This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft File: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft (raw, json) Hash identifier: AmNhOrY6OtalyBc4s4pvv3quUjf7N2AiJv3oArcERyM= Subject key identifier: CC:6F:87:A5:72:0D:AC:05:52:DE:23:FF:56:B8:7D:17:33:68:BE:47 Authority key identifier: F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37 Certificate issuer: /CN=f4b2511fb074f5e1658535ba461e4580dbd84137 Certificate serial: 019BFA64886DE5AE99B5043B7E17DA4388DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft Manifest number: 27 Signing time: Mon 26 Jan 2026 13:00:51 +0000 Manifest this update: Mon 26 Jan 2026 13:00:51 +0000 Manifest next update: Tue 27 Jan 2026 13:00:51 +0000 Files and hashes: 1: 9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl (hash: DA2uypb7nKCX5rAa+C+09Mp1frJBVmW21HBgorJsskI=) 2: w4OPW1w1cwaWMj4uXqpkKkiEaKk.roa (hash: jUe+lcC4F+1K+YbOo4TiwqXw96cjr2eJwGRjPOVvNjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:88:6d:e5:ae:99:b5:04:3b:7e:17:da:43:88:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b2511fb074f5e1658535ba461e4580dbd84137 Validity Not Before: Jan 26 13:00:51 2026 GMT Not After : Jan 27 13:00:51 2026 GMT Subject: CN=cc6f87a5720dac0552de23ff56b87d173368be47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:3f:16:50:26:f7:ba:4b:80:bd:d1:67:3d: 85:e6:62:0a:57:e7:99:a3:36:a9:0a:79:13:46:2e: ee:4c:4e:3c:ca:6c:71:c3:7d:8d:c6:1e:26:b5:9c: 2b:27:42:e1:74:0b:1c:02:b2:65:e8:a5:76:68:37: e7:12:be:e7:c4:97:db:40:2a:ab:79:5f:88:9b:3a: 6f:11:19:2a:ef:e4:b7:8f:01:f2:1a:e6:97:aa:d1: 9a:0e:99:91:2b:14:ca:7a:23:78:28:ab:01:66:1f: 6d:e0:28:81:e7:c2:7c:e8:38:e5:69:27:e3:46:fb: 0b:9e:2c:ef:e9:69:65:56:67:20:83:56:0c:a1:b7: 4e:16:cd:19:12:9f:8d:d0:88:d6:41:72:38:55:0b: ac:c1:35:e3:82:b8:14:88:af:3e:22:0a:86:c2:dd: 8d:11:7e:f3:a9:70:55:46:d4:36:24:8e:58:70:59: 2c:42:ed:53:90:5c:74:6b:fe:2f:bc:d4:81:5f:f8: 37:f2:a2:28:cc:f9:85:2a:5e:94:10:62:a5:5e:f9: f2:81:4c:37:d8:d0:b0:4b:ea:45:dc:cf:dc:51:0b: 79:24:cb:c1:73:44:4d:f6:45:c0:09:25:d4:47:f8: e3:9e:dc:2e:65:43:17:a4:ae:ce:f0:27:3f:8b:2f: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:87:A5:72:0D:AC:05:52:DE:23:FF:56:B8:7D:17:33:68:BE:47 X509v3 Authority Key Identifier: keyid:F4:B2:51:1F:B0:74:F5:E1:65:85:35:BA:46:1E:45:80:DB:D8:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LJRH7B09eFlhTW6Rh5FgNvYQTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0baf51-87e3-4437-a446-0192943796c1/1/9LJRH7B09eFlhTW6Rh5FgNvYQTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:46:91:a4:63:c6:ff:62:5f:1d:a0:bf:50:e8:08:8d:9d: 24:94:7f:31:7c:af:e8:6a:60:dc:59:22:91:77:81:07:d7:4e: 74:f9:df:a8:bd:98:aa:f8:c9:c8:b7:91:d7:c4:10:cd:76:df: 67:a3:41:00:b2:53:49:06:59:89:44:8d:ac:73:b2:2d:07:1b: a1:fa:fb:aa:80:ac:d1:92:50:63:1e:63:56:43:27:8d:ec:ed: 08:23:f4:80:08:6a:6f:6b:a0:6b:1d:6e:8e:de:58:1c:5f:d6: 36:ec:0a:56:64:96:a1:0d:06:cb:2f:3c:7d:f5:9f:2d:4d:6d: fd:54:46:a1:be:ab:6d:80:32:c5:34:a0:20:c0:3f:1c:96:25: c0:3a:ac:0f:63:dd:63:8c:d3:27:74:e3:b9:9d:fc:66:8b:5a: 53:50:38:d2:b3:cc:ae:4c:55:27:60:12:4b:dd:71:54:b8:3b: e8:62:eb:35:f7:8e:ec:e3:92:0e:e1:8f:c0:26:99:d8:c7:a4: 85:1f:5d:73:92:e0:27:13:99:5c:c4:d2:35:f1:4e:df:29:a4: 51:eb:b9:ad:80:7d:93:1d:8e:d6:4a:c7:f7:ab:f3:dc:e1:41: 9c:9d:92:90:ca:6a:9a:47:5b:d9:d1:58:bf:d3:77:6a:2b:ca: 1e:16:7e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZIht5a6ZtQQ7fhfaQ4jdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjI1MTFmYjA3NGY1ZTE2NTg1MzViYTQ2MWU0NTgwZGJk ODQxMzcwHhcNMjYwMTI2MTMwMDUxWhcNMjYwMTI3MTMwMDUxWjAzMTEwLwYDVQQD EyhjYzZmODdhNTcyMGRhYzA1NTJkZTIzZmY1NmI4N2QxNzMzNjhiZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7s/FlAm97pLgL3RZz2F5mIKV+eZ ozapCnkTRi7uTE48ymxxw32Nxh4mtZwrJ0LhdAscArJl6KV2aDfnEr7nxJfbQCqr eV+ImzpvERkq7+S3jwHyGuaXqtGaDpmRKxTKeiN4KKsBZh9t4CiB58J86DjlaSfj RvsLnizv6WllVmcgg1YMobdOFs0ZEp+N0IjWQXI4VQuswTXjgrgUiK8+IgqGwt2N EX7zqXBVRtQ2JI5YcFksQu1TkFx0a/4vvNSBX/g38qIozPmFKl6UEGKlXvnygUw3 2NCwS+pF3M/cUQt5JMvBc0RN9kXACSXUR/jjntwuZUMXpK7O8Cc/iy8l0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxvh6VyDawFUt4j/1a4fRczaL5HMB8GA1UdIwQY MBaAFPSyUR+wdPXhZYU1ukYeRYDb2EE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYt MDE5Mjk0Mzc5NmMxLzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wYmFmNTEtODdlMy00NDM3LWE0NDYtMDE5Mjk0Mzc5NmMx LzEvOUxKUkg3QjA5ZUZsaFRXNlJoNUZnTnZZUVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApslGkaRj xv9iXx2gv1DoCI2dJJR/MXyv6Gpg3FkikXeBB9dOdPnfqL2YqvjJyLeR18QQzXbf Z6NBALJTSQZZiUSNrHOyLQcbofr7qoCs0ZJQYx5jVkMnjeztCCP0gAhqb2ugax1u jt5YHF/WNuwKVmSWoQ0Gyy88ffWfLU1t/VRGob6rbYAyxTSgIMA/HJYlwDqsD2Pd Y4zTJ3TjuZ38ZotaU1A40rPMrkxVJ2ASS91xVLg76GLrNfeO7OOSDuGPwCaZ2Mek hR9dc5LgJxOZXMTSNfFO3ymkUeu5rYB9kx2O1krH96vz3OFBnJ2SkMpqmkdb2dFY v9N3aivKHhZ+bQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:15 2026 by rpki-client