This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json) Hash identifier: 4saSM+12Fgsz7w6K90+DOD1UleoiOa+dq5u2dbyoWfo= Subject key identifier: 80:D6:41:1A:79:D3:D4:37:48:FA:BE:DB:44:48:7E:27:8C:5F:36:D0 Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019BF8ACE501F2876D2C24AAE6CDD149FEAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 05:00:38 +0000 Manifest this update: Mon 26 Jan 2026 05:00:38 +0000 Manifest next update: Tue 27 Jan 2026 05:00:38 +0000 Files and hashes: 1: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (hash: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM=) 2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: 2wMeyJleEfaPmF3rbsc4pCgsrzIU0FiTyWp827ts1Eg=) 3: EboQ4nMXI48WwaHSZ15OkVHDyAI.roa (hash: SI3+ap2GxZORyWEjQakTcPIlhvRATeVhJTKd2WR2ixc=) 4: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (hash: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU=) 5: YWQCWSs8yZA8QY3t_PyQQKGtK3k.asa (hash: S3rytmqhbZUvqszHeJsXQK+zRV9JSgSBvpP4kCVStOY=) 6: draI0Cjc4C6_RI6Dss79xlrr8uQ.asa (hash: NISnvZNJdodDTScf7hvZCAyYZKv+C3I1Mf07uJ3IQSw=) 7: g35mWcEGcq2FL_ocMSP0RxgyJbQ.roa (hash: TVfIUA4MSHRm3H/AediOWDJYEMm9upS+VZ1+4Q2NBSY=) 8: xNSFqM7-0qNODofNrUEn4XQu4ME.roa (hash: raRCbVzrGPXhNpKnAVtwuinosdft0bdaQidRsp21paQ=) 9: xffyY7RBwYFFWdto18bFCIkAi6M.roa (hash: /wOHBg089w6pbrnt+9vXF4Wu2NJ5CjjnhokCvpVnwN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e5:01:f2:87:6d:2c:24:aa:e6:cd:d1:49:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 26 05:00:38 2026 GMT Not After : Jan 27 05:00:38 2026 GMT Subject: CN=80d6411a79d3d43748fabedb44487e278c5f36d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:db:32:b0:40:0f:28:a2:36:46:80:d4:d6: ee:7e:1e:8e:17:40:4b:e9:f8:d5:ac:4d:06:14:29: f1:70:6a:d7:05:d9:6f:73:75:b5:9c:16:74:c2:77: ed:cb:7f:84:bc:e8:05:53:13:a5:ea:ed:b1:3d:8b: a1:f4:5c:93:7f:58:8e:cf:4a:e0:02:3a:b2:02:54: 5b:9c:d0:c2:34:cc:26:50:57:7f:7b:65:6e:2c:a5: db:1b:b7:8f:63:e9:8e:c0:8e:e1:11:42:5f:21:4b: 27:0f:dd:52:0b:86:8f:61:aa:ba:d2:e2:58:b7:38: 93:70:aa:0e:44:60:5b:8f:6a:90:a0:0f:e7:78:2b: d6:d6:dc:7e:20:ef:a5:bb:05:ac:61:80:36:5d:f8: e5:d5:57:78:5e:fa:73:6e:f4:4d:79:88:ed:98:15: 75:1d:29:bd:12:29:16:ca:90:e9:c7:9c:74:c0:ef: 74:02:09:44:a2:f1:83:35:c2:fe:62:47:ef:4d:c2: 07:bd:21:bb:a4:db:c5:1c:37:14:5b:99:12:9c:04: 53:4a:f9:94:f1:ff:e9:bd:32:25:50:bc:4d:9b:5b: f7:b3:73:e8:67:a5:29:fd:ef:15:94:71:b7:53:86: 6b:c7:c2:7b:61:63:ed:f9:c4:1f:92:c3:67:1b:ed: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:41:1A:79:D3:D4:37:48:FA:BE:DB:44:48:7E:27:8C:5F:36:D0 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dd:2b:51:f2:88:03:d2:08:a3:f4:3a:9d:3d:d7:07:cf:50: 90:b0:f1:5d:cc:49:bf:a9:ba:9d:04:3f:69:74:fa:a4:32:c7: 7f:7e:f5:0b:cb:8f:73:8c:10:83:aa:c1:b7:2d:20:57:d0:f9: d8:94:23:da:d6:79:20:47:a7:16:86:eb:d4:ec:3e:aa:f2:bb: ea:da:47:32:71:7c:9b:72:16:8a:80:85:f1:e6:31:62:76:83: 48:05:38:07:28:2e:a4:a8:7f:c8:61:0e:69:78:e8:31:6f:49: fd:bf:5b:9c:16:b6:0b:48:63:42:8b:c8:69:a6:a4:1a:94:77: 33:57:7b:74:d2:f6:99:a8:b2:b1:1c:1a:a9:42:c8:0b:45:5f: f5:f1:de:c2:24:73:55:b5:38:4f:8b:6f:c7:76:3b:c6:61:77: 3c:33:96:fb:28:3a:00:81:7d:2a:e8:5a:e5:d1:fa:74:47:47: b6:8b:f0:53:93:e8:0c:8e:6d:91:48:3e:23:56:93:7e:e1:37: dc:58:60:0d:ac:c9:69:81:aa:b8:b0:2b:21:39:4d:70:de:b7: 02:bf:b0:cb:fe:64:cc:29:4c:97:7d:f4:dc:25:18:46:f5:e7: a8:62:a5:e2:fb:4a:c2:0d:8d:bd:c3:97:6b:a8:53:37:78:13: 4f:4c:dd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOUB8odtLCSq5s3RSf6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTI2MDUwMDM4WhcNMjYwMTI3MDUwMDM4WjAzMTEwLwYDVQQD Eyg4MGQ2NDExYTc5ZDNkNDM3NDhmYWJlZGI0NDQ4N2UyNzhjNWYzNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03jbMrBADyiiNkaA1Nbufh6OF0BL 6fjVrE0GFCnxcGrXBdlvc3W1nBZ0wnfty3+EvOgFUxOl6u2xPYuh9FyTf1iOz0rg AjqyAlRbnNDCNMwmUFd/e2VuLKXbG7ePY+mOwI7hEUJfIUsnD91SC4aPYaq60uJY tziTcKoORGBbj2qQoA/neCvW1tx+IO+luwWsYYA2Xfjl1Vd4XvpzbvRNeYjtmBV1 HSm9EikWypDpx5x0wO90AglEovGDNcL+YkfvTcIHvSG7pNvFHDcUW5kSnARTSvmU 8f/pvTIlULxNm1v3s3PoZ6Up/e8VlHG3U4Zrx8J7YWPt+cQfksNnG+3b1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDWQRp509Q3SPq+20RIfieMXzbQMB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi90rUfKI A9IIo/Q6nT3XB89QkLDxXcxJv6m6nQQ/aXT6pDLHf371C8uPc4wQg6rBty0gV9D5 2JQj2tZ5IEenFobr1Ow+qvK76tpHMnF8m3IWioCF8eYxYnaDSAU4BygupKh/yGEO aXjoMW9J/b9bnBa2C0hjQovIaaakGpR3M1d7dNL2maiysRwaqULIC0Vf9fHewiRz VbU4T4tvx3Y7xmF3PDOW+yg6AIF9Kuha5dH6dEdHtovwU5PoDI5tkUg+I1aTfuE3 3FhgDazJaYGquLArITlNcN63Ar+wy/5kzClMl3303CUYRvXnqGKl4vtKwg2NvcOX a6hTN3gTT0zduA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:55 2026 by rpki-client