This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json) Hash identifier: GvgqDjP44v9xSXFGgrs8/vSTAoR+dMD8ieNb9kxBFk0= Subject key identifier: 38:F0:7C:8F:DA:44:1A:8B:06:4F:C6:5F:37:6A:79:23:4E:95:2E:C7 Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Certificate serial: 019BFC89DDC8A7C2F0E3D18E8DB465EDD41D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft Manifest number: 0702 Signing time: Mon 26 Jan 2026 23:00:52 +0000 Manifest this update: Mon 26 Jan 2026 23:00:52 +0000 Manifest next update: Tue 27 Jan 2026 23:00:52 +0000 Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: aSTXqZvE0iUzGUAyMMdiaqY5/Vr42U2bJr5SFaawfJs=) 2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:dd:c8:a7:c2:f0:e3:d1:8e:8d:b4:65:ed:d4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Validity Not Before: Jan 26 23:00:52 2026 GMT Not After : Jan 27 23:00:52 2026 GMT Subject: CN=38f07c8fda441a8b064fc65f376a79234e952ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:d5:23:c5:59:78:6c:88:39:1e:f0:c3:17: 35:88:9f:7f:0f:f0:8b:da:16:c2:94:03:01:e9:a0: 58:13:06:7d:4b:d8:b0:b7:61:e5:03:b8:cf:1b:5e: 34:16:59:05:88:56:d6:20:dc:d9:65:3a:01:93:b4: 26:80:87:ad:1b:d7:34:da:ef:68:e9:3e:67:be:40: 85:d6:fb:be:80:79:b5:30:54:ae:16:20:c8:cc:f1: 81:e6:71:0b:d3:a3:fa:b3:5f:da:11:68:f5:9c:ad: 8f:ad:9e:9b:04:62:de:bb:b6:1e:f0:3e:3c:30:d8: fa:ae:cb:2e:52:d1:8f:6c:93:d3:7a:7b:a2:45:1d: 72:cd:49:31:6a:e2:1f:bd:35:4e:1f:ed:24:4a:ba: 51:76:33:d1:8d:6c:44:d8:c1:49:34:aa:40:b0:9d: 40:ab:1f:8f:77:45:d6:57:ce:cf:f7:de:2d:0f:9b: dc:57:8a:af:0c:38:8e:81:69:57:85:52:1f:0d:ab: 0b:0b:71:49:dc:b6:26:ee:aa:bf:46:fb:ec:bc:d2: 7e:ca:d9:8d:68:b2:c7:4f:32:a6:11:9c:b3:61:95: e5:d4:ca:73:78:7d:a4:0c:92:a6:d6:96:b8:c3:4b: 6a:4b:9e:e5:31:d0:f5:3c:a6:7f:71:41:49:3c:98: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:7C:8F:DA:44:1A:8B:06:4F:C6:5F:37:6A:79:23:4E:95:2E:C7 X509v3 Authority Key Identifier: keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e0:1e:ae:06:28:f7:bd:0f:32:6b:d0:8e:77:02:84:da:06: fc:74:82:64:53:f0:92:78:0c:7c:5f:7b:6c:89:83:71:62:ae: 5f:7f:ab:4d:bb:89:15:6b:8a:40:c2:cd:f6:6b:3f:a7:00:ce: 32:06:0c:dd:c9:9e:a2:14:e8:53:75:3f:10:7f:25:d5:fc:12: 1a:b7:07:ac:23:42:78:a4:6c:8e:41:c5:71:b5:b9:65:0e:a2: 82:7f:b7:19:da:c1:b5:cc:0e:d6:82:3c:eb:ad:53:ba:f8:e1: 23:64:91:2a:f2:10:a9:df:27:a1:16:6f:a6:73:6b:0a:e4:7a: 6d:57:fd:e4:82:1e:12:4f:82:12:95:24:91:86:32:ee:9f:4d: 1b:fd:38:76:ba:68:14:c6:34:57:4e:c3:87:17:82:82:0f:7b: 9b:f3:61:24:53:57:fd:06:21:65:7e:03:0f:b2:ba:ae:79:05: 04:34:7e:8e:d8:85:e2:5f:e5:12:0c:58:af:93:13:7a:9c:12: 44:9a:8f:96:4b:8e:71:eb:54:02:2c:45:3f:2b:16:e8:3c:5c: cf:dd:9a:87:94:1d:2f:6b:b6:54:7c:33:5c:63:77:a5:d2:b0: b1:33:fa:a0:b3:47:cc:c2:6b:07:77:fe:19:ca:3b:f3:e2:11: b8:e7:5b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8id3Ip8Lw49GOjbRl7dQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk MDRiOTUwHhcNMjYwMTI2MjMwMDUyWhcNMjYwMTI3MjMwMDUyWjAzMTEwLwYDVQQD EygzOGYwN2M4ZmRhNDQxYThiMDY0ZmM2NWYzNzZhNzkyMzRlOTUyZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3XVI8VZeGyIOR7wwxc1iJ9/D/CL 2hbClAMB6aBYEwZ9S9iwt2HlA7jPG140FlkFiFbWINzZZToBk7QmgIetG9c02u9o 6T5nvkCF1vu+gHm1MFSuFiDIzPGB5nEL06P6s1/aEWj1nK2PrZ6bBGLeu7Ye8D48 MNj6rssuUtGPbJPTenuiRR1yzUkxauIfvTVOH+0kSrpRdjPRjWxE2MFJNKpAsJ1A qx+Pd0XWV87P994tD5vcV4qvDDiOgWlXhVIfDasLC3FJ3LYm7qq/RvvsvNJ+ytmN aLLHTzKmEZyzYZXl1MpzeH2kDJKm1pa4w0tqS57lMdD1PKZ/cUFJPJj9sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjwfI/aRBqLBk/GXzdqeSNOlS7HMB8GA1UdIwQY MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOAergYo 970PMmvQjncChNoG/HSCZFPwkngMfF97bImDcWKuX3+rTbuJFWuKQMLN9ms/pwDO MgYM3cmeohToU3U/EH8l1fwSGrcHrCNCeKRsjkHFcbW5ZQ6ign+3GdrBtcwO1oI8 661TuvjhI2SRKvIQqd8noRZvpnNrCuR6bVf95IIeEk+CEpUkkYYy7p9NG/04drpo FMY0V07DhxeCgg97m/NhJFNX/QYhZX4DD7K6rnkFBDR+jtiF4l/lEgxYr5MTepwS RJqPlkuOcetUAixFPysW6Dxcz92ah5QdL2u2VHwzXGN3pdKwsTP6oLNHzMJrB3f+ Gco78+IRuOdbJg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:41:36 2026 by rpki-client