This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json) Hash identifier: f5sVQm/ZogPCQy+GqNC8ugBEGRZYvt/L6fRVdYx//hs= Subject key identifier: 0B:8F:49:6D:F0:D7:D4:3F:A2:7A:BC:0C:72:8D:53:93:52:92:7A:8F Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019C0F6CFF8FAFB1D9E0B418417D12F59784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft Manifest number: 8E Signing time: Fri 30 Jan 2026 15:02:07 +0000 Manifest this update: Fri 30 Jan 2026 15:02:07 +0000 Manifest next update: Sat 31 Jan 2026 15:02:07 +0000 Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: ZDsfWNnI6wHhkPGSiVC2qO+piITUxRkibT4NpQaamIU=) 2: wTA4ZoIz75kHn1WMirNEgMY65FE.roa (hash: ashXJm/A/tacrnrBady83etVIast6DpVJH2Dt/iNOM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:6c:ff:8f:af:b1:d9:e0:b4:18:41:7d:12:f5:97:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Jan 30 15:02:07 2026 GMT Not After : Jan 31 15:02:07 2026 GMT Subject: CN=0b8f496df0d7d43fa27abc0c728d539352927a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:65:1f:f0:86:cb:80:52:3b:9b:1f:2d:c1: 02:4e:85:0c:fa:e5:56:b9:1c:44:48:75:e3:3e:1c: 57:50:7a:d7:66:f1:f1:67:ce:1f:2c:a2:47:be:1b: 33:87:0f:06:9f:41:ea:64:d6:d2:4f:b4:90:ec:9e: 5e:04:2c:d1:60:18:81:5d:7f:6d:f9:e5:fb:86:44: b7:92:9b:27:05:22:53:92:db:7b:7b:aa:7c:b9:59: a9:74:dc:d8:00:81:50:c5:75:ef:a1:fb:a7:83:8f: 8a:81:3c:db:16:33:ba:75:ea:95:96:35:0f:f8:07: 61:fc:e9:0a:ac:c9:81:3e:c2:37:a3:ca:16:99:28: 03:9a:8c:de:80:20:27:7d:dd:ae:89:13:1e:2c:26: 0e:ba:cb:4d:5f:13:39:89:84:31:3f:f8:6d:4f:ac: 98:1d:75:ff:fd:7b:2c:a7:cf:38:9b:63:54:6b:52: 2b:fb:2f:93:7d:bd:9d:5c:b2:f2:c2:ce:53:5f:f4: 78:cc:1b:3e:e4:65:d4:9e:ca:f1:f4:f4:ed:8a:df: 71:65:0b:a9:6b:a5:d0:62:64:e0:15:da:19:5f:37: 90:ff:85:ce:c0:f9:db:cd:8b:32:f0:db:ba:95:63: 67:f3:46:bc:47:90:81:f9:f5:b7:03:cd:b0:79:21: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:49:6D:F0:D7:D4:3F:A2:7A:BC:0C:72:8D:53:93:52:92:7A:8F X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5d:b3:35:0f:64:b8:6c:94:a0:51:46:eb:96:4d:dc:ee:bb: 47:71:eb:76:b1:f3:0e:de:3d:b9:6d:5d:ab:0c:05:0c:39:fb: 77:b5:a9:9c:40:a3:bc:20:da:c5:96:a0:95:b9:d2:55:e8:df: 74:51:fc:fd:04:7c:a1:53:43:8a:26:96:20:9e:05:52:2a:05: 65:cc:94:c9:36:5c:33:be:9f:06:08:fb:7e:1f:43:4b:4f:c1: 21:d8:5e:1b:4e:41:3e:72:1e:6f:de:9e:21:c3:4f:1e:4c:98: a9:a6:9c:b9:12:07:29:f9:57:cb:93:11:81:e1:1d:a2:c3:65: fd:d2:a9:db:cd:ea:a1:aa:28:29:2a:f5:5b:86:44:98:51:c3: 78:44:4d:a9:bd:b7:cd:d0:9e:88:df:2f:9d:8a:5a:15:a0:5e: af:8e:53:c7:49:df:a5:19:8e:04:8a:84:24:76:41:18:75:15: ff:b8:64:d2:34:91:3a:57:cd:9c:34:f2:e0:aa:ed:f9:c6:25: 7b:13:a3:e1:6d:bb:5c:72:19:e5:f9:9a:8d:78:10:51:44:91: 63:2c:8a:e6:90:3a:87:e6:4b:e8:64:2a:99:ac:f1:4b:21:3a: 28:dd:45:5d:40:0f:51:d8:62:3b:1b:04:e3:35:ec:9e:af:0a: 77:8b:a3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwPbP+Pr7HZ4LQYQX0S9ZeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjYwMTMwMTUwMjA3WhcNMjYwMTMxMTUwMjA3WjAzMTEwLwYDVQQD EygwYjhmNDk2ZGYwZDdkNDNmYTI3YWJjMGM3MjhkNTM5MzUyOTI3YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DJlH/CGy4BSO5sfLcECToUM+uVW uRxESHXjPhxXUHrXZvHxZ84fLKJHvhszhw8Gn0HqZNbST7SQ7J5eBCzRYBiBXX9t +eX7hkS3kpsnBSJTktt7e6p8uVmpdNzYAIFQxXXvofung4+KgTzbFjO6deqVljUP +Adh/OkKrMmBPsI3o8oWmSgDmozegCAnfd2uiRMeLCYOustNXxM5iYQxP/htT6yY HXX//Xssp884m2NUa1Ir+y+Tfb2dXLLyws5TX/R4zBs+5GXUnsrx9PTtit9xZQup a6XQYmTgFdoZXzeQ/4XOwPnbzYsy8Nu6lWNn80a8R5CB+fW3A82weSHuiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuPSW3w19Q/onq8DHKNU5NSknqPMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll2zNQ9k uGyUoFFG65ZN3O67R3HrdrHzDt49uW1dqwwFDDn7d7WpnECjvCDaxZaglbnSVejf dFH8/QR8oVNDiiaWIJ4FUioFZcyUyTZcM76fBgj7fh9DS0/BIdheG05BPnIeb96e IcNPHkyYqaacuRIHKflXy5MRgeEdosNl/dKp283qoaooKSr1W4ZEmFHDeERNqb23 zdCeiN8vnYpaFaBer45Tx0nfpRmOBIqEJHZBGHUV/7hk0jSROlfNnDTy4Krt+cYl exOj4W27XHIZ5fmajXgQUUSRYyyK5pA6h+ZL6GQqmazxSyE6KN1FXUAPUdhiOxsE 4zXsnq8Kd4uj0Q== -----END CERTIFICATE-----Generated at Fri Jan 30 20:12:44 2026 by rpki-client