This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json) Hash identifier: IFXXJHs1slHdzbSGXE99okUSsiTGVSkF7Yqq0paW3i0= Subject key identifier: C4:75:5C:EF:A0:87:6F:55:FA:39:DB:74:0B:C9:6D:58:7C:6B:E5:1B Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a Certificate serial: 019BF6BE67C4882B37D1BAA20A8A816B5567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft Manifest number: 106B Signing time: Sun 25 Jan 2026 20:00:32 +0000 Manifest this update: Sun 25 Jan 2026 20:00:32 +0000 Manifest next update: Mon 26 Jan 2026 20:00:32 +0000 Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: Sf9OG9BOgdHv4A52ahZ8GGmN6e/eWkdrAQICf3cENwI=) 2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:67:c4:88:2b:37:d1:ba:a2:0a:8a:81:6b:55:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a Validity Not Before: Jan 25 20:00:32 2026 GMT Not After : Jan 26 20:00:32 2026 GMT Subject: CN=c4755cefa0876f55fa39db740bc96d587c6be51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:77:27:80:27:33:34:a0:cd:40:be:d6:d9: 00:ed:71:07:d0:c1:ed:50:88:c3:e2:18:b9:74:d5: f5:55:f2:06:6b:6a:60:a5:8f:36:b4:f1:c6:18:83: 61:d9:8d:e8:49:17:1d:73:0c:20:9e:fd:5f:3d:15: 60:ae:35:f6:b2:73:74:4f:66:95:e7:6c:1c:f9:c7: 73:75:9f:9b:38:2e:d9:37:e8:5c:83:dd:3d:87:b8: c6:14:4f:d7:67:c6:1d:3e:c2:1e:48:7c:bb:9b:31: 4c:ca:14:5c:5b:d9:94:04:62:cd:8c:3a:78:1b:03: eb:e8:1c:b0:6a:f7:ee:97:d6:71:03:06:35:55:01: b1:44:db:da:c0:8e:51:2d:21:99:ba:cf:78:f1:e5: c2:cd:b1:d1:4d:05:37:d7:6c:30:f3:99:8f:95:97: 09:2e:d7:f9:d8:34:2f:e2:f7:99:35:60:e4:90:43: a2:37:ce:67:5a:1f:33:f9:e9:1a:15:59:1f:c6:ab: 4a:30:a2:59:be:3d:d8:ef:c1:98:7c:1e:ee:13:91: aa:c4:db:a6:7f:b5:b6:26:5c:9d:f3:35:ee:d2:9f: c5:a0:10:da:8f:fa:1e:b1:77:df:0d:65:18:9d:78: 8e:be:44:21:9f:c4:9d:f3:48:cb:8f:e7:8c:74:8f: e5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:75:5C:EF:A0:87:6F:55:FA:39:DB:74:0B:C9:6D:58:7C:6B:E5:1B X509v3 Authority Key Identifier: keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a0:d9:27:f8:5e:32:35:f5:c9:eb:5b:df:9b:90:c7:39:19: 62:03:98:20:f5:f6:d5:1b:31:b6:3c:b0:1c:d8:c2:5a:b6:2f: 97:e8:29:ef:16:61:ee:02:ed:96:8e:a8:a0:a8:7b:8d:e7:34: b4:72:43:ff:4a:4b:79:fb:c3:04:77:24:50:03:5c:d4:88:55: 12:f8:72:c4:5e:c3:c8:1e:1f:49:77:9f:eb:35:1f:6d:0b:f8: b3:61:4c:1b:e0:22:57:70:5e:03:e7:09:56:61:52:e2:4e:30: db:9d:d8:17:b1:f2:36:74:01:f9:f8:d6:99:7a:48:cb:00:f0: cd:40:a9:72:aa:f7:b8:d7:07:ce:99:f5:c2:3c:4b:6c:8e:6f: 98:de:31:02:30:f0:e9:ff:81:2d:a7:6c:53:9e:fa:58:a3:92: d8:40:b8:0e:58:aa:bf:f8:1c:9d:58:b7:d5:bf:65:e3:d3:ab: 1e:33:13:8c:b7:c0:cf:61:b2:bd:af:f3:99:ee:e8:c8:ea:2a: 65:d4:d4:73:54:c1:21:f0:1e:2b:9b:f7:d2:a8:ca:82:41:36: 8c:1e:a4:57:20:a9:c1:08:62:cb:70:73:28:1f:fc:3e:7f:fe: a7:b2:4d:08:79:61:3c:e5:e1:52:40:39:37:08:7a:a0:b0:22: 65:d8:3b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vmfEiCs30bqiCoqBa1VnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl MmQ4NGEwHhcNMjYwMTI1MjAwMDMyWhcNMjYwMTI2MjAwMDMyWjAzMTEwLwYDVQQD EyhjNDc1NWNlZmEwODc2ZjU1ZmEzOWRiNzQwYmM5NmQ1ODdjNmJlNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyl3J4AnMzSgzUC+1tkA7XEH0MHt UIjD4hi5dNX1VfIGa2pgpY82tPHGGINh2Y3oSRcdcwwgnv1fPRVgrjX2snN0T2aV 52wc+cdzdZ+bOC7ZN+hcg909h7jGFE/XZ8YdPsIeSHy7mzFMyhRcW9mUBGLNjDp4 GwPr6Bywavful9ZxAwY1VQGxRNvawI5RLSGZus948eXCzbHRTQU312ww85mPlZcJ Ltf52DQv4veZNWDkkEOiN85nWh8z+ekaFVkfxqtKMKJZvj3Y78GYfB7uE5GqxNum f7W2Jlyd8zXu0p/FoBDaj/oesXffDWUYnXiOvkQhn8Sd80jLj+eMdI/lQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR1XO+gh29V+jnbdAvJbVh8a+UbMB8GA1UdIwQY MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt ZmQ1NTkyNDJkNDcxLzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaDZJ/he MjX1yetb35uQxzkZYgOYIPX21RsxtjywHNjCWrYvl+gp7xZh7gLtlo6ooKh7jec0 tHJD/0pLefvDBHckUANc1IhVEvhyxF7DyB4fSXef6zUfbQv4s2FMG+AiV3BeA+cJ VmFS4k4w253YF7HyNnQB+fjWmXpIywDwzUCpcqr3uNcHzpn1wjxLbI5vmN4xAjDw 6f+BLadsU576WKOS2EC4Dliqv/gcnVi31b9l49OrHjMTjLfAz2Gyva/zme7oyOoq ZdTUc1TBIfAeK5v30qjKgkE2jB6kVyCpwQhiy3BzKB/8Pn/+p7JNCHlhPOXhUkA5 Nwh6oLAiZdg75g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:07 2026 by rpki-client