This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json) Hash identifier: AyDJmaDEXpnG7+sqnTvLdsgOrhxk4HEBzmOZciWJKvA= Subject key identifier: FA:B7:87:A4:C0:54:84:EA:67:21:6F:3D:74:46:10:08:2F:74:87:32 Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db Certificate serial: 019BFCC101E762E47F21CE2AD388D9F21857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft Manifest number: 0235 Signing time: Tue 27 Jan 2026 00:01:05 +0000 Manifest this update: Tue 27 Jan 2026 00:01:05 +0000 Manifest next update: Wed 28 Jan 2026 00:01:05 +0000 Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=) 2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: Deb0h1iJT8ZjEnaRYOyn169ys+rPtPQJtyTSLGAcBo0=) 3: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:01:e7:62:e4:7f:21:ce:2a:d3:88:d9:f2:18:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db Validity Not Before: Jan 27 00:01:05 2026 GMT Not After : Jan 28 00:01:05 2026 GMT Subject: CN=fab787a4c05484ea67216f3d744610082f748732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:4e:1f:a0:0e:4e:4f:9b:7a:fe:2d:2f:dc: bf:37:dc:e2:94:e9:37:98:bf:f3:d2:d4:09:1b:7b: 69:86:fa:78:be:2f:82:16:66:c7:da:d0:62:04:f4: bc:4f:df:3d:b7:f6:9d:13:29:7b:d3:46:c8:56:89: ac:79:93:55:5b:28:ba:2a:ca:90:74:a9:8d:4f:33: e6:67:40:68:f9:de:5f:2f:8f:b3:0a:f3:1d:72:78: 15:31:28:dc:07:66:90:1a:0a:cf:f3:3b:3d:87:84: 82:4a:ba:ab:c2:a3:6e:5c:6d:bf:f0:01:66:b6:af: 29:e0:09:52:f3:84:97:12:bf:81:22:5e:8e:70:64: d7:b9:6e:71:37:44:88:9d:90:5d:90:3c:a6:41:a4: 96:d2:6f:f7:9e:06:6e:87:32:b2:ff:b8:d4:df:20: 75:7e:60:be:4d:fc:46:89:fd:9c:4e:ba:03:aa:3a: ad:00:95:7a:cd:05:cb:54:cc:a7:51:e3:75:2b:9d: dc:6c:77:d5:fb:1c:bf:57:4b:96:93:5a:bc:41:90: 5b:a4:7a:8c:b1:ef:14:33:8e:58:fc:44:71:6e:96: 1e:e9:65:7c:28:68:4d:15:96:d0:81:6b:97:2c:06: ee:87:be:3c:2e:a6:51:bf:e9:56:47:e7:da:c1:a0: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B7:87:A4:C0:54:84:EA:67:21:6F:3D:74:46:10:08:2F:74:87:32 X509v3 Authority Key Identifier: keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:69:ce:eb:f0:59:90:4b:50:9b:dc:10:7e:77:28:cc:d8: 8e:83:a4:09:a6:f1:ae:7e:8a:28:d5:79:b7:d4:f8:59:21:c1: a0:d8:93:d3:c1:48:98:ce:2e:d5:e7:39:67:80:d3:d5:a0:4a: d4:c9:18:99:0c:1d:42:b0:71:02:d1:99:e7:d3:df:f3:0b:45: b6:48:4a:4a:e2:11:19:7f:e6:de:0c:e6:79:27:20:14:f8:af: 6b:54:f4:0d:af:2c:1e:c4:3c:a8:2b:ed:81:8e:60:ce:3c:4a: c8:ac:5f:16:51:16:91:23:3b:34:28:f4:c9:f4:c8:b1:c1:db: f2:3d:23:cb:3d:5a:5e:41:ca:61:d6:48:8b:f8:62:38:c1:8d: c9:f4:6f:4b:f6:c2:7b:ca:2f:16:71:4c:9a:79:29:62:39:37: 75:21:9b:ae:6a:27:15:8a:22:83:83:1e:76:17:45:4a:73:13: ea:41:3d:34:7c:b4:0b:68:92:a6:71:63:60:4d:f1:a0:fa:09: 14:4c:c4:92:70:bc:f5:c3:5f:ee:50:56:0e:aa:19:c7:0c:65: c2:79:66:17:0e:37:a8:eb:2a:af:f3:85:ba:25:71:50:e4:f7: e5:5a:67:a1:f0:f9:b9:04:2e:cc:57:46:96:d4:e5:03:13:43: fa:75:74:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wQHnYuR/Ic4q04jZ8hhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl Y2UxZGIwHhcNMjYwMTI3MDAwMTA1WhcNMjYwMTI4MDAwMTA1WjAzMTEwLwYDVQQD EyhmYWI3ODdhNGMwNTQ4NGVhNjcyMTZmM2Q3NDQ2MTAwODJmNzQ4NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWdOH6AOTk+bev4tL9y/N9zilOk3 mL/z0tQJG3tphvp4vi+CFmbH2tBiBPS8T989t/adEyl700bIVomseZNVWyi6KsqQ dKmNTzPmZ0Bo+d5fL4+zCvMdcngVMSjcB2aQGgrP8zs9h4SCSrqrwqNuXG2/8AFm tq8p4AlS84SXEr+BIl6OcGTXuW5xN0SInZBdkDymQaSW0m/3ngZuhzKy/7jU3yB1 fmC+TfxGif2cTroDqjqtAJV6zQXLVMynUeN1K53cbHfV+xy/V0uWk1q8QZBbpHqM se8UM45Y/ERxbpYe6WV8KGhNFZbQgWuXLAbuh748LqZRv+lWR+fawaB1nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq3h6TAVITqZyFvPXRGEAgvdIcyMB8GA1UdIwQY MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt YzA5ZmYxNmZjMzRiLzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmatpzuvw WZBLUJvcEH53KMzYjoOkCabxrn6KKNV5t9T4WSHBoNiT08FImM4u1ec5Z4DT1aBK 1MkYmQwdQrBxAtGZ59Pf8wtFtkhKSuIRGX/m3gzmeScgFPiva1T0Da8sHsQ8qCvt gY5gzjxKyKxfFlEWkSM7NCj0yfTIscHb8j0jyz1aXkHKYdZIi/hiOMGNyfRvS/bC e8ovFnFMmnkpYjk3dSGbrmonFYoig4MedhdFSnMT6kE9NHy0C2iSpnFjYE3xoPoJ FEzEknC89cNf7lBWDqoZxwxlwnlmFw43qOsqr/OFuiVxUOT35VpnofD5uQQuzFdG ltTlAxND+nV05w== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:54 2026 by rpki-client