This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json) Hash identifier: /0PwyJPr4DLX0VSwHZyR8Yq+NMYQHC5LRUP7XcfFwgA= Subject key identifier: 1F:2B:97:D2:5E:C8:70:2C:6F:BC:9B:80:06:19:94:33:15:EC:5F:2D Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Certificate serial: 019BFC8A6FD57C862EDAC954B205D9908F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 23:01:29 +0000 Manifest this update: Mon 26 Jan 2026 23:01:29 +0000 Manifest next update: Tue 27 Jan 2026 23:01:29 +0000 Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 2OxXVSe1pxScy0KSmdk5EU5yZch/FCTNdVRZ7rYn60I=) 2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:6f:d5:7c:86:2e:da:c9:54:b2:05:d9:90:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828 Validity Not Before: Jan 26 23:01:29 2026 GMT Not After : Jan 27 23:01:29 2026 GMT Subject: CN=1f2b97d25ec8702c6fbc9b800619943315ec5f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:d7:77:a9:29:74:71:d7:00:e4:f1:77:1f: e9:f4:e3:90:c1:9c:7f:ec:a0:93:f5:a3:10:9c:92: 6c:d7:73:75:8c:9b:04:39:46:9c:32:ff:92:60:2e: c0:4d:b3:dd:1d:30:6c:98:cd:6e:1f:76:42:0a:1a: 1d:b0:1e:2c:36:ac:ae:a3:32:e1:a0:00:05:a7:33: 9d:c3:a8:b2:6a:b7:8f:16:75:b9:af:2f:4e:22:bb: 2c:95:96:90:81:f5:86:e3:05:1a:24:22:ce:23:de: 04:ce:51:59:49:db:de:9b:71:e0:82:5d:e3:55:af: 4c:c5:5c:93:77:23:ac:4e:32:94:6d:c4:0f:8e:fb: ef:93:f3:c9:07:39:40:22:19:f4:6a:64:32:c5:2a: c9:1d:b3:02:ef:2c:c3:70:31:a1:8f:b0:83:f7:93: 6e:dc:4e:93:de:18:50:29:a4:00:8a:46:4f:ca:54: ce:70:cd:3a:41:22:36:96:6e:e1:2c:65:38:b0:46: 38:ca:af:5a:e4:66:f4:22:4b:cc:83:41:6e:2f:b5: 66:eb:52:50:7d:7e:34:5e:4c:55:f9:d6:8f:11:20: 68:cf:54:3d:4a:be:ef:a9:4b:24:a7:55:85:d9:3d: b7:09:5a:fe:8a:41:9f:cf:6d:4c:26:d8:df:81:a5: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:97:D2:5E:C8:70:2C:6F:BC:9B:80:06:19:94:33:15:EC:5F:2D X509v3 Authority Key Identifier: keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b6:fc:db:b0:4a:65:ee:26:fc:bb:0e:f6:e5:ab:d9:3d:d2: db:dd:27:8d:24:35:46:97:9f:55:fc:04:ab:ce:48:3f:82:5e: c2:1e:70:a1:5b:5a:ed:3f:6d:02:32:1f:56:c3:0f:00:22:59: a4:9b:be:98:bf:01:ef:9a:da:3b:e0:b2:14:c9:b2:dc:ac:45: c3:30:bd:ad:67:36:04:71:5c:d3:c8:fe:15:84:18:23:95:9a: 80:6f:f3:5c:12:e9:42:36:4d:3b:ec:52:4c:23:4a:0a:4f:ef: 08:32:22:22:e3:bf:5d:8b:52:61:0f:31:aa:3e:44:52:25:39: ed:51:4a:63:c8:08:9d:cd:14:98:a0:d1:15:04:98:49:e1:05: 81:f2:7e:bd:1e:7e:7e:1a:db:dd:b9:4f:cb:dc:5d:f8:3f:9e: 1e:4c:fc:a9:24:72:ba:b1:f9:3e:34:e2:21:8a:68:f3:3f:fe: b9:41:3a:ff:0f:f3:ed:9d:28:9f:cb:59:58:bb:16:7b:25:34: 75:f4:84:bc:a8:eb:c0:f7:62:98:d9:67:2d:09:92:40:77:2c: 4e:44:43:ca:40:71:9e:d4:9a:06:84:2e:1e:b4:56:1d:3b:94: 5e:72:1d:e7:83:2e:22:ed:be:b2:ef:ba:30:f5:36:7d:fc:28: d4:d3:fe:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8im/VfIYu2slUsgXZkI8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh NzI4MjgwHhcNMjYwMTI2MjMwMTI5WhcNMjYwMTI3MjMwMTI5WjAzMTEwLwYDVQQD EygxZjJiOTdkMjVlYzg3MDJjNmZiYzliODAwNjE5OTQzMzE1ZWM1ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE7Xd6kpdHHXAOTxdx/p9OOQwZx/ 7KCT9aMQnJJs13N1jJsEOUacMv+SYC7ATbPdHTBsmM1uH3ZCChodsB4sNqyuozLh oAAFpzOdw6iyarePFnW5ry9OIrsslZaQgfWG4wUaJCLOI94EzlFZSdvem3Hggl3j Va9MxVyTdyOsTjKUbcQPjvvvk/PJBzlAIhn0amQyxSrJHbMC7yzDcDGhj7CD95Nu 3E6T3hhQKaQAikZPylTOcM06QSI2lm7hLGU4sEY4yq9a5Gb0IkvMg0FuL7Vm61JQ fX40XkxV+daPESBoz1Q9Sr7vqUskp1WF2T23CVr+ikGfz21MJtjfgaVc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8rl9JeyHAsb7ybgAYZlDMV7F8tMB8GA1UdIwQY MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrb827BK Ze4m/LsO9uWr2T3S290njSQ1RpefVfwEq85IP4Jewh5woVta7T9tAjIfVsMPACJZ pJu+mL8B75raO+CyFMmy3KxFwzC9rWc2BHFc08j+FYQYI5WagG/zXBLpQjZNO+xS TCNKCk/vCDIiIuO/XYtSYQ8xqj5EUiU57VFKY8gInc0UmKDRFQSYSeEFgfJ+vR5+ fhrb3blPy9xd+D+eHkz8qSRyurH5PjTiIYpo8z/+uUE6/w/z7Z0on8tZWLsWeyU0 dfSEvKjrwPdimNlnLQmSQHcsTkRDykBxntSaBoQuHrRWHTuUXnId54MuIu2+su+6 MPU2ffwo1NP+pw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:40 2026 by rpki-client