This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json) Hash identifier: MEExMjk2nizRHUsWU1U1jkuErwPO9ONwgSlN/ZPe0m8= Subject key identifier: 0D:94:B2:34:D5:85:EF:90:E0:A1:0F:83:D9:93:1A:03:0F:92:B8:53 Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b Certificate serial: 019BFD9C3908A04A15B76CCB1B6EDAFE4095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft Manifest number: 17F5 Signing time: Tue 27 Jan 2026 04:00:32 +0000 Manifest this update: Tue 27 Jan 2026 04:00:32 +0000 Manifest next update: Wed 28 Jan 2026 04:00:32 +0000 Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: 1aGib23LFcOvGQjFTNoAlEGoJtsrQx1ft1ieVN3cbpw=) 2: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=) 3: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (hash: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:39:08:a0:4a:15:b7:6c:cb:1b:6e:da:fe:40:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b Validity Not Before: Jan 27 04:00:32 2026 GMT Not After : Jan 28 04:00:32 2026 GMT Subject: CN=0d94b234d585ef90e0a10f83d9931a030f92b853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:81:3c:42:ab:e7:7f:46:cb:11:69:ce:9a: 43:da:73:12:65:77:9c:c8:c7:09:18:5f:5a:ab:f6: 9d:b7:ce:41:6e:0e:e7:c9:e4:69:2f:6e:6d:e7:f4: 8c:da:dd:b7:e9:90:bc:0a:52:a9:cb:ec:98:70:90: cb:aa:5e:bd:5c:30:13:ea:7a:db:1c:61:41:16:23: 57:b7:c3:81:5c:7a:d6:46:a1:bb:96:d6:ac:ad:27: e2:02:0a:43:9f:06:39:81:18:fd:d2:36:ad:af:9a: a9:c3:9c:ee:33:e8:72:58:1c:a3:98:05:d0:78:a4: 1d:af:b7:54:34:17:d8:81:a9:08:eb:34:ba:66:11: ff:e8:d8:69:07:4a:f9:93:40:73:53:fd:60:6c:fa: b1:a8:04:a2:44:9c:18:f8:31:cb:06:3d:5f:bb:08: 72:59:f1:53:50:47:9f:35:bf:0d:ef:bd:68:5c:d1: 12:6d:1f:4e:c4:71:65:24:42:6d:63:24:d7:f1:6b: ea:3d:ed:0c:19:53:76:9a:71:09:e6:ec:e3:52:a1: 93:ab:1f:3c:e6:ef:f7:dc:bd:ce:75:2f:39:13:a8: fd:8b:ec:f2:88:7e:25:e3:c7:c8:24:96:a0:b8:f7: 2c:73:73:33:e0:7b:ab:12:fa:1f:d4:fb:37:ed:4f: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:B2:34:D5:85:EF:90:E0:A1:0F:83:D9:93:1A:03:0F:92:B8:53 X509v3 Authority Key Identifier: keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ea:ef:74:9b:9c:1b:87:fb:0b:99:fa:92:77:2f:69:24:6e: 07:99:21:dd:c5:f8:d1:a3:d6:70:f2:37:5a:cd:ec:7b:c5:b6: 9d:b0:38:24:af:b8:61:d9:41:ec:c5:34:c3:bf:cb:39:75:d5: a1:49:f5:a6:c3:67:2c:70:64:e8:12:d0:54:3c:17:34:83:91: aa:1e:f4:3d:31:9b:9b:cd:07:17:ae:d7:9c:d2:1d:9e:34:b7: 4d:61:05:fe:a2:14:cc:b9:dc:01:bd:44:16:d6:19:88:9d:b7: 3e:c7:58:43:f9:99:a8:30:fb:f0:12:46:99:2f:15:ce:73:44: 34:f6:36:d3:79:56:0a:7c:92:c8:15:15:2d:03:e1:b9:83:48: ab:00:c3:ff:f2:d5:e4:aa:4d:62:b2:13:10:7e:96:ca:17:bb: c9:e2:e7:8a:84:04:65:43:9f:37:ee:b6:37:8f:e3:58:ce:c4: 14:16:13:d1:4f:31:7e:f6:46:44:aa:d5:e0:42:b2:80:ea:0c: 41:ca:9d:2a:59:93:9c:9c:cc:e4:f1:4a:83:94:e0:b8:9a:2e: 52:37:83:99:23:33:38:9f:27:25:30:49:b8:16:6c:b6:d2:71: f6:2f:6a:70:06:ca:42:0c:00:ae:3c:00:fd:2f:5e:56:b6:4f: 5c:68:43:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nDkIoEoVt2zLG27a/kCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw YjAzNmIwHhcNMjYwMTI3MDQwMDMyWhcNMjYwMTI4MDQwMDMyWjAzMTEwLwYDVQQD EygwZDk0YjIzNGQ1ODVlZjkwZTBhMTBmODNkOTkzMWEwMzBmOTJiODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjKBPEKr539GyxFpzppD2nMSZXec yMcJGF9aq/adt85Bbg7nyeRpL25t5/SM2t236ZC8ClKpy+yYcJDLql69XDAT6nrb HGFBFiNXt8OBXHrWRqG7ltasrSfiAgpDnwY5gRj90jatr5qpw5zuM+hyWByjmAXQ eKQdr7dUNBfYgakI6zS6ZhH/6NhpB0r5k0BzU/1gbPqxqASiRJwY+DHLBj1fuwhy WfFTUEefNb8N771oXNESbR9OxHFlJEJtYyTX8WvqPe0MGVN2mnEJ5uzjUqGTqx88 5u/33L3OdS85E6j9i+zyiH4l48fIJJaguPcsc3Mz4HurEvof1Ps37U/b5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2UsjTVhe+Q4KEPg9mTGgMPkrhTMB8GA1UdIwQY MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt ZTU1MjBhYTdiYTM3LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3 LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUervdJuc G4f7C5n6kncvaSRuB5kh3cX40aPWcPI3Ws3se8W2nbA4JK+4YdlB7MU0w7/LOXXV oUn1psNnLHBk6BLQVDwXNIORqh70PTGbm80HF67XnNIdnjS3TWEF/qIUzLncAb1E FtYZiJ23PsdYQ/mZqDD78BJGmS8VznNENPY203lWCnySyBUVLQPhuYNIqwDD//LV 5KpNYrITEH6Wyhe7yeLnioQEZUOfN+62N4/jWM7EFBYT0U8xfvZGRKrV4EKygOoM QcqdKlmTnJzM5PFKg5TguJouUjeDmSMzOJ8nJTBJuBZsttJx9i9qcAbKQgwArjwA /S9eVrZPXGhDfg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:12:27 2026 by rpki-client