This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json) Hash identifier: rMsgsMuN0QTq+RUjaLpaVELQ8+VqBwAM6oucLu1s8kA= Subject key identifier: AC:11:98:12:C8:F6:78:E8:D4:61:17:4F:9F:B8:37:AE:A4:C3:F3:F8 Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77 Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77 Certificate serial: 019BA2A257EAFC4471F03BF98A0070C2ED01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft Manifest number: 0FA8 Signing time: Fri 09 Jan 2026 12:01:46 +0000 Manifest this update: Fri 09 Jan 2026 12:01:46 +0000 Manifest next update: Sat 10 Jan 2026 12:01:46 +0000 Files and hashes: 1: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (hash: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4=) 2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: tIZ3Zhh38OLQQ3raDeKskBOXmUN2jm77m0RR50iVGsw=) 3: ymQkqx6vad1BOcZP1A2ksCcXq8M.roa (hash: Mkk7iKFq74kIN4TjOOrbxIdyK2vnb7PkhTT7pKGa0yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a2:57:ea:fc:44:71:f0:3b:f9:8a:00:70:c2:ed:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77 Validity Not Before: Jan 9 12:01:46 2026 GMT Not After : Jan 10 12:01:46 2026 GMT Subject: CN=ac119812c8f678e8d461174f9fb837aea4c3f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:bf:66:83:48:b3:ae:a9:5c:50:b4:59:e9: 60:f0:c4:f6:5f:2a:ef:62:56:10:21:2c:70:b6:a0: 23:7d:11:2c:b3:d7:0d:db:00:d4:dc:7f:8c:9c:0f: f3:64:4a:c4:0f:d8:01:51:ea:22:a6:5c:b2:0f:71: ee:1a:4d:03:73:50:45:77:ec:7e:a7:06:f0:e2:98: 29:b4:48:e9:97:90:26:42:e2:0e:b1:96:fd:b0:97: 2f:ee:6f:2f:f4:a2:bf:30:6a:bb:03:70:4b:a2:63: 2f:b8:35:6e:fe:f4:01:19:58:61:56:89:59:bd:a5: 91:8d:af:e4:f5:ba:e9:72:75:e8:79:6d:8a:6c:62: da:1a:d9:fe:af:a4:ca:be:b9:fd:98:b6:a7:b6:b9: 9e:e6:55:11:20:44:a3:cb:bf:65:4d:86:c3:fa:3e: 42:ee:06:50:9b:c8:9d:9d:c5:fa:b6:a4:00:7d:66: 36:36:c3:dd:79:28:ff:1a:78:2c:22:1f:82:f2:cf: 97:67:fe:b3:16:59:51:0b:f8:ae:59:bd:0a:19:04: 4c:b9:7e:e4:4c:45:63:fe:c2:42:56:4e:8c:ad:e1: 4c:fc:9f:3c:0c:1b:9f:2a:d3:fd:22:d8:d0:4d:cd: a4:c2:4b:c6:da:fe:e6:8b:39:89:e7:b8:5b:f7:4f: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:11:98:12:C8:F6:78:E8:D4:61:17:4F:9F:B8:37:AE:A4:C3:F3:F8 X509v3 Authority Key Identifier: keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:37:82:ac:2b:cf:47:a0:9b:90:26:2b:67:11:78:23:6f: da:fc:6f:a9:3b:e2:87:99:db:04:9a:4d:1b:80:2b:b4:b3:8c: 12:e0:b2:02:99:59:cd:2a:cb:5c:af:e5:6e:30:ea:3d:8e:fc: bd:f8:ae:12:6b:c2:fe:a6:5f:4e:14:cd:bf:6b:ca:a5:1e:e4: e2:76:01:ed:27:46:8c:c8:1a:a8:e6:a7:1c:da:90:cb:14:ad: 41:94:dc:63:76:5f:f7:8d:3e:25:29:33:04:0f:67:5a:d0:89: da:43:2f:93:f9:39:6f:13:ee:23:e2:cf:49:78:e5:f8:34:78: 59:13:17:a0:4c:e0:bb:99:fc:99:6b:a6:9e:03:d5:60:5e:3e: 5f:c5:ea:0b:bc:9a:5c:3e:31:e5:34:b3:52:5f:b5:cd:e0:40: 35:ff:d9:11:53:87:49:f4:93:1c:0b:b2:e5:1f:9a:cf:d0:ea: 22:71:b1:e0:45:47:5c:b0:01:56:09:47:84:f4:a8:f0:57:83: 38:51:19:f9:1f:00:97:55:89:c5:7f:1d:e0:9e:e4:ef:c4:59: 6f:86:6c:44:56:69:94:c5:25:ca:fa:9c:08:7a:3a:fc:f4:8f: 40:ce:2b:99:8c:3d:8c:62:01:6f:1a:86:87:74:61:76:29:3e: 34:f9:ec:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiolfq/ERx8Dv5igBwwu0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFk YmViNzcwHhcNMjYwMTA5MTIwMTQ2WhcNMjYwMTEwMTIwMTQ2WjAzMTEwLwYDVQQD EyhhYzExOTgxMmM4ZjY3OGU4ZDQ2MTE3NGY5ZmI4MzdhZWE0YzNmM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+e/ZoNIs66pXFC0Welg8MT2Xyrv YlYQISxwtqAjfREss9cN2wDU3H+MnA/zZErED9gBUeoiplyyD3HuGk0Dc1BFd+x+ pwbw4pgptEjpl5AmQuIOsZb9sJcv7m8v9KK/MGq7A3BLomMvuDVu/vQBGVhhVolZ vaWRja/k9brpcnXoeW2KbGLaGtn+r6TKvrn9mLantrme5lURIESjy79lTYbD+j5C 7gZQm8idncX6tqQAfWY2NsPdeSj/GngsIh+C8s+XZ/6zFllRC/iuWb0KGQRMuX7k TEVj/sJCVk6MreFM/J88DBufKtP9ItjQTc2kwkvG2v7mizmJ57hb909ClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwRmBLI9njo1GEXT5+4N66kw/P4MB8GA1UdIwQY MBaAFJtH7h8XyYfeuywCDYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzkt ZTVlYzJjYzY0N2FhLzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2Fh LzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBU3gqwr z0egm5AmK2cReCNv2vxvqTvih5nbBJpNG4ArtLOMEuCyAplZzSrLXK/lbjDqPY78 vfiuEmvC/qZfThTNv2vKpR7k4nYB7SdGjMgaqOanHNqQyxStQZTcY3Zf940+JSkz BA9nWtCJ2kMvk/k5bxPuI+LPSXjl+DR4WRMXoEzgu5n8mWumngPVYF4+X8XqC7ya XD4x5TSzUl+1zeBANf/ZEVOHSfSTHAuy5R+az9DqInGx4EVHXLABVglHhPSo8FeD OFEZ+R8Al1WJxX8d4J7k78RZb4ZsRFZplMUlyvqcCHo6/PSPQM4rmYw9jGIBbxqG h3Rhdik+NPnscQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:32 2026 by rpki-client