This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json) Hash identifier: mE0xdLrlc4CoYbXHrf6AlKQJPyQjskspvhni7mXX2iI= Subject key identifier: 0D:38:89:92:99:54:C1:B0:FC:8D:F9:7C:9A:3C:91:1F:92:F9:D8:1B Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Certificate serial: 019BA18F0D1BBAD9A73B2B511E6720E85E58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft Manifest number: 1459 Signing time: Fri 09 Jan 2026 07:01:05 +0000 Manifest this update: Fri 09 Jan 2026 07:01:05 +0000 Manifest next update: Sat 10 Jan 2026 07:01:05 +0000 Files and hashes: 1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=) 2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: A3R1dR0LyLg2sXVUiuYwERhTU87XttOXpRvJOg6O5oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:0d:1b:ba:d9:a7:3b:2b:51:1e:67:20:e8:5e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Validity Not Before: Jan 9 07:01:05 2026 GMT Not After : Jan 10 07:01:05 2026 GMT Subject: CN=0d3889929954c1b0fc8df97c9a3c911f92f9d81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c1:9f:ca:76:3b:67:6c:e9:a5:72:32:17:62: da:13:17:50:bf:86:42:af:a1:22:02:d1:fe:75:95: 75:ff:10:43:27:bf:63:83:97:5a:fd:e5:bd:79:b3: 9d:d0:ce:6f:8d:81:1c:c2:89:8b:e1:4f:52:5a:98: 79:be:0c:0a:3b:f6:cd:a8:55:37:54:8d:eb:37:fc: 53:96:b2:03:d3:9f:04:79:24:09:0e:de:b5:41:fd: 3c:ee:c8:26:3c:bc:82:95:6a:6b:1f:a0:02:59:a1: 4b:29:1e:65:e3:ae:7e:8f:78:c5:af:04:f3:89:49: 82:10:ae:e5:83:2e:9d:e1:62:10:25:a0:c5:6f:0b: fa:e8:83:e7:80:5d:ed:4c:c8:ad:27:7a:e5:3d:11: 3a:ab:81:a2:52:77:63:e2:ed:30:be:f0:ed:b8:db: 05:5f:b1:9c:b5:51:b0:14:8c:2d:6d:d9:05:58:ec: 1e:11:c7:64:f6:c9:91:aa:1e:19:b3:7a:80:54:6c: 5a:f0:dc:d5:ef:51:53:1a:cb:20:e3:85:8d:16:93: b4:ba:bd:67:3f:3e:0a:b8:57:c3:d2:35:3a:fc:aa: 5f:6d:3f:fc:9a:70:88:db:11:c5:5b:57:3c:e7:16: ad:b6:c1:e1:44:0b:64:fa:de:a2:55:f7:b0:17:d5: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:89:92:99:54:C1:B0:FC:8D:F9:7C:9A:3C:91:1F:92:F9:D8:1B X509v3 Authority Key Identifier: keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:29:ed:b1:f1:b9:6f:43:ba:f7:d0:b9:3f:6f:22:30:a2:07: 58:95:2a:71:ba:0d:58:d2:35:ee:93:15:6f:ce:de:37:5e:c9: 46:79:13:80:33:ad:da:7c:b7:7c:6c:d0:9d:35:a6:41:23:9a: f7:e3:d4:33:ac:c3:09:6c:76:5e:a3:6b:98:c7:2b:e4:75:bb: 71:76:23:4b:9f:d3:2e:dd:30:24:67:49:58:9a:5e:48:30:3c: 6a:bb:e3:bb:b9:6d:36:1f:d2:e8:c9:2b:c3:5c:08:6c:6e:0f: cb:d8:20:22:74:42:57:0b:9b:f8:6b:38:12:b3:88:ea:d7:5f: 2e:10:76:4f:36:6f:0e:0d:a1:ac:dd:3b:f4:e1:e2:ee:d0:30: 8f:78:2b:af:2d:a8:77:44:5d:c3:49:cb:34:8e:0b:de:b0:b6: fb:69:6a:cd:f1:f1:87:e3:81:c6:f4:ac:99:0a:b5:57:6b:37: d0:63:2a:46:cc:f6:ca:79:e4:42:19:df:9c:d1:51:a4:68:fa: 27:64:5d:93:34:cb:57:49:83:65:87:c9:1b:db:04:b4:ec:f6: cf:bf:cd:22:6d:da:76:88:e1:02:69:58:8e:64:4d:f5:75:d8: 2f:02:64:38:53:0e:05:40:4b:b7:aa:d1:93:bb:a1:3e:a5:de: 62:99:4e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhjw0butmnOytRHmcg6F5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy M2I5MDMwHhcNMjYwMTA5MDcwMTA1WhcNMjYwMTEwMDcwMTA1WjAzMTEwLwYDVQQD EygwZDM4ODk5Mjk5NTRjMWIwZmM4ZGY5N2M5YTNjOTExZjkyZjlkODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sGfynY7Z2zppXIyF2LaExdQv4ZC r6EiAtH+dZV1/xBDJ79jg5da/eW9ebOd0M5vjYEcwomL4U9SWph5vgwKO/bNqFU3 VI3rN/xTlrID058EeSQJDt61Qf087sgmPLyClWprH6ACWaFLKR5l465+j3jFrwTz iUmCEK7lgy6d4WIQJaDFbwv66IPngF3tTMitJ3rlPRE6q4GiUndj4u0wvvDtuNsF X7GctVGwFIwtbdkFWOweEcdk9smRqh4Zs3qAVGxa8NzV71FTGssg44WNFpO0ur1n Pz4KuFfD0jU6/KpfbT/8mnCI2xHFW1c85xattsHhRAtk+t6iVfewF9XhgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA04iZKZVMGw/I35fJo8kR+S+dgbMB8GA1UdIwQY MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCntsfG5 b0O699C5P28iMKIHWJUqcboNWNI17pMVb87eN17JRnkTgDOt2ny3fGzQnTWmQSOa 9+PUM6zDCWx2XqNrmMcr5HW7cXYjS5/TLt0wJGdJWJpeSDA8arvju7ltNh/S6Mkr w1wIbG4Py9ggInRCVwub+Gs4ErOI6tdfLhB2TzZvDg2hrN079OHi7tAwj3grry2o d0Rdw0nLNI4L3rC2+2lqzfHxh+OBxvSsmQq1V2s30GMqRsz2ynnkQhnfnNFRpGj6 J2RdkzTLV0mDZYfJG9sEtOz2z7/NIm3adojhAmlYjmRN9XXYLwJkOFMOBUBLt6rR k7uhPqXeYplOKw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:59 2026 by rpki-client