYAjsdSJqnrckGplg= Subject key identifier: F2:78:8B:7A:E0:1C:26:29:F8:69:64:12:88:D2:38:0C:BA:96:EE:F0 Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed Certificate serial: 019BAE387CC77BCB10496590B3FB7165F8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft Manifest number: 04CE Signing time: Sun 11 Jan 2026 18:01:35 +0000 Manifest this update: Sun 11 Jan 2026 18:01:35 +0000 Manifest next update: Mon 12 Jan 2026 18:01:35 +0000 Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: EbU4wI++epTKiJIzU1UOy8bBrfR7yqh3woF9nAgayHc=) 2: kJOFq-dKECTWElamkBGQy_qa-rE.roa (hash: DICUySlyGKgPQsuB8/dL4T8FFlEahDoLv2rYKXRYyNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:7c:c7:7b:cb:10:49:65:90:b3:fb:71:65:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed Validity Not Before: Jan 11 18:01:35 2026 GMT Not After : Jan 12 18:01:35 2026 GMT Subject: CN=f2788b7ae01c2629f869641288d2380cba96eef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:4e:62:71:0f:33:0b:f7:65:0d:bd:28:93: 9e:01:85:92:96:26:60:ea:cd:a8:90:fe:45:50:cc: 87:80:68:fd:41:a8:28:ea:f6:92:0a:99:05:09:bf: 79:5e:6c:e0:6d:1e:ba:a2:e7:47:e0:04:79:d2:b2: 47:12:b1:02:01:66:b0:22:3c:69:77:6c:2b:90:b5: bb:c3:ff:e5:b1:4c:68:de:44:73:ab:9e:95:56:8f: 73:b8:25:48:1f:4e:fd:61:21:86:91:83:b5:5d:28: 04:63:f9:df:09:09:3f:5f:3d:fc:45:b5:c2:29:9f: ab:8d:c5:db:d6:c7:1b:7e:c2:b7:c7:a5:4b:43:94: 69:84:b9:21:cc:0d:9a:a6:22:cf:ef:84:b3:64:cb: 81:d3:90:2b:cc:b5:b9:1c:f4:9e:4f:19:00:69:67: 53:07:4a:f9:c3:c8:66:35:fb:e3:73:6b:4a:de:77: 75:ea:94:fa:ff:3e:b9:b9:2f:46:db:72:25:0c:2b: 7c:ce:e1:21:5f:34:41:9b:03:60:a7:f7:ed:30:36: 2b:79:86:7e:c5:b2:92:16:c1:a2:75:9d:4d:97:10: 6d:8d:fb:b2:22:cc:97:9b:59:d6:4a:95:7f:c2:c9: c2:42:5a:6e:e1:25:1e:3a:63:d8:4e:da:ce:18:b2: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:8B:7A:E0:1C:26:29:F8:69:64:12:88:D2:38:0C:BA:96:EE:F0 X509v3 Authority Key Identifier: keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a2:2d:69:d4:f5:7c:c8:8c:d0:03:72:8c:d5:5e:00:10:b3: 1b:cb:90:72:a9:5f:74:0a:75:3a:29:03:ac:0e:61:b4:66:cd: 60:79:73:3c:d6:28:5c:a0:1e:25:bb:6f:1f:43:32:aa:3a:59: 8e:88:2b:69:83:9b:a1:20:f9:42:16:17:4f:b2:c3:86:df:79: 8f:54:57:ee:bb:85:83:c0:8f:0e:c1:b0:b0:ba:d9:a9:fc:b2: fe:c8:2e:ea:c6:7d:6b:a4:d9:e5:5c:98:99:d7:01:57:ba:5b: 6b:0b:bd:cf:6c:d5:e5:ef:3b:ec:ac:44:4f:2f:31:77:8e:19: 01:5e:51:6a:a8:56:48:3f:96:95:70:19:f9:48:ff:ca:b0:8c: 38:90:c6:2d:87:fa:4f:e0:99:c4:11:7f:a7:cb:79:05:0b:c6: dd:91:38:27:dd:42:80:0f:5b:5c:55:0f:16:e9:dc:35:51:ab: 1c:1b:4b:2a:9f:5f:0b:f1:2b:eb:7b:a2:6c:9b:45:45:38:03: 9c:83:6f:42:3b:c4:d1:58:82:41:2f:07:95:07:51:77:a2:2c: 94:47:a6:41:1c:12:af:5a:1d:9e:73:80:f9:0d:16:73:b3:d8: 4c:7f:b3:93:3d:ad:c7:97:cb:7f:9e:72:92:3c:5f:4a:f2:e1: 8b:4e:14:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOHzHe8sQSWWQs/txZfinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0 MDYyZWQwHhcNMjYwMTExMTgwMTM1WhcNMjYwMTEyMTgwMTM1WjAzMTEwLwYDVQQD EyhmMjc4OGI3YWUwMWMyNjI5Zjg2OTY0MTI4OGQyMzgwY2JhOTZlZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsFOYnEPMwv3ZQ29KJOeAYWSliZg 6s2okP5FUMyHgGj9Qago6vaSCpkFCb95XmzgbR66oudH4AR50rJHErECAWawIjxp d2wrkLW7w//lsUxo3kRzq56VVo9zuCVIH079YSGGkYO1XSgEY/nfCQk/Xz38RbXC KZ+rjcXb1scbfsK3x6VLQ5RphLkhzA2apiLP74SzZMuB05ArzLW5HPSeTxkAaWdT B0r5w8hmNfvjc2tK3nd16pT6/z65uS9G23IlDCt8zuEhXzRBmwNgp/ftMDYreYZ+ xbKSFsGidZ1NlxBtjfuyIsyXm1nWSpV/wsnCQlpu4SUeOmPYTtrOGLJqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJ4i3rgHCYp+GlkEojSOAy6lu7wMB8GA1UdIwQY MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3 LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaItadT1 fMiM0ANyjNVeABCzG8uQcqlfdAp1OikDrA5htGbNYHlzPNYoXKAeJbtvH0MyqjpZ jograYOboSD5QhYXT7LDht95j1RX7ruFg8CPDsGwsLrZqfyy/sgu6sZ9a6TZ5VyY mdcBV7pbawu9z2zV5e877KxETy8xd44ZAV5RaqhWSD+WlXAZ+Uj/yrCMOJDGLYf6 T+CZxBF/p8t5BQvG3ZE4J91CgA9bXFUPFuncNVGrHBtLKp9fC/Er63uibJtFRTgD nINvQjvE0ViCQS8HlQdRd6IslEemQRwSr1odnnOA+Q0Wc7PYTH+zkz2tx5fLf55y kjxfSvLhi04UEQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:41:09 2026 by rpki-client