This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json) Hash identifier: zSpiXj8sQC5Slc2kluFzTIzCxs8cLMUZ+j/sgMuzgX0= Subject key identifier: 05:48:77:AC:02:A5:E1:A5:4F:7E:06:D1:C1:5E:E7:72:73:D5:BA:C9 Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Certificate serial: 019B9EC533AC79659D2C0472FE6950AAFF34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft Manifest number: 0983 Signing time: Thu 08 Jan 2026 18:01:22 +0000 Manifest this update: Thu 08 Jan 2026 18:01:22 +0000 Manifest next update: Fri 09 Jan 2026 18:01:22 +0000 Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=) 2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=) 3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: i/LCEUO2eDjOrG4L8VLS9AwLn8J/cMvk174xiIzT+gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:33:ac:79:65:9d:2c:04:72:fe:69:50:aa:ff:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Validity Not Before: Jan 8 18:01:22 2026 GMT Not After : Jan 9 18:01:22 2026 GMT Subject: CN=054877ac02a5e1a54f7e06d1c15ee77273d5bac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:e2:64:ad:03:bc:eb:27:89:39:f8:31:4f: 67:00:4a:8f:42:de:ef:3e:60:88:22:9f:13:28:9f: 98:20:7c:a8:af:a2:c4:cf:70:f8:ff:06:fd:3e:42: 9b:cd:b1:b1:a8:09:33:44:b0:1f:2d:46:8a:a5:6b: ab:3e:9c:02:e2:5d:15:75:64:31:9f:df:25:b0:63: 94:b0:6a:9c:65:e6:47:53:4e:15:f9:0e:43:0d:fb: 35:6d:61:04:dd:40:0b:70:38:2c:ed:e3:59:de:df: ae:13:11:2d:31:1d:6b:92:19:15:14:d7:8b:76:6d: 15:b7:1a:d5:15:79:f0:60:37:91:a2:57:d2:81:e1: 38:13:e7:3e:62:08:50:5c:11:12:3d:4d:31:69:ef: 73:af:be:e9:e8:c5:b3:bc:07:c0:20:19:7b:97:70: 2f:7c:b5:7a:81:44:f8:00:8d:93:c7:c1:bf:cf:22: 36:3a:b1:9e:f6:9d:27:42:e1:d3:18:5b:db:45:40: 8b:35:44:40:a3:95:44:e4:75:8d:f7:9d:91:7d:de: 9d:1b:f6:d6:90:4d:a0:e1:37:64:af:f8:6b:64:90: 94:d3:4d:21:65:94:91:91:47:68:2e:c0:ee:00:50: f7:e0:4b:47:2a:72:ec:85:d8:f0:de:01:c4:44:98: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:48:77:AC:02:A5:E1:A5:4F:7E:06:D1:C1:5E:E7:72:73:D5:BA:C9 X509v3 Authority Key Identifier: keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6f:63:5a:de:41:ce:6b:f3:3b:6e:09:47:3a:39:9c:99:01: 36:70:f4:6d:82:07:8b:df:80:bd:c3:ee:92:50:55:3d:7e:19: 4e:7d:66:e2:c9:4e:0c:af:e9:d7:cf:0c:f0:98:04:b2:d5:6a: ec:70:26:39:8e:f9:88:7f:5f:f4:f1:05:f5:39:45:93:41:02: 50:45:49:c0:db:85:6a:f0:67:63:df:24:af:89:18:07:33:4d: 53:7a:6e:49:e5:34:9f:ae:24:ac:b6:cb:52:dd:2e:25:0f:ff: d6:14:cb:28:8a:d7:93:ea:9a:04:f5:38:be:7a:c5:f9:18:9b: 8f:34:9e:d2:7c:17:ee:89:36:90:ae:bb:63:6f:7d:7c:cf:e0: ca:5c:3c:e3:e9:70:e1:be:73:1e:fd:3e:e0:1a:c1:eb:1d:58: 32:3f:22:c6:68:74:b0:5e:4d:6a:eb:2f:c1:db:0d:e6:1c:c0: 13:f3:95:2e:95:3b:47:7e:79:51:b9:9c:6b:3d:2d:e9:28:b4: 26:d3:ff:fa:33:ca:f3:fb:94:e5:fe:f5:a0:0c:b2:2f:44:bf: 3d:bd:32:48:c4:e1:43:56:4a:b5:3c:75:50:cd:11:42:f4:e5: 92:6d:e5:8c:38:ca:25:e9:39:de:a8:54:84:49:61:55:6d:23: f4:08:63:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexTOseWWdLARy/mlQqv80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw MDI4NjMwHhcNMjYwMTA4MTgwMTIyWhcNMjYwMTA5MTgwMTIyWjAzMTEwLwYDVQQD EygwNTQ4NzdhYzAyYTVlMWE1NGY3ZTA2ZDFjMTVlZTc3MjczZDViYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fbiZK0DvOsniTn4MU9nAEqPQt7v PmCIIp8TKJ+YIHyor6LEz3D4/wb9PkKbzbGxqAkzRLAfLUaKpWurPpwC4l0VdWQx n98lsGOUsGqcZeZHU04V+Q5DDfs1bWEE3UALcDgs7eNZ3t+uExEtMR1rkhkVFNeL dm0VtxrVFXnwYDeRolfSgeE4E+c+YghQXBESPU0xae9zr77p6MWzvAfAIBl7l3Av fLV6gUT4AI2Tx8G/zyI2OrGe9p0nQuHTGFvbRUCLNURAo5VE5HWN952Rfd6dG/bW kE2g4Tdkr/hrZJCU000hZZSRkUdoLsDuAFD34EtHKnLshdjw3gHERJipUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVId6wCpeGlT34G0cFe53Jz1brJMB8GA1UdIwQY MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4 LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm9jWt5B zmvzO24JRzo5nJkBNnD0bYIHi9+AvcPuklBVPX4ZTn1m4slODK/p188M8JgEstVq 7HAmOY75iH9f9PEF9TlFk0ECUEVJwNuFavBnY98kr4kYBzNNU3puSeU0n64krLbL Ut0uJQ//1hTLKIrXk+qaBPU4vnrF+RibjzSe0nwX7ok2kK67Y299fM/gylw84+lw 4b5zHv0+4BrB6x1YMj8ixmh0sF5NausvwdsN5hzAE/OVLpU7R355Ubmcaz0t6Si0 JtP/+jPK8/uU5f71oAyyL0S/Pb0ySMThQ1ZKtTx1UM0RQvTlkm3ljDjKJek53qhU hElhVW0j9Ahj8g== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:24 2026 by rpki-client