This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json) Hash identifier: AChtA3GsnzHDYCwvTzritMkT4kqFew9Ynt8Cwp8bAD0= Subject key identifier: 7D:E9:D7:93:D9:2E:FA:73:9A:8E:36:71:1D:DB:F5:37:74:7D:F4:40 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019C12A3A7F6FFB29FC280737462479939A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft Manifest number: 10A1 Signing time: Sat 31 Jan 2026 06:00:41 +0000 Manifest this update: Sat 31 Jan 2026 06:00:41 +0000 Manifest next update: Sun 01 Feb 2026 06:00:41 +0000 Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=) 2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: CldNfszU10oQ910+mauUQKHRwLo/y8cpBrvBv7hc9mw=) 3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=) 4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=) 5: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=) 6: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=) 7: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:12:a3:a7:f6:ff:b2:9f:c2:80:73:74:62:47:99:39:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 31 06:00:41 2026 GMT Not After : Feb 1 06:00:41 2026 GMT Subject: CN=7de9d793d92efa739a8e36711ddbf537747df440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:fd:62:46:f9:43:b4:77:b4:68:57:ff:89: 85:df:3c:4a:c6:d9:ce:37:31:e7:11:fb:47:0b:d4: 2e:88:64:62:3a:c8:7f:96:82:4e:1d:b0:39:3d:57: 71:ba:1c:fb:61:5b:f4:88:84:98:a0:66:08:6a:b6: 77:fc:ac:e7:f3:bf:b2:73:d6:35:c4:d1:b3:e5:f7: fe:84:d9:60:d7:e3:3d:bf:05:cf:ca:77:ca:4d:47: bc:5d:13:78:f5:c7:54:da:36:28:b1:1f:7e:5e:83: b3:7f:61:61:94:eb:f6:f9:1c:7c:03:9a:9c:dd:d4: 9f:37:c3:26:3e:59:fd:b9:be:7d:ec:47:41:0d:17: 9e:f5:7b:7e:46:d9:50:bd:db:6e:0d:38:47:47:5b: 59:83:37:2d:2f:3b:b3:fe:29:07:d0:23:92:b4:ca: c2:94:70:c9:ae:8e:8e:6b:af:f7:e4:7f:81:28:9c: 29:1c:ef:a2:fb:c1:ea:e5:83:2d:1d:2b:c8:d9:a5: 25:1d:4c:af:6d:8d:2a:ef:c2:d6:83:e8:6a:91:4d: 7d:79:48:4f:6f:94:2f:39:52:fa:f3:7b:68:88:cd: 87:22:9b:6b:a1:a4:6d:4f:46:c3:3d:bb:99:2b:7e: ff:c1:8c:b0:50:a0:a4:02:93:8a:32:2f:2e:a3:de: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:D7:93:D9:2E:FA:73:9A:8E:36:71:1D:DB:F5:37:74:7D:F4:40 X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:db:a6:5f:de:73:e7:11:4f:6f:df:30:55:5f:c3:6c:f0:81: 53:b8:b4:fc:7e:77:92:99:62:aa:b2:9f:98:31:ed:d3:9c:01: 8c:3b:31:9f:ee:db:67:95:0a:8e:93:4a:e8:ff:10:53:2c:80: c0:cd:dc:bf:b9:64:e2:29:f7:25:1b:31:20:76:66:77:31:8e: 51:f8:61:6f:53:2f:69:e0:23:22:59:e8:fa:27:49:29:a4:bd: a7:6e:e2:dd:25:8a:d6:87:1d:5d:ac:29:94:68:73:d2:58:4f: a2:51:5a:65:a4:e4:5d:33:08:f9:ab:1d:41:c7:dc:31:32:06: 36:96:ef:e2:69:e4:40:36:a0:7a:e1:58:97:76:e7:1e:55:48: bd:04:46:21:ce:9c:5d:36:a9:ec:b7:24:69:3c:88:d9:dd:c0: cc:13:c7:94:80:10:2b:95:e4:d4:d2:a7:fd:91:bb:9d:5a:75: 9a:d5:22:7b:97:4b:82:b8:71:4c:40:35:e4:7d:6a:b8:f4:bf: 19:df:3d:4b:6c:a2:e3:d6:b7:c9:a3:51:7c:dd:9c:a8:8d:7a: f2:34:d2:8e:18:30:46:27:b9:2c:f7:d7:8f:86:52:ff:39:aa: f7:21:e7:79:44:21:f4:0c:cc:c8:17:6e:bd:4a:26:e6:d8:e4: e8:02:79:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwSo6f2/7KfwoBzdGJHmTmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTMxMDYwMDQxWhcNMjYwMjAxMDYwMDQxWjAzMTEwLwYDVQQD Eyg3ZGU5ZDc5M2Q5MmVmYTczOWE4ZTM2NzExZGRiZjUzNzc0N2RmNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa79Ykb5Q7R3tGhX/4mF3zxKxtnO NzHnEftHC9QuiGRiOsh/loJOHbA5PVdxuhz7YVv0iISYoGYIarZ3/Kzn87+yc9Y1 xNGz5ff+hNlg1+M9vwXPynfKTUe8XRN49cdU2jYosR9+XoOzf2FhlOv2+Rx8A5qc 3dSfN8MmPln9ub597EdBDRee9Xt+RtlQvdtuDThHR1tZgzctLzuz/ikH0COStMrC lHDJro6Oa6/35H+BKJwpHO+i+8Hq5YMtHSvI2aUlHUyvbY0q78LWg+hqkU19eUhP b5QvOVL683toiM2HIptroaRtT0bDPbuZK37/wYywUKCkApOKMi8uo94CWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3p15PZLvpzmo42cR3b9Td0ffRAMB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9umX95z 5xFPb98wVV/DbPCBU7i0/H53kpliqrKfmDHt05wBjDsxn+7bZ5UKjpNK6P8QUyyA wM3cv7lk4in3JRsxIHZmdzGOUfhhb1MvaeAjIlno+idJKaS9p27i3SWK1ocdXawp lGhz0lhPolFaZaTkXTMI+asdQcfcMTIGNpbv4mnkQDageuFYl3bnHlVIvQRGIc6c XTap7LckaTyI2d3AzBPHlIAQK5Xk1NKn/ZG7nVp1mtUie5dLgrhxTEA15H1quPS/ Gd89S2yi49a3yaNRfN2cqI168jTSjhgwRie5LPfXj4ZS/zmq9yHneUQh9AzMyBdu vUom5tjk6AJ5UQ== -----END CERTIFICATE-----Generated at Sat Jan 31 09:25:01 2026 by rpki-client