This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json) Hash identifier: Q6TEgWHQaOpcFMhwuBF2mYa1TIjoQBfS9TE70Kbx1wM= Subject key identifier: 3C:59:D2:E1:C5:95:B6:8F:AC:3A:64:14:BA:96:1B:98:2D:3B:7A:AB Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240 Certificate serial: 019BF4D11A8CCD90C72F1BD09DCD9836599C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft Manifest number: 132A Signing time: Sun 25 Jan 2026 11:01:43 +0000 Manifest this update: Sun 25 Jan 2026 11:01:43 +0000 Manifest next update: Mon 26 Jan 2026 11:01:43 +0000 Files and hashes: 1: 7ae8tk0pU6530a5zvLjXOVWqT9A.roa (hash: Le7f9gD0/D1c+veukkepeDsMrYncp4PB6LJ2FQIfqPg=) 2: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: D4ttvKXP1KlAbqnLTOiGON79AGycNdMAeRxxfkhvhYU=) 3: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (hash: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:1a:8c:cd:90:c7:2f:1b:d0:9d:cd:98:36:59:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240 Validity Not Before: Jan 25 11:01:43 2026 GMT Not After : Jan 26 11:01:43 2026 GMT Subject: CN=3c59d2e1c595b68fac3a6414ba961b982d3b7aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:7a:5b:bb:ea:12:cb:d0:d1:35:c3:ec:9b: 12:7e:56:da:7f:fd:24:a2:2e:7e:4e:ad:e0:c1:c8: 95:f7:86:92:60:3e:37:73:ad:61:ef:69:ec:0e:a3: 05:1c:8d:02:c0:37:f9:3c:db:51:32:df:74:53:8e: 0e:d5:ef:a3:18:fd:de:0b:d4:ee:89:81:ca:43:24: ba:fa:c5:b2:3b:6f:4c:5c:66:6a:08:93:4b:91:be: a7:3f:ea:04:0e:2f:e7:25:7d:ee:dc:70:c2:87:f8: 8b:7d:09:4a:19:d9:fe:54:a4:a9:45:48:57:5e:0b: 72:93:1b:fc:d5:2f:7f:b3:54:5a:a0:9a:27:2c:79: e8:dc:a1:32:57:61:97:92:12:f5:48:55:ab:ba:5b: 05:14:64:17:83:8c:1a:a8:66:5e:16:e2:0a:24:6b: 4a:eb:6e:16:e6:a7:6e:93:7c:7d:5a:ac:ec:9b:72: 1c:76:cb:e2:ce:94:3c:86:f5:c8:53:38:70:09:d5: 10:b8:28:b5:76:af:bc:60:b6:ea:f6:53:12:9a:39: af:33:d0:70:7e:e8:10:d9:9b:72:ce:72:3c:d4:eb: d4:66:c2:37:d4:d3:a2:57:16:8f:08:11:bf:4f:8b: 9a:bd:62:9f:06:9a:5a:9c:1d:55:5b:fe:49:e1:8a: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:D2:E1:C5:95:B6:8F:AC:3A:64:14:BA:96:1B:98:2D:3B:7A:AB X509v3 Authority Key Identifier: keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3a:d1:05:2e:cc:06:8e:70:e1:1f:eb:b8:95:76:ab:a1:bd: 46:df:89:0a:8c:05:74:48:a3:73:7d:06:25:42:20:3a:e2:de: 3c:6a:a7:8f:ee:7d:92:f7:c7:5e:9a:76:08:ce:a4:00:85:6e: 4a:39:4e:51:af:c9:5b:0b:d3:3e:23:16:33:ed:19:82:9d:bf: bd:a5:97:96:42:c0:60:67:b6:03:fa:e8:3e:4b:36:17:77:9e: 15:70:a4:0b:4f:8e:60:2f:90:fa:03:15:88:c5:d6:c5:39:36: 03:fa:3e:ab:96:54:f8:b0:1a:ff:02:ad:3b:81:1a:98:c9:44: 13:a2:8e:90:21:64:3b:97:da:99:71:42:24:f5:3d:e3:de:9b: 49:1a:54:f6:49:73:47:40:3f:d3:61:7a:37:4f:b5:8b:50:ea: 02:54:e7:d7:84:29:83:cf:f0:20:e1:62:38:30:ae:02:6a:73: f7:25:f6:ec:e1:81:fa:84:c3:68:6a:bd:7d:d0:bc:55:84:3a: 8c:25:47:22:3a:4b:1d:41:a4:88:a1:ef:63:d5:d0:2f:00:09: 5c:b0:3b:11:a7:24:0b:95:fc:c4:64:1a:40:c4:cf:91:ae:ae: a8:ab:9f:89:e4:00:04:6f:b6:6e:92:32:42:f3:71:eb:fc:2e: 8b:e5:66:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RqMzZDHLxvQnc2YNlmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj MTMyNDAwHhcNMjYwMTI1MTEwMTQzWhcNMjYwMTI2MTEwMTQzWjAzMTEwLwYDVQQD EygzYzU5ZDJlMWM1OTViNjhmYWMzYTY0MTRiYTk2MWI5ODJkM2I3YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke56W7vqEsvQ0TXD7JsSflbaf/0k oi5+Tq3gwciV94aSYD43c61h72nsDqMFHI0CwDf5PNtRMt90U44O1e+jGP3eC9Tu iYHKQyS6+sWyO29MXGZqCJNLkb6nP+oEDi/nJX3u3HDCh/iLfQlKGdn+VKSpRUhX Xgtykxv81S9/s1RaoJonLHno3KEyV2GXkhL1SFWrulsFFGQXg4waqGZeFuIKJGtK 624W5qduk3x9Wqzsm3IcdsvizpQ8hvXIUzhwCdUQuCi1dq+8YLbq9lMSmjmvM9Bw fugQ2ZtyznI81OvUZsI31NOiVxaPCBG/T4uavWKfBppanB1VW/5J4Yo4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxZ0uHFlbaPrDpkFLqWG5gtO3qrMB8GA1UdIwQY MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt YTlmYWY2YTI2NDI2LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2 LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDrRBS7M Bo5w4R/ruJV2q6G9Rt+JCowFdEijc30GJUIgOuLePGqnj+59kvfHXpp2CM6kAIVu SjlOUa/JWwvTPiMWM+0Zgp2/vaWXlkLAYGe2A/roPks2F3eeFXCkC0+OYC+Q+gMV iMXWxTk2A/o+q5ZU+LAa/wKtO4EamMlEE6KOkCFkO5famXFCJPU9496bSRpU9klz R0A/02F6N0+1i1DqAlTn14Qpg8/wIOFiODCuAmpz9yX27OGB+oTDaGq9fdC8VYQ6 jCVHIjpLHUGkiKHvY9XQLwAJXLA7EackC5X8xGQaQMTPka6uqKufieQABG+2bpIy QvNx6/wui+VmkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:22:16 2026 by rpki-client