This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json) Hash identifier: cb7tOp0UUWrPqr49wK6IYU3eVYUKoqySzlALYRJjB8c= Subject key identifier: 1F:29:BF:DC:16:83:55:F1:79:19:30:3B:D8:04:08:DE:E0:40:C7:C8 Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2 Certificate serial: 019BFE41671F3385D0238673F8FFF01A57A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft Manifest number: 17E8 Signing time: Tue 27 Jan 2026 07:00:57 +0000 Manifest this update: Tue 27 Jan 2026 07:00:57 +0000 Manifest next update: Wed 28 Jan 2026 07:00:57 +0000 Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: PtHxAmY4vIOn26Z5aqJ/3JWVniJ8nm6Vep11MgJhPFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:67:1f:33:85:d0:23:86:73:f8:ff:f0:1a:57:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2 Validity Not Before: Jan 27 07:00:57 2026 GMT Not After : Jan 28 07:00:57 2026 GMT Subject: CN=1f29bfdc168355f17919303bd80408dee040c7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:c4:96:bb:50:44:b9:42:a1:c6:fa:ab:4a: 8d:ec:f1:fb:61:97:89:82:09:ec:ca:7f:ea:f0:31: 8c:dd:a3:e1:db:df:6a:24:12:0f:77:5f:51:56:2c: 4f:1b:af:f4:b6:f5:07:af:cd:6d:47:ad:72:b5:df: 07:6d:b9:5d:f7:9a:5a:80:80:e5:37:15:bb:aa:6c: e7:4e:de:23:2f:bf:fa:ea:b9:a8:ea:5a:58:14:d0: d2:88:89:78:5c:e0:0a:e7:f6:7a:71:22:ed:27:58: 16:eb:5e:e7:21:7b:d9:ac:15:be:11:3d:99:bf:83: d6:18:be:de:30:a6:68:2c:f3:17:c4:90:9d:96:7e: 9d:63:20:f9:ad:0c:bc:80:31:ac:63:6e:ce:5e:96: 38:d6:3f:92:a1:71:35:62:4a:93:54:a6:74:60:1b: 5c:9f:52:3c:28:90:36:6a:49:20:ee:73:47:72:c9: 5e:c4:92:51:70:3e:bb:27:2f:63:79:b5:33:01:da: cb:80:93:9b:cd:fb:c5:f1:13:a6:6b:dd:cc:73:e0: 7c:fa:f2:d0:50:89:18:0d:dc:05:78:47:32:c2:ba: ea:03:cf:78:48:5f:03:97:a1:77:6d:fd:b2:02:41: c3:d0:16:2f:d2:60:3c:5f:1a:c9:ec:48:86:03:01: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:29:BF:DC:16:83:55:F1:79:19:30:3B:D8:04:08:DE:E0:40:C7:C8 X509v3 Authority Key Identifier: keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:df:06:7e:fc:5a:a7:58:09:f2:ea:2c:e9:b4:f9:e7:a2:86: 4e:07:dd:fd:27:20:7c:f3:68:94:3e:52:bf:97:74:4f:c2:05: 33:79:3b:ba:19:34:75:ce:2a:c5:26:5b:6c:b4:38:3c:bd:33: 92:4e:ad:03:23:8b:00:45:f3:fa:77:9f:88:ea:70:f7:fc:80: 71:1e:5f:47:1f:18:af:b1:3d:19:d7:96:a1:2b:fc:74:01:29: 51:83:52:1d:5d:23:34:79:6b:47:62:51:ff:d4:bd:fd:1d:18: 20:48:76:9b:42:22:17:bd:45:f2:d2:2e:ec:cc:ad:a4:ea:25: 05:6a:94:3b:9d:ac:90:26:6e:f6:85:62:f0:e8:95:f6:2e:e7: f1:a6:7c:0f:c2:47:bd:d3:fa:a7:49:0a:4f:8d:1e:3c:14:02: 98:79:ad:a6:e0:37:51:91:0f:85:70:85:a4:66:ae:df:01:4f: 15:1a:e0:84:05:f6:d1:49:d8:b2:05:7c:36:79:89:a3:70:08: dc:15:60:c5:34:fe:a1:47:eb:dc:bd:60:fe:65:31:e2:b5:cb: 9c:2e:3d:6c:12:7f:ff:fa:33:e2:e0:4c:c1:bf:49:30:0f:ed: f2:54:5a:14:2a:c3:fb:58:b8:2c:cb:2d:11:86:23:f4:0b:e9: 4e:3c:72:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QWcfM4XQI4Zz+P/wGleiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl YmEwYTIwHhcNMjYwMTI3MDcwMDU3WhcNMjYwMTI4MDcwMDU3WjAzMTEwLwYDVQQD EygxZjI5YmZkYzE2ODM1NWYxNzkxOTMwM2JkODA0MDhkZWUwNDBjN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+3ElrtQRLlCocb6q0qN7PH7YZeJ ggnsyn/q8DGM3aPh299qJBIPd19RVixPG6/0tvUHr81tR61ytd8Hbbld95pagIDl NxW7qmznTt4jL7/66rmo6lpYFNDSiIl4XOAK5/Z6cSLtJ1gW617nIXvZrBW+ET2Z v4PWGL7eMKZoLPMXxJCdln6dYyD5rQy8gDGsY27OXpY41j+SoXE1YkqTVKZ0YBtc n1I8KJA2akkg7nNHcslexJJRcD67Jy9jebUzAdrLgJObzfvF8ROma93Mc+B8+vLQ UIkYDdwFeEcywrrqA894SF8Dl6F3bf2yAkHD0BYv0mA8XxrJ7EiGAwGcpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8pv9wWg1XxeRkwO9gECN7gQMfIMB8GA1UdIwQY MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN8Gfvxa p1gJ8uos6bT556KGTgfd/ScgfPNolD5Sv5d0T8IFM3k7uhk0dc4qxSZbbLQ4PL0z kk6tAyOLAEXz+nefiOpw9/yAcR5fRx8Yr7E9GdeWoSv8dAEpUYNSHV0jNHlrR2JR /9S9/R0YIEh2m0IiF71F8tIu7MytpOolBWqUO52skCZu9oVi8OiV9i7n8aZ8D8JH vdP6p0kKT40ePBQCmHmtpuA3UZEPhXCFpGau3wFPFRrghAX20UnYsgV8NnmJo3AI 3BVgxTT+oUfr3L1g/mUx4rXLnC49bBJ///oz4uBMwb9JMA/t8lRaFCrD+1i4LMst EYYj9AvpTjxygg== -----END CERTIFICATE-----Generated at Tue Jan 27 10:22:28 2026 by rpki-client