This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json) Hash identifier: N2Kx+9hPIvawNYLMir+mLqEza6HufRCgwiRFs1S6294= Subject key identifier: DF:76:C7:17:00:6B:CD:BE:C0:07:88:20:EC:B8:A4:9C:40:BA:2B:7E Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019BF53EA4C7E879200F6B26C545EF0708A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft Manifest number: 11E5 Signing time: Sun 25 Jan 2026 13:01:21 +0000 Manifest this update: Sun 25 Jan 2026 13:01:21 +0000 Manifest next update: Mon 26 Jan 2026 13:01:21 +0000 Files and hashes: 1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=) 2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=) 3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=) 4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: HPgM3PoTAOTrdLcmvCVk+iXf/E8BKm08MgN+eDn1NNw=) 5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=) 6: ioNRHlUjrXZXGwM3yHXyNTZdMx0.roa (hash: BWD5RHei2js3p7ixFJ0GF6nZuII80HgQOTS+8kZsqzo=) 7: pXJZQxbSBDqofTDE9vannCeqPHU.roa (hash: ukAqHZV/xMM8uN5SZsafy/GsPc0EqLT+NakATV+Zg88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a4:c7:e8:79:20:0f:6b:26:c5:45:ef:07:08:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Jan 25 13:01:21 2026 GMT Not After : Jan 26 13:01:21 2026 GMT Subject: CN=df76c717006bcdbec0078820ecb8a49c40ba2b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:42:be:5a:1c:6c:d9:f5:7f:b5:a1:57:cd: 59:43:bd:a0:a6:e0:be:37:4c:d0:00:06:f4:3d:5c: 7a:8f:66:12:3f:f7:25:50:4a:6d:cf:24:60:6a:51: d7:4a:e5:f8:af:7e:db:47:8a:67:10:5d:ec:94:b6: 31:3d:61:0b:81:4b:2e:31:d5:78:2c:fb:f6:77:66: 43:9e:f5:45:c6:d3:18:6d:2f:cf:03:06:70:54:ef: ee:d0:61:a9:4b:a0:9a:d4:a8:39:9c:0b:00:bc:cd: b0:2e:2d:e5:db:f9:96:bd:68:8e:9e:85:70:43:76: 80:57:a1:74:ad:3f:68:0e:7f:31:10:d8:28:40:cc: f7:09:5a:a7:c6:64:2a:55:4a:a6:44:fc:44:59:93: ac:8c:64:a7:f3:35:c1:96:e7:1c:91:02:b9:f1:f6: 3b:92:ed:d8:62:1b:10:98:6a:95:ee:e6:4a:98:36: 09:3b:f0:23:75:06:e4:c3:bc:c3:59:27:52:ed:07: 43:bd:24:11:15:c8:d9:ad:66:83:24:a4:c9:9e:ac: 46:3e:9d:ab:55:d0:d6:10:cc:6d:e5:43:4d:3a:3b: 15:56:a9:e5:90:6f:12:24:bd:fb:2f:7b:f2:78:8c: b1:00:14:1a:7d:b2:ef:82:47:9f:56:6a:ec:fa:99: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:C7:17:00:6B:CD:BE:C0:07:88:20:EC:B8:A4:9C:40:BA:2B:7E X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:5f:88:2f:07:5d:72:ba:e7:52:e8:8d:3f:ce:07:6c:bd: 4a:d5:f8:4f:b5:cc:09:f2:49:d3:ec:7a:b8:ca:48:88:0f:cd: f7:66:b2:70:01:e3:29:57:1b:5f:42:b6:55:73:7c:e9:b3:f6: c7:5a:aa:ae:17:60:e7:9a:20:22:9d:69:1f:ea:a2:73:8e:9d: 9d:38:0a:d2:7b:5d:e0:31:22:87:3e:90:1f:53:fc:f0:0a:6a: a0:64:18:2d:fc:01:c3:b0:69:67:80:a6:86:aa:9e:da:a8:13: 6e:e2:ea:66:1e:a8:8f:72:af:1b:30:2e:49:b2:d1:41:5f:95: 75:46:b6:fe:fe:5c:07:2c:d0:0c:96:d7:15:57:2d:74:cf:e6: f7:69:3c:c6:63:32:d3:be:2a:49:9e:d3:1a:c4:38:a4:cf:52: 49:62:ed:c0:00:2d:14:4b:6d:43:d5:15:d4:33:05:15:fc:77: 1b:4e:7a:96:4a:0c:e7:61:13:36:03:f2:31:37:a5:c6:cf:bb: 81:24:94:8a:4d:ed:42:cd:ce:3f:97:e6:04:57:57:d9:d7:0a: 51:5c:26:77:e6:2d:81:0d:d6:c8:42:0a:b3:bd:81:06:63:8f: 6b:47:43:24:45:a4:a7:1f:78:92:08:87:ed:d3:59:55:72:7d: bb:d6:e6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqTH6HkgD2smxUXvBwinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMTI1MTMwMTIxWhcNMjYwMTI2MTMwMTIxWjAzMTEwLwYDVQQD EyhkZjc2YzcxNzAwNmJjZGJlYzAwNzg4MjBlY2I4YTQ5YzQwYmEyYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwehCvlocbNn1f7WhV81ZQ72gpuC+ N0zQAAb0PVx6j2YSP/clUEptzyRgalHXSuX4r37bR4pnEF3slLYxPWELgUsuMdV4 LPv2d2ZDnvVFxtMYbS/PAwZwVO/u0GGpS6Ca1Kg5nAsAvM2wLi3l2/mWvWiOnoVw Q3aAV6F0rT9oDn8xENgoQMz3CVqnxmQqVUqmRPxEWZOsjGSn8zXBlucckQK58fY7 ku3YYhsQmGqV7uZKmDYJO/AjdQbkw7zDWSdS7QdDvSQRFcjZrWaDJKTJnqxGPp2r VdDWEMxt5UNNOjsVVqnlkG8SJL37L3vyeIyxABQafbLvgkefVmrs+pnFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN92xxcAa82+wAeIIOy4pJxAuit+MB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtBfiC8H XXK651LojT/OB2y9StX4T7XMCfJJ0+x6uMpIiA/N92aycAHjKVcbX0K2VXN86bP2 x1qqrhdg55ogIp1pH+qic46dnTgK0ntd4DEihz6QH1P88ApqoGQYLfwBw7BpZ4Cm hqqe2qgTbuLqZh6oj3KvGzAuSbLRQV+VdUa2/v5cByzQDJbXFVctdM/m92k8xmMy 074qSZ7TGsQ4pM9SSWLtwAAtFEttQ9UV1DMFFfx3G056lkoM52ETNgPyMTelxs+7 gSSUik3tQs3OP5fmBFdX2dcKUVwmd+YtgQ3WyEIKs72BBmOPa0dDJEWkpx94kgiH 7dNZVXJ9u9bmhg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:11 2026 by rpki-client