This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: kBPEx0itWQ4n+Pal2NeZ2KPTMEsVn17M7ctrAvUuMz8= Subject key identifier: 77:45:7C:3F:B4:2F:F9:36:A7:61:BF:B0:03:B1:81:02:8C:29:70:55 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019BD9C72087DB8C00EA727825D7191D14DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 15CE Signing time: Tue 20 Jan 2026 05:01:04 +0000 Manifest this update: Tue 20 Jan 2026 05:01:04 +0000 Manifest next update: Wed 21 Jan 2026 05:01:04 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: ZNTCg1b5LslEuBeOga5OqsJDxM8SXxzPj6/8LGF+uDU=) 2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=) 3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=) 4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=) 5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:20:87:db:8c:00:ea:72:78:25:d7:19:1d:14:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Jan 20 05:01:04 2026 GMT Not After : Jan 21 05:01:04 2026 GMT Subject: CN=77457c3fb42ff936a761bfb003b181028c297055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:c3:b1:6c:6e:27:33:d2:b7:01:a3:a4:0b: 1b:c7:56:0e:12:b3:0b:11:f5:be:f2:7d:25:3c:92: b2:4e:9a:12:19:05:49:8d:f2:c0:5c:3a:1a:a6:0c: 3d:2f:9f:c8:28:9e:07:1d:a5:9f:c5:f4:91:aa:1c: 5b:59:2a:6e:ad:a8:99:71:d3:71:fd:42:55:5c:1d: 80:83:36:91:c3:7d:9f:00:e5:41:69:c2:7c:7c:3c: 97:1c:03:32:c3:4a:30:15:59:69:a2:49:ba:31:dc: e8:aa:f1:d0:86:9b:fb:b7:3f:08:90:4a:f5:1c:fc: b4:27:55:ab:81:a9:f8:a7:d5:55:6e:74:39:c5:49: 8b:d3:67:1c:82:63:6a:5e:c1:fc:5a:7d:0d:ca:21: 0e:df:d4:1d:1c:ec:41:37:b2:98:d3:78:53:43:55: b0:c7:d9:2e:cf:6b:3d:6d:20:9b:4f:83:07:8d:6a: a6:63:cf:37:34:84:68:b4:ed:14:24:17:9b:9d:44: ed:7e:b6:c6:65:2c:94:53:07:c7:36:ac:e7:04:1a: e3:6f:7f:81:91:54:e6:5a:e9:7d:7f:7a:74:ed:eb: 47:67:45:a8:84:30:23:e5:a8:36:05:24:33:f6:8d: 7b:7e:31:1d:83:19:e9:e0:37:c9:08:e3:dd:a5:37: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:7C:3F:B4:2F:F9:36:A7:61:BF:B0:03:B1:81:02:8C:29:70:55 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:79:3d:18:5f:a9:3f:48:4a:de:cb:82:aa:1a:07:a5:17:fd: b8:04:74:58:ca:22:29:95:2f:1a:ac:95:dc:66:58:73:4d:2e: 91:a9:1d:18:c8:3e:db:b4:37:93:5b:0d:6c:c3:e8:57:26:d8: ac:c7:f7:90:1e:6a:cc:8f:16:86:92:e9:14:2c:89:60:e1:81: 44:d0:8c:7b:b4:e0:20:33:92:a7:bc:2f:eb:9d:e0:25:a8:d8: 38:70:f5:d6:69:b2:2c:31:4e:6a:de:16:6d:b3:5b:8d:da:bf: 28:cc:ab:ae:c4:cb:a2:2b:1e:85:cf:91:70:1b:d1:ed:a8:2c: 82:0f:ae:32:94:f8:7e:cf:b5:bc:17:37:87:0c:6e:74:4b:fa: db:4d:b1:a6:85:98:22:0b:45:d9:ab:b1:4b:8a:2b:8f:3f:15: bc:90:31:53:87:bc:bf:78:09:5e:4d:93:04:1b:26:9c:a9:e9: 53:3c:92:d5:73:9d:c5:5e:50:62:dd:d4:a5:69:54:f9:a2:1d: 01:17:f6:f6:2b:9c:a2:1e:36:05:81:98:ed:9d:28:05:0e:12: 1a:60:93:cc:28:09:5c:41:90:ba:86:0c:c2:96:66:61:a5:e4: 56:8d:eb:77:6b:b5:80:85:4a:dd:55:8f:94:fe:4a:a5:88:02: 09:22:87:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZxyCH24wA6nJ4JdcZHRTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjYwMTIwMDUwMTA0WhcNMjYwMTIxMDUwMTA0WjAzMTEwLwYDVQQD Eyg3NzQ1N2MzZmI0MmZmOTM2YTc2MWJmYjAwM2IxODEwMjhjMjk3MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvDsWxuJzPStwGjpAsbx1YOErML EfW+8n0lPJKyTpoSGQVJjfLAXDoapgw9L5/IKJ4HHaWfxfSRqhxbWSpuraiZcdNx /UJVXB2AgzaRw32fAOVBacJ8fDyXHAMyw0owFVlpokm6MdzoqvHQhpv7tz8IkEr1 HPy0J1Wrgan4p9VVbnQ5xUmL02ccgmNqXsH8Wn0NyiEO39QdHOxBN7KY03hTQ1Ww x9kuz2s9bSCbT4MHjWqmY883NIRotO0UJBebnUTtfrbGZSyUUwfHNqznBBrjb3+B kVTmWul9f3p07etHZ0WohDAj5ag2BSQz9o17fjEdgxnp4DfJCOPdpTcZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdFfD+0L/k2p2G/sAOxgQKMKXBVMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnk9GF+p P0hK3suCqhoHpRf9uAR0WMoiKZUvGqyV3GZYc00ukakdGMg+27Q3k1sNbMPoVybY rMf3kB5qzI8WhpLpFCyJYOGBRNCMe7TgIDOSp7wv653gJajYOHD11mmyLDFOat4W bbNbjdq/KMyrrsTLoisehc+RcBvR7agsgg+uMpT4fs+1vBc3hwxudEv6202xpoWY IgtF2auxS4orjz8VvJAxU4e8v3gJXk2TBBsmnKnpUzyS1XOdxV5QYt3UpWlU+aId ARf29iucoh42BYGY7Z0oBQ4SGmCTzCgJXEGQuoYMwpZmYaXkVo3rd2u1gIVK3VWP lP5KpYgCCSKHVQ== -----END CERTIFICATE-----Generated at Tue Jan 20 08:46:47 2026 by rpki-client