This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json) Hash identifier: UosmeRRLfVtIb4MKA+WmIi6dFzGqYkaDdMx/LMvlEbA= Subject key identifier: 8A:88:7F:D7:34:B9:01:B8:60:C6:1B:90:54:12:2E:99:D5:70:18:79 Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Certificate serial: 019B7F031C13B2A99130A7436FD13B0A0115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft Manifest number: 0E77 Signing time: Fri 02 Jan 2026 14:01:08 +0000 Manifest this update: Fri 02 Jan 2026 14:01:08 +0000 Manifest next update: Sat 03 Jan 2026 14:01:08 +0000 Files and hashes: 1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=) 2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: 6Y9RJvsvlaKRLD/Tzn8YMST1Qioa98h4AL9UJ6P7a5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:03:1c:13:b2:a9:91:30:a7:43:6f:d1:3b:0a:01:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Validity Not Before: Jan 2 14:01:08 2026 GMT Not After : Jan 3 14:01:08 2026 GMT Subject: CN=8a887fd734b901b860c61b9054122e99d5701879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:a4:72:04:90:22:16:fa:ef:53:56:92:49: c2:70:47:da:9e:4f:98:86:b2:e6:ff:81:0f:f4:70: 9b:f8:6b:4e:18:8a:37:e4:b7:43:c6:a0:8c:99:4d: 41:1e:07:8d:cb:58:90:91:f3:a4:5c:80:57:40:c4: be:f1:a2:aa:d2:ba:08:df:99:31:ee:54:03:e2:c6: f8:0a:00:db:4c:a1:06:72:00:99:33:3d:80:19:a2: 37:e9:4d:c9:6d:d7:37:a8:27:b7:1f:1d:c3:94:2b: 51:ff:f5:30:8d:5c:f9:f9:d4:62:a4:b7:ca:14:d6: 8d:e6:d3:fc:38:fd:28:1f:c6:8e:33:ea:d1:ee:b1: 28:29:8b:8f:95:14:3b:41:22:7d:29:ee:dd:30:50: de:9a:d4:8c:84:f9:37:2d:14:ca:eb:e3:0b:85:f2: 7b:30:ba:d3:17:71:19:83:5e:19:04:af:54:8e:3e: 08:ee:f9:64:7d:1a:d1:26:1e:b4:7c:7e:a9:60:9f: 25:b4:7c:dd:77:f3:ee:12:24:71:3a:c0:1d:35:cd: e0:da:31:72:5c:00:84:e4:b9:0f:dd:87:4f:56:96: e1:d6:c6:2e:17:6a:c1:7a:4e:cf:7e:f7:63:f4:67: ad:08:8a:9e:3a:c8:f6:2a:c5:15:34:21:79:23:7e: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:7F:D7:34:B9:01:B8:60:C6:1B:90:54:12:2E:99:D5:70:18:79 X509v3 Authority Key Identifier: keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:2d:ed:a4:90:17:bc:7e:75:ff:c8:b8:c2:c4:00:cb:06: 22:20:42:75:d4:d4:4d:aa:8f:b9:9f:4e:37:80:9a:32:55:f6: 44:ae:f5:b5:13:9d:90:14:32:89:8f:f2:b7:93:d1:4e:36:23: 9b:3e:7e:d0:26:46:89:b3:51:50:ec:5e:37:b2:e8:e0:f2:9f: 3d:01:8f:88:fc:fd:37:6e:b2:8a:b6:c5:6e:2c:db:db:49:21: e0:9e:2d:fb:1e:4c:6c:37:b4:06:3f:69:55:c4:90:c2:96:07: 5c:62:20:c6:d2:52:ea:8f:4c:6c:29:e9:56:cf:72:fe:66:39: 56:30:82:3d:94:ee:21:c3:71:3f:08:43:71:dd:02:87:ac:08: 16:f2:59:9b:c5:d2:ae:d2:1c:4f:2a:71:ee:4f:b9:4e:e9:e2: 24:30:5d:1e:db:ed:0f:17:32:83:17:4b:c9:e6:df:1c:fb:f9: fb:64:e5:b3:98:64:de:ec:d7:b0:96:cd:57:37:58:f9:27:e4: d8:e1:3d:cb:5f:5f:b6:c0:c4:e7:8a:f5:eb:4d:0c:b6:e8:e9: 2a:8f:99:22:fc:38:b3:0b:7e:f8:d5:54:c3:fe:a1:94:1f:73: b3:4a:ca:87:38:63:ff:f9:96:53:61:c5:fa:f2:00:73:40:be: a9:8f:09:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/AxwTsqmRMKdDb9E7CgEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm NGU3N2YwHhcNMjYwMTAyMTQwMTA4WhcNMjYwMTAzMTQwMTA4WjAzMTEwLwYDVQQD Eyg4YTg4N2ZkNzM0YjkwMWI4NjBjNjFiOTA1NDEyMmU5OWQ1NzAxODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJCkcgSQIhb671NWkknCcEfank+Y hrLm/4EP9HCb+GtOGIo35LdDxqCMmU1BHgeNy1iQkfOkXIBXQMS+8aKq0roI35kx 7lQD4sb4CgDbTKEGcgCZMz2AGaI36U3Jbdc3qCe3Hx3DlCtR//UwjVz5+dRipLfK FNaN5tP8OP0oH8aOM+rR7rEoKYuPlRQ7QSJ9Ke7dMFDemtSMhPk3LRTK6+MLhfJ7 MLrTF3EZg14ZBK9Ujj4I7vlkfRrRJh60fH6pYJ8ltHzdd/PuEiRxOsAdNc3g2jFy XACE5LkP3YdPVpbh1sYuF2rBek7Pfvdj9GetCIqeOsj2KsUVNCF5I35kswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqIf9c0uQG4YMYbkFQSLpnVcBh5MB8GA1UdIwQY MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4 LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjgt7aSQ F7x+df/IuMLEAMsGIiBCddTUTaqPuZ9ON4CaMlX2RK71tROdkBQyiY/yt5PRTjYj mz5+0CZGibNRUOxeN7Lo4PKfPQGPiPz9N26yirbFbizb20kh4J4t+x5MbDe0Bj9p VcSQwpYHXGIgxtJS6o9MbCnpVs9y/mY5VjCCPZTuIcNxPwhDcd0Ch6wIFvJZm8XS rtIcTypx7k+5TuniJDBdHtvtDxcygxdLyebfHPv5+2Tls5hk3uzXsJbNVzdY+Sfk 2OE9y19ftsDE54r1600MtujpKo+ZIvw4swt++NVUw/6hlB9zs0rKhzhj//mWU2HF +vIAc0C+qY8Jdg== -----END CERTIFICATE-----Generated at Fri Jan 2 16:31:17 2026 by rpki-client