This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json) Hash identifier: LNs1S1CzIilmNraHSXx4USQABL4v0l2OYUkHIBSuSRI= Subject key identifier: 4F:6E:E5:CB:E0:3C:DC:05:00:2B:64:59:84:19:34:7A:D4:EC:BB:9C Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76 Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76 Certificate serial: 019BFA9B980CBFAACE056F6B2AFD8DEC54A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft Manifest number: 17B8 Signing time: Mon 26 Jan 2026 14:00:59 +0000 Manifest this update: Mon 26 Jan 2026 14:00:59 +0000 Manifest next update: Tue 27 Jan 2026 14:00:59 +0000 Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: sOPJGU7YPxw3NRLiq7Aq8fFzmuZyoujGwslanfJAQd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:98:0c:bf:aa:ce:05:6f:6b:2a:fd:8d:ec:54:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76 Validity Not Before: Jan 26 14:00:59 2026 GMT Not After : Jan 27 14:00:59 2026 GMT Subject: CN=4f6ee5cbe03cdc05002b64598419347ad4ecbb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:e2:16:b3:92:3d:a2:d5:19:22:fe:2f:1c: 89:b6:a2:cb:6d:71:6b:3c:aa:a1:43:b0:ce:0c:e0: 8f:f5:18:57:6c:e4:5d:60:84:8c:bf:de:40:72:7a: 4a:e5:06:86:0b:d5:90:70:a9:fe:ba:ef:9a:6d:d1: d2:94:4f:c7:ba:63:cb:1c:50:c8:18:54:34:1f:3d: 29:08:9d:3a:b3:f5:8c:9a:bd:3f:a2:86:c5:24:8a: 31:48:29:39:ca:67:30:18:ec:34:54:0c:b3:d5:24: db:cc:07:fc:5a:a3:16:1d:8a:f1:c2:2b:71:2a:d3: c9:dc:f4:e5:6e:4a:77:e9:60:d6:0e:f1:dc:26:69: ed:32:5b:4b:21:c2:2d:42:dd:96:c3:d5:fe:3d:7c: e2:70:91:89:82:1f:81:6e:15:81:2d:22:c8:85:c6: 86:48:18:83:50:08:e6:cb:83:b1:2e:bf:09:89:c3: 5c:75:c5:af:c1:dd:0a:48:9b:04:54:28:0b:8e:59: 8d:d4:0c:62:b0:9c:ea:58:ee:a5:f9:b0:b1:97:f2: 11:d1:cf:94:9d:71:1d:e9:bd:c2:a8:7e:ff:9f:d6: 26:14:36:bf:eb:61:c0:10:12:c5:58:49:42:d2:73: 64:87:ee:bf:d1:4a:21:89:ec:47:43:e0:77:e8:c7: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:E5:CB:E0:3C:DC:05:00:2B:64:59:84:19:34:7A:D4:EC:BB:9C X509v3 Authority Key Identifier: keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ed:57:35:5b:62:32:13:c0:8e:be:ad:9a:6c:a1:e2:44:70: b9:fc:c1:2f:6e:d7:f5:cd:9f:70:66:9d:14:a4:81:fc:6f:60: db:04:91:ca:7b:94:68:7d:15:f8:92:23:1d:03:cd:dc:9c:08: c9:76:57:01:83:86:93:cb:6b:34:d9:b3:da:5e:41:29:0a:e4: a3:9a:2c:74:3d:e9:94:99:0a:13:6e:2d:57:6d:06:fc:2b:ea: 40:18:43:a8:56:a8:24:bb:a3:f8:87:b0:4b:12:fe:6c:07:44: d3:02:c1:fb:12:71:5f:b4:5d:de:1a:c5:4b:e9:72:e3:ab:1d: c4:9a:ad:82:68:66:5e:3d:51:3f:71:ca:fe:5b:1e:dc:91:aa: ee:df:a9:97:63:4d:d5:9c:b5:0a:ed:e9:bf:f8:c1:06:e7:1d: 34:c1:95:50:bf:ef:01:28:0b:41:12:10:ac:aa:d6:be:b9:34: 41:09:fc:b0:44:f1:79:ba:2e:c0:d6:98:2e:7b:43:fd:b4:0b: 19:50:58:94:2b:38:c0:c7:29:b9:91:1b:91:d8:02:b0:81:cc: e4:71:9f:45:fb:61:59:52:1c:b8:0b:68:0e:08:02:a3:9f:10: cf:8e:af:8d:b1:2b:d4:04:3a:c3:9f:b3:79:63:28:f6:fc:8c: 68:4e:da:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m5gMv6rOBW9rKv2N7FSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZGYxYjExY2FmMmI4MjQ0NTMxNzgyMTI1YWU5MzNhZTc2 OTlmNzYwHhcNMjYwMTI2MTQwMDU5WhcNMjYwMTI3MTQwMDU5WjAzMTEwLwYDVQQD Eyg0ZjZlZTVjYmUwM2NkYzA1MDAyYjY0NTk4NDE5MzQ3YWQ0ZWNiYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudTiFrOSPaLVGSL+LxyJtqLLbXFr PKqhQ7DODOCP9RhXbORdYISMv95AcnpK5QaGC9WQcKn+uu+abdHSlE/HumPLHFDI GFQ0Hz0pCJ06s/WMmr0/oobFJIoxSCk5ymcwGOw0VAyz1STbzAf8WqMWHYrxwitx KtPJ3PTlbkp36WDWDvHcJmntMltLIcItQt2Ww9X+PXzicJGJgh+BbhWBLSLIhcaG SBiDUAjmy4OxLr8JicNcdcWvwd0KSJsEVCgLjlmN1AxisJzqWO6l+bCxl/IR0c+U nXEd6b3CqH7/n9YmFDa/62HAEBLFWElC0nNkh+6/0UohiexHQ+B36MdXxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9u5cvgPNwFACtkWYQZNHrU7LucMB8GA1UdIwQY MBaAFJ/fGxHK8rgkRTF4ISWukzrnaZ92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84YWJlNTQtM2RjNy00NjE3LTk5MDct NDcyZjRkYWQ3ZmRlLzEvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84YWJlNTQtM2RjNy00NjE3LTk5MDctNDcyZjRkYWQ3ZmRl LzEvbjk4YkVjcnl1Q1JGTVhnaEphNlRPdWRwbjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO1XNVti MhPAjr6tmmyh4kRwufzBL27X9c2fcGadFKSB/G9g2wSRynuUaH0V+JIjHQPN3JwI yXZXAYOGk8trNNmz2l5BKQrko5osdD3plJkKE24tV20G/CvqQBhDqFaoJLuj+Iew SxL+bAdE0wLB+xJxX7Rd3hrFS+ly46sdxJqtgmhmXj1RP3HK/lse3JGq7t+pl2NN 1Zy1Cu3pv/jBBucdNMGVUL/vASgLQRIQrKrWvrk0QQn8sETxebouwNaYLntD/bQL GVBYlCs4wMcpuZEbkdgCsIHM5HGfRfthWVIcuAtoDggCo58Qz46vjbEr1AQ6w5+z eWMo9vyMaE7apg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:00 2026 by rpki-client