This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json) Hash identifier: 8HzYyvH72Mr5fHR9JzU3Se1rsyF1ivPA3aL2OIDJpCQ= Subject key identifier: 91:48:B8:8F:07:04:7C:CE:6B:9B:63:6A:0A:CF:4E:23:F2:A7:2B:04 Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Certificate serial: 019BF951C6B9B93D75AD02237252DCB87376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 08:00:44 +0000 Manifest this update: Mon 26 Jan 2026 08:00:44 +0000 Manifest next update: Tue 27 Jan 2026 08:00:44 +0000 Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=) 2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=) 3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: xyNVCggWDtu6dpQ0oFC7fWTxU6z4mYZUVZTVYrhlvbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:c6:b9:b9:3d:75:ad:02:23:72:52:dc:b8:73:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Validity Not Before: Jan 26 08:00:44 2026 GMT Not After : Jan 27 08:00:44 2026 GMT Subject: CN=9148b88f07047cce6b9b636a0acf4e23f2a72b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:8d:8f:21:d7:53:39:c2:09:b8:35:b0:62: b0:1d:a7:d5:5f:6b:fe:5f:96:56:8b:70:16:4d:3b: 4a:1c:fb:4a:8b:2b:9e:0c:e4:7b:12:16:e3:e8:a3: c6:54:73:72:b2:7d:79:02:d3:fe:82:86:d9:bb:2a: a1:f0:79:43:98:57:35:27:a9:15:be:1e:e8:f8:38: 15:59:49:b7:a9:49:e9:40:66:5c:17:d8:61:e8:2d: 82:b8:7f:b2:ff:52:56:92:f2:66:9a:24:52:8e:e3: ae:8e:71:31:88:56:e7:13:56:40:2d:de:b7:c6:52: 46:d6:df:db:43:7f:ea:e0:58:e6:04:6f:a9:ec:df: c7:7b:1f:0c:ff:cf:14:b8:9a:cb:ee:98:a0:8f:2c: 67:e3:4b:1d:ba:89:3b:7d:5f:b0:78:aa:d8:b7:61: 6f:7e:42:85:2a:70:62:6f:a3:d9:3f:00:3a:0f:17: 85:96:55:bb:df:bf:b6:22:c2:9f:fa:b5:a9:84:76: 2c:b7:cf:42:6b:7e:58:ac:d9:3d:c1:0b:12:7a:03: 89:d3:33:cf:c2:4f:34:e0:0c:8f:c6:8d:f9:d3:1f: d4:75:56:9f:a6:43:84:d8:fc:ee:7b:84:2f:35:6a: 42:76:bf:af:46:17:80:d9:6f:17:b8:19:ff:d0:9a: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:B8:8F:07:04:7C:CE:6B:9B:63:6A:0A:CF:4E:23:F2:A7:2B:04 X509v3 Authority Key Identifier: keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2c:e9:0a:38:42:02:ce:fd:c0:67:c7:f1:5e:37:ca:52:63: 08:04:cc:05:3f:0b:b4:95:fb:5c:0b:11:7c:19:b6:c6:85:91: a8:f1:45:ba:44:63:70:93:80:c5:59:7b:8d:3e:66:37:3b:8f: 08:39:2f:7b:a5:3d:d0:ef:06:72:fc:72:00:a5:1a:66:11:72: 04:c6:80:c4:cc:d5:32:95:64:63:d9:34:87:00:e2:fd:b7:66: fa:0e:60:d7:31:55:60:0c:28:bd:9c:d4:7d:b9:c4:43:53:f2: 0e:a1:4e:d6:ae:e4:4c:04:64:5f:93:3f:d3:e0:5c:18:fc:25: 0f:12:c8:16:45:de:1d:a7:0e:d2:a8:ab:83:ad:ca:76:63:2d: 5b:40:14:17:f4:85:93:1a:1a:5d:72:6f:11:e9:d5:ad:e9:bf: 84:de:9c:95:76:92:ee:28:ce:61:ec:63:63:e1:63:00:4f:54: 93:1a:c0:54:d2:84:b7:f8:39:08:01:75:f1:6f:85:3b:cb:02: d5:30:e0:fd:de:58:fa:7b:9b:ec:86:9f:1e:75:8d:80:cc:1f: b2:12:78:23:31:62:7e:7a:84:22:7c:97:c2:63:44:df:65:75: 8c:78:d1:91:fc:d4:9d:ab:cd:54:2b:f1:da:a7:ce:86:70:c3: 13:92:eb:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Uca5uT11rQIjclLcuHN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4 YTFjYTkwHhcNMjYwMTI2MDgwMDQ0WhcNMjYwMTI3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg5MTQ4Yjg4ZjA3MDQ3Y2NlNmI5YjYzNmEwYWNmNGUyM2YyYTcyYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnveNjyHXUznCCbg1sGKwHafVX2v+ X5ZWi3AWTTtKHPtKiyueDOR7Ehbj6KPGVHNysn15AtP+gobZuyqh8HlDmFc1J6kV vh7o+DgVWUm3qUnpQGZcF9hh6C2CuH+y/1JWkvJmmiRSjuOujnExiFbnE1ZALd63 xlJG1t/bQ3/q4FjmBG+p7N/Hex8M/88UuJrL7pigjyxn40sduok7fV+weKrYt2Fv fkKFKnBib6PZPwA6DxeFllW737+2IsKf+rWphHYst89Ca35YrNk9wQsSegOJ0zPP wk804AyPxo350x/UdVafpkOE2Pzue4QvNWpCdr+vRheA2W8XuBn/0JoXxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFIuI8HBHzOa5tjagrPTiPypysEMB8GA1UdIwQY MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4 LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvizpCjhC As79wGfH8V43ylJjCATMBT8LtJX7XAsRfBm2xoWRqPFFukRjcJOAxVl7jT5mNzuP CDkve6U90O8GcvxyAKUaZhFyBMaAxMzVMpVkY9k0hwDi/bdm+g5g1zFVYAwovZzU fbnEQ1PyDqFO1q7kTARkX5M/0+BcGPwlDxLIFkXeHacO0qirg63KdmMtW0AUF/SF kxoaXXJvEenVrem/hN6clXaS7ijOYexjY+FjAE9UkxrAVNKEt/g5CAF18W+FO8sC 1TDg/d5Y+nub7IafHnWNgMwfshJ4IzFifnqEInyXwmNE32V1jHjRkfzUnavNVCvx 2qfOhnDDE5Lrlw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:17:42 2026 by rpki-client