This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: daZt+IeZvXVlqJ9Jui3sRyxpZrleZ5KOzzOqpFMx9GM= Subject key identifier: BA:68:9D:17:11:54:BF:ED:A6:C8:40:B0:11:E5:89:4B:CE:9A:72:26 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019BB327A4AADD8F7E3EF719789D5C281434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 15BA Signing time: Mon 12 Jan 2026 17:01:18 +0000 Manifest this update: Mon 12 Jan 2026 17:01:18 +0000 Manifest next update: Tue 13 Jan 2026 17:01:18 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: a1hsLS5wd8sXor5YbwMGivuggXBA6y6KhOTGnyoGAHI=) 2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=) 3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=) 4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=) 5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:27:a4:aa:dd:8f:7e:3e:f7:19:78:9d:5c:28:14:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Jan 12 17:01:18 2026 GMT Not After : Jan 13 17:01:18 2026 GMT Subject: CN=ba689d171154bfeda6c840b011e5894bce9a7226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:f5:42:00:0c:74:7b:2b:18:e2:2b:b9:2e: be:49:bb:f2:53:56:b4:ef:b5:11:a9:66:81:de:f0: c7:0c:92:a9:70:43:1d:f4:ee:11:dd:76:32:d5:01: 5d:2b:db:ff:49:a5:3c:ff:53:f0:56:17:0f:9d:b7: fb:3f:7a:5f:a7:2c:b6:94:0b:f1:9b:be:11:48:8d: ac:ff:d1:16:a4:6e:09:89:80:36:34:f4:ae:c1:a0: 62:5f:22:f6:fe:a3:0e:b0:91:4e:16:dd:80:a8:e4: a8:95:64:4c:6b:56:8c:1a:04:6e:d3:c8:6e:3e:e4: 61:7b:48:cf:02:ee:64:21:07:57:8c:5c:e9:51:d0: 32:e7:da:8e:f3:f6:23:79:43:af:13:aa:fb:f6:ca: 93:43:93:27:b9:36:d8:cd:8e:95:14:91:42:15:9b: 99:0c:99:71:a1:3e:3c:01:2e:2e:f6:2f:eb:a8:67: 23:fd:b0:e6:fd:bd:bb:09:e9:f9:3c:80:5c:e6:7c: 86:c2:cd:5e:ce:4d:16:c0:95:04:a0:fb:20:9a:35: e9:ce:35:19:6a:68:4d:07:e8:c9:f5:dc:53:78:88: 62:be:11:c6:fd:3f:23:51:6a:ae:80:79:af:db:2d: 78:6b:45:ea:82:8e:d2:0b:29:92:70:ae:6a:b1:42: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:68:9D:17:11:54:BF:ED:A6:C8:40:B0:11:E5:89:4B:CE:9A:72:26 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:97:1d:17:9f:35:a6:12:9a:a0:70:fd:63:c4:d5:14:75:b1: 50:23:df:b5:6f:0f:48:9b:07:f0:a0:16:79:67:d9:82:e6:b7: 18:15:23:e3:f0:a9:cf:6f:c2:29:d4:13:2b:76:7e:4b:3b:62: 3f:6c:ad:97:2f:5d:b0:20:23:00:0b:f7:83:a5:87:12:42:bf: c6:5d:5c:21:d0:07:45:31:90:8f:26:82:d9:58:29:e6:f1:ca: 28:84:4b:10:78:79:28:62:76:04:be:3a:7e:ac:50:f6:c4:ff: 41:97:4e:bb:09:25:47:07:1a:9f:b2:a4:05:17:b4:ac:92:05: 04:4e:ec:4b:ba:51:02:8d:f2:9a:42:49:e7:d1:a5:17:33:3f: cb:fa:ef:eb:08:f5:30:32:dd:a0:c8:b2:89:f2:a7:df:10:b0: b8:57:4b:7d:e4:60:98:6b:4e:f0:e6:b8:ad:2c:74:72:7c:23: e6:4e:44:51:69:93:7c:78:9c:36:ef:fa:fb:88:cc:3a:e6:d5: 01:c3:2d:48:02:29:b5:c7:b8:bf:96:2e:5c:f0:21:a2:ef:64: 98:3d:8b:36:e6:d2:7e:a5:60:16:22:d7:0a:8e:68:4b:15:61: ac:fc:93:1e:bc:8c:75:0d:49:8e:80:93:90:6d:c6:c8:ec:8a: 16:00:89:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzJ6Sq3Y9+PvcZeJ1cKBQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjYwMTEyMTcwMTE4WhcNMjYwMTEzMTcwMTE4WjAzMTEwLwYDVQQD EyhiYTY4OWQxNzExNTRiZmVkYTZjODQwYjAxMWU1ODk0YmNlOWE3MjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqb1QgAMdHsrGOIruS6+SbvyU1a0 77URqWaB3vDHDJKpcEMd9O4R3XYy1QFdK9v/SaU8/1PwVhcPnbf7P3pfpyy2lAvx m74RSI2s/9EWpG4JiYA2NPSuwaBiXyL2/qMOsJFOFt2AqOSolWRMa1aMGgRu08hu PuRhe0jPAu5kIQdXjFzpUdAy59qO8/YjeUOvE6r79sqTQ5MnuTbYzY6VFJFCFZuZ DJlxoT48AS4u9i/rqGcj/bDm/b27Cen5PIBc5nyGws1ezk0WwJUEoPsgmjXpzjUZ amhNB+jJ9dxTeIhivhHG/T8jUWqugHmv2y14a0Xqgo7SCymScK5qsUIfUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLponRcRVL/tpshAsBHliUvOmnImMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5cdF581 phKaoHD9Y8TVFHWxUCPftW8PSJsH8KAWeWfZgua3GBUj4/Cpz2/CKdQTK3Z+Szti P2ytly9dsCAjAAv3g6WHEkK/xl1cIdAHRTGQjyaC2Vgp5vHKKIRLEHh5KGJ2BL46 fqxQ9sT/QZdOuwklRwcan7KkBRe0rJIFBE7sS7pRAo3ymkJJ59GlFzM/y/rv6wj1 MDLdoMiyifKn3xCwuFdLfeRgmGtO8Oa4rSx0cnwj5k5EUWmTfHicNu/6+4jMOubV AcMtSAIptce4v5YuXPAhou9kmD2LNubSfqVgFiLXCo5oSxVhrPyTHryMdQ1JjoCT kG3GyOyKFgCJ5Q== -----END CERTIFICATE-----Generated at Tue Jan 13 02:14:01 2026 by rpki-client