This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json) Hash identifier: IAqbxH98hsrScyQZRiJTRs4Ws4NvUD9MHn0ja6hYI/M= Subject key identifier: 80:42:4E:2B:FF:BA:E2:F5:37:C7:3C:66:5A:CA:A6:5D:56:83:FD:00 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019BDC23A45C1541B5EE4326A01913FEFD0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft Manifest number: 17F3 Signing time: Tue 20 Jan 2026 16:01:21 +0000 Manifest this update: Tue 20 Jan 2026 16:01:21 +0000 Manifest next update: Wed 21 Jan 2026 16:01:21 +0000 Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=) 2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=) 3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: XdxapIq4MM2r8QWidG9lxH7scIICrB86Hsgrhn8/uKM=) 4: MBDtMQDSqawqojb2FhK68rWmuLk.roa (hash: uLmuIf7vktZfQTA7fei9mu9bLdrRfmkbjGPhAoxKdLQ=) 5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=) 6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=) 7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=) 8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:23:a4:5c:15:41:b5:ee:43:26:a0:19:13:fe:fd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Jan 20 16:01:21 2026 GMT Not After : Jan 21 16:01:21 2026 GMT Subject: CN=80424e2bffbae2f537c73c665acaa65d5683fd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:7a:14:4e:f4:91:26:72:68:72:8d:1d:4b: d3:8e:75:fa:1f:dc:20:77:72:ee:0b:f1:e8:67:1b: 40:8a:a5:13:9b:a7:6d:4a:19:0a:fd:3f:f6:dd:81: 91:f8:58:35:d2:1b:b7:70:08:6d:5c:ed:12:91:ae: 0f:24:1b:2a:e9:a4:76:8c:02:c4:e0:11:f7:9c:3c: 97:30:7e:4f:f5:ed:df:37:e3:70:1c:07:c3:2c:90: de:c0:bb:32:1a:c2:3e:76:80:06:89:4e:7d:4b:ea: 97:f9:54:bc:26:af:fe:8c:e3:60:8f:05:94:67:19: f7:fc:71:15:d7:42:b8:60:5a:f8:48:eb:09:62:44: 15:88:ad:80:c9:b6:98:27:e6:92:39:3b:e9:b2:78: 77:88:4f:25:2a:c5:0e:9b:5a:46:78:3c:34:f1:8c: 67:46:b2:9f:31:d4:8c:fc:15:33:aa:44:71:d1:40: 48:0b:d1:88:b5:bf:f1:88:5d:7f:1a:62:fb:7f:c9: 1b:d5:c2:f3:8c:89:ed:d0:b1:d2:5f:6a:ee:c0:e1: 29:3f:94:af:38:a4:f0:58:60:7e:0f:16:ea:61:00: 1b:5a:65:9f:54:9d:79:a2:fa:31:2b:c4:62:fd:e7: cb:0c:d8:6a:78:29:89:27:65:2b:53:28:1a:a6:5e: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:42:4E:2B:FF:BA:E2:F5:37:C7:3C:66:5A:CA:A6:5D:56:83:FD:00 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:cf:17:36:2a:f4:7a:13:09:cf:e7:bc:a0:46:f6:ca:7d: 37:34:5b:b0:df:1d:4a:1a:2b:01:ed:c9:08:cf:71:ca:85:80: 1e:e9:69:1b:a4:77:c8:92:9e:12:85:57:0e:bb:42:4f:3e:2d: e5:1d:0d:85:d8:b0:7c:92:a3:f8:55:74:0b:55:ce:d5:31:33: bb:d2:36:db:85:5a:69:84:9b:1a:21:2c:50:aa:4d:f5:d9:1e: 1e:9b:c1:16:e6:8d:eb:cd:e2:f6:e7:5a:5a:f4:a5:84:cf:d0: 25:99:ab:54:4b:01:38:bf:a0:ba:d2:48:29:fc:d5:66:10:44: ea:1d:ce:73:ac:56:ca:e4:0a:7c:c2:ec:30:44:d9:28:9b:e5: 9e:a9:bd:53:f8:fd:94:7a:15:3e:53:4e:b7:08:d9:f4:d0:d8: 63:83:a7:b8:84:d6:7a:46:00:12:34:a4:c7:94:fe:ee:2d:e9: 12:02:bf:22:4c:7c:c4:f0:b9:77:ef:90:a0:e0:44:ae:0d:cf: 2c:f2:05:87:68:c5:8c:ce:e2:8f:04:82:7f:b4:bb:02:d2:43: 7f:72:d8:de:ef:fe:e4:7b:3d:e5:07:91:32:9c:a1:99:b5:ff: 95:67:aa:cf:54:8c:9d:09:c2:5f:79:0a:06:e7:1a:1f:34:c3: b8:a0:31:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvcI6RcFUG17kMmoBkT/v0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjYwMTIwMTYwMTIxWhcNMjYwMTIxMTYwMTIxWjAzMTEwLwYDVQQD Eyg4MDQyNGUyYmZmYmFlMmY1MzdjNzNjNjY1YWNhYTY1ZDU2ODNmZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0x6FE70kSZyaHKNHUvTjnX6H9wg d3LuC/HoZxtAiqUTm6dtShkK/T/23YGR+Fg10hu3cAhtXO0Ska4PJBsq6aR2jALE 4BH3nDyXMH5P9e3fN+NwHAfDLJDewLsyGsI+doAGiU59S+qX+VS8Jq/+jONgjwWU Zxn3/HEV10K4YFr4SOsJYkQViK2AybaYJ+aSOTvpsnh3iE8lKsUOm1pGeDw08Yxn RrKfMdSM/BUzqkRx0UBIC9GItb/xiF1/GmL7f8kb1cLzjInt0LHSX2ruwOEpP5Sv OKTwWGB+DxbqYQAbWmWfVJ15ovoxK8Ri/efLDNhqeCmJJ2UrUygapl7XtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBCTiv/uuL1N8c8ZlrKpl1Wg/0AMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiADPFzYq 9HoTCc/nvKBG9sp9NzRbsN8dShorAe3JCM9xyoWAHulpG6R3yJKeEoVXDrtCTz4t 5R0NhdiwfJKj+FV0C1XO1TEzu9I224VaaYSbGiEsUKpN9dkeHpvBFuaN683i9uda WvSlhM/QJZmrVEsBOL+gutJIKfzVZhBE6h3Oc6xWyuQKfMLsMETZKJvlnqm9U/j9 lHoVPlNOtwjZ9NDYY4OnuITWekYAEjSkx5T+7i3pEgK/Ikx8xPC5d++QoOBErg3P LPIFh2jFjM7ijwSCf7S7AtJDf3LY3u/+5Hs95QeRMpyhmbX/lWeqz1SMnQnCX3kK BucaHzTDuKAxiQ== -----END CERTIFICATE-----Generated at Wed Jan 21 00:54:31 2026 by rpki-client