This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: NgYA3wHSm9WtXKIVmKuRiwmVpRBTzb5rdjJnfrlyyHI= Subject key identifier: 03:9C:FF:7A:C7:04:7B:5B:7C:B6:5A:00:C0:02:7D:5F:CB:E1:93:61 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019BA5A3777CD9AFA4BB334CEB0F118B337E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 15B3 Signing time: Sat 10 Jan 2026 02:01:52 +0000 Manifest this update: Sat 10 Jan 2026 02:01:52 +0000 Manifest next update: Sun 11 Jan 2026 02:01:52 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: aBfHq4UAk10TtlcpADAKjLTxMXN6ysIBYuAHeH5eqg0=) 2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=) 3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=) 4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=) 5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 02:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:a3:77:7c:d9:af:a4:bb:33:4c:eb:0f:11:8b:33:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Jan 10 02:01:52 2026 GMT Not After : Jan 11 02:01:52 2026 GMT Subject: CN=039cff7ac7047b5b7cb65a00c0027d5fcbe19361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:68:37:09:87:66:83:cb:a7:43:f8:7d:dc: 94:32:3a:ae:10:1c:7b:b2:f7:a3:e0:82:8e:e7:06: 36:b4:17:3d:dd:21:1a:39:d8:df:0b:d9:fb:df:e7: d2:48:b3:05:30:d1:5f:67:b3:af:4e:f3:0b:c1:a8: 84:b9:fa:c8:5a:c2:4a:a6:5a:c0:c6:fd:d1:9c:3a: 2a:63:96:f0:b2:8e:f9:e4:21:d7:ff:d9:29:96:23: 9e:dc:cf:5d:a1:17:a6:60:b7:39:8f:08:18:dd:f8: 71:f7:85:44:9b:bb:b2:78:4f:bc:87:04:c3:f5:69: 56:53:87:0f:20:2e:b1:86:1a:3d:49:ec:71:61:20: b5:6b:9c:ef:a3:58:3b:3b:fb:ab:d9:94:94:05:3d: d3:58:4b:34:e0:97:6b:18:0f:0f:56:53:7f:a7:9f: 8d:9b:16:aa:83:2f:99:c2:2b:a9:b8:a8:fe:ec:1c: 61:be:c0:00:38:23:61:bd:36:5d:e3:2f:2f:f9:0e: 7c:98:ee:f0:f2:4b:2c:66:34:41:6f:02:51:c6:33: 7d:e8:72:78:eb:9a:16:ef:0c:9b:ef:92:c7:8e:a6: 86:20:6f:88:3a:06:dc:a0:cf:0c:c2:f6:0a:84:22: d1:21:5b:cf:03:3a:c8:cf:15:df:af:7f:db:58:a9: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9C:FF:7A:C7:04:7B:5B:7C:B6:5A:00:C0:02:7D:5F:CB:E1:93:61 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6b:77:d4:8d:a1:03:6b:41:2b:ec:21:38:ba:00:fb:ff:d4: f0:1d:89:36:0e:ee:69:ed:9a:48:fe:9b:5c:93:7b:d0:38:3f: 68:2d:94:4b:d2:01:42:4d:cd:37:9c:10:61:31:65:a4:fb:da: 1d:f8:27:c9:14:28:47:4f:be:49:43:79:81:f7:56:b2:f7:0f: 5b:b3:79:b5:c6:21:da:58:85:1c:a4:01:a6:0e:80:ba:70:74: e8:e6:8d:9f:2f:31:d0:52:49:ee:c7:b0:72:d5:11:20:78:48: 10:11:bb:9e:d7:7d:18:8e:35:08:a5:42:ba:fd:ec:54:77:c2: 6f:5b:80:20:c8:3a:43:11:f9:8a:22:ce:ac:44:42:27:9c:79: 9d:fc:03:48:63:5c:d5:24:16:83:e0:05:4b:b2:39:3e:93:f0: da:53:e7:47:b9:9d:87:88:fb:a3:7d:fa:91:a2:a4:84:e6:33: bd:9b:28:d3:56:cc:15:ae:37:cd:f8:3e:55:6f:68:4f:41:b5: 53:fb:c9:96:40:a1:2c:39:a4:ff:02:c0:94:42:95:46:80:e9: 89:de:84:2e:b9:99:ef:c7:a4:2a:cf:d0:94:f7:64:21:29:65: d0:41:b2:e9:f2:d2:24:fe:fd:b8:96:8a:64:5b:6a:ec:92:ea: 03:e1:5d:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulo3d82a+kuzNM6w8RizN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjYwMTEwMDIwMTUyWhcNMjYwMTExMDIwMTUyWjAzMTEwLwYDVQQD EygwMzljZmY3YWM3MDQ3YjViN2NiNjVhMDBjMDAyN2Q1ZmNiZTE5MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyahoNwmHZoPLp0P4fdyUMjquEBx7 svej4IKO5wY2tBc93SEaOdjfC9n73+fSSLMFMNFfZ7OvTvMLwaiEufrIWsJKplrA xv3RnDoqY5bwso755CHX/9kpliOe3M9doRemYLc5jwgY3fhx94VEm7uyeE+8hwTD 9WlWU4cPIC6xhho9SexxYSC1a5zvo1g7O/ur2ZSUBT3TWEs04JdrGA8PVlN/p5+N mxaqgy+ZwiupuKj+7BxhvsAAOCNhvTZd4y8v+Q58mO7w8kssZjRBbwJRxjN96HJ4 65oW7wyb75LHjqaGIG+IOgbcoM8MwvYKhCLRIVvPAzrIzxXfr3/bWKkoUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOc/3rHBHtbfLZaAMACfV/L4ZNhMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2t31I2h A2tBK+whOLoA+//U8B2JNg7uae2aSP6bXJN70Dg/aC2US9IBQk3NN5wQYTFlpPva HfgnyRQoR0++SUN5gfdWsvcPW7N5tcYh2liFHKQBpg6AunB06OaNny8x0FJJ7sew ctURIHhIEBG7ntd9GI41CKVCuv3sVHfCb1uAIMg6QxH5iiLOrERCJ5x5nfwDSGNc 1SQWg+AFS7I5PpPw2lPnR7mdh4j7o336kaKkhOYzvZso01bMFa43zfg+VW9oT0G1 U/vJlkChLDmk/wLAlEKVRoDpid6ELrmZ78ekKs/QlPdkISll0EGy6fLSJP79uJaK ZFtq7JLqA+Fdeg== -----END CERTIFICATE-----Generated at Sat Jan 10 10:40:24 2026 by rpki-client