This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json) Hash identifier: D1WYwGnQfjklPA53Gtl4EZ3fGH1JStfL62c1qLTQFDE= Subject key identifier: DC:93:89:09:66:20:24:C7:3B:0A:83:79:25:5F:DE:0C:7F:0F:0D:64 Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Certificate serial: 019BFA2E6BE7405D4F624C9D501B8FAD5852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft Manifest number: 09F0 Signing time: Mon 26 Jan 2026 12:01:44 +0000 Manifest this update: Mon 26 Jan 2026 12:01:44 +0000 Manifest next update: Tue 27 Jan 2026 12:01:44 +0000 Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: EJNdpZpX6Uni/weGKk+PrSj+BAnFsAPBoXMfdQstXCs=) 2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:6b:e7:40:5d:4f:62:4c:9d:50:1b:8f:ad:58:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Validity Not Before: Jan 26 12:01:44 2026 GMT Not After : Jan 27 12:01:44 2026 GMT Subject: CN=dc938909662024c73b0a8379255fde0c7f0f0d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:0c:e7:9a:bb:6c:db:8e:b7:e9:97:10:b0: 92:5c:35:e3:dd:97:03:79:4d:db:68:78:a5:a2:49: 11:60:4a:90:0f:6c:c1:89:94:d0:07:3c:76:78:bb: 94:dd:22:95:14:99:20:bd:8b:56:5d:fa:4a:f0:84: da:62:36:9e:df:f3:04:85:aa:4d:5b:88:af:fc:98: 42:d2:5c:b3:40:56:4e:12:51:6f:ce:74:0d:a4:5f: 6d:40:57:82:eb:64:af:d0:52:5d:79:ef:0d:14:76: 92:5f:ad:a1:7a:de:81:78:73:07:e2:7a:9e:f2:1b: 05:98:42:0f:66:6b:77:64:57:e6:2d:00:5c:99:e0: 84:91:88:22:32:1c:01:e5:00:d6:2e:0e:ee:4a:ed: 36:04:ba:2c:c2:28:86:05:7a:ac:ca:e5:23:87:ad: cb:f9:94:b5:8b:67:ac:15:7f:25:83:60:fa:0c:73: 7c:ab:04:87:f5:e6:ef:5c:cb:cf:0b:b5:ca:0f:f9: 2d:52:39:d0:4c:37:8d:c8:dc:e7:fc:8a:ae:8e:ab: d4:c8:f9:e6:04:06:c2:fa:b8:7f:20:4c:ea:44:66: 69:c4:88:40:14:53:4a:86:a9:e6:b8:46:0c:23:cd: 02:49:d2:b7:bb:6f:d5:2d:ab:56:78:ed:80:12:b2: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:89:09:66:20:24:C7:3B:0A:83:79:25:5F:DE:0C:7F:0F:0D:64 X509v3 Authority Key Identifier: keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:85:af:e4:b5:6c:84:14:ad:73:b3:61:d8:dd:75:c3:31:9b: 93:4a:fe:70:cc:40:98:87:5a:97:23:87:84:93:be:00:8a:f8: fa:56:ca:64:7d:50:fa:fb:b0:52:a2:f2:b0:08:28:57:db:89: 32:f1:93:91:d6:45:8e:38:24:3f:ba:26:d7:af:e4:b3:4b:3f: 03:ef:3d:10:2a:24:b1:0b:d0:3d:19:9f:d7:4c:48:05:aa:b3: cb:18:08:ab:2d:9d:c2:53:1f:ea:44:d6:46:4b:bc:c6:1b:35: 3a:47:c7:9f:59:68:d0:64:14:61:68:28:83:bc:cb:0f:43:27: e2:38:82:ee:e9:ff:bc:b2:6e:f3:77:67:19:39:4c:26:69:c1: f7:60:6d:e3:c2:66:37:75:cb:45:5f:80:2f:08:f8:c8:a0:39: 8c:98:f5:96:f9:aa:68:fb:ba:87:2f:a2:67:42:77:b3:9c:4e: 7c:5d:d2:92:af:6b:fc:fd:97:e0:3a:2f:79:26:a1:74:5c:fe: 66:ec:94:0a:80:cd:9a:fb:43:1c:78:24:96:86:61:e5:df:32: 4c:2e:5e:3b:73:5b:3f:e4:f1:e4:b7:e1:03:c7:80:41:aa:47: ed:9b:0d:5f:b3:fa:39:7a:c3:95:62:79:b5:41:9a:a2:d8:c2: 09:62:f4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LmvnQF1PYkydUBuPrVhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl ZThhZTYwHhcNMjYwMTI2MTIwMTQ0WhcNMjYwMTI3MTIwMTQ0WjAzMTEwLwYDVQQD EyhkYzkzODkwOTY2MjAyNGM3M2IwYTgzNzkyNTVmZGUwYzdmMGYwZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO4M55q7bNuOt+mXELCSXDXj3ZcD eU3baHilokkRYEqQD2zBiZTQBzx2eLuU3SKVFJkgvYtWXfpK8ITaYjae3/MEhapN W4iv/JhC0lyzQFZOElFvznQNpF9tQFeC62Sv0FJdee8NFHaSX62het6BeHMH4nqe 8hsFmEIPZmt3ZFfmLQBcmeCEkYgiMhwB5QDWLg7uSu02BLoswiiGBXqsyuUjh63L +ZS1i2esFX8lg2D6DHN8qwSH9ebvXMvPC7XKD/ktUjnQTDeNyNzn/IqujqvUyPnm BAbC+rh/IEzqRGZpxIhAFFNKhqnmuEYMI80CSdK3u2/VLatWeO2AErJUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyTiQlmICTHOwqDeSVf3gx/Dw1kMB8GA1UdIwQY MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1 LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIWv5LVs hBStc7Nh2N11wzGbk0r+cMxAmIdalyOHhJO+AIr4+lbKZH1Q+vuwUqLysAgoV9uJ MvGTkdZFjjgkP7om16/ks0s/A+89ECoksQvQPRmf10xIBaqzyxgIqy2dwlMf6kTW Rku8xhs1OkfHn1lo0GQUYWgog7zLD0Mn4jiC7un/vLJu83dnGTlMJmnB92Bt48Jm N3XLRV+ALwj4yKA5jJj1lvmqaPu6hy+iZ0J3s5xOfF3Skq9r/P2X4DoveSahdFz+ ZuyUCoDNmvtDHHgkloZh5d8yTC5eO3NbP+Tx5LfhA8eAQapH7ZsNX7P6OXrDlWJ5 tUGaotjCCWL0Dw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:34 2026 by rpki-client