This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json) Hash identifier: NIBUvQKYE5G+LFGpwhbHnZB75glV7G1n6I2pGeHBLN0= Subject key identifier: E2:A7:7F:FC:31:24:08:BF:30:52:61:1A:36:FF:68:7F:0F:48:D3:3C Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6 Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6 Certificate serial: 019BFB77EA858EC95D9DF539F29E92FC9D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 18:01:38 +0000 Manifest this update: Mon 26 Jan 2026 18:01:38 +0000 Manifest next update: Tue 27 Jan 2026 18:01:38 +0000 Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: JVfB7PtORalS/nnB00w0eyUx9AX0wKY/11dcGSjT7HY=) 2: wxYzOEFFE7ZvQ_jUpzfcf7qWdJY.roa (hash: zi/D1IuQaIKBqfBUtIU/P0ojOtlc8op63UfckXGc4cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:ea:85:8e:c9:5d:9d:f5:39:f2:9e:92:fc:9d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6 Validity Not Before: Jan 26 18:01:38 2026 GMT Not After : Jan 27 18:01:38 2026 GMT Subject: CN=e2a77ffc312408bf3052611a36ff687f0f48d33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:e3:99:f4:22:7b:d9:cd:68:5a:74:08:14: b2:c6:a9:70:13:a4:50:88:67:86:e1:f4:ef:31:be: c2:b6:d5:38:d1:c2:c1:64:5d:08:31:70:9d:1b:4b: a7:54:73:ef:19:1a:dd:88:ed:82:00:0d:d0:0a:dd: c7:fc:8c:56:88:68:db:19:cb:59:83:8b:66:eb:65: 75:b8:57:85:2c:29:6f:1c:07:26:dd:2b:a9:4e:ca: 18:75:10:39:f6:22:99:a3:6e:a3:df:26:d5:72:ab: 8b:c9:41:7b:d8:23:01:4c:4a:c6:40:f9:e7:9f:ec: e4:d9:da:c7:e4:dd:74:50:f9:aa:cc:9f:ec:9f:6c: 4b:77:b2:9f:ac:be:4c:2b:98:94:fa:e5:57:af:26: 53:67:6f:e1:9a:8c:d0:14:22:43:d0:87:c5:d9:2c: c9:ba:45:fa:60:95:07:ae:3e:89:85:9f:1c:cd:ec: f2:20:b5:d7:32:47:ac:91:b6:a9:76:d9:c6:87:36: 17:f7:3a:72:b6:68:61:cc:39:7c:4f:c6:12:9d:ce: db:1d:d4:0c:2f:e8:cc:33:2a:69:f7:06:08:69:86: a2:71:17:09:c7:ec:7b:f5:94:73:13:94:c6:35:d4: db:89:73:7b:35:8e:b7:b3:a9:87:61:35:fc:ce:e2: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:7F:FC:31:24:08:BF:30:52:61:1A:36:FF:68:7F:0F:48:D3:3C X509v3 Authority Key Identifier: keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:34:0b:c5:b4:67:4c:01:7f:16:c0:a0:cd:84:72:41:1e:4c: c8:4c:d5:8c:74:b2:35:55:ac:36:67:b2:c2:ca:40:52:f2:21: 4d:ea:cf:b8:06:e2:af:a9:39:82:f8:e8:b6:07:e0:18:a1:0e: 35:a3:d3:e7:47:10:f6:9e:e6:b2:83:21:f9:e0:75:93:f9:ae: 43:a5:ca:2e:b0:aa:f7:81:3b:ad:f4:64:b7:f1:36:a6:08:1d: 4f:8a:a4:79:38:9f:5a:9d:bd:4a:b4:73:cc:48:1d:cb:32:43: de:a9:ef:c5:fd:51:8c:8e:58:3e:f7:2d:ce:b2:c8:73:f7:08: e7:62:0d:5f:2d:61:6d:b9:0b:d3:43:d0:3e:3a:26:4e:53:59: a0:a0:1b:8d:68:4a:50:94:0c:0f:20:57:a8:82:6b:a1:e9:28: 8e:40:d6:c2:ee:b9:5a:d3:3f:65:75:ec:12:c5:9f:4f:5a:e5: f3:c2:6a:1c:79:e0:68:96:67:92:4c:62:d9:41:29:a7:34:44: 87:b2:51:9c:ff:78:b5:42:e4:74:52:4e:c1:68:16:ab:ee:ce: be:41:36:1c:03:b3:6e:a7:29:25:59:9f:a1:6d:d9:aa:60:61: 02:31:ff:dd:d8:88:5b:91:f9:24:50:b2:37:de:a1:4c:73:4a: c1:53:73:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d+qFjsldnfU58p6S/J1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2 MzhhYTYwHhcNMjYwMTI2MTgwMTM4WhcNMjYwMTI3MTgwMTM4WjAzMTEwLwYDVQQD EyhlMmE3N2ZmYzMxMjQwOGJmMzA1MjYxMWEzNmZmNjg3ZjBmNDhkMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY7jmfQie9nNaFp0CBSyxqlwE6RQ iGeG4fTvMb7CttU40cLBZF0IMXCdG0unVHPvGRrdiO2CAA3QCt3H/IxWiGjbGctZ g4tm62V1uFeFLClvHAcm3SupTsoYdRA59iKZo26j3ybVcquLyUF72CMBTErGQPnn n+zk2drH5N10UPmqzJ/sn2xLd7KfrL5MK5iU+uVXryZTZ2/hmozQFCJD0IfF2SzJ ukX6YJUHrj6JhZ8czezyILXXMkeskbapdtnGhzYX9zpytmhhzDl8T8YSnc7bHdQM L+jMMypp9wYIaYaicRcJx+x79ZRzE5TGNdTbiXN7NY63s6mHYTX8zuKGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKnf/wxJAi/MFJhGjb/aH8PSNM8MB8GA1UdIwQY MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2 LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjQLxbRn TAF/FsCgzYRyQR5MyEzVjHSyNVWsNmeywspAUvIhTerPuAbir6k5gvjotgfgGKEO NaPT50cQ9p7msoMh+eB1k/muQ6XKLrCq94E7rfRkt/E2pggdT4qkeTifWp29SrRz zEgdyzJD3qnvxf1RjI5YPvctzrLIc/cI52INXy1hbbkL00PQPjomTlNZoKAbjWhK UJQMDyBXqIJroekojkDWwu65WtM/ZXXsEsWfT1rl88JqHHngaJZnkkxi2UEppzRE h7JRnP94tULkdFJOwWgWq+7OvkE2HAOzbqcpJVmfoW3ZqmBhAjH/3diIW5H5JFCy N96hTHNKwVNz2g== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:56 2026 by rpki-client