This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json) Hash identifier: ZfiEqInc05MPs3kTy3i7cwEcO3xmXlOzt41YkV0DW1k= Subject key identifier: 47:B4:45:53:10:D5:97:D9:57:27:6C:E3:72:3F:79:96:ED:4F:BF:3E Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019BFE0A151F1CB0A1C0C94D2DC2F9DB1A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft Manifest number: 0154 Signing time: Tue 27 Jan 2026 06:00:32 +0000 Manifest this update: Tue 27 Jan 2026 06:00:32 +0000 Manifest next update: Wed 28 Jan 2026 06:00:32 +0000 Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: MBBtImXK1HXcnkhFRVc9HQEW9u5Y7jgRIszQZ9/O1bA=) 2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=) 3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=) 4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:15:1f:1c:b0:a1:c0:c9:4d:2d:c2:f9:db:1a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Jan 27 06:00:32 2026 GMT Not After : Jan 28 06:00:32 2026 GMT Subject: CN=47b4455310d597d957276ce3723f7996ed4fbf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:a9:28:1b:09:e0:01:83:2e:ec:38:df:7b: 32:b6:33:88:60:6f:b2:f5:62:16:41:c0:56:5e:05: f0:d6:07:a0:46:2a:6e:c1:5f:32:99:96:b3:cb:06: b9:08:a8:eb:40:03:95:71:d7:6f:40:d1:03:3b:13: d1:39:e8:f2:a5:47:63:06:f7:8e:e7:7d:d5:9a:4c: 40:87:1d:07:e8:32:e3:73:b5:c1:70:44:c9:a7:94: 64:d5:e2:bd:e1:fe:73:b7:74:c0:cb:39:c3:8b:aa: 30:a3:40:17:ba:76:1c:e6:f5:c5:7a:cf:32:da:7b: 1c:7c:25:dc:66:35:3b:52:7b:64:ea:e0:08:c5:4a: 41:a3:66:cd:0a:27:eb:a3:2c:44:4b:e9:9e:62:b5: ef:cd:47:a0:d5:f1:1d:87:55:f3:a2:19:ea:07:86: 5e:f8:a9:57:a5:0b:f4:e3:21:5b:b5:cc:e4:09:4b: bc:f4:a8:25:35:65:1c:ff:d1:26:75:e2:9d:8b:9a: 57:51:6a:2a:19:cf:38:a0:f0:88:4e:af:2a:76:23: 39:fd:e8:af:49:b8:64:22:c5:98:5d:60:0f:26:a6: e5:ae:da:64:71:b7:57:87:6a:37:bb:0e:61:ff:3a: 44:c6:27:71:ad:08:5a:7b:a3:b2:e6:22:9e:1b:cc: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B4:45:53:10:D5:97:D9:57:27:6C:E3:72:3F:79:96:ED:4F:BF:3E X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:a1:21:fc:fd:cb:52:83:07:a7:6c:f4:40:9a:6d:1d:ff:11: 41:17:6c:a2:a3:c5:c7:b0:a9:f3:0e:f9:6a:3b:36:dd:e3:6f: fc:6f:48:b5:41:9c:3a:e6:c0:a3:bf:2f:d8:62:5f:c7:81:64: 95:08:02:07:37:8f:19:d2:3d:ec:2e:09:02:2f:fe:e2:e9:3d: a5:6c:bc:c5:f8:04:62:31:42:72:d6:0a:5d:cf:70:78:df:29: 4b:ff:13:ae:8f:f8:cd:f4:a8:a5:31:05:ec:6f:d6:93:60:02: bc:a7:c8:44:02:a6:d4:2b:88:39:3e:82:d4:5d:ec:29:f8:f5: 79:4e:7a:61:ba:6e:49:12:ca:f2:d0:8e:4a:27:ca:7b:9e:28: ce:c5:f0:8f:f5:ef:1e:d8:2e:09:e7:3b:1d:7a:19:2a:e1:d3: a8:42:9a:8f:18:35:0b:80:34:18:ce:bd:10:73:4f:0a:19:33: a7:f1:9d:91:33:2f:8a:7b:7f:98:18:69:52:c5:2e:f6:49:5f: 46:5f:9a:e2:80:12:42:da:f9:12:8c:c0:04:7a:67:b1:45:8a: f9:54:d9:ef:1e:01:51:e8:7d:c9:ab:aa:ec:ce:d3:20:84:e0: 6f:f6:5e:52:5a:49:00:73:e1:42:29:86:b4:5c:ff:05:0c:06: 07:17:26:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ChUfHLChwMlNLcL52xqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjYwMTI3MDYwMDMyWhcNMjYwMTI4MDYwMDMyWjAzMTEwLwYDVQQD Eyg0N2I0NDU1MzEwZDU5N2Q5NTcyNzZjZTM3MjNmNzk5NmVkNGZiZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8OpKBsJ4AGDLuw433sytjOIYG+y 9WIWQcBWXgXw1gegRipuwV8ymZazywa5CKjrQAOVcddvQNEDOxPROejypUdjBveO 533VmkxAhx0H6DLjc7XBcETJp5Rk1eK94f5zt3TAyznDi6owo0AXunYc5vXFes8y 2nscfCXcZjU7Untk6uAIxUpBo2bNCifroyxES+meYrXvzUeg1fEdh1XzohnqB4Ze +KlXpQv04yFbtczkCUu89KglNWUc/9EmdeKdi5pXUWoqGc84oPCITq8qdiM5/eiv SbhkIsWYXWAPJqblrtpkcbdXh2o3uw5h/zpExidxrQhae6Oy5iKeG8xkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe0RVMQ1ZfZVyds43I/eZbtT78+MB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16Eh/P3L UoMHp2z0QJptHf8RQRdsoqPFx7Cp8w75ajs23eNv/G9ItUGcOubAo78v2GJfx4Fk lQgCBzePGdI97C4JAi/+4uk9pWy8xfgEYjFCctYKXc9weN8pS/8Tro/4zfSopTEF 7G/Wk2ACvKfIRAKm1CuIOT6C1F3sKfj1eU56YbpuSRLK8tCOSifKe54ozsXwj/Xv HtguCec7HXoZKuHTqEKajxg1C4A0GM69EHNPChkzp/GdkTMvint/mBhpUsUu9klf Rl+a4oASQtr5EozABHpnsUWK+VTZ7x4BUeh9yauq7M7TIITgb/ZeUlpJAHPhQimG tFz/BQwGBxcm4Q== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:42 2026 by rpki-client