This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json) Hash identifier: cdThIJSdKHitfYfs3hvAZ4KHy4uB/qZgNWs6LtfpeOo= Subject key identifier: C1:C3:9D:9F:02:C1:58:8B:2A:9D:37:98:00:C6:A1:B0:51:55:08:03 Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019BDE7F763A804F163CEDA88110141B77A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft Manifest number: 17DC Signing time: Wed 21 Jan 2026 03:00:53 +0000 Manifest this update: Wed 21 Jan 2026 03:00:53 +0000 Manifest next update: Thu 22 Jan 2026 03:00:53 +0000 Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=) 2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=) 3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: 22E/+4Vypenl0DrvpHH+AVezVvFx/4a8bGuDx3smQ1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:7f:76:3a:80:4f:16:3c:ed:a8:81:10:14:1b:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Jan 21 03:00:53 2026 GMT Not After : Jan 22 03:00:53 2026 GMT Subject: CN=c1c39d9f02c1588b2a9d379800c6a1b051550803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:b2:42:e1:f7:77:12:df:b5:49:d8:60:2e: 1d:d7:2b:cc:2b:10:56:9b:21:7b:cd:1c:68:21:10: 4d:94:16:bb:57:19:ea:f7:19:8a:1c:cc:2a:18:65: cb:6c:b1:1c:ae:c4:49:9f:3a:aa:b3:1a:43:2d:82: 9b:2d:1a:65:27:1f:66:a2:d3:e2:1c:82:da:21:2b: 9b:de:33:57:0d:79:2e:0e:9c:bb:c4:41:e0:b5:13: 74:05:ef:ad:d9:8c:5b:7b:ac:1a:02:74:d4:1d:f4: 0f:87:cc:d3:2a:c3:59:6b:b5:53:38:e7:0c:c4:4b: 9e:ef:11:a2:c8:79:41:45:b8:82:49:b4:9f:35:21: bd:c0:10:01:7b:a8:8c:d1:ce:17:0b:ea:8a:50:57: 14:f0:18:a3:7c:51:e0:60:59:3b:8b:8d:0f:5d:97: 9f:78:57:30:cf:2b:c8:fd:1a:68:a8:db:21:33:e8: 11:ae:98:33:db:d2:ad:58:80:d2:62:64:3b:12:07: c9:f3:ce:b4:b9:60:f8:94:18:85:20:fd:d0:18:e2: 1a:43:7b:fb:05:15:63:4c:26:90:a3:63:90:23:f7: f9:fe:e7:82:da:22:37:a3:e1:f7:40:70:f6:73:c1: e0:54:97:cd:4d:7c:59:4f:33:1c:ab:df:b3:bc:34: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C3:9D:9F:02:C1:58:8B:2A:9D:37:98:00:C6:A1:B0:51:55:08:03 X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bf:53:6f:7a:bc:0c:d3:87:fa:a6:f5:9d:56:87:b3:e2:df: 28:a2:de:e3:25:2d:ab:98:7e:0a:07:6f:1d:80:69:98:10:58: a9:45:2b:19:3a:d9:9f:42:42:cc:9c:ae:f0:98:f7:42:e9:b5: 33:f1:ba:ba:f8:54:2b:40:c0:ec:58:2c:0e:f5:69:67:5b:1d: 44:ac:11:a6:5c:dc:a6:76:6b:f5:86:3c:da:aa:15:d6:8a:af: ab:03:65:d3:29:32:2f:3f:50:ab:8e:43:2c:2c:79:03:37:1d: d6:12:1c:2c:04:54:fa:0a:be:a3:58:0c:63:52:ec:04:6f:8d: b3:52:0f:75:ba:20:a6:a5:71:81:63:7c:41:4c:d6:c0:e6:55: a9:78:9d:2a:87:fd:3c:b1:33:c0:0a:b6:52:61:46:e4:b7:d7: ee:4d:62:91:48:f0:e4:c7:40:bd:20:e2:e5:c7:74:96:54:d8: 9e:53:5e:7e:38:ad:c6:7a:71:fa:2b:91:8d:05:28:fc:ff:88: 2b:11:c0:96:36:9f:cb:f0:d5:80:3c:9e:0c:c2:be:18:ae:ec: d2:d1:14:62:d1:26:f2:16:aa:23:32:67:cb:59:46:43:d8:fd: 82:9f:c8:97:3f:9d:09:dc:ce:95:76:72:28:a8:70:fe:0c:04: 3c:f4:54:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvef3Y6gE8WPO2ogRAUG3ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjYwMTIxMDMwMDUzWhcNMjYwMTIyMDMwMDUzWjAzMTEwLwYDVQQD EyhjMWMzOWQ5ZjAyYzE1ODhiMmE5ZDM3OTgwMGM2YTFiMDUxNTUwODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZKyQuH3dxLftUnYYC4d1yvMKxBW myF7zRxoIRBNlBa7Vxnq9xmKHMwqGGXLbLEcrsRJnzqqsxpDLYKbLRplJx9motPi HILaISub3jNXDXkuDpy7xEHgtRN0Be+t2Yxbe6waAnTUHfQPh8zTKsNZa7VTOOcM xEue7xGiyHlBRbiCSbSfNSG9wBABe6iM0c4XC+qKUFcU8BijfFHgYFk7i40PXZef eFcwzyvI/RpoqNshM+gRrpgz29KtWIDSYmQ7EgfJ8860uWD4lBiFIP3QGOIaQ3v7 BRVjTCaQo2OQI/f5/ueC2iI3o+H3QHD2c8HgVJfNTXxZTzMcq9+zvDR8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHDnZ8CwViLKp03mADGobBRVQgDMB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr9Tb3q8 DNOH+qb1nVaHs+LfKKLe4yUtq5h+CgdvHYBpmBBYqUUrGTrZn0JCzJyu8Jj3Qum1 M/G6uvhUK0DA7FgsDvVpZ1sdRKwRplzcpnZr9YY82qoV1oqvqwNl0ykyLz9Qq45D LCx5Azcd1hIcLARU+gq+o1gMY1LsBG+Ns1IPdbogpqVxgWN8QUzWwOZVqXidKof9 PLEzwAq2UmFG5LfX7k1ikUjw5MdAvSDi5cd0llTYnlNefjitxnpx+iuRjQUo/P+I KxHAljafy/DVgDyeDMK+GK7s0tEUYtEm8haqIzJny1lGQ9j9gp/Ilz+dCdzOlXZy KKhw/gwEPPRUmw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:13 2026 by rpki-client