This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: 369p+Meex7XRvx/EVlLitPNjosViIdhVMqkdtfXLSiE= Subject key identifier: E7:0A:2C:24:02:C5:56:74:DC:49:79:78:23:54:F9:DC:CE:10:3F:AA Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019BA791C847D08DD69E67B24525EB95B8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 17D6 Signing time: Sat 10 Jan 2026 11:01:47 +0000 Manifest this update: Sat 10 Jan 2026 11:01:47 +0000 Manifest next update: Sun 11 Jan 2026 11:01:47 +0000 Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=) 5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=) 6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 545jO7oM9bWa1Sll46keqq1wJTfNJmkpvzuz99oXuiw=) 7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:91:c8:47:d0:8d:d6:9e:67:b2:45:25:eb:95:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 10 11:01:47 2026 GMT Not After : Jan 11 11:01:47 2026 GMT Subject: CN=e70a2c2402c55674dc4979782354f9dcce103faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:c4:b6:4e:b6:67:cb:cf:7a:82:82:c1:f3: b5:65:85:d4:5e:f5:a9:f2:3a:e8:6a:08:2f:cd:51: 17:24:be:8e:6a:02:69:ce:4d:6c:8f:8a:45:88:c4: 3d:d3:5a:6b:b8:04:66:af:10:54:7a:a9:2f:05:50: 2d:ad:9b:15:e4:4a:71:06:57:16:53:aa:74:6c:49: d2:7a:ec:b6:cc:e2:e6:17:6b:b2:c7:6f:a1:8c:3f: 5e:cb:75:90:41:b2:f8:fb:08:78:f6:51:b5:0a:0e: 5e:47:58:b7:f9:cc:2f:fb:a3:eb:6f:c3:3b:b0:d6: 39:46:a0:9c:66:2b:90:de:d2:2f:3d:c9:11:5c:02: ae:25:68:53:f1:54:41:5a:53:6d:c1:47:7e:77:08: 16:82:2a:89:b5:03:81:1f:ab:f8:4b:55:91:eb:8d: 5d:57:c6:3b:04:32:3b:af:ba:c1:fb:3c:ad:87:0c: 6a:31:9a:e9:33:a8:6a:a3:2d:c8:d7:1c:0f:59:8b: 76:04:0c:fe:07:78:e9:77:98:82:60:61:cc:10:30: 59:c1:c7:b0:b0:05:f5:04:94:65:da:e3:21:10:a3: 19:fc:a3:f5:10:47:d6:97:cd:d9:2b:af:24:16:39: fc:f4:0d:24:10:31:d8:39:a5:15:19:2c:b1:94:67: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0A:2C:24:02:C5:56:74:DC:49:79:78:23:54:F9:DC:CE:10:3F:AA X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:39:63:5b:1d:01:80:cf:d6:ab:ca:64:9f:eb:51:fe:2c:d8: da:13:68:c9:d3:71:a7:71:f2:d1:03:7b:ca:ab:0c:14:f7:40: 29:cc:da:94:99:cf:1c:f4:51:fd:7f:1d:a4:bf:02:76:d5:b9: a1:37:ef:aa:65:86:27:31:66:43:08:85:c0:ee:92:f6:e3:b7: 93:06:ef:00:e4:52:50:ba:00:a4:17:09:a5:36:4a:5c:0b:c8: d2:08:35:82:e6:d0:75:bf:0b:e2:af:46:2c:5f:2b:1a:f4:05: 82:0b:c8:b4:65:1f:f8:82:47:22:b1:d6:b1:f5:d6:04:a8:11: bc:61:41:41:7f:50:14:98:07:99:0e:2d:89:d5:03:10:22:8e: e3:36:f3:f5:18:1c:e8:4a:9c:0a:0b:cd:ca:70:c0:cc:13:82: ab:2b:f6:fd:11:72:15:ef:0e:4b:da:8b:c9:bc:e9:73:ba:c7: ed:c6:94:ba:82:23:08:d2:77:ee:8c:a0:fb:b8:42:9b:63:5d: 4e:f6:0b:28:0a:e6:b8:19:74:11:25:68:62:d0:f2:8e:5a:17: f7:84:94:e0:65:57:07:d2:4e:7f:47:fb:5d:3c:43:c1:6a:2c: 11:bb:6a:b0:61:1c:e1:df:f9:93:a9:84:dc:c8:1b:b3:f3:51: 07:d9:63:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZunkchH0I3WnmeyRSXrlbisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTEwMTEwMTQ3WhcNMjYwMTExMTEwMTQ3WjAzMTEwLwYDVQQD EyhlNzBhMmMyNDAyYzU1Njc0ZGM0OTc5NzgyMzU0ZjlkY2NlMTAzZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mTEtk62Z8vPeoKCwfO1ZYXUXvWp 8jroaggvzVEXJL6OagJpzk1sj4pFiMQ901pruARmrxBUeqkvBVAtrZsV5EpxBlcW U6p0bEnSeuy2zOLmF2uyx2+hjD9ey3WQQbL4+wh49lG1Cg5eR1i3+cwv+6Prb8M7 sNY5RqCcZiuQ3tIvPckRXAKuJWhT8VRBWlNtwUd+dwgWgiqJtQOBH6v4S1WR641d V8Y7BDI7r7rB+zythwxqMZrpM6hqoy3I1xwPWYt2BAz+B3jpd5iCYGHMEDBZwcew sAX1BJRl2uMhEKMZ/KP1EEfWl83ZK68kFjn89A0kEDHYOaUVGSyxlGfxSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcKLCQCxVZ03El5eCNU+dzOED+qMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjljWx0B gM/Wq8pkn+tR/izY2hNoydNxp3Hy0QN7yqsMFPdAKczalJnPHPRR/X8dpL8CdtW5 oTfvqmWGJzFmQwiFwO6S9uO3kwbvAORSULoApBcJpTZKXAvI0gg1gubQdb8L4q9G LF8rGvQFggvItGUf+IJHIrHWsfXWBKgRvGFBQX9QFJgHmQ4tidUDECKO4zbz9Rgc 6EqcCgvNynDAzBOCqyv2/RFyFe8OS9qLybzpc7rH7caUuoIjCNJ37oyg+7hCm2Nd TvYLKArmuBl0ESVoYtDyjloX94SU4GVXB9JOf0f7XTxDwWosEbtqsGEc4d/5k6mE 3Mgbs/NRB9ljcg== -----END CERTIFICATE-----Generated at Sat Jan 10 18:09:01 2026 by rpki-client