This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json) Hash identifier: Y5gchIlFrxkVanjPsX/p+Jdelz3SNQTh/6ZsDj9x42E= Subject key identifier: 09:10:EC:35:B2:DF:BE:56:2A:E1:1A:F5:EB:56:40:DF:E7:E7:A6:59 Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Certificate serial: 019BF6BE93C7EDD653A71298BA3034A4CA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft Manifest number: 04F3 Signing time: Sun 25 Jan 2026 20:00:43 +0000 Manifest this update: Sun 25 Jan 2026 20:00:43 +0000 Manifest next update: Mon 26 Jan 2026 20:00:43 +0000 Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: aa+uXjCZBpPsKjr1luqHWRUBsV6UB/6PL5aNAGBC0Us=) 2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=) 3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=) 4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:93:c7:ed:d6:53:a7:12:98:ba:30:34:a4:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Validity Not Before: Jan 25 20:00:43 2026 GMT Not After : Jan 26 20:00:43 2026 GMT Subject: CN=0910ec35b2dfbe562ae11af5eb5640dfe7e7a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:a0:0a:b4:15:8e:f7:fc:c0:43:67:5e:fc: db:33:d3:23:40:6c:b9:17:26:a1:01:2f:b6:dd:42: 53:82:c1:bb:f4:93:b2:45:d5:97:6c:4c:88:27:6e: f3:97:b0:2a:de:5b:81:24:7f:bd:25:1f:0c:90:40: 5b:bf:13:1e:73:7c:b9:07:3c:ed:79:d8:2e:59:19: 08:a4:21:87:ac:17:0b:96:fe:48:a2:b0:e7:a8:e5: e4:1e:3b:f0:f2:a0:f4:2f:31:e2:1c:c9:99:a7:cb: 7c:c0:f5:d0:ff:4e:02:a2:44:77:f4:12:40:c8:7b: b2:c8:8b:b4:37:46:67:c4:09:ae:7e:46:64:e9:aa: 73:1a:a5:ff:ad:4a:ec:cf:68:72:6a:b1:67:40:5f: a4:52:d8:07:29:b9:07:12:f0:1b:47:30:1f:8a:ca: f1:a3:8e:85:12:97:00:46:e1:99:9e:8e:b6:9b:d7: d8:e8:54:c0:dc:33:89:6f:a6:6e:ab:b7:7c:86:7b: d7:4f:1c:95:ca:b7:be:d7:31:89:7b:46:0b:67:e9: 46:4b:09:0d:72:c3:3e:48:f8:7f:16:4f:ed:ce:32: fd:fc:10:7c:20:e4:b6:bb:1a:e1:61:47:d3:74:a4: 75:14:55:0c:98:2d:d2:a1:3b:59:53:96:58:3e:a8: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:10:EC:35:B2:DF:BE:56:2A:E1:1A:F5:EB:56:40:DF:E7:E7:A6:59 X509v3 Authority Key Identifier: keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:ec:74:8f:9c:19:54:63:ca:f2:d8:99:4e:31:b5:a3:20: f3:11:fc:28:79:9e:6c:ca:2c:2e:41:6d:77:97:6d:1c:69:03: 07:cd:8d:57:2d:d1:86:04:85:3b:d4:6a:2b:6d:ed:35:0f:c8: cd:97:30:60:2a:20:b5:d0:8f:d0:06:37:f1:e8:e4:c2:dc:cf: 5e:d6:a6:87:ad:4c:7a:74:e3:89:6c:9e:7d:86:62:dd:ec:bb: ae:36:e0:44:1f:4c:f6:27:08:b6:4b:9c:02:d8:a4:8a:39:30: e5:77:ed:22:3c:08:8c:22:1c:32:46:19:17:2f:c1:9d:b3:90: c9:a0:31:57:e6:93:d2:c5:bb:ff:d3:5e:6c:36:7b:68:b9:8b: a1:46:80:c9:6b:b3:bd:a3:8a:b9:19:2e:e5:83:da:17:1d:83: 48:73:16:9e:f8:ba:b0:27:4a:3a:90:a1:50:91:59:f2:72:7a: 9a:3e:cc:de:af:8d:34:54:57:b6:aa:a2:ee:30:f6:0b:d9:2b: 6c:16:e3:e0:e3:af:8b:cc:b0:af:eb:3d:bd:77:c2:3f:79:84: 97:08:e8:5d:c7:e7:76:a8:f3:45:6f:45:62:b2:b4:96:73:b3: 65:4c:fe:2f:ce:9d:8e:e8:78:0f:c8:27:95:b1:a8:9a:56:3c: de:41:b7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpPH7dZTpxKYujA0pMpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh YmNhZjEwHhcNMjYwMTI1MjAwMDQzWhcNMjYwMTI2MjAwMDQzWjAzMTEwLwYDVQQD EygwOTEwZWMzNWIyZGZiZTU2MmFlMTFhZjVlYjU2NDBkZmU3ZTdhNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6igCrQVjvf8wENnXvzbM9MjQGy5 FyahAS+23UJTgsG79JOyRdWXbEyIJ27zl7Aq3luBJH+9JR8MkEBbvxMec3y5Bzzt edguWRkIpCGHrBcLlv5IorDnqOXkHjvw8qD0LzHiHMmZp8t8wPXQ/04CokR39BJA yHuyyIu0N0ZnxAmufkZk6apzGqX/rUrsz2hyarFnQF+kUtgHKbkHEvAbRzAfisrx o46FEpcARuGZno62m9fY6FTA3DOJb6Zuq7d8hnvXTxyVyre+1zGJe0YLZ+lGSwkN csM+SPh/Fk/tzjL9/BB8IOS2uxrhYUfTdKR1FFUMmC3SoTtZU5ZYPqgT+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkQ7DWy375WKuEa9etWQN/n56ZZMB8GA1UdIwQY MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfTsdI+c GVRjyvLYmU4xtaMg8xH8KHmebMosLkFtd5dtHGkDB82NVy3RhgSFO9RqK23tNQ/I zZcwYCogtdCP0AY38ejkwtzPXtamh61MenTjiWyefYZi3ey7rjbgRB9M9icItkuc Atikijkw5XftIjwIjCIcMkYZFy/BnbOQyaAxV+aT0sW7/9NebDZ7aLmLoUaAyWuz vaOKuRku5YPaFx2DSHMWnvi6sCdKOpChUJFZ8nJ6mj7M3q+NNFRXtqqi7jD2C9kr bBbj4OOvi8ywr+s9vXfCP3mElwjoXcfndqjzRW9FYrK0lnOzZUz+L86djuh4D8gn lbGomlY83kG3RQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:39 2026 by rpki-client