This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json) Hash identifier: mHjo9gLeB3wxWlYpZ03mHFyv7ydZYLRfP6BO/8vzNec= Subject key identifier: 02:3A:00:BD:E8:33:E1:8C:FB:B1:D3:74:59:7D:B1:78:25:F5:C4:7E Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996 Certificate serial: 019C04B18BAAE42FF5143E821403BE73D43F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft Manifest number: 0512 Signing time: Wed 28 Jan 2026 13:01:10 +0000 Manifest this update: Wed 28 Jan 2026 13:01:10 +0000 Manifest next update: Thu 29 Jan 2026 13:01:10 +0000 Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: N7jBXknIC45n8fDRCpIqznawKWXvQGB3E5qyIi6BZEM=) 2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b1:8b:aa:e4:2f:f5:14:3e:82:14:03:be:73:d4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996 Validity Not Before: Jan 28 13:01:10 2026 GMT Not After : Jan 29 13:01:10 2026 GMT Subject: CN=023a00bde833e18cfbb1d374597db17825f5c47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:55:7e:64:5b:0c:2c:51:c5:1c:b4:8c:30: 2e:66:2e:54:dc:e3:13:fc:44:c1:01:17:93:f8:05: a4:88:45:0b:61:39:19:42:45:bb:26:e7:bf:81:3f: b9:13:76:26:2f:38:70:d3:48:72:b3:4f:6e:fb:26: b6:00:b0:f8:40:43:65:8d:88:7d:d6:05:e9:7d:a3: 8a:6c:88:65:8e:be:7c:cd:aa:09:af:4b:49:44:d6: 72:0a:f7:de:2e:b4:95:5d:f3:81:77:cb:55:e1:a0: 2f:91:2a:35:82:b5:a6:b5:44:f7:ef:a7:52:94:71: c2:a0:ff:db:1c:e8:7e:45:75:2e:48:dc:c1:52:cc: bd:f0:ac:f4:0b:e4:42:4e:03:b5:56:15:41:b9:78: 3f:04:53:58:62:33:de:98:44:6e:22:71:df:9b:3d: 79:ed:e2:9c:73:36:c6:97:05:80:16:a6:e7:5b:fe: bf:17:c5:ab:ff:a7:79:da:e8:d9:7a:b5:7b:92:44: 57:fd:b3:98:0f:19:be:dd:21:b1:81:c6:a1:50:25: f5:b2:ca:ac:96:7f:6c:83:ee:22:75:30:b3:32:bb: 1c:b4:72:6e:80:10:03:98:70:a1:d0:e6:a3:fc:89: f2:c5:67:aa:42:83:2a:87:e9:49:51:0d:c4:54:64: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:00:BD:E8:33:E1:8C:FB:B1:D3:74:59:7D:B1:78:25:F5:C4:7E X509v3 Authority Key Identifier: keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:28:14:9c:a6:6d:ad:45:47:9a:90:1a:63:a8:91:28:07:0c: d6:59:43:b0:7f:f8:7e:57:5e:2e:4f:33:d1:e3:38:18:5e:c5: c7:92:dc:6f:7c:a8:dd:f3:8a:8c:66:cb:33:05:78:32:a3:a7: 26:ed:3d:b5:be:78:1f:0b:82:b1:29:22:2b:cf:12:73:8b:7e: 15:e2:af:0d:05:ad:d4:04:49:6b:a1:46:36:a6:5b:63:a6:0c: 3b:64:39:ab:53:6f:ab:25:03:f1:a0:4d:ee:11:5a:4a:91:b9: 05:f6:d3:49:12:89:c3:b2:4f:9c:d8:a1:c6:18:c1:c8:62:d0: 3e:8b:d1:b6:0d:37:4c:ab:78:5e:4b:6e:5f:d2:3e:19:42:13: 0d:7f:a6:db:98:99:7a:13:80:b2:81:5a:df:0c:9c:78:28:f6: 7c:fe:1e:83:6d:e3:48:04:15:b5:a1:b5:b9:6c:f4:ef:05:5d: 87:c1:b0:cc:24:50:d4:bb:5c:85:da:fc:8c:c2:1b:55:e8:6e: 4d:81:8f:15:e3:76:02:95:e9:aa:5a:00:fb:0a:1b:9e:02:4a: e8:cd:c3:8d:dd:14:16:66:2c:09:70:58:9a:de:69:92:95:9d: e4:aa:6f:ed:74:4d:29:c4:25:b2:9f:a6:e5:58:94:b5:8a:89: 1b:73:5d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEsYuq5C/1FD6CFAO+c9Q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTEwN2YxNmJjNmIwMGI3NjRjMzlhY2ZkNjMzMzYzNjQ2 ZDU5OTYwHhcNMjYwMTI4MTMwMTEwWhcNMjYwMTI5MTMwMTEwWjAzMTEwLwYDVQQD EygwMjNhMDBiZGU4MzNlMThjZmJiMWQzNzQ1OTdkYjE3ODI1ZjVjNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxJVfmRbDCxRxRy0jDAuZi5U3OMT /ETBAReT+AWkiEULYTkZQkW7Jue/gT+5E3YmLzhw00hys09u+ya2ALD4QENljYh9 1gXpfaOKbIhljr58zaoJr0tJRNZyCvfeLrSVXfOBd8tV4aAvkSo1grWmtUT376dS lHHCoP/bHOh+RXUuSNzBUsy98Kz0C+RCTgO1VhVBuXg/BFNYYjPemERuInHfmz15 7eKcczbGlwWAFqbnW/6/F8Wr/6d52ujZerV7kkRX/bOYDxm+3SGxgcahUCX1ssqs ln9sg+4idTCzMrsctHJugBADmHCh0Oaj/InyxWeqQoMqh+lJUQ3EVGRmKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI6AL3oM+GM+7HTdFl9sXgl9cR+MB8GA1UdIwQY MBaAFPWhB/FrxrALdkw5rP1jM2NkbVmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmIt OWYxY2ZiOGQxNDI4LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmItOWYxY2ZiOGQxNDI4 LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkigUnKZt rUVHmpAaY6iRKAcM1llDsH/4fldeLk8z0eM4GF7Fx5Lcb3yo3fOKjGbLMwV4MqOn Ju09tb54HwuCsSkiK88Sc4t+FeKvDQWt1ARJa6FGNqZbY6YMO2Q5q1NvqyUD8aBN 7hFaSpG5BfbTSRKJw7JPnNihxhjByGLQPovRtg03TKt4XktuX9I+GUITDX+m25iZ ehOAsoFa3wyceCj2fP4eg23jSAQVtaG1uWz07wVdh8GwzCRQ1Ltchdr8jMIbVehu TYGPFeN2ApXpqloA+wobngJK6M3Djd0UFmYsCXBYmt5pkpWd5Kpv7XRNKcQlsp+m 5ViUtYqJG3NdKg== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:44 2026 by rpki-client