This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json) Hash identifier: 2ApAOh279afNhp+cWzSZ0xtsvgMyoOvi00ijXpvXeLs= Subject key identifier: F3:B1:FB:5E:E7:6E:A0:62:25:96:62:B6:1D:57:E5:EE:D4:53:FE:FE Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Certificate serial: 019BFC1C50B5BD38B241C9ACE33B578FFA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 21:01:12 +0000 Manifest this update: Mon 26 Jan 2026 21:01:12 +0000 Manifest next update: Tue 27 Jan 2026 21:01:12 +0000 Files and hashes: 1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=) 2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=) 3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=) 4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=) 5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: vN4sJlkDCWH9GYeaHuJBJhLvB3GVEpb2dXx6XcNYxqY=) 6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:50:b5:bd:38:b2:41:c9:ac:e3:3b:57:8f:fa:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Validity Not Before: Jan 26 21:01:12 2026 GMT Not After : Jan 27 21:01:12 2026 GMT Subject: CN=f3b1fb5ee76ea062259662b61d57e5eed453fefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:d3:02:95:59:76:aa:28:f5:3f:db:b5:c1: 2a:94:5b:6c:1f:01:51:a9:41:90:f9:0a:7a:be:48: af:f1:06:41:13:e3:6b:d9:82:25:90:02:10:b4:95: 26:49:c5:3b:ec:06:9c:e4:4c:3b:ea:2e:2a:ea:84: 51:1d:a0:aa:5d:f5:99:93:5a:cf:23:2a:f1:0c:d3: c8:ba:fd:e9:09:b4:88:b3:99:b0:23:21:3f:7a:91: c9:ba:b7:ff:b6:9f:44:3d:79:8f:5a:01:a4:90:f3: 62:94:b0:f1:c9:bd:bd:c6:f4:96:21:65:af:2c:89: ca:a2:52:4e:f5:d7:9e:7a:53:c6:b6:68:bf:d7:83: ff:f7:85:3c:9a:30:45:9b:89:59:fe:ad:58:56:ef: 3c:ee:73:7b:fe:ed:09:b0:fc:9a:5a:35:00:09:c2: 31:42:5c:21:71:b7:ca:86:bf:bc:16:83:08:ea:ec: 59:ce:67:79:9a:8b:4c:8e:9e:27:05:10:b2:b6:85: e6:06:17:3d:13:e3:27:1b:dd:5c:c0:bb:f8:e6:f8: f7:06:52:18:10:d2:35:ca:4b:7c:f6:1a:b3:bf:c1: b4:69:64:d0:b7:dc:56:da:86:6c:93:f3:f0:10:93: 0a:f0:dd:6e:2c:c8:23:5e:00:e7:f6:a7:6b:15:87: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B1:FB:5E:E7:6E:A0:62:25:96:62:B6:1D:57:E5:EE:D4:53:FE:FE X509v3 Authority Key Identifier: keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2c:4b:5b:73:31:d6:e2:01:f0:a2:9f:c2:0f:00:12:c8:52: c0:81:91:55:80:b6:2d:96:88:f1:ae:25:7d:bc:ea:db:5c:32: 49:db:a7:16:6a:93:cb:0a:f0:f9:cf:d9:8e:b1:9b:e4:3a:05: 4d:b2:e5:80:86:27:64:70:63:8f:a6:a9:db:88:36:3b:1a:c3: 13:c1:e8:8d:99:3e:65:0b:cf:78:cf:52:e0:97:f0:f7:68:8b: bb:fd:78:97:63:34:71:39:72:81:8e:31:03:cb:88:7f:79:2a: 4f:4c:2d:ed:cd:2b:fb:bf:e8:9d:0d:a3:71:9c:da:a6:97:5e: 97:39:bd:b8:04:be:94:27:36:45:21:8d:33:57:47:61:3f:54: b8:4a:a8:b4:b0:a8:45:f9:8e:e4:37:12:8a:66:47:3c:19:0f: 38:2b:f5:c1:c9:99:2b:ca:5f:88:59:b2:56:65:8c:73:c3:c9: 81:30:44:7f:12:b9:90:54:1d:dc:f0:c9:5a:04:22:b7:71:9e: 01:5c:12:19:a1:78:f1:67:59:e7:aa:8c:03:73:62:b1:15:b7: e1:77:5a:09:d0:a1:36:96:37:c3:f0:20:8d:77:a5:c2:06:93: bc:7a:eb:a9:91:59:bb:e4:b0:1d:58:30:c9:c4:5b:c6:5b:8b: 53:77:9d:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HFC1vTiyQcms4ztXj/pSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm ZjJlMzAwHhcNMjYwMTI2MjEwMTEyWhcNMjYwMTI3MjEwMTEyWjAzMTEwLwYDVQQD EyhmM2IxZmI1ZWU3NmVhMDYyMjU5NjYyYjYxZDU3ZTVlZWQ0NTNmZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovPTApVZdqoo9T/btcEqlFtsHwFR qUGQ+Qp6vkiv8QZBE+Nr2YIlkAIQtJUmScU77Aac5Ew76i4q6oRRHaCqXfWZk1rP IyrxDNPIuv3pCbSIs5mwIyE/epHJurf/tp9EPXmPWgGkkPNilLDxyb29xvSWIWWv LInKolJO9deeelPGtmi/14P/94U8mjBFm4lZ/q1YVu887nN7/u0JsPyaWjUACcIx QlwhcbfKhr+8FoMI6uxZzmd5motMjp4nBRCytoXmBhc9E+MnG91cwLv45vj3BlIY ENI1ykt89hqzv8G0aWTQt9xW2oZsk/PwEJMK8N1uLMgjXgDn9qdrFYeB9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOx+17nbqBiJZZith1X5e7UU/7+MB8GA1UdIwQY MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt ZGJjYThjMzFlYmM4LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4 LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIixLW3Mx 1uIB8KKfwg8AEshSwIGRVYC2LZaI8a4lfbzq21wySdunFmqTywrw+c/ZjrGb5DoF TbLlgIYnZHBjj6ap24g2OxrDE8HojZk+ZQvPeM9S4Jfw92iLu/14l2M0cTlygY4x A8uIf3kqT0wt7c0r+7/onQ2jcZzappdelzm9uAS+lCc2RSGNM1dHYT9UuEqotLCo RfmO5DcSimZHPBkPOCv1wcmZK8pfiFmyVmWMc8PJgTBEfxK5kFQd3PDJWgQit3Ge AVwSGaF48WdZ56qMA3NisRW34XdaCdChNpY3w/AgjXelwgaTvHrrqZFZu+SwHVgw ycRbxluLU3edvA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:20 2026 by rpki-client