This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json) Hash identifier: Ic+XmJj+CMRNmZo1DEBAGYG5gl8sBYdYoQBnnLVEF4s= Subject key identifier: 79:2F:2B:89:4B:D1:98:02:DB:AC:6A:7E:A1:6B:4C:1B:18:AD:1D:29 Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17 Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17 Certificate serial: 019BFA464C172D81CCAD196A2BD5CB62FAAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:27:49 +0000 Manifest this update: Mon 26 Jan 2026 12:27:49 +0000 Manifest next update: Tue 27 Jan 2026 12:27:49 +0000 Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: Hzf6HmQzB3+sW/b++GWbsH32WFlHNtUDSQouoAHsEVU=) 2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:46:4c:17:2d:81:cc:ad:19:6a:2b:d5:cb:62:fa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17 Validity Not Before: Jan 26 12:27:49 2026 GMT Not After : Jan 27 12:27:49 2026 GMT Subject: CN=792f2b894bd19802dbac6a7ea16b4c1b18ad1d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:3d:c5:25:bb:51:6d:9d:57:9a:99:e2:70: 3a:31:c8:12:a9:72:0a:94:d3:5f:40:70:7a:a9:19: 8d:9c:34:78:e8:0e:14:27:4f:a8:ee:50:bc:d8:86: c6:02:8d:5d:33:4f:28:ca:38:20:95:2a:c6:d0:67: f0:92:f1:1e:5d:bc:33:0c:02:5e:41:c9:ce:43:fd: e1:6d:bd:31:0b:2e:dc:f1:87:7e:86:de:37:d1:6d: 36:ac:37:6c:be:a0:7f:f7:37:70:20:d9:92:58:46: 86:20:cc:c3:98:75:e7:59:88:48:cd:69:b3:fd:d2: a8:b6:73:03:ef:fd:87:39:be:34:20:07:6b:16:a8: 38:b8:bb:f9:22:27:87:8d:46:67:30:0d:e7:e9:7b: 21:cc:8d:f9:25:ae:fb:46:5c:fa:78:bb:26:0d:88: e8:4b:15:96:30:dd:3a:93:23:73:28:ef:3e:c4:39: e2:ec:50:db:d2:d5:19:88:f4:12:f1:eb:b4:2b:01: 37:9a:7d:15:39:f3:5a:9f:c4:b2:f0:bc:87:fd:16: fa:50:c9:e0:79:7a:6f:8b:7a:48:4e:4c:b8:f4:ed: 56:bb:17:35:e4:5f:0a:21:f3:16:df:c5:8f:a2:fa: bb:00:a8:4c:38:e7:a2:35:0e:77:c8:61:d6:9a:e7: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:2B:89:4B:D1:98:02:DB:AC:6A:7E:A1:6B:4C:1B:18:AD:1D:29 X509v3 Authority Key Identifier: keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b8:3d:54:ea:45:64:95:ef:01:9b:10:17:9b:7c:1d:82:00: 48:65:65:ef:cb:38:06:fb:24:b7:64:31:33:85:6c:1e:1c:76: 76:77:70:6c:64:3e:be:08:55:03:7b:35:83:ba:ce:38:d5:06: b0:c9:cd:8f:6b:2c:b6:f5:df:09:20:5d:59:75:b9:be:a4:b8: 0d:2c:55:16:39:cd:a1:ef:a3:90:cb:a3:15:e7:90:d7:3e:4a: 4c:8c:5c:2c:84:04:03:09:8f:5b:4a:a2:5d:82:0e:7f:72:2a: a3:27:e8:7e:1a:54:a3:32:ad:60:f5:ad:cb:87:3f:2a:93:b7: a9:09:7e:6a:96:ec:e7:62:73:f2:66:87:77:17:3f:5b:b3:3a: 39:e8:44:98:41:2a:d3:4c:e4:74:79:83:b7:db:86:46:2b:34: 45:a1:16:b8:ea:b8:56:4b:88:69:f1:6c:e3:6b:d5:21:7b:18: 27:d0:7e:fb:c2:9b:ed:3d:44:20:5e:fb:7f:37:9e:bf:a8:28: bb:c3:8d:ba:5b:b5:68:45:93:c4:1c:ef:bc:82:c7:72:b3:4f: 7f:a5:ac:95:36:0b:55:e9:ca:48:f0:3f:46:7d:c5:7e:16:9b: d6:81:0d:e3:90:8b:64:ee:53:05:06:1f:bd:36:c9:d9:be:0f: 1a:97:4b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6RkwXLYHMrRlqK9XLYvqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGQ4ZmJiOTJmOWI0NzQ2MTg3ZDlkNjNmZTliOTBmY2I1 ZWNhMTcwHhcNMjYwMTI2MTIyNzQ5WhcNMjYwMTI3MTIyNzQ5WjAzMTEwLwYDVQQD Eyg3OTJmMmI4OTRiZDE5ODAyZGJhYzZhN2VhMTZiNGMxYjE4YWQxZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii89xSW7UW2dV5qZ4nA6McgSqXIK lNNfQHB6qRmNnDR46A4UJ0+o7lC82IbGAo1dM08oyjgglSrG0GfwkvEeXbwzDAJe QcnOQ/3hbb0xCy7c8Yd+ht430W02rDdsvqB/9zdwINmSWEaGIMzDmHXnWYhIzWmz /dKotnMD7/2HOb40IAdrFqg4uLv5IieHjUZnMA3n6XshzI35Ja77Rlz6eLsmDYjo SxWWMN06kyNzKO8+xDni7FDb0tUZiPQS8eu0KwE3mn0VOfNan8Sy8LyH/Rb6UMng eXpvi3pITky49O1Wuxc15F8KIfMW38WPovq7AKhMOOeiNQ53yGHWmudhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkvK4lL0ZgC26xqfqFrTBsYrR0pMB8GA1UdIwQY MBaAFPTdj7uS+bR0YYfZ1j/puQ/LXsoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82ZjY5MTctZDJjOS00MDZhLTlhNmQt Yjg2NzZhYzIyNjUzLzEvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82ZjY5MTctZDJjOS00MDZhLTlhNmQtYjg2NzZhYzIyNjUz LzEvOU4yUHU1TDV0SFJoaDluV1AtbTVEOHRleWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLg9VOpF ZJXvAZsQF5t8HYIASGVl78s4Bvskt2QxM4VsHhx2dndwbGQ+vghVA3s1g7rOONUG sMnNj2sstvXfCSBdWXW5vqS4DSxVFjnNoe+jkMujFeeQ1z5KTIxcLIQEAwmPW0qi XYIOf3IqoyfofhpUozKtYPWty4c/KpO3qQl+apbs52Jz8maHdxc/W7M6OehEmEEq 00zkdHmDt9uGRis0RaEWuOq4VkuIafFs42vVIXsYJ9B++8Kb7T1EIF77fzeev6go u8ONulu1aEWTxBzvvILHcrNPf6WslTYLVenKSPA/Rn3Ffhab1oEN45CLZO5TBQYf vTbJ2b4PGpdLDg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:41 2026 by rpki-client