This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json) Hash identifier: K6f42BVADfCUMaU0VB0mOVnToUb2HzKn1k55nGWQoOs= Subject key identifier: 48:5D:EB:0F:BC:A3:C3:EE:47:25:62:52:D2:4B:36:17:5D:85:09:A7 Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1 Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1 Certificate serial: 019BDE7F9885D19B66F661E933804567F963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft Manifest number: 17DD Signing time: Wed 21 Jan 2026 03:01:02 +0000 Manifest this update: Wed 21 Jan 2026 03:01:02 +0000 Manifest next update: Thu 22 Jan 2026 03:01:02 +0000 Files and hashes: 1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=) 2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=) 3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: o3VgDgHdEG/ZGJcGl80qjbNjl3Dqtb77QyhqG9I0zUY=) 4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:7f:98:85:d1:9b:66:f6:61:e9:33:80:45:67:f9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1 Validity Not Before: Jan 21 03:01:02 2026 GMT Not After : Jan 22 03:01:02 2026 GMT Subject: CN=485deb0fbca3c3ee47256252d24b36175d8509a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:70:9a:dd:d6:b4:53:f4:fe:2f:87:d7:16: a9:10:ec:d6:72:4a:51:e6:ae:4b:b6:df:32:4d:84: e4:bb:00:ae:af:16:f7:67:82:e0:e6:24:79:df:0a: 32:4b:2a:9d:59:7b:db:1d:2c:8d:ef:14:c9:e0:66: 34:27:55:d3:1d:7d:46:32:bc:b7:df:19:1d:2e:95: c1:47:b1:ec:39:68:57:93:bf:e2:8b:34:ab:d9:dd: 1c:12:5f:d4:b0:43:81:41:d1:e9:75:d4:cd:19:9c: fa:2f:03:83:4d:fd:5a:c7:98:01:1f:6e:bd:5d:e9: b4:37:71:f4:10:f1:f1:be:e2:c1:18:8e:c4:89:a4: c5:be:68:43:21:86:78:28:cb:84:b4:ec:9a:f4:c1: 85:13:1a:01:d4:2a:de:01:47:f8:45:ed:f0:d5:ad: 12:db:64:22:13:73:f6:88:54:0b:15:39:5c:3b:74: 69:9c:ca:b0:93:8a:1b:77:64:0d:43:5b:0e:30:4d: 64:68:3b:10:1c:93:33:db:57:a3:d0:67:56:33:cd: 53:1b:d6:ae:50:b7:89:3d:d0:e4:a3:a6:b2:18:8a: 16:76:a1:0f:4c:2f:6a:5c:be:52:7e:cb:ed:81:90: cb:ed:46:ce:af:42:05:ba:e1:f8:99:8e:9b:22:48: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:EB:0F:BC:A3:C3:EE:47:25:62:52:D2:4B:36:17:5D:85:09:A7 X509v3 Authority Key Identifier: keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c0:5d:c2:38:37:30:6a:b2:51:b3:95:33:02:00:4a:54:9d: 4e:a2:b9:0a:7d:24:f7:f9:2f:e7:42:91:95:34:29:14:7c:7f: f9:18:11:3a:3b:6e:77:9a:31:9f:9e:b6:51:e6:b3:53:bd:4c: f7:b5:5b:c2:07:76:28:15:20:ce:03:d4:38:a5:38:2e:b6:97: f2:0a:a1:04:a6:5f:b1:57:22:92:36:74:85:88:67:bd:13:c8: dc:15:85:56:9b:9f:85:ee:7b:48:87:11:28:2f:62:27:18:55: 46:a6:45:8c:9c:10:24:3e:52:0e:ec:c5:2a:39:15:f9:88:57: 39:8d:2e:ba:a9:7e:d5:58:64:ed:dc:90:e0:82:cd:c6:ec:42: 5a:1b:d8:24:f0:80:09:7a:50:fd:a1:9b:82:71:d1:49:32:01: 87:8c:e3:db:de:ba:f0:ad:21:35:ec:ec:ec:88:56:5f:63:4c: 6f:54:a5:91:11:96:c2:d1:1f:8a:72:73:15:a4:91:c7:22:1f: 3c:6b:99:cc:d3:db:eb:e5:c3:a7:a7:19:f9:39:64:51:d8:b0: 9c:5a:cc:bd:5a:37:65:4e:c8:57:bc:21:ab:41:e3:27:ea:1b: b3:ef:fb:13:28:f7:34:cb:af:a9:02:47:f7:20:06:b0:c4:aa: ea:95:61:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvef5iF0Ztm9mHpM4BFZ/ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2 OGQ1YzEwHhcNMjYwMTIxMDMwMTAyWhcNMjYwMTIyMDMwMTAyWjAzMTEwLwYDVQQD Eyg0ODVkZWIwZmJjYTNjM2VlNDcyNTYyNTJkMjRiMzYxNzVkODUwOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E5wmt3WtFP0/i+H1xapEOzWckpR 5q5Ltt8yTYTkuwCurxb3Z4Lg5iR53woySyqdWXvbHSyN7xTJ4GY0J1XTHX1GMry3 3xkdLpXBR7HsOWhXk7/iizSr2d0cEl/UsEOBQdHpddTNGZz6LwODTf1ax5gBH269 Xem0N3H0EPHxvuLBGI7EiaTFvmhDIYZ4KMuEtOya9MGFExoB1CreAUf4Re3w1a0S 22QiE3P2iFQLFTlcO3RpnMqwk4obd2QNQ1sOME1kaDsQHJMz21ej0GdWM81TG9au ULeJPdDko6ayGIoWdqEPTC9qXL5SfsvtgZDL7UbOr0IFuuH4mY6bIkimvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhd6w+8o8PuRyViUtJLNhddhQmnMB8GA1UdIwQY MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1 LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8Bdwjg3 MGqyUbOVMwIASlSdTqK5Cn0k9/kv50KRlTQpFHx/+RgROjtud5oxn562UeazU71M 97Vbwgd2KBUgzgPUOKU4LraX8gqhBKZfsVcikjZ0hYhnvRPI3BWFVpufhe57SIcR KC9iJxhVRqZFjJwQJD5SDuzFKjkV+YhXOY0uuql+1Vhk7dyQ4ILNxuxCWhvYJPCA CXpQ/aGbgnHRSTIBh4zj29668K0hNezs7IhWX2NMb1SlkRGWwtEfinJzFaSRxyIf PGuZzNPb6+XDp6cZ+TlkUdiwnFrMvVo3ZU7IV7whq0HjJ+obs+/7Eyj3NMuvqQJH 9yAGsMSq6pVh8g== -----END CERTIFICATE-----Generated at Wed Jan 21 09:06:25 2026 by rpki-client