This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json) Hash identifier: MxLgrplTLM88/5/tdkJSurP0OPuBxaUJbwITZrXpYYA= Subject key identifier: EE:2B:0B:7C:E4:8A:7B:A6:6B:BF:6C:6F:CE:90:B2:7F:45:B0:E0:9A Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Certificate serial: 019BAE6F4F8EC0A209D767ACEC8B144F8121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft Manifest number: 17C3 Signing time: Sun 11 Jan 2026 19:01:28 +0000 Manifest this update: Sun 11 Jan 2026 19:01:28 +0000 Manifest next update: Mon 12 Jan 2026 19:01:28 +0000 Files and hashes: 1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: v+DsoPwSZpKZqIjZ734A+sYjOKSAZnQHK9e3t63/qgw=) 2: b5rSVSE86TGLka-C9Y6AISDjJwY.roa (hash: 0t2RVqp+17d/DpuBSPwdIacfG2COXwMxK/FmGDoAc0c=) 3: ta-CNtfidcX1EjmoTR6fl18hgE0.roa (hash: q55VmsTObI5y8vc6bmzOo3ADkQ630TErDSQUk8EgGVc=) 4: yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa (hash: v8TlzmItyWM72tUXJ5LijiOK5kdxTCw7SZEC3tomivk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:4f:8e:c0:a2:09:d7:67:ac:ec:8b:14:4f:81:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Validity Not Before: Jan 11 19:01:28 2026 GMT Not After : Jan 12 19:01:28 2026 GMT Subject: CN=ee2b0b7ce48a7ba66bbf6c6fce90b27f45b0e09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:2b:c5:1d:a8:b7:c4:6e:25:00:de:ea:57: bc:82:3d:61:de:5f:0e:d3:8a:28:93:09:46:a2:d7: cf:ef:95:02:c6:01:55:6a:58:63:14:51:90:79:ea: 34:29:7d:c3:fd:ab:e5:36:f1:14:1d:40:6e:93:97: aa:11:db:58:70:24:49:67:53:8f:f9:ea:7d:01:95: 53:17:cf:db:11:bc:22:21:fe:f0:f5:2f:fa:18:e0: 56:a9:45:1b:77:99:06:31:69:52:98:b2:fe:20:70: f1:dd:bf:c7:d6:a5:6f:79:f5:21:45:b3:26:ba:42: aa:c3:c1:c6:56:2d:69:c3:00:cc:70:fe:f5:57:c2: 17:1e:9e:12:84:ec:8f:aa:67:2a:4d:6a:00:9a:64: 53:13:e7:6a:14:be:ec:b2:6d:0d:ae:40:e6:08:3c: c2:4b:a0:e5:b2:57:bf:a3:da:df:2d:d2:31:e1:b2: 42:71:f9:ac:8d:49:91:49:31:39:0b:41:5c:2d:5c: 82:de:f1:02:49:81:7f:6e:88:78:c5:e7:78:93:23: 77:c5:d5:12:f6:70:9b:b9:ba:40:66:d0:39:80:28: 34:49:f4:aa:9e:9f:90:94:ec:bc:94:39:aa:7c:05: 8a:e7:e7:ef:7e:39:c0:29:93:2e:0f:cd:e8:7a:d3: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2B:0B:7C:E4:8A:7B:A6:6B:BF:6C:6F:CE:90:B2:7F:45:B0:E0:9A X509v3 Authority Key Identifier: keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:74:e0:a3:cc:93:3a:7f:65:4a:68:6c:53:0c:c1:08:dc:7e: 80:a6:65:2f:3e:2c:2d:b4:e7:c5:5f:87:df:a0:41:e8:9b:8c: d9:f1:be:6e:d4:f9:07:0e:9f:0f:4c:8a:ec:40:46:eb:24:0b: e1:24:d7:a9:f2:c9:7f:3c:19:c8:29:b9:e4:9f:d2:60:5a:61: fb:d0:36:93:14:ee:f7:5b:82:02:31:90:3d:2f:ca:46:05:1d: bf:3d:1c:6d:4e:8c:ae:6e:c1:c9:3a:3b:52:8f:55:57:7b:37: 95:10:67:ec:a8:07:9e:fe:03:fc:96:f1:dc:77:19:3a:06:82: 7a:26:51:02:43:cd:27:87:fc:60:4d:b8:c8:55:7e:d0:8e:1c: 37:89:b5:1a:84:0b:b4:13:b1:73:be:df:0a:93:e0:ba:83:fc: 19:85:e9:07:52:f1:9c:42:c5:39:03:1c:87:0e:11:e3:92:e5: 71:4f:67:3d:c0:e4:1f:7c:12:5f:67:d6:0e:12:de:31:5f:d5: 4e:14:f6:12:ac:6d:da:24:57:d6:74:6c:5a:74:89:f7:7f:83: f4:83:c5:8f:1d:89:9f:a9:58:23:e7:21:ec:7c:b6:f9:ef:69: 44:c8:78:5d:27:19:96:36:78:1c:cd:f6:5b:fc:63:4c:12:8c: 22:61:9a:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub0+OwKIJ12es7IsUT4EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk OTNmNjYwHhcNMjYwMTExMTkwMTI4WhcNMjYwMTEyMTkwMTI4WjAzMTEwLwYDVQQD EyhlZTJiMGI3Y2U0OGE3YmE2NmJiZjZjNmZjZTkwYjI3ZjQ1YjBlMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQrxR2ot8RuJQDe6le8gj1h3l8O 04ookwlGotfP75UCxgFValhjFFGQeeo0KX3D/avlNvEUHUBuk5eqEdtYcCRJZ1OP +ep9AZVTF8/bEbwiIf7w9S/6GOBWqUUbd5kGMWlSmLL+IHDx3b/H1qVvefUhRbMm ukKqw8HGVi1pwwDMcP71V8IXHp4ShOyPqmcqTWoAmmRTE+dqFL7ssm0NrkDmCDzC S6Dlsle/o9rfLdIx4bJCcfmsjUmRSTE5C0FcLVyC3vECSYF/boh4xed4kyN3xdUS 9nCbubpAZtA5gCg0SfSqnp+QlOy8lDmqfAWK5+fvfjnAKZMuD83oetO6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4rC3zkinuma79sb86Qsn9FsOCaMB8GA1UdIwQY MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt ZWJkZjM4YjAwOTVjLzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHTgo8yT On9lSmhsUwzBCNx+gKZlLz4sLbTnxV+H36BB6JuM2fG+btT5Bw6fD0yK7EBG6yQL 4STXqfLJfzwZyCm55J/SYFph+9A2kxTu91uCAjGQPS/KRgUdvz0cbU6Mrm7ByTo7 Uo9VV3s3lRBn7KgHnv4D/Jbx3HcZOgaCeiZRAkPNJ4f8YE24yFV+0I4cN4m1GoQL tBOxc77fCpPguoP8GYXpB1LxnELFOQMchw4R45LlcU9nPcDkH3wSX2fWDhLeMV/V ThT2Eqxt2iRX1nRsWnSJ93+D9IPFjx2Jn6lYI+ch7Hy2+e9pRMh4XScZljZ4HM32 W/xjTBKMImGa5w== -----END CERTIFICATE-----Generated at Mon Jan 12 00:18:23 2026 by rpki-client