This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json) Hash identifier: vpiXwL7nsGPUoa1ZdK0NuIuMEX7EEvQ5inTIrIp3Jw4= Subject key identifier: 73:7B:1A:22:D5:86:3F:DD:A9:E9:FB:C6:98:EA:35:2F:14:36:ED:33 Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd Certificate serial: 019BFE0ABE6F2CBB970D910B2B36E03A0F64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft Manifest number: 0AB7 Signing time: Tue 27 Jan 2026 06:01:15 +0000 Manifest this update: Tue 27 Jan 2026 06:01:15 +0000 Manifest next update: Wed 28 Jan 2026 06:01:15 +0000 Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: gKkWJcJm8LABXkg61DHDqFO79sugm8RrTHgDvj7aVKU=) 2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:be:6f:2c:bb:97:0d:91:0b:2b:36:e0:3a:0f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd Validity Not Before: Jan 27 06:01:15 2026 GMT Not After : Jan 28 06:01:15 2026 GMT Subject: CN=737b1a22d5863fdda9e9fbc698ea352f1436ed33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:a4:ef:b1:1e:2c:a6:70:c3:da:3e:fd:ae: 36:d5:f0:1f:94:0b:72:5e:90:0e:81:e6:6a:97:a6: d4:db:30:69:76:83:82:67:9c:df:2f:c1:53:c8:d2: 9c:7d:d5:02:55:59:23:6a:01:d1:17:81:ce:5a:a6: 52:0a:07:07:f1:e4:2f:ad:47:9b:fa:61:b4:68:6d: 90:fe:6a:bb:7a:15:97:04:75:ac:9e:02:c8:d5:9b: bd:1d:fc:d2:09:0e:53:f6:af:02:f3:d1:1f:1a:c7: 48:4f:57:30:7d:db:85:56:89:2e:2c:58:27:36:8e: 16:bb:0e:ce:73:e5:e1:39:bd:a3:0a:67:bc:5c:0c: 70:1b:f3:3f:b9:d6:66:f3:34:1a:b1:c4:64:db:a8: 70:4f:93:93:b8:f8:b9:96:a2:c4:2b:b4:77:4f:6b: d6:12:96:0c:b9:19:e8:5f:72:1c:9a:2d:ba:e6:e9: 39:63:cf:ef:f3:5a:d0:c7:71:b5:02:7b:22:6e:00: 4d:2f:1a:d8:0e:57:c5:cc:7a:6e:29:e6:72:27:c5: ab:10:5f:9b:86:0a:57:ca:4a:4e:55:2b:b0:33:2e: 6e:95:92:6a:e1:1d:b1:ca:b0:bc:5f:0a:1d:c1:9c: 4e:1c:90:bb:2a:bb:39:47:84:4d:d1:8b:ed:27:00: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:1A:22:D5:86:3F:DD:A9:E9:FB:C6:98:EA:35:2F:14:36:ED:33 X509v3 Authority Key Identifier: keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:08:80:91:eb:c6:b6:a9:8c:63:6d:ca:9d:6a:7d:98:e8:8b: 62:ec:4d:4b:5e:c8:19:5e:4d:73:f9:bd:89:36:4f:41:bf:e8: 08:8f:06:d0:58:ad:5a:38:34:50:f3:bc:60:2c:89:0a:34:c2: c5:36:40:73:49:79:be:72:78:66:c7:d9:09:77:df:2d:0f:34: 1f:14:cb:ac:78:37:4b:91:ba:ba:08:9b:f8:74:3d:45:59:bf: 37:a2:6d:c9:2b:d7:27:12:0a:49:b2:56:cf:5c:1c:5c:22:08: 1f:d5:c4:af:21:a6:5f:82:bf:55:d2:4f:64:53:78:96:fe:df: 7c:75:9c:bc:4f:cb:17:9f:89:58:83:cd:cb:f8:56:e2:bc:66: 33:c1:2b:5a:cc:7d:5e:bc:fe:f6:87:d5:65:cc:fc:a7:d8:c8: f2:20:75:3f:82:75:63:88:e0:77:eb:72:ac:4e:ff:46:04:47: 5c:d2:c0:87:67:7d:f0:cc:88:3e:b4:2d:8e:50:7f:44:8f:e8: d0:7e:79:1f:ad:e6:fd:6d:be:dd:66:8c:b6:a0:e0:0f:f6:9e: 82:c2:cb:da:ff:d6:94:ec:4f:70:54:02:9f:87:07:14:fc:08: 57:8e:7e:b2:90:da:34:34:ab:5c:7a:65:23:10:ee:69:b1:a3: b3:b7:4d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cr5vLLuXDZELKzbgOg9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5 NDJhYmQwHhcNMjYwMTI3MDYwMTE1WhcNMjYwMTI4MDYwMTE1WjAzMTEwLwYDVQQD Eyg3MzdiMWEyMmQ1ODYzZmRkYTllOWZiYzY5OGVhMzUyZjE0MzZlZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOak77EeLKZww9o+/a421fAflAty XpAOgeZql6bU2zBpdoOCZ5zfL8FTyNKcfdUCVVkjagHRF4HOWqZSCgcH8eQvrUeb +mG0aG2Q/mq7ehWXBHWsngLI1Zu9HfzSCQ5T9q8C89EfGsdIT1cwfduFVokuLFgn No4Wuw7Oc+XhOb2jCme8XAxwG/M/udZm8zQascRk26hwT5OTuPi5lqLEK7R3T2vW EpYMuRnoX3Icmi265uk5Y8/v81rQx3G1AnsibgBNLxrYDlfFzHpuKeZyJ8WrEF+b hgpXykpOVSuwMy5ulZJq4R2xyrC8XwodwZxOHJC7Krs5R4RN0YvtJwAV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN7GiLVhj/dqen7xpjqNS8UNu0zMB8GA1UdIwQY MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1 LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgiAkevG tqmMY23KnWp9mOiLYuxNS17IGV5Nc/m9iTZPQb/oCI8G0FitWjg0UPO8YCyJCjTC xTZAc0l5vnJ4ZsfZCXffLQ80HxTLrHg3S5G6ugib+HQ9RVm/N6JtySvXJxIKSbJW z1wcXCIIH9XEryGmX4K/VdJPZFN4lv7ffHWcvE/LF5+JWIPNy/hW4rxmM8ErWsx9 Xrz+9ofVZcz8p9jI8iB1P4J1Y4jgd+tyrE7/RgRHXNLAh2d98MyIPrQtjlB/RI/o 0H55H63m/W2+3WaMtqDgD/aegsLL2v/WlOxPcFQCn4cHFPwIV45+spDaNDSrXHpl IxDuabGjs7dNdQ== -----END CERTIFICATE-----Generated at Tue Jan 27 12:13:14 2026 by rpki-client