This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json) Hash identifier: tJAjsGlXA2okXyi4r9rRysPQOV/oJshT0If1jVWnv3k= Subject key identifier: F9:E1:C6:11:3E:F5:8F:94:66:C0:18:F3:F3:DC:34:E5:B7:95:B9:89 Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf Certificate serial: 019BB05DBBD4E3D83CBA05742561A697C35B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft Manifest number: 029D Signing time: Mon 12 Jan 2026 04:01:31 +0000 Manifest this update: Mon 12 Jan 2026 04:01:31 +0000 Manifest next update: Tue 13 Jan 2026 04:01:31 +0000 Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: l/WmqIY1HOwF5m/jhP/7VlK2MRkeu+i+JDczZ3CA0Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:bb:d4:e3:d8:3c:ba:05:74:25:61:a6:97:c3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf Validity Not Before: Jan 12 04:01:31 2026 GMT Not After : Jan 13 04:01:31 2026 GMT Subject: CN=f9e1c6113ef58f9466c018f3f3dc34e5b795b989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:34:57:5c:a7:55:a2:ba:73:9f:56:de:0b: 03:d0:1e:26:59:7a:c4:f0:fd:99:26:75:ba:60:1c: bb:c3:cc:58:24:1a:eb:bf:73:eb:8b:c9:b2:20:a1: 4e:a6:b8:7d:3a:6f:a5:53:85:15:a2:a2:c0:84:7e: 6f:13:7e:52:d5:f7:d4:8d:a3:a1:c4:ea:92:5c:e2: 41:da:1f:3e:e8:90:2a:71:9c:e5:9c:5f:df:7a:10: 98:ce:a8:ef:8c:a4:ad:9e:70:65:0d:70:6d:b0:5c: 2a:a5:7c:51:de:12:1c:57:02:ea:3c:31:ae:10:ea: 07:5a:8a:1a:70:30:f0:69:26:8f:3f:9c:1a:9b:a1: d7:f1:82:1f:03:a3:96:2c:ae:22:49:b2:fb:71:0b: 26:a4:9a:b0:85:04:63:97:79:51:46:08:ed:47:71: d6:02:05:7d:0c:5f:6d:82:8a:ce:2e:2b:18:1d:af: 6d:5c:4c:9f:14:ac:d7:83:80:f3:6e:f4:80:67:c9: a5:4c:e0:ac:93:e1:ed:bd:a0:92:2e:b0:20:cf:fc: f1:28:ee:2d:71:8c:7f:ef:1a:39:08:37:34:06:30: 06:11:9d:16:5e:7c:f1:e9:71:28:1e:de:46:97:3a: ab:33:37:58:e1:9b:47:73:0d:3b:1c:35:88:fa:a7: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E1:C6:11:3E:F5:8F:94:66:C0:18:F3:F3:DC:34:E5:B7:95:B9:89 X509v3 Authority Key Identifier: keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:95:7b:56:91:1a:37:ad:3c:86:92:69:d8:26:80:25:48:32: 9b:61:8a:ae:cb:3d:1e:2d:d9:4a:aa:3c:a9:dd:88:4d:7a:06: ab:48:37:03:8a:5b:17:a8:be:2c:bc:de:16:83:05:fc:ed:3a: 8c:c0:7c:83:9c:5c:04:0e:89:32:27:87:9f:0b:61:52:83:1f: dc:6c:82:d3:4a:ed:56:9c:df:91:f2:03:18:b4:78:ff:99:4a: 63:48:82:f5:6c:13:ab:9c:3e:fd:77:fd:0b:0f:ac:07:1f:68: 97:86:e3:94:f7:3e:c6:7c:50:b9:63:bb:ac:b2:d0:42:9c:f1: 3a:ca:7c:e4:29:b7:c1:d1:9f:3d:1c:89:13:d4:2a:f8:e5:fa: 6b:31:8b:7b:22:cc:cb:b7:f2:43:2e:aa:b3:b0:62:5c:e2:92: 48:08:35:4b:f3:d1:f8:71:53:88:42:c8:91:0a:4b:9c:85:22: 63:99:0b:3b:15:9d:32:ce:bf:ca:82:5e:f6:1a:8d:79:fb:a2: 6a:2c:fa:0f:97:70:10:a0:d7:15:5d:05:d0:be:8b:f8:9b:8f: a2:91:e9:99:44:ed:1a:80:9c:a2:4d:b4:4c:7d:52:7f:5c:ab: a4:19:37:d7:22:d4:8f:a5:34:13:77:20:1a:36:a1:46:29:5a: 8e:c4:35:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXbvU49g8ugV0JWGml8NbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MGYwNmMxM2E5YmY2NTI5YzRhNmJkMGRlZTA1NTgyMDU2 MGNmYmYwHhcNMjYwMTEyMDQwMTMxWhcNMjYwMTEzMDQwMTMxWjAzMTEwLwYDVQQD EyhmOWUxYzYxMTNlZjU4Zjk0NjZjMDE4ZjNmM2RjMzRlNWI3OTViOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvw0V1ynVaK6c59W3gsD0B4mWXrE 8P2ZJnW6YBy7w8xYJBrrv3Pri8myIKFOprh9Om+lU4UVoqLAhH5vE35S1ffUjaOh xOqSXOJB2h8+6JAqcZzlnF/fehCYzqjvjKStnnBlDXBtsFwqpXxR3hIcVwLqPDGu EOoHWooacDDwaSaPP5wam6HX8YIfA6OWLK4iSbL7cQsmpJqwhQRjl3lRRgjtR3HW AgV9DF9tgorOLisYHa9tXEyfFKzXg4DzbvSAZ8mlTOCsk+HtvaCSLrAgz/zxKO4t cYx/7xo5CDc0BjAGEZ0WXnzx6XEoHt5GlzqrMzdY4ZtHcw07HDWI+qeMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnhxhE+9Y+UZsAY8/PcNOW3lbmJMB8GA1UdIwQY MBaAFPYPBsE6m/ZSnEpr0N7gVYIFYM+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zZmIwYzYtMWFmMC00YWNiLWI1ZWIt M2RhMTAyY2Q5MTI3LzEvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zZmIwYzYtMWFmMC00YWNiLWI1ZWItM2RhMTAyY2Q5MTI3 LzEvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpV7VpEa N608hpJp2CaAJUgym2GKrss9Hi3ZSqo8qd2ITXoGq0g3A4pbF6i+LLzeFoMF/O06 jMB8g5xcBA6JMieHnwthUoMf3GyC00rtVpzfkfIDGLR4/5lKY0iC9WwTq5w+/Xf9 Cw+sBx9ol4bjlPc+xnxQuWO7rLLQQpzxOsp85Cm3wdGfPRyJE9Qq+OX6azGLeyLM y7fyQy6qs7BiXOKSSAg1S/PR+HFTiELIkQpLnIUiY5kLOxWdMs6/yoJe9hqNefui aiz6D5dwEKDXFV0F0L6L+JuPopHpmUTtGoCcok20TH1Sf1yrpBk31yLUj6U0E3cg GjahRilajsQ1sA== -----END CERTIFICATE-----Generated at Mon Jan 12 07:00:04 2026 by rpki-client