This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json) Hash identifier: rjtv99Rd96vBwGSezWnkcYBANRWz6BwPund2cLuxPIA= Subject key identifier: 4F:F0:BD:0E:47:B1:40:97:09:1B:A7:C3:20:92:75:AC:14:68:58:7F Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Certificate serial: 019BD1A064A7BA2C180DD47AB7F765A38CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft Manifest number: 0231 Signing time: Sun 18 Jan 2026 15:01:48 +0000 Manifest this update: Sun 18 Jan 2026 15:01:48 +0000 Manifest next update: Mon 19 Jan 2026 15:01:48 +0000 Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: g0vn+StZB1AhWlHHptSRJKNzNSvpknWe2iw3yVbvdNo=) 2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=) 3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:a0:64:a7:ba:2c:18:0d:d4:7a:b7:f7:65:a3:8c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Validity Not Before: Jan 18 15:01:48 2026 GMT Not After : Jan 19 15:01:48 2026 GMT Subject: CN=4ff0bd0e47b14097091ba7c3209275ac1468587f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:aa:b0:30:27:ba:02:1c:3d:b0:3f:76:5b: 0f:1b:ae:16:9e:ff:f0:19:b1:5c:b2:d4:85:00:b9: 8b:41:a5:dd:61:66:76:7a:48:7f:5f:f8:c3:d1:98: 0f:6c:0d:8a:6c:e9:d6:2c:06:61:ed:bf:f7:15:c1: cc:c7:08:1f:15:33:f3:cb:fa:f3:e5:63:4a:53:be: 5a:39:c2:80:db:78:2e:f6:82:b5:8b:b1:46:48:f3: fd:35:43:d4:91:b0:8c:ad:ec:a6:06:27:68:bf:bf: 04:de:be:c7:e3:83:37:61:27:b7:c5:da:15:c0:40: 11:48:4f:1a:47:1e:9e:ac:0d:88:87:90:6e:8a:0e: 11:0d:72:cd:74:57:59:40:38:ce:52:1b:94:2a:73: 8c:7a:31:4b:de:4b:8d:22:ae:97:5a:f5:90:68:c4: a6:70:1d:cf:5c:0e:ec:3e:2e:c0:f1:d5:ba:9c:95: 18:25:85:a1:ff:85:94:bc:d1:8c:78:57:3e:64:8b: 98:78:1b:a9:9b:2a:78:17:67:12:6b:99:84:dc:81: 03:21:15:c8:e1:f2:d7:0d:7e:c3:b5:c1:51:a1:d1: 5b:96:ac:ec:c4:14:07:c3:a9:cf:7c:e9:9c:0c:0b: 00:fa:7f:17:29:75:86:9d:61:d4:43:52:3d:84:f7: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F0:BD:0E:47:B1:40:97:09:1B:A7:C3:20:92:75:AC:14:68:58:7F X509v3 Authority Key Identifier: keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c6:b0:1b:18:72:27:f7:7f:66:7c:31:19:27:6f:c2:22:b2: 16:ec:d3:48:3a:93:a4:10:30:50:ff:99:72:c0:09:82:45:30: af:f9:d1:87:98:9c:7b:76:00:74:49:01:ad:26:81:62:73:b1: ab:3c:5f:69:f9:38:15:40:9e:cf:09:43:11:44:f9:ca:a8:3b: 68:48:68:0f:7e:33:93:f9:00:78:41:05:79:8b:d4:d2:ce:8c: f8:f2:83:2a:84:d6:c6:8e:2d:23:cc:9b:6f:1e:e7:07:d8:13: bf:1b:55:75:92:a8:b4:be:32:e9:ed:a1:97:eb:61:7c:a4:ac: 23:8d:f8:f0:72:21:9d:43:f4:be:4a:ef:9e:67:59:2e:d4:94: 8a:cb:71:3b:92:df:4b:e9:66:80:38:7e:0d:2e:ae:64:f0:ec: 67:ba:0e:a2:8d:8b:6c:7d:ca:0b:9b:41:1a:59:0d:f4:99:b3: ef:2a:41:de:58:41:1f:fe:e4:6d:12:b2:8e:9b:06:74:ab:fa: 04:fc:b5:a2:ee:a9:ad:16:18:53:ee:3e:b3:35:d6:38:33:f6: 58:b6:34:1e:3f:f2:a1:3e:4e:04:a8:8f:00:94:5e:3d:a5:f7: a9:33:1e:62:75:5f:e6:37:4e:d8:c1:b3:05:f2:5d:a6:35:fe: ee:b9:3a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRoGSnuiwYDdR6t/dlo4zuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz YThhM2EwHhcNMjYwMTE4MTUwMTQ4WhcNMjYwMTE5MTUwMTQ4WjAzMTEwLwYDVQQD Eyg0ZmYwYmQwZTQ3YjE0MDk3MDkxYmE3YzMyMDkyNzVhYzE0Njg1ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+iqsDAnugIcPbA/dlsPG64Wnv/w GbFcstSFALmLQaXdYWZ2ekh/X/jD0ZgPbA2KbOnWLAZh7b/3FcHMxwgfFTPzy/rz 5WNKU75aOcKA23gu9oK1i7FGSPP9NUPUkbCMreymBidov78E3r7H44M3YSe3xdoV wEARSE8aRx6erA2Ih5Buig4RDXLNdFdZQDjOUhuUKnOMejFL3kuNIq6XWvWQaMSm cB3PXA7sPi7A8dW6nJUYJYWh/4WUvNGMeFc+ZIuYeBupmyp4F2cSa5mE3IEDIRXI 4fLXDX7DtcFRodFblqzsxBQHw6nPfOmcDAsA+n8XKXWGnWHUQ1I9hPdedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/wvQ5HsUCXCRunwyCSdawUaFh/MB8GA1UdIwQY MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4 LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsawGxhy J/d/ZnwxGSdvwiKyFuzTSDqTpBAwUP+ZcsAJgkUwr/nRh5ice3YAdEkBrSaBYnOx qzxfafk4FUCezwlDEUT5yqg7aEhoD34zk/kAeEEFeYvU0s6M+PKDKoTWxo4tI8yb bx7nB9gTvxtVdZKotL4y6e2hl+thfKSsI4348HIhnUP0vkrvnmdZLtSUistxO5Lf S+lmgDh+DS6uZPDsZ7oOoo2LbH3KC5tBGlkN9Jmz7ypB3lhBH/7kbRKyjpsGdKv6 BPy1ou6prRYYU+4+szXWODP2WLY0Hj/yoT5OBKiPAJRePaX3qTMeYnVf5jdO2MGz BfJdpjX+7rk6KA== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:36 2026 by rpki-client