This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: TnMqTKyDWkRksD29Nkb+Jn4ULBBwbAiYHVD3ZNtYl0Y= Subject key identifier: C1:21:47:55:10:8C:8A:04:70:7A:DD:5C:51:D7:4A:EB:B5:15:2C:8D Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019BF91BB8ACAFE8C2F19DD713F52FBA6DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 07:01:41 +0000 Manifest this update: Mon 26 Jan 2026 07:01:41 +0000 Manifest next update: Tue 27 Jan 2026 07:01:41 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 5: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 6: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 7: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: kCUDgeVbi/DeILp1rbAAqqo0DCj8xjVirc0lK9Tn/W4=) 9: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:b8:ac:af:e8:c2:f1:9d:d7:13:f5:2f:ba:6d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 26 07:01:41 2026 GMT Not After : Jan 27 07:01:41 2026 GMT Subject: CN=c1214755108c8a04707add5c51d74aebb5152c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:7a:e0:59:1b:6b:99:8d:30:a1:d8:27:e5: 3f:d6:60:d4:a5:bf:e8:71:d6:b8:dd:1e:39:c8:d5: bb:96:2c:97:9d:a0:12:4f:fb:98:9e:d8:8d:c0:62: b4:e1:36:41:44:95:9a:dd:36:48:ef:2f:a7:29:3a: c2:a4:45:9a:4a:54:a7:b8:93:1e:6b:6c:9c:a3:68: c0:30:d3:21:e5:ba:40:4b:d5:56:79:3a:eb:fc:75: c7:55:4f:fe:2c:f0:ce:d9:33:71:46:fe:6d:3b:89: 1e:35:23:f4:10:a8:83:74:27:4a:a7:3b:6d:ba:e8: 2c:53:55:15:b7:aa:8d:81:fe:f8:90:ae:e4:69:1b: 23:2b:2f:12:d4:3a:dd:2b:4d:36:8a:d0:8f:81:d9: d9:f6:34:61:df:02:ae:35:d6:4a:fd:bd:bd:0f:d3: bf:38:79:9c:1f:87:cf:58:ba:df:bc:d6:35:3e:e7: a8:5f:c9:8e:db:10:dc:02:13:d6:e4:d1:fa:2c:84: 87:91:d5:0c:ec:44:19:f2:32:ec:21:bb:77:57:34: f2:4d:a0:e9:6b:6d:c3:24:48:10:5d:e2:43:5e:1c: 9f:ef:05:d7:b3:b2:88:9b:09:05:8a:85:9c:95:9b: f4:35:2f:bc:c3:00:75:8a:66:22:ef:6d:ba:fb:a8: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:47:55:10:8C:8A:04:70:7A:DD:5C:51:D7:4A:EB:B5:15:2C:8D X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:38:72:a2:5a:4a:94:6e:b3:a9:50:35:fb:0c:bb:47:12:02: 0f:ab:4c:ca:7e:29:2e:00:06:ec:f5:71:7d:18:a0:1f:d9:67: 09:78:31:7f:60:8e:ba:b5:df:d3:e9:11:2e:20:45:6d:50:1e: d1:95:77:e2:1a:1d:7c:bb:61:d7:00:9b:e7:f3:a3:27:0d:6f: 28:ab:6b:1e:31:94:2b:cf:10:ef:8a:a3:19:b1:84:af:e4:e2: b8:96:37:a7:8c:c1:40:1f:38:15:10:41:5c:08:f1:c4:46:fc: 5f:dd:b5:54:02:b2:ba:fb:52:05:d1:d1:bb:63:e7:00:18:e7: 0c:41:06:f6:dc:2b:8d:36:9e:80:f4:36:36:17:1e:1a:0f:67: 02:3c:7d:6f:41:28:a1:1b:4a:87:74:11:78:3a:b6:c3:0c:3b: 07:e9:d1:39:72:64:0f:7b:30:c5:d5:34:42:3c:9f:c0:fe:c4: 8a:c4:17:19:cb:da:f3:fb:4e:9e:a7:46:a2:8e:99:7b:75:38: 0f:e0:ef:72:77:3f:a6:e7:c5:f9:65:97:79:f2:1c:9e:83:88: ab:32:22:3f:98:ea:eb:9f:90:1d:78:de:e1:b8:e5:5f:76:5a: eb:3c:aa:ef:68:5a:75:29:33:11:a1:21:42:53:98:40:5c:f4: 63:29:3a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G7isr+jC8Z3XE/Uvum3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTI2MDcwMTQxWhcNMjYwMTI3MDcwMTQxWjAzMTEwLwYDVQQD EyhjMTIxNDc1NTEwOGM4YTA0NzA3YWRkNWM1MWQ3NGFlYmI1MTUyYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sd64Fkba5mNMKHYJ+U/1mDUpb/o cda43R45yNW7liyXnaAST/uYntiNwGK04TZBRJWa3TZI7y+nKTrCpEWaSlSnuJMe a2yco2jAMNMh5bpAS9VWeTrr/HXHVU/+LPDO2TNxRv5tO4keNSP0EKiDdCdKpztt uugsU1UVt6qNgf74kK7kaRsjKy8S1DrdK002itCPgdnZ9jRh3wKuNdZK/b29D9O/ OHmcH4fPWLrfvNY1PueoX8mO2xDcAhPW5NH6LISHkdUM7EQZ8jLsIbt3VzTyTaDp a23DJEgQXeJDXhyf7wXXs7KImwkFioWclZv0NS+8wwB1imYi7226+6iW1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEhR1UQjIoEcHrdXFHXSuu1FSyNMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdThyolpK lG6zqVA1+wy7RxICD6tMyn4pLgAG7PVxfRigH9lnCXgxf2COurXf0+kRLiBFbVAe 0ZV34hodfLth1wCb5/OjJw1vKKtrHjGUK88Q74qjGbGEr+TiuJY3p4zBQB84FRBB XAjxxEb8X921VAKyuvtSBdHRu2PnABjnDEEG9twrjTaegPQ2NhceGg9nAjx9b0Eo oRtKh3QReDq2www7B+nROXJkD3swxdU0QjyfwP7EisQXGcva8/tOnqdGoo6Ze3U4 D+Dvcnc/pufF+WWXefIcnoOIqzIiP5jq65+QHXje4bjlX3Za6zyq72hadSkzEaEh QlOYQFz0Yyk6ag== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:05 2026 by rpki-client