This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json) Hash identifier: SKwdJi8WsHyxRzIqDsV1PYzXGhEQipvx6cEQ12eeolY= Subject key identifier: 87:BF:87:9C:BD:BA:C7:CB:15:50:07:3E:16:9C:D1:7B:23:F6:DA:24 Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019C1FBA71A2BA9E392B93D063213F9D22AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft Manifest number: 046C Signing time: Mon 02 Feb 2026 19:00:38 +0000 Manifest this update: Mon 02 Feb 2026 19:00:38 +0000 Manifest next update: Tue 03 Feb 2026 19:00:38 +0000 Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=) 2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: vO5iQtPDVnNeJmWWsmM0qfa/F0wRbt71QUi4TnyziSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:ba:71:a2:ba:9e:39:2b:93:d0:63:21:3f:9d:22:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Feb 2 19:00:38 2026 GMT Not After : Feb 3 19:00:38 2026 GMT Subject: CN=87bf879cbdbac7cb1550073e169cd17b23f6da24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:df:58:0d:d3:12:e0:4b:39:3e:e0:6a:e7: 6a:23:e2:c3:f6:09:eb:2d:36:b5:ad:bd:d8:00:f0: 10:94:a0:11:9b:56:01:e5:f7:bc:d1:59:d5:78:06: af:e1:32:a8:a6:f7:41:86:1a:af:11:90:c9:38:e0: cc:92:e2:b8:24:68:59:98:e9:09:66:29:36:b7:d8: c1:86:01:ad:69:d3:90:ef:ca:21:d9:a4:eb:44:6a: 9e:6e:f6:58:10:92:57:2e:a3:53:4f:99:8f:fd:ff: 6c:0e:b8:38:fd:13:26:78:94:93:4d:53:33:e9:2e: a4:6f:e0:ec:28:c8:3c:d1:39:25:e8:01:1f:e5:30: c2:46:6b:47:a3:70:f4:6c:ca:f9:28:23:95:08:66: 0b:f6:a1:37:a8:96:f5:f4:c8:e7:ac:d2:c4:f4:9e: 44:09:fb:0c:86:d3:65:52:90:a6:1e:85:3c:11:48: bd:6c:63:2e:6f:b7:12:01:3e:c2:69:73:22:a9:38: 22:00:52:df:5d:2e:ee:f1:01:fb:9a:fd:a4:79:64: 66:0f:da:7f:de:92:67:c9:93:b6:02:a0:5c:54:55: c2:32:ec:95:ff:39:f4:47:9c:fa:61:31:37:d9:dd: 7c:46:36:50:08:98:a6:7e:20:2d:84:07:f1:e6:44: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BF:87:9C:BD:BA:C7:CB:15:50:07:3E:16:9C:D1:7B:23:F6:DA:24 X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e8:f4:55:f9:35:69:50:f0:43:97:27:3b:71:14:dd:29:32: d5:e7:12:7b:0f:1c:65:78:05:16:a4:be:04:af:3d:f2:cd:e4: a4:10:c8:0d:f5:85:e3:08:b3:07:48:d4:ff:87:a2:f2:fb:ad: 6b:7f:62:b7:91:a6:2b:c9:28:ea:15:78:26:80:ca:7d:ed:97: bd:d5:52:87:9d:df:59:36:27:92:87:e8:75:40:c9:0f:9e:3c: 49:78:87:33:92:5c:7a:15:dd:7c:21:87:48:48:a7:93:cc:09: d1:84:64:dd:9b:4f:5d:af:59:48:4f:9d:c7:bb:a9:43:5f:6f: 36:d0:83:29:8a:92:88:38:6a:99:c7:0e:1c:aa:19:60:d0:65: 73:8d:3f:6f:95:56:c0:d7:7d:88:be:23:3a:e3:8e:13:ba:0d: 91:e5:e5:fe:80:df:49:8d:18:f8:af:63:f3:ca:00:dd:ef:dd: 4c:d3:3f:ff:58:47:99:e5:d0:eb:29:de:89:09:af:2e:23:6a: bd:58:75:7c:2a:17:00:8c:bc:11:1f:e4:c7:83:66:d8:3e:ea: 6b:74:0b:d0:32:f7:e3:ad:38:fd:42:ad:31:61:ac:9d:f0:3d: a0:3e:7f:ee:55:e4:15:ff:0d:7d:fb:e1:3f:77:3b:be:6c:2c: ec:7c:21:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfunGiup45K5PQYyE/nSKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjYwMjAyMTkwMDM4WhcNMjYwMjAzMTkwMDM4WjAzMTEwLwYDVQQD Eyg4N2JmODc5Y2JkYmFjN2NiMTU1MDA3M2UxNjljZDE3YjIzZjZkYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb7fWA3TEuBLOT7gaudqI+LD9gnr LTa1rb3YAPAQlKARm1YB5fe80VnVeAav4TKopvdBhhqvEZDJOODMkuK4JGhZmOkJ Zik2t9jBhgGtadOQ78oh2aTrRGqebvZYEJJXLqNTT5mP/f9sDrg4/RMmeJSTTVMz 6S6kb+DsKMg80Tkl6AEf5TDCRmtHo3D0bMr5KCOVCGYL9qE3qJb19MjnrNLE9J5E CfsMhtNlUpCmHoU8EUi9bGMub7cSAT7CaXMiqTgiAFLfXS7u8QH7mv2keWRmD9p/ 3pJnyZO2AqBcVFXCMuyV/zn0R5z6YTE32d18RjZQCJimfiAthAfx5kRyYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe/h5y9usfLFVAHPhac0Xsj9tokMB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+j0Vfk1 aVDwQ5cnO3EU3Sky1ecSew8cZXgFFqS+BK898s3kpBDIDfWF4wizB0jU/4ei8vut a39it5GmK8ko6hV4JoDKfe2XvdVSh53fWTYnkofodUDJD548SXiHM5JcehXdfCGH SEink8wJ0YRk3ZtPXa9ZSE+dx7upQ19vNtCDKYqSiDhqmccOHKoZYNBlc40/b5VW wNd9iL4jOuOOE7oNkeXl/oDfSY0Y+K9j88oA3e/dTNM//1hHmeXQ6yneiQmvLiNq vVh1fCoXAIy8ER/kx4Nm2D7qa3QL0DL34604/UKtMWGsnfA9oD5/7lXkFf8Nffvh P3c7vmws7Hwh/A== -----END CERTIFICATE-----Generated at Tue Feb 3 04:57:21 2026 by rpki-client