This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json) Hash identifier: UFY3saVWJLVWcI8NtHUxwZwZpeBjwrObQNq0yOnq43E= Subject key identifier: E0:9C:7C:21:7F:19:2D:51:AB:A8:0F:A9:C6:48:CA:AD:98:AD:DD:F0 Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Certificate serial: 019BFA2E056B38183E7001433D63BB012837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft Manifest number: 159E Signing time: Mon 26 Jan 2026 12:01:18 +0000 Manifest this update: Mon 26 Jan 2026 12:01:18 +0000 Manifest next update: Tue 27 Jan 2026 12:01:18 +0000 Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: DGDohk9ZrBQNsmiE+hDGNS/hv9GitYnu75IbTURGp8c=) 2: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (hash: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:05:6b:38:18:3e:70:01:43:3d:63:bb:01:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Validity Not Before: Jan 26 12:01:18 2026 GMT Not After : Jan 27 12:01:18 2026 GMT Subject: CN=e09c7c217f192d51aba80fa9c648caad98adddf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:f1:d0:08:7c:2b:22:75:04:c8:40:7b:fb: 4f:1a:3f:35:4a:88:b6:43:43:c4:84:33:19:e3:4b: bb:22:01:2e:f6:88:fa:3d:05:df:a3:31:e4:16:e8: 3f:b4:26:bc:d2:9a:16:33:88:49:43:70:00:4f:43: bc:70:8b:b1:e6:95:ce:4b:10:48:5a:66:10:c0:c3: 03:3f:ab:e5:6e:35:ab:34:16:6a:e9:51:0d:1d:11: e5:2c:6d:96:f0:2d:ca:81:1f:76:81:dd:e2:52:1e: 21:02:cb:bb:56:51:94:c9:e7:73:1a:fa:c3:c4:23: e5:4d:3a:1d:6b:f6:d6:cb:d4:15:64:f2:91:98:51: 70:32:de:40:5a:0c:43:78:3f:7e:33:d3:0d:e4:f4: ed:7e:96:ea:2c:e0:f9:a3:89:ae:bd:69:d8:88:45: 8f:24:43:6e:ff:09:e5:c7:4b:8f:61:f6:9a:6b:41: c0:ed:3a:d7:d0:22:b1:79:6c:d0:d3:20:f3:b1:1b: b6:ce:a7:8d:14:9a:de:07:44:b5:71:df:bc:80:b0: 57:b3:fe:a2:74:f7:8a:43:5f:45:b7:1b:cb:7a:b0: d0:d9:12:19:1f:f7:86:b4:37:bb:60:2c:e5:fa:45: d2:13:9f:76:4d:07:a2:f0:1b:a6:e6:9a:c0:17:f7: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9C:7C:21:7F:19:2D:51:AB:A8:0F:A9:C6:48:CA:AD:98:AD:DD:F0 X509v3 Authority Key Identifier: keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0a:f7:19:53:dc:91:99:77:1c:03:5a:34:04:2a:0f:09:36: 75:88:08:88:82:db:ae:bd:7f:11:19:f6:87:56:f0:64:ca:f8: 2a:98:ee:1b:7c:ab:ce:7b:0b:3f:14:ad:8a:ef:d4:1c:c6:44: 9f:58:49:db:ea:c8:6c:cf:be:70:90:c7:9c:44:98:5c:d0:73: 0b:a2:08:37:81:b4:05:91:d8:81:ec:47:90:24:a4:7d:93:36: 77:1c:2a:b3:09:e6:a1:47:fc:73:2a:52:78:64:de:78:eb:ee: e6:68:1e:a7:c5:5b:28:86:59:9a:b6:d5:27:7c:1e:f5:68:3f: 8b:71:89:65:44:cc:50:81:12:1c:f8:4b:56:33:0a:61:1e:8b: 84:c3:ce:6f:c3:c2:6a:59:54:19:30:fc:46:f9:21:45:13:c7: 50:f4:f1:12:92:a2:b0:fd:79:69:b6:24:03:69:1b:0a:b7:52: cb:8c:41:92:7b:51:fd:2d:84:41:d1:39:65:08:4a:1e:9e:1f: 33:bd:46:2a:16:a8:71:53:54:9f:59:2b:9d:ee:2b:83:b1:85: 71:5d:14:0e:73:49:18:0a:6f:fd:47:6b:0d:bb:5c:ea:d4:ec: d4:5a:6c:3d:fd:95:cf:8f:4d:e6:7a:36:c7:05:cf:f1:68:90: 46:79:28:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LgVrOBg+cAFDPWO7ASg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3 Y2Y5OTQwHhcNMjYwMTI2MTIwMTE4WhcNMjYwMTI3MTIwMTE4WjAzMTEwLwYDVQQD EyhlMDljN2MyMTdmMTkyZDUxYWJhODBmYTljNjQ4Y2FhZDk4YWRkZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveTx0Ah8KyJ1BMhAe/tPGj81Soi2 Q0PEhDMZ40u7IgEu9oj6PQXfozHkFug/tCa80poWM4hJQ3AAT0O8cIux5pXOSxBI WmYQwMMDP6vlbjWrNBZq6VENHRHlLG2W8C3KgR92gd3iUh4hAsu7VlGUyedzGvrD xCPlTToda/bWy9QVZPKRmFFwMt5AWgxDeD9+M9MN5PTtfpbqLOD5o4muvWnYiEWP JENu/wnlx0uPYfaaa0HA7TrX0CKxeWzQ0yDzsRu2zqeNFJreB0S1cd+8gLBXs/6i dPeKQ19FtxvLerDQ2RIZH/eGtDe7YCzl+kXSE592TQei8Bum5prAF/e5IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCcfCF/GS1Rq6gPqcZIyq2Yrd3wMB8GA1UdIwQY MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt MzI3ZjgzMTk0NWZkLzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgr3GVPc kZl3HANaNAQqDwk2dYgIiILbrr1/ERn2h1bwZMr4KpjuG3yrznsLPxStiu/UHMZE n1hJ2+rIbM++cJDHnESYXNBzC6IIN4G0BZHYgexHkCSkfZM2dxwqswnmoUf8cypS eGTeeOvu5mgep8VbKIZZmrbVJ3we9Wg/i3GJZUTMUIESHPhLVjMKYR6LhMPOb8PC allUGTD8RvkhRRPHUPTxEpKisP15abYkA2kbCrdSy4xBkntR/S2EQdE5ZQhKHp4f M71GKhaocVNUn1krne4rg7GFcV0UDnNJGApv/UdrDbtc6tTs1FpsPf2Vz49N5no2 xwXP8WiQRnkotA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:33 2026 by rpki-client