This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: cNQ1KP02vGq2C3iYqEY/IWXm55vCDBMsIGkNB1gax94= Subject key identifier: A4:2D:2B:6F:EC:AB:28:51:15:B2:1E:C2:33:9C:64:8D:3D:55:55:FD Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019BF5AC29B286EE5590B6B60F72EB5E2BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 034B Signing time: Sun 25 Jan 2026 15:00:59 +0000 Manifest this update: Sun 25 Jan 2026 15:00:59 +0000 Manifest next update: Mon 26 Jan 2026 15:00:59 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: M1B49tcC9jcPgKM0J/vE5tuiv1kON5kye6wvHOwaWBs=) 2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:29:b2:86:ee:55:90:b6:b6:0f:72:eb:5e:2b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Jan 25 15:00:59 2026 GMT Not After : Jan 26 15:00:59 2026 GMT Subject: CN=a42d2b6fecab285115b21ec2339c648d3d5555fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:4b:7c:41:7d:d5:ce:a7:ef:9e:af:cd:02: 3f:bb:26:a4:c6:e2:99:80:02:ee:9d:05:77:40:41: dc:de:22:03:43:b0:1e:f6:cd:c2:a3:6b:3d:a9:84: 27:3a:83:b7:26:89:76:d2:ac:16:84:31:e6:aa:3e: d0:61:f0:b5:f3:fe:b8:89:7a:b9:da:09:cf:50:48: 12:c3:f7:77:68:4b:33:64:6b:21:82:d8:b4:e2:fe: 8c:08:9d:b4:d2:d7:16:e8:95:db:f6:67:d1:0d:8b: 20:01:e1:3f:a6:b5:46:94:98:8c:26:9c:30:3a:b1: fb:85:61:f1:dc:27:a1:c7:4d:b8:c4:9c:b2:95:7c: f6:73:7a:76:43:e3:53:ae:b0:b0:bc:e0:79:ea:2d: 6a:68:0f:bf:e5:95:49:e6:74:01:e7:fa:e2:4d:bd: 2a:42:49:8b:08:31:d7:f6:0d:37:dc:13:88:b9:c4: b1:6c:35:d1:bc:d7:82:8b:d0:c2:45:6a:d0:79:df: d9:56:a5:c1:03:98:d1:65:ab:92:bb:24:fc:14:aa: a7:ae:92:a3:82:fa:e9:37:0e:ff:9e:1a:a4:b4:bd: cb:a7:6c:7f:9e:ee:d8:3d:6a:b6:c9:65:26:1d:25: 31:fd:ee:2c:f3:10:1a:d2:2e:cc:48:71:ca:39:69: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:2B:6F:EC:AB:28:51:15:B2:1E:C2:33:9C:64:8D:3D:55:55:FD X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:76:92:b9:47:79:b4:0b:e1:82:5d:de:e1:d5:44:37:65:e6: 76:3c:c2:34:96:f9:25:28:2a:f7:4c:a7:b4:ad:f6:55:76:31: a0:5a:bf:12:eb:98:77:c8:bb:2b:f3:36:c5:c6:6c:20:d5:ea: eb:b1:73:56:28:ed:0f:b3:42:39:e3:aa:71:82:22:17:f0:7e: 23:b0:fd:85:c6:0c:f4:98:88:df:07:89:4f:c6:db:1e:19:db: 08:53:cd:ed:cf:a7:09:da:d6:07:a9:10:e5:02:35:8a:e8:c3: d7:b4:9b:b0:d1:b1:6c:a0:d9:80:6c:56:8c:32:75:eb:15:1e: 54:8a:30:1e:e7:b3:ed:2c:b7:9c:6a:2b:14:eb:f5:bb:0e:7a: 02:77:e6:97:18:23:b1:36:64:6d:44:80:9c:4c:b5:dd:95:d8: b7:2e:be:ae:d8:3e:98:db:1c:84:aa:b8:73:48:fb:a1:87:85: 7f:7e:b7:3c:c8:bc:ac:e0:a7:92:79:56:0f:4a:f3:f3:53:cc: ee:d9:33:f0:4e:b6:1c:06:21:54:66:c4:e6:7e:0b:4f:3b:1d: c4:cb:6e:82:5e:f8:bb:02:3c:b0:ea:03:63:46:6e:dc:7f:98: c3:25:7d:d2:82:58:81:fb:25:05:23:c8:60:82:0d:67:23:c7: a3:3e:85:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCmyhu5VkLa2D3LrXiu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjYwMTI1MTUwMDU5WhcNMjYwMTI2MTUwMDU5WjAzMTEwLwYDVQQD EyhhNDJkMmI2ZmVjYWIyODUxMTViMjFlYzIzMzljNjQ4ZDNkNTU1NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKRLfEF91c6n756vzQI/uyakxuKZ gALunQV3QEHc3iIDQ7Ae9s3Co2s9qYQnOoO3Jol20qwWhDHmqj7QYfC18/64iXq5 2gnPUEgSw/d3aEszZGshgti04v6MCJ200tcW6JXb9mfRDYsgAeE/prVGlJiMJpww OrH7hWHx3Cehx024xJyylXz2c3p2Q+NTrrCwvOB56i1qaA+/5ZVJ5nQB5/riTb0q QkmLCDHX9g033BOIucSxbDXRvNeCi9DCRWrQed/ZVqXBA5jRZauSuyT8FKqnrpKj gvrpNw7/nhqktL3Lp2x/nu7YPWq2yWUmHSUx/e4s8xAa0i7MSHHKOWlzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQtK2/sqyhRFbIewjOcZI09VVX9MB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnaSuUd5 tAvhgl3e4dVEN2XmdjzCNJb5JSgq90yntK32VXYxoFq/EuuYd8i7K/M2xcZsINXq 67FzVijtD7NCOeOqcYIiF/B+I7D9hcYM9JiI3weJT8bbHhnbCFPN7c+nCdrWB6kQ 5QI1iujD17SbsNGxbKDZgGxWjDJ16xUeVIowHuez7Sy3nGorFOv1uw56Anfmlxgj sTZkbUSAnEy13ZXYty6+rtg+mNschKq4c0j7oYeFf363PMi8rOCnknlWD0rz81PM 7tkz8E62HAYhVGbE5n4LTzsdxMtugl74uwI8sOoDY0Zu3H+YwyV90oJYgfslBSPI YIINZyPHoz6FwQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:36 2026 by rpki-client