This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json) Hash identifier: 3n4V09T3mWbJZJDZ8/TV280pfxmeHfivfWbrQZWhh/Q= Subject key identifier: 89:8D:EC:35:98:CB:1A:20:9D:21:00:FA:86:AF:4F:DC:0A:01:F0:D5 Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b Certificate serial: 019BF5E357323235849C459EE54AE5A32D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft Manifest number: 03DE Signing time: Sun 25 Jan 2026 16:01:15 +0000 Manifest this update: Sun 25 Jan 2026 16:01:15 +0000 Manifest next update: Mon 26 Jan 2026 16:01:15 +0000 Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=) 2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=) 3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: sYgLSDqEW8jdZ4/AALcQcY1xik3Lakw/6uuADTQfU8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:57:32:32:35:84:9c:45:9e:e5:4a:e5:a3:2d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b Validity Not Before: Jan 25 16:01:15 2026 GMT Not After : Jan 26 16:01:15 2026 GMT Subject: CN=898dec3598cb1a209d2100fa86af4fdc0a01f0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:6d:4b:a8:06:9b:ca:2b:d2:85:24:20:36: 3e:d7:13:d3:f6:89:06:e7:cd:6f:3d:d7:b2:f7:2a: de:c7:50:db:92:70:b1:d8:d4:5b:d3:56:0b:3f:8d: e7:9d:6d:59:06:59:db:79:d2:c7:6b:54:f6:c3:b4: 0b:2a:32:d2:86:9d:cc:e5:7c:ff:10:5b:79:2c:4a: fc:8c:47:2c:c8:80:53:e0:3e:09:e7:70:6a:29:d9: f2:07:e7:fb:70:c1:94:0b:60:10:4a:f3:15:9a:b6: 5d:ed:a8:00:be:29:cf:cf:2f:b0:6a:51:7e:16:dd: fa:74:c1:4b:66:df:06:41:d3:5c:13:fa:c5:5f:58: 93:af:93:45:08:da:57:2f:c9:d7:de:b0:29:31:ee: d2:c0:3b:51:46:18:34:1d:06:25:03:ef:17:a1:f5: 6c:4f:de:a1:b6:e1:a8:15:86:55:e7:aa:d5:ff:7d: 0c:10:36:df:bf:90:9c:12:4b:75:05:a0:eb:c5:f6: ca:87:80:9f:5e:ce:61:1e:03:73:7d:d4:fe:9a:3e: c0:46:4b:1b:0c:36:92:f3:87:49:2d:0c:ef:b8:20: bd:24:93:1a:78:79:02:75:fb:03:c1:fc:17:4d:db: f7:3a:3f:80:66:8f:99:8e:c2:7d:0e:78:37:31:24: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:EC:35:98:CB:1A:20:9D:21:00:FA:86:AF:4F:DC:0A:01:F0:D5 X509v3 Authority Key Identifier: keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:12:bc:af:65:5a:28:2d:a3:d3:e4:64:ae:05:3f:70:b1:c3: 6a:d3:f5:f9:bd:08:42:b5:8a:6c:7a:d9:b9:e7:7e:c3:50:cb: 08:76:15:96:a2:ca:52:69:a7:66:71:e0:b1:76:e5:12:38:2b: 58:d3:e1:8d:8f:05:08:bf:32:63:c4:5b:f1:82:1c:84:5a:ef: 81:e6:8b:3f:54:14:11:24:45:e6:b7:e3:52:d0:d0:91:d8:b1: 54:07:13:54:c0:05:41:cb:dc:cf:c4:ad:3c:5e:cc:42:3a:8b: 8a:46:a4:84:0f:12:86:2b:88:bd:45:f8:15:a1:a0:07:60:03: b4:8d:e9:b6:29:e2:c6:38:aa:1d:b3:34:d0:29:86:f5:d3:0a: d7:40:d7:48:b4:fd:aa:cd:0c:1c:59:4f:b9:4b:2d:ed:fc:ea: 0f:70:34:78:f5:86:2c:40:15:47:75:4b:da:9c:14:b8:9a:6b: a1:d9:7b:00:86:71:1d:dd:90:d8:1e:d9:75:66:44:a9:2b:81: 35:ea:56:a0:be:fe:ef:8f:b6:90:13:c6:f2:b3:37:c8:f9:06: ed:5f:4c:06:6a:c4:44:48:66:65:6a:bd:73:e0:f1:03:8e:91: 8e:ec:53:fa:f0:de:61:bf:29:0b:6b:64:76:09:62:17:43:4f: 40:6c:54:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv141cyMjWEnEWe5Urloy2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjExZDJlY2Q2MDkyNGVmMjI3NmY4NjkzOWIwNzBjMDA4 MTU3NGIwHhcNMjYwMTI1MTYwMTE1WhcNMjYwMTI2MTYwMTE1WjAzMTEwLwYDVQQD Eyg4OThkZWMzNTk4Y2IxYTIwOWQyMTAwZmE4NmFmNGZkYzBhMDFmMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolBtS6gGm8or0oUkIDY+1xPT9okG 581vPdey9yrex1DbknCx2NRb01YLP43nnW1ZBlnbedLHa1T2w7QLKjLShp3M5Xz/ EFt5LEr8jEcsyIBT4D4J53BqKdnyB+f7cMGUC2AQSvMVmrZd7agAvinPzy+walF+ Ft36dMFLZt8GQdNcE/rFX1iTr5NFCNpXL8nX3rApMe7SwDtRRhg0HQYlA+8XofVs T96htuGoFYZV56rV/30MEDbfv5CcEkt1BaDrxfbKh4CfXs5hHgNzfdT+mj7ARksb DDaS84dJLQzvuCC9JJMaeHkCdfsDwfwXTdv3Oj+AZo+ZjsJ9Dng3MSR8AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImN7DWYyxognSEA+oavT9wKAfDVMB8GA1UdIwQY MBaAFPMhHS7NYJJO8idvhpObBwwAgVdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2Qt YzVjZjA4ZWVkYjljLzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2QtYzVjZjA4ZWVkYjlj LzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRK8r2Va KC2j0+RkrgU/cLHDatP1+b0IQrWKbHrZued+w1DLCHYVlqLKUmmnZnHgsXblEjgr WNPhjY8FCL8yY8Rb8YIchFrvgeaLP1QUESRF5rfjUtDQkdixVAcTVMAFQcvcz8St PF7MQjqLikakhA8ShiuIvUX4FaGgB2ADtI3ptinixjiqHbM00CmG9dMK10DXSLT9 qs0MHFlPuUst7fzqD3A0ePWGLEAVR3VL2pwUuJprodl7AIZxHd2Q2B7ZdWZEqSuB NepWoL7+74+2kBPG8rM3yPkG7V9MBmrEREhmZWq9c+DxA46RjuxT+vDeYb8pC2tk dgliF0NPQGxUOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:30 2026 by rpki-client