This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json) Hash identifier: dkcdnHAViTYLR7KxHE9Q5A9H7elvcMCHd7m/ZAvZtY0= Subject key identifier: 65:38:7F:B2:79:B7:7B:C2:F0:38:31:35:5C:24:58:E5:49:22:AA:3D Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a Certificate serial: 019BB21567FEF176061AE24B74AD7CB5FA22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft Manifest number: 10B6 Signing time: Mon 12 Jan 2026 12:01:45 +0000 Manifest this update: Mon 12 Jan 2026 12:01:45 +0000 Manifest next update: Tue 13 Jan 2026 12:01:45 +0000 Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: 2sCMlSAzOwVbT1ar0Uf3Ry2UUciR+M9hjj/voRPNMyg=) 2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:67:fe:f1:76:06:1a:e2:4b:74:ad:7c:b5:fa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a Validity Not Before: Jan 12 12:01:45 2026 GMT Not After : Jan 13 12:01:45 2026 GMT Subject: CN=65387fb279b77bc2f03831355c2458e54922aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:cc:bb:19:57:80:23:32:62:b3:06:16:55: 4f:0f:12:59:ed:e8:b3:f5:24:81:6c:be:cb:33:94: c6:0a:05:e1:e6:10:41:32:0f:87:f0:b4:16:89:ca: 7f:79:3c:d6:a8:bc:00:8e:e2:2c:60:7d:02:33:0e: 73:cd:87:f5:e5:f0:a5:0c:12:b1:a4:0c:ed:34:ad: 18:d8:e9:fc:3d:89:be:15:f8:b4:63:d9:ac:cc:49: 0e:95:56:e7:ed:dc:ec:a3:cd:7f:48:44:0d:4f:c2: 1a:69:5e:8c:02:68:8a:d7:85:08:99:87:7b:75:d3: a5:40:c6:06:16:51:9a:f9:9b:bf:e6:d6:59:1b:e1: 4f:1a:b4:3c:d8:c4:86:b7:5d:fc:fc:e5:31:2f:72: db:5b:68:f2:66:1a:32:3e:9b:8f:01:f9:a2:05:b4: 0d:05:37:39:f2:48:f4:6b:a5:83:41:f0:d1:5b:48: 85:77:ea:8b:9f:b3:e5:08:36:15:3d:99:df:89:33: 78:28:45:39:da:53:6c:c7:1e:16:b0:2a:9c:73:f9: 1f:03:f3:13:73:98:83:5e:48:a6:f8:aa:0a:39:47: e6:0a:39:3c:85:8c:87:b0:14:90:14:17:a9:2c:57: 29:5e:d8:a5:52:be:f8:42:df:55:58:d2:cd:1a:96: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:38:7F:B2:79:B7:7B:C2:F0:38:31:35:5C:24:58:E5:49:22:AA:3D X509v3 Authority Key Identifier: keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:6d:80:98:d9:6e:a8:ab:e5:ca:0e:a4:aa:46:26:93:31: 8d:79:6c:6e:96:cd:c0:55:ad:81:41:e9:fa:c7:33:2d:3a:3e: ea:eb:9d:09:5b:f0:c5:28:25:93:2a:f7:6d:3f:68:9c:2a:46: 32:28:2c:c7:4e:61:95:55:f7:c7:c3:48:b9:c8:96:20:0d:1d: ee:26:34:a4:3a:c7:b7:94:3e:3a:9a:e2:06:98:e6:9d:29:95: 6f:c1:c8:54:4b:9b:52:fb:4e:b5:cc:0b:69:e0:54:b6:50:12: d6:69:03:2d:97:2f:3a:3e:01:84:4a:ab:0c:3d:81:9c:0d:b8: 85:1e:39:89:f4:6e:57:24:44:a9:5b:a1:5c:8f:5e:3e:f8:08: 5a:0a:8a:80:8a:ef:0f:58:dc:92:6d:48:e6:8e:f6:b7:ad:29: ec:3b:9e:25:b3:11:f8:66:28:28:89:1b:68:eb:81:9e:57:2f: 87:96:71:34:13:78:ef:8c:8f:f3:19:70:c6:33:6d:b9:98:e4: 34:30:40:65:37:4a:ba:a9:03:1d:ff:9c:9b:51:32:e4:93:cf: b1:03:15:e3:76:8e:5c:e2:5f:30:87:a3:98:2b:a3:e1:b3:4d: bf:cb:09:bc:b6:82:91:97:48:d4:9b:49:ff:d3:13:87:d0:f4: f7:2b:09:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFWf+8XYGGuJLdK18tfoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2E0ODEyYTE1OWVmNmE5ZTkyOTcyZTc1NzJhZDY2MmQ3 MjIxNWEwHhcNMjYwMTEyMTIwMTQ1WhcNMjYwMTEzMTIwMTQ1WjAzMTEwLwYDVQQD Eyg2NTM4N2ZiMjc5Yjc3YmMyZjAzODMxMzU1YzI0NThlNTQ5MjJhYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv7MuxlXgCMyYrMGFlVPDxJZ7eiz 9SSBbL7LM5TGCgXh5hBBMg+H8LQWicp/eTzWqLwAjuIsYH0CMw5zzYf15fClDBKx pAztNK0Y2On8PYm+Ffi0Y9mszEkOlVbn7dzso81/SEQNT8IaaV6MAmiK14UImYd7 ddOlQMYGFlGa+Zu/5tZZG+FPGrQ82MSGt138/OUxL3LbW2jyZhoyPpuPAfmiBbQN BTc58kj0a6WDQfDRW0iFd+qLn7PlCDYVPZnfiTN4KEU52lNsxx4WsCqcc/kfA/MT c5iDXkim+KoKOUfmCjk8hYyHsBSQFBepLFcpXtilUr74Qt9VWNLNGpbE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU4f7J5t3vC8DgxNVwkWOVJIqo9MB8GA1UdIwQY MBaAFPV6SBKhWe9qnpKXLnVyrWYtciFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYt YmViNzBmZDQxNWNhLzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYtYmViNzBmZDQxNWNh LzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBJtgJjZ bqir5coOpKpGJpMxjXlsbpbNwFWtgUHp+sczLTo+6uudCVvwxSglkyr3bT9onCpG Migsx05hlVX3x8NIuciWIA0d7iY0pDrHt5Q+OpriBpjmnSmVb8HIVEubUvtOtcwL aeBUtlAS1mkDLZcvOj4BhEqrDD2BnA24hR45ifRuVyREqVuhXI9ePvgIWgqKgIrv D1jckm1I5o72t60p7DueJbMR+GYoKIkbaOuBnlcvh5ZxNBN474yP8xlwxjNtuZjk NDBAZTdKuqkDHf+cm1Ey5JPPsQMV43aOXOJfMIejmCuj4bNNv8sJvLaCkZdI1JtJ /9MTh9D09ysJqA== -----END CERTIFICATE-----Generated at Mon Jan 12 16:06:46 2026 by rpki-client