This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json) Hash identifier: kZhOvumKJ0URp6I70SEHzuFCD6FswcGXzlmAxmTPibM= Subject key identifier: C6:14:CC:54:21:FF:91:F1:3F:AE:C5:98:EF:6B:D8:6F:18:89:3A:42 Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a Certificate serial: 019BF6F58D8CDC1C6EEC9DA2D63C851C3342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft Manifest number: 0C42 Signing time: Sun 25 Jan 2026 21:00:46 +0000 Manifest this update: Sun 25 Jan 2026 21:00:46 +0000 Manifest next update: Mon 26 Jan 2026 21:00:46 +0000 Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: NksplRPwC1XjYJ3DgKs3dXYbOpGDELppu7fEts9inAQ=) 2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=) 3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:8d:8c:dc:1c:6e:ec:9d:a2:d6:3c:85:1c:33:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a Validity Not Before: Jan 25 21:00:46 2026 GMT Not After : Jan 26 21:00:46 2026 GMT Subject: CN=c614cc5421ff91f13faec598ef6bd86f18893a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:4f:99:26:3a:ff:23:05:5d:fc:06:79:3b: 42:b3:ca:9c:3c:af:c1:72:cb:86:9e:5f:3c:bd:f5: 58:c2:6a:bf:5b:42:2c:aa:c9:d5:cc:55:58:81:5e: d9:3f:ad:72:e2:72:ff:06:f1:0f:74:6a:77:53:57: 76:d1:d7:69:ee:9e:6d:a6:95:58:81:38:28:5e:c1: 34:ff:80:da:e7:21:8a:c4:b8:e1:7e:76:d0:ce:3b: 27:da:0a:b3:64:ac:01:2f:59:d4:62:2e:1d:5f:32: 5c:41:c0:6f:0f:ba:04:6a:c0:25:48:56:81:8f:d5: 18:fd:3b:6b:89:ec:5a:fd:7e:d4:ee:b3:6d:eb:64: dd:2e:38:f4:04:4c:ec:22:21:83:70:47:cc:e9:f2: 22:ae:ce:91:c2:fb:e5:09:4a:37:cd:71:0c:19:9a: de:79:97:29:ce:2e:66:b4:22:7c:80:9c:4f:0f:7e: 8f:40:1c:c6:e0:5d:31:7f:15:54:2f:73:de:06:d9: 68:20:70:9a:60:93:d2:92:98:2e:13:77:08:9a:94: c9:4a:e8:dd:45:ca:89:87:43:26:c5:fd:12:6b:65: 86:99:23:a0:e9:ff:f9:1e:2d:5a:a4:38:25:3c:1a: d4:ee:c3:01:c5:f4:9f:74:65:50:91:74:23:88:fe: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:14:CC:54:21:FF:91:F1:3F:AE:C5:98:EF:6B:D8:6F:18:89:3A:42 X509v3 Authority Key Identifier: keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b4:77:7b:01:d6:9e:99:4d:19:16:6e:9e:29:5c:e9:cc:2e: b4:44:8b:0a:bc:54:25:a9:ae:31:72:c3:d1:20:e6:83:9d:88: b6:9c:7e:3e:79:e6:f4:f9:30:be:a8:9e:16:99:ed:d8:d1:07: 68:ad:ee:0f:18:50:07:b7:6c:e1:cb:dc:93:5a:b4:d6:7c:b3: a2:b0:e6:77:ba:06:12:48:00:6e:6b:f4:71:4d:87:a1:31:86: a3:ae:6f:6b:3e:ac:3d:97:9d:60:84:d8:7d:53:9f:42:f9:4e: f4:21:51:81:3b:86:5c:e3:13:02:92:23:8a:dc:20:c5:28:51: e5:24:9e:3c:51:0b:bb:ad:60:6d:7c:6e:52:5a:f6:e4:3b:65: ef:70:3b:8d:a0:e7:cd:54:8f:bd:aa:8a:16:84:0e:c9:fe:a1: 32:22:ab:bc:0e:c4:10:9c:19:dd:c2:4e:ee:7b:6b:bd:10:e6: 88:a1:be:6d:cf:49:f4:1c:4c:c1:a6:92:bc:bf:d1:94:2d:a4: 8b:9e:42:24:e4:e0:5f:d0:e5:c8:2e:b7:03:3d:29:bb:ee:3c: 28:19:c8:ae:8d:b8:79:04:84:af:d8:bf:2a:26:9a:c4:64:7d: 58:e2:e7:f3:97:3e:59:b9:f2:e9:82:dd:3e:2d:84:f9:a6:e6: 21:38:41:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Y2M3Bxu7J2i1jyFHDNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi OTFjOGEwHhcNMjYwMTI1MjEwMDQ2WhcNMjYwMTI2MjEwMDQ2WjAzMTEwLwYDVQQD EyhjNjE0Y2M1NDIxZmY5MWYxM2ZhZWM1OThlZjZiZDg2ZjE4ODkzYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nBPmSY6/yMFXfwGeTtCs8qcPK/B csuGnl88vfVYwmq/W0IsqsnVzFVYgV7ZP61y4nL/BvEPdGp3U1d20ddp7p5tppVY gTgoXsE0/4Da5yGKxLjhfnbQzjsn2gqzZKwBL1nUYi4dXzJcQcBvD7oEasAlSFaB j9UY/Ttriexa/X7U7rNt62TdLjj0BEzsIiGDcEfM6fIirs6RwvvlCUo3zXEMGZre eZcpzi5mtCJ8gJxPD36PQBzG4F0xfxVUL3PeBtloIHCaYJPSkpguE3cImpTJSujd RcqJh0Mmxf0Sa2WGmSOg6f/5Hi1apDglPBrU7sMBxfSfdGVQkXQjiP6GcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYUzFQh/5HxP67FmO9r2G8YiTpCMB8GA1UdIwQY MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4 LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbR3ewHW nplNGRZunilc6cwutESLCrxUJamuMXLD0SDmg52Itpx+Pnnm9PkwvqieFpnt2NEH aK3uDxhQB7ds4cvck1q01nyzorDmd7oGEkgAbmv0cU2HoTGGo65vaz6sPZedYITY fVOfQvlO9CFRgTuGXOMTApIjitwgxShR5SSePFELu61gbXxuUlr25Dtl73A7jaDn zVSPvaqKFoQOyf6hMiKrvA7EEJwZ3cJO7ntrvRDmiKG+bc9J9BxMwaaSvL/RlC2k i55CJOTgX9DlyC63Az0pu+48KBnIro24eQSEr9i/KiaaxGR9WOLn85c+Wbny6YLd Pi2E+abmIThBfA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:53 2026 by rpki-client