This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json) Hash identifier: om177k+927UA03w3bBJ4tJlq/oEOph1/Wwq6EUMUdsQ= Subject key identifier: 72:B8:40:65:D2:08:C4:6D:28:BD:5D:BF:1D:EA:B7:A8:50:B3:8A:B6 Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Certificate serial: 019BFA9B4C948FC194E1552475FF9499AF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft Manifest number: 084F Signing time: Mon 26 Jan 2026 14:00:40 +0000 Manifest this update: Mon 26 Jan 2026 14:00:40 +0000 Manifest next update: Tue 27 Jan 2026 14:00:40 +0000 Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=) 2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: qCko9Obq0dVAlVac/Dg9POW7bxyFpcjxEQduQ4s8Bb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:4c:94:8f:c1:94:e1:55:24:75:ff:94:99:af:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Validity Not Before: Jan 26 14:00:40 2026 GMT Not After : Jan 27 14:00:40 2026 GMT Subject: CN=72b84065d208c46d28bd5dbf1deab7a850b38ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:4c:0d:21:e3:ac:32:e4:9d:13:7b:ab:ba: 48:1a:87:dc:b7:7d:96:fa:b7:97:83:79:ed:0f:0a: ee:84:28:95:ee:f6:26:51:a5:72:dc:b2:5f:ab:a3: 0f:e2:47:6a:15:fa:9d:6e:21:52:ff:4d:5d:e0:60: 5b:65:96:a4:70:74:11:5f:bd:7c:51:09:e3:71:7e: 9a:ab:19:82:56:fc:39:22:e5:1b:2e:5a:f9:35:92: 3b:02:7b:e2:b9:b1:7a:22:fb:b3:40:82:37:ea:04: 70:ec:db:3d:e0:54:92:e2:62:a1:7d:1b:06:7f:23: f2:33:5c:fe:55:e6:c7:9d:f0:2f:f4:37:11:a6:c8: 1d:62:a2:78:14:1a:42:42:28:27:2f:a1:41:cf:e7: c4:48:61:66:97:d7:0b:f0:7a:a7:6d:8f:c3:d4:18: c2:da:73:1d:84:4b:e6:58:37:1e:f1:d8:56:13:d9: c7:54:25:2c:93:5a:df:ae:f4:0c:f6:13:68:a5:65: 55:fa:5b:c0:7e:60:2a:06:c1:1b:f5:cd:d3:a1:6f: e6:7c:ad:0b:5c:e6:fa:50:23:19:e9:39:6d:dd:0c: e4:a8:12:2d:96:1e:db:3d:e0:76:53:85:2e:60:27: 83:c8:5e:7e:65:c8:38:5f:84:aa:0f:39:e8:d0:9b: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:40:65:D2:08:C4:6D:28:BD:5D:BF:1D:EA:B7:A8:50:B3:8A:B6 X509v3 Authority Key Identifier: keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b0:8c:c1:10:57:9a:6c:36:f8:c0:c2:b1:4f:fe:94:37:c0: a7:8f:6b:af:37:7e:58:0a:b3:7a:ac:ac:87:e8:49:7d:dc:2f: 4e:d6:ed:dc:9a:fa:5f:9b:40:46:56:f0:d8:ee:11:e8:1f:aa: a6:b4:60:3b:3c:c1:99:1e:c9:bc:bd:b3:f2:36:7a:be:c0:a8: 41:51:c3:6d:a0:0e:6d:5e:f2:77:22:09:c5:a3:38:af:b0:ef: a1:59:b3:5a:bf:e4:18:fc:fd:25:03:17:63:5c:c1:9a:d2:60: 9b:3b:a2:0a:4d:dc:36:f8:6c:e5:c7:aa:94:05:74:9c:8c:06: d7:25:24:8e:0a:ce:17:a1:bd:90:76:44:22:d7:e1:cc:75:15: a9:90:35:88:cd:ea:c3:25:8c:34:12:94:5d:6e:08:b1:71:90: fc:06:ec:38:e8:d7:52:68:7d:11:a5:62:74:bb:2f:86:33:65: 7a:52:79:67:e2:4a:0d:3c:c9:73:e1:71:6a:10:43:1c:13:e8: 44:ed:89:a5:bf:b4:91:b3:58:fd:41:31:3f:86:9e:22:54:79: 5a:bc:0f:7e:70:d0:92:af:25:99:d3:45:f1:0f:a4:59:b2:7e: b6:f8:ee:f4:94:20:77:a0:78:f4:88:c8:3a:be:df:5b:0c:7d: 3c:b5:24:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m0yUj8GU4VUkdf+Uma8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5 MjlhYzkwHhcNMjYwMTI2MTQwMDQwWhcNMjYwMTI3MTQwMDQwWjAzMTEwLwYDVQQD Eyg3MmI4NDA2NWQyMDhjNDZkMjhiZDVkYmYxZGVhYjdhODUwYjM4YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZlMDSHjrDLknRN7q7pIGofct32W +reXg3ntDwruhCiV7vYmUaVy3LJfq6MP4kdqFfqdbiFS/01d4GBbZZakcHQRX718 UQnjcX6aqxmCVvw5IuUbLlr5NZI7AnviubF6IvuzQII36gRw7Ns94FSS4mKhfRsG fyPyM1z+VebHnfAv9DcRpsgdYqJ4FBpCQignL6FBz+fESGFml9cL8HqnbY/D1BjC 2nMdhEvmWDce8dhWE9nHVCUsk1rfrvQM9hNopWVV+lvAfmAqBsEb9c3ToW/mfK0L XOb6UCMZ6Tlt3QzkqBItlh7bPeB2U4UuYCeDyF5+Zcg4X4SqDzno0Jua2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK4QGXSCMRtKL1dvx3qt6hQs4q2MB8GA1UdIwQY MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1 LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7CMwRBX mmw2+MDCsU/+lDfAp49rrzd+WAqzeqysh+hJfdwvTtbt3Jr6X5tARlbw2O4R6B+q prRgOzzBmR7JvL2z8jZ6vsCoQVHDbaAObV7ydyIJxaM4r7DvoVmzWr/kGPz9JQMX Y1zBmtJgmzuiCk3cNvhs5ceqlAV0nIwG1yUkjgrOF6G9kHZEItfhzHUVqZA1iM3q wyWMNBKUXW4IsXGQ/AbsOOjXUmh9EaVidLsvhjNlelJ5Z+JKDTzJc+FxahBDHBPo RO2Jpb+0kbNY/UExP4aeIlR5WrwPfnDQkq8lmdNF8Q+kWbJ+tvju9JQgd6B49IjI Or7fWwx9PLUkIw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:49:28 2026 by rpki-client