This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json) Hash identifier: RZndWun7o96/KqqPNJE9IpCnkh4i7soFfUG9Qct+7pg= Subject key identifier: 48:57:03:AB:31:85:1F:8E:B9:41:3C:EA:AE:5D:CA:E9:41:80:85:42 Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Certificate serial: 019B8EAD3EE3133137FCE0B8451670CF3DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft Manifest number: 0826 Signing time: Mon 05 Jan 2026 15:01:17 +0000 Manifest this update: Mon 05 Jan 2026 15:01:17 +0000 Manifest next update: Tue 06 Jan 2026 15:01:17 +0000 Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=) 2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: oNJ3wkmIFNVpNpRl5Xj2hVzuzj4SivjxS6je1SdIHDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:ad:3e:e3:13:31:37:fc:e0:b8:45:16:70:cf:3d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Validity Not Before: Jan 5 15:01:17 2026 GMT Not After : Jan 6 15:01:17 2026 GMT Subject: CN=485703ab31851f8eb9413ceaae5dcae941808542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:c6:7e:dc:55:21:05:eb:8b:06:a9:a7:36: a5:2b:5b:9f:99:c9:8b:c1:91:5c:ba:16:67:61:97: 1b:69:e6:ed:38:82:3a:86:b9:09:da:6b:51:54:75: b6:d6:9d:68:58:cc:23:94:56:ee:c6:e5:02:51:18: d2:67:38:42:ee:f8:12:eb:00:73:c9:6a:7e:3a:83: 91:35:93:07:5a:10:f0:84:d8:b6:66:20:ac:08:47: 0a:df:e0:75:4f:30:49:df:56:fc:b4:4c:36:2d:57: 20:c6:d5:a7:65:56:3b:84:8a:18:d6:3b:63:22:9a: 1a:13:dc:5c:f9:43:75:6d:dd:79:c2:8d:5a:4e:b8: d9:f4:14:5a:2e:71:25:e9:b5:fd:58:ff:2d:3f:50: e9:1f:c3:91:2d:28:b7:57:c4:f2:58:e5:c8:9f:6e: 7c:ce:5b:14:9b:1f:df:0b:59:c1:07:75:25:bf:36: 11:d0:76:c4:50:c1:52:8e:92:1e:13:ef:1b:8b:28: 17:8b:9d:bc:e7:9b:7e:7b:24:73:4b:3e:d1:af:ba: 60:a5:8b:50:de:5b:4b:cc:80:cf:d7:78:c3:c3:5a: ab:a9:42:1e:6e:b2:69:11:f1:8d:c7:11:82:62:50: 32:ac:d4:fb:ae:9e:6f:24:6d:32:af:af:af:bc:ef: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:03:AB:31:85:1F:8E:B9:41:3C:EA:AE:5D:CA:E9:41:80:85:42 X509v3 Authority Key Identifier: keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:0e:ac:ee:d5:88:67:ab:c0:2a:e7:c6:19:04:b0:c1:f2: 1a:aa:5d:93:82:45:70:22:b5:4a:d0:53:5a:74:c1:7d:4c:46: 16:a3:47:73:37:35:e0:12:38:10:67:1e:3e:93:f2:e1:28:70: 25:36:f2:06:32:f9:04:09:a0:66:cd:6a:8d:c4:ba:c0:8f:d3: 49:46:57:66:57:f7:e5:f2:04:88:5b:56:67:5f:32:3a:47:2e: fe:03:c9:82:b9:3d:12:b0:b1:2c:e7:c8:6b:bb:29:31:c1:ac: 06:e1:83:94:1b:9c:86:8e:c2:f6:5a:59:9d:da:f4:3b:95:43: d3:37:9d:ca:a9:9b:e6:8a:32:9a:53:f2:9c:a1:59:b6:a6:bf: 2a:ff:32:94:b5:bc:4a:44:18:f6:15:30:4c:49:1b:63:50:67: 4a:46:3b:99:97:23:76:76:5a:1e:c9:4f:2a:84:fb:e8:f5:8f: 4f:00:fe:ce:17:d7:d8:6a:c8:f6:cb:69:1c:cb:c0:86:ad:3b: 9f:22:0c:a8:c0:ea:0f:91:8e:44:b2:8a:a3:6e:17:3e:30:32: 62:43:eb:d2:13:60:2f:9c:4a:fd:d4:e5:7c:4f:28:8f:d6:09: 41:c5:0e:79:93:72:aa:f7:93:3f:23:f8:7f:1f:b6:b7:02:2e: 8f:0a:11:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuOrT7jEzE3/OC4RRZwzz2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGFiMzJkZmQ2ZTViYzY5OWU3YmYzNmU4MTgyOThkYzdm YmIyNDYwHhcNMjYwMTA1MTUwMTE3WhcNMjYwMTA2MTUwMTE3WjAzMTEwLwYDVQQD Eyg0ODU3MDNhYjMxODUxZjhlYjk0MTNjZWFhZTVkY2FlOTQxODA4NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05rGftxVIQXriwappzalK1ufmcmL wZFcuhZnYZcbaebtOII6hrkJ2mtRVHW21p1oWMwjlFbuxuUCURjSZzhC7vgS6wBz yWp+OoORNZMHWhDwhNi2ZiCsCEcK3+B1TzBJ31b8tEw2LVcgxtWnZVY7hIoY1jtj IpoaE9xc+UN1bd15wo1aTrjZ9BRaLnEl6bX9WP8tP1DpH8ORLSi3V8TyWOXIn258 zlsUmx/fC1nBB3UlvzYR0HbEUMFSjpIeE+8biygXi52855t+eyRzSz7Rr7pgpYtQ 3ltLzIDP13jDw1qrqUIebrJpEfGNxxGCYlAyrNT7rp5vJG0yr6+vvO/qHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhXA6sxhR+OuUE86q5dyulBgIVCMB8GA1UdIwQY MBaAFG/asy39blvGmee/NugYKY3H+7JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQt ZjFlNTVmNTM3Yzg3LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQtZjFlNTVmNTM3Yzg3 LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp0OrO7V iGerwCrnxhkEsMHyGqpdk4JFcCK1StBTWnTBfUxGFqNHczc14BI4EGcePpPy4Shw JTbyBjL5BAmgZs1qjcS6wI/TSUZXZlf35fIEiFtWZ18yOkcu/gPJgrk9ErCxLOfI a7spMcGsBuGDlBucho7C9lpZndr0O5VD0zedyqmb5ooymlPynKFZtqa/Kv8ylLW8 SkQY9hUwTEkbY1BnSkY7mZcjdnZaHslPKoT76PWPTwD+zhfX2GrI9stpHMvAhq07 nyIMqMDqD5GORLKKo24XPjAyYkPr0hNgL5xK/dTlfE8oj9YJQcUOeZNyqveTPyP4 fx+2twIujwoRRw== -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:46 2026 by rpki-client