This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json) Hash identifier: QLJgHzE9M5xdpp6AbPcRig8eHOPzkNfZMn5vMZ+1oP0= Subject key identifier: B2:E2:50:FF:DB:53:7E:3D:AA:74:04:1B:5A:8E:4E:20:81:CE:BC:8D Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Certificate serial: 019BB395347442643CE1805D360907BB0414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft Manifest number: 17C8 Signing time: Mon 12 Jan 2026 19:00:58 +0000 Manifest this update: Mon 12 Jan 2026 19:00:58 +0000 Manifest next update: Tue 13 Jan 2026 19:00:58 +0000 Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: kcsTF2efCp5bIjTsClqFuU+oOe2ibVABPBGvD8FU850=) 2: INlTsRSWtEEQbTwYTwODsPI3qAQ.roa (hash: b73ofRW7Sxj9+wnXidWIfyJJtcwAjUFudbbZDO0pYPY=) 3: k16xVxedrpFnfzVMhoEa5q6t738.roa (hash: Ine+nXRHBIOmIl50vZO0SN161C/5aaDHXiPrFxdhq4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:34:74:42:64:3c:e1:80:5d:36:09:07:bb:04:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Validity Not Before: Jan 12 19:00:58 2026 GMT Not After : Jan 13 19:00:58 2026 GMT Subject: CN=b2e250ffdb537e3daa74041b5a8e4e2081cebc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:42:51:b0:62:52:9c:ea:fa:eb:49:8d:3e: c6:9d:3a:d8:51:1d:df:d0:3d:22:39:19:72:34:31: 18:93:31:0c:2c:26:f4:d1:a9:9d:2d:78:07:4f:80: 60:f4:b9:27:01:53:20:bd:a5:25:57:5f:ae:9f:b3: 44:3c:38:ba:33:dd:a9:09:5c:42:13:c7:ed:0f:14: 0c:bb:21:db:c4:db:df:be:d0:5c:48:04:8a:c8:37: 48:d3:84:04:5d:9d:6c:fe:eb:53:66:f3:a2:47:70: 32:af:67:1b:e1:73:99:66:98:e5:1a:55:b3:4a:88: a2:46:80:8b:57:4e:00:9b:ce:fb:be:e9:5a:05:17: ed:5a:15:c8:a5:7d:eb:f5:f8:b2:f2:ff:63:40:86: 67:16:75:ce:41:bd:27:93:f6:11:07:b8:67:ee:bc: ab:f5:62:5b:b2:67:98:c5:9f:dd:bd:66:34:93:60: 21:fb:f8:ab:e2:cf:8f:1f:e8:80:cf:f5:16:60:a4: fc:43:f0:8c:ac:3c:93:0f:86:75:67:95:57:1d:b3: e7:36:1d:9e:55:79:7b:3f:f7:ba:50:df:ae:94:ec: c2:32:ab:e0:51:19:0a:08:6b:87:02:1c:dd:91:25: d1:4a:64:43:20:38:b7:35:7e:2a:78:6f:9c:6d:2e: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E2:50:FF:DB:53:7E:3D:AA:74:04:1B:5A:8E:4E:20:81:CE:BC:8D X509v3 Authority Key Identifier: keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:48:67:31:9a:9a:64:29:c4:09:3b:ff:6c:36:2e:f8:62:2b: d9:4c:3e:bc:ea:5f:9e:74:94:c6:c5:b6:1b:f5:35:30:d6:44: 02:15:d2:ae:ad:29:a3:b8:73:be:53:36:ac:cf:f2:9d:42:91: b8:1b:b2:35:42:cc:36:e6:bb:bb:88:6b:41:80:97:6a:11:1d: 5f:e2:7b:51:f6:34:5c:c0:c7:6c:64:a7:8e:f2:64:f7:70:a6: fd:16:64:a7:00:ec:06:f0:51:df:4e:b4:58:d7:3d:c7:c2:39: 37:57:03:1c:bb:a1:f9:50:7b:0d:a4:be:cd:14:80:a7:a1:44: a2:17:3e:80:11:d3:95:01:1b:e8:ca:ee:62:0f:01:85:9d:d5: 1c:01:7a:32:15:88:6d:c7:65:6a:c6:5e:06:72:30:be:ab:c2: 33:3e:f7:87:4e:d7:93:9b:b7:21:c3:70:cc:97:d9:a1:c0:2d: 63:68:f6:a5:87:33:31:43:dd:0d:06:f4:c8:51:03:80:af:6f: f8:97:d5:d1:5c:32:9c:bc:1a:16:65:75:39:60:bb:6d:cf:51: 74:cf:f9:be:5f:4f:e7:11:f8:15:5e:c0:a9:7c:4b:8a:e6:37: e2:3e:cb:c9:9a:7f:0f:ca:27:99:35:eb:2f:df:d6:82:4f:94: 69:d9:07:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlTR0QmQ84YBdNgkHuwQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk Y2NlZDgwHhcNMjYwMTEyMTkwMDU4WhcNMjYwMTEzMTkwMDU4WjAzMTEwLwYDVQQD EyhiMmUyNTBmZmRiNTM3ZTNkYWE3NDA0MWI1YThlNGUyMDgxY2ViYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vBCUbBiUpzq+utJjT7GnTrYUR3f 0D0iORlyNDEYkzEMLCb00amdLXgHT4Bg9LknAVMgvaUlV1+un7NEPDi6M92pCVxC E8ftDxQMuyHbxNvfvtBcSASKyDdI04QEXZ1s/utTZvOiR3Ayr2cb4XOZZpjlGlWz SoiiRoCLV04Am877vulaBRftWhXIpX3r9fiy8v9jQIZnFnXOQb0nk/YRB7hn7ryr 9WJbsmeYxZ/dvWY0k2Ah+/ir4s+PH+iAz/UWYKT8Q/CMrDyTD4Z1Z5VXHbPnNh2e VXl7P/e6UN+ulOzCMqvgURkKCGuHAhzdkSXRSmRDIDi3NX4qeG+cbS4PXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLiUP/bU349qnQEG1qOTiCBzryNMB8GA1UdIwQY MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkhnMZqa ZCnECTv/bDYu+GIr2Uw+vOpfnnSUxsW2G/U1MNZEAhXSrq0po7hzvlM2rM/ynUKR uBuyNULMNua7u4hrQYCXahEdX+J7UfY0XMDHbGSnjvJk93Cm/RZkpwDsBvBR3060 WNc9x8I5N1cDHLuh+VB7DaS+zRSAp6FEohc+gBHTlQEb6MruYg8BhZ3VHAF6MhWI bcdlasZeBnIwvqvCMz73h07Xk5u3IcNwzJfZocAtY2j2pYczMUPdDQb0yFEDgK9v +JfV0VwynLwaFmV1OWC7bc9RdM/5vl9P5xH4FV7AqXxLiuY34j7LyZp/D8onmTXr L9/Wgk+UadkHyA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:22:00 2026 by rpki-client