This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: lhwVBfWFNFqM/cOoQf2j5vJDc0lY5Xx6pqCq69GGHik= Subject key identifier: AC:7A:77:1B:5E:A1:96:90:98:FE:90:61:2C:33:03:01:CB:52:91:E7 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019BF808AFA0EC20BA4654E2D47929322D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 14E9 Signing time: Mon 26 Jan 2026 02:01:17 +0000 Manifest this update: Mon 26 Jan 2026 02:01:17 +0000 Manifest next update: Tue 27 Jan 2026 02:01:17 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: nP64d5mJNs74OJE3jZoP7dq30yRqNOBCK0U4E4RQZz0=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: PltyVjQAqljKh-lpYhHsZNR11q4.roa (hash: M3aePkMYEmgu13dRPatY8KDTkwjaxhLnORYN2cJl+Pk=) 9: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 10: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 11: hkTeBzR1zcpqpx-K2o2CKT69syE.roa (hash: 2ch6dbKSCdDQEw4rDKS8nHOAKxa/9jjwxReZLqw+2wk=) 12: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 13: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 14: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 15: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) 16: xYO3tyyPxHta_UjYp7pYCPsRfo8.roa (hash: sws8cWbHWQhZdTJrDoM6VzTyVp0PMivb8c57UClyZ64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:af:a0:ec:20:ba:46:54:e2:d4:79:29:32:2d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 26 02:01:17 2026 GMT Not After : Jan 27 02:01:17 2026 GMT Subject: CN=ac7a771b5ea1969098fe90612c330301cb5291e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:ec:23:37:50:ba:36:cd:74:92:1c:46:28: b5:0f:1a:9c:e3:29:0b:58:13:29:1f:d8:4e:d4:42: 53:ac:6f:61:d0:e7:bf:42:82:51:9d:ad:8e:ac:86: 22:dd:fe:e4:9b:ba:c4:6d:83:48:03:42:be:ac:88: 47:db:90:9c:4c:66:a1:00:1a:12:4d:25:c6:a6:3d: bf:16:5f:5d:b9:be:79:5c:c7:9e:37:ff:0f:42:50: b2:f2:d7:c4:51:e6:b9:53:26:7e:1a:04:e0:3b:59: ca:9a:d8:e3:3b:9d:9c:d7:28:45:c7:cb:67:5e:43: b9:e0:6e:fe:f5:45:84:de:5b:25:93:2b:25:01:94: 9e:c6:8b:f3:6b:b4:ed:9b:14:b6:29:b2:aa:8f:6c: db:1a:1d:42:a1:94:8a:99:d5:f6:6f:4a:75:82:eb: 67:d3:87:c8:b9:90:29:e3:1b:fa:68:14:2a:2e:59: c9:fc:ea:33:11:b8:df:35:07:21:af:25:11:2c:4d: b2:95:31:58:37:ec:25:d2:8e:cf:f3:8b:3f:86:08: a9:7b:95:9a:e1:ab:6b:74:cd:34:b6:09:d1:61:d3: c2:7f:78:61:d0:88:d8:cf:2a:67:7e:e3:c3:8c:dd: 3b:5a:61:00:5c:4e:80:88:58:64:3d:c5:e5:55:d1: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7A:77:1B:5E:A1:96:90:98:FE:90:61:2C:33:03:01:CB:52:91:E7 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:32:2e:fd:d5:9a:c5:fe:94:46:78:d6:10:9d:a6:43:8a: 7a:ab:75:f0:cb:f7:15:aa:e4:f3:44:0e:5c:09:2b:a7:56:64: e3:b6:a5:22:3a:ab:a9:33:b1:13:e9:b2:db:c1:9c:11:b2:20: 51:f8:ec:58:6a:3b:86:ff:26:30:07:21:0a:ed:28:08:0c:ed: 4d:81:56:7e:12:c1:ee:f4:99:ac:ec:4b:6d:0a:e3:1e:c4:f3: 5f:72:3f:36:3e:7d:1c:8e:c6:2d:fa:8e:3f:d8:27:49:f9:02: 76:1e:62:21:93:dc:41:8e:1b:09:09:ef:8b:53:00:f7:f5:0a: b9:cd:1b:65:be:3b:61:50:e6:ef:5d:a9:a6:b2:0b:86:07:c6: 85:0f:bb:00:bd:94:99:ee:be:c3:33:0a:4a:91:ac:c9:40:e6: 3b:42:4d:d8:23:5a:30:8e:1c:e3:65:c2:3f:dc:e9:8f:ab:0c: 05:e6:f6:b8:9b:aa:00:f1:96:c7:39:ff:02:13:a8:85:61:e6: 91:86:f9:2a:d5:ef:b1:7b:f0:66:db:d7:0c:58:b1:25:a6:be: 98:ce:b1:e7:04:af:52:0f:06:52:46:e0:e1:a3:5f:a6:22:0b: d2:f0:b2:eb:b7:9a:ce:4f:99:66:34:2c:b7:ae:65:c3:07:a7: 8b:6a:0f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CK+g7CC6RlTi1HkpMi1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTI2MDIwMTE3WhcNMjYwMTI3MDIwMTE3WjAzMTEwLwYDVQQD EyhhYzdhNzcxYjVlYTE5NjkwOThmZTkwNjEyYzMzMDMwMWNiNTI5MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLDsIzdQujbNdJIcRii1Dxqc4ykL WBMpH9hO1EJTrG9h0Oe/QoJRna2OrIYi3f7km7rEbYNIA0K+rIhH25CcTGahABoS TSXGpj2/Fl9dub55XMeeN/8PQlCy8tfEUea5UyZ+GgTgO1nKmtjjO52c1yhFx8tn XkO54G7+9UWE3lslkyslAZSexovza7TtmxS2KbKqj2zbGh1CoZSKmdX2b0p1gutn 04fIuZAp4xv6aBQqLlnJ/OozEbjfNQchryURLE2ylTFYN+wl0o7P84s/hgipe5Wa 4atrdM00tgnRYdPCf3hh0IjYzypnfuPDjN07WmEAXE6AiFhkPcXlVdF46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx6dxteoZaQmP6QYSwzAwHLUpHnMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9QyLv3V msX+lEZ41hCdpkOKeqt18Mv3Fark80QOXAkrp1Zk47alIjqrqTOxE+my28GcEbIg UfjsWGo7hv8mMAchCu0oCAztTYFWfhLB7vSZrOxLbQrjHsTzX3I/Nj59HI7GLfqO P9gnSfkCdh5iIZPcQY4bCQnvi1MA9/UKuc0bZb47YVDm712pprILhgfGhQ+7AL2U me6+wzMKSpGsyUDmO0JN2CNaMI4c42XCP9zpj6sMBeb2uJuqAPGWxzn/AhOohWHm kYb5KtXvsXvwZtvXDFixJaa+mM6x5wSvUg8GUkbg4aNfpiIL0vCy67eazk+ZZjQs t65lwweni2oPnw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:09:10 2026 by rpki-client