This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json) Hash identifier: sGLEMLiCvDhJLg6bZPdsyNLoaeIpNDbVMdkYLxtIoNc= Subject key identifier: A8:C3:0D:A8:56:EA:5C:80:A2:35:A4:00:A3:E9:FF:9E:54:97:D2:F4 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019BF2AAFCAD37124D873860B49C1A2580C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft Manifest number: 10F3 Signing time: Sun 25 Jan 2026 01:00:50 +0000 Manifest this update: Sun 25 Jan 2026 01:00:50 +0000 Manifest next update: Mon 26 Jan 2026 01:00:50 +0000 Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: rKfy3pgfBBjOCHZ/KRd2v74ti29b7nIEz0QJRKpVz9I=) 2: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=) 3: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=) 4: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=) 5: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=) 6: pULqtEc0SKsqXGeiOnWWkrPorn8.roa (hash: qVqRlYliwpuyABHvme30cNreSUW+F7/kOdteNrRIdnk=) 7: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:fc:ad:37:12:4d:87:38:60:b4:9c:1a:25:80:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Jan 25 01:00:50 2026 GMT Not After : Jan 26 01:00:50 2026 GMT Subject: CN=a8c30da856ea5c80a235a400a3e9ff9e5497d2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:a1:bb:34:90:c4:cb:50:17:e1:6e:aa:1e: f8:e5:6f:27:50:f4:0b:de:08:b6:ae:68:88:b9:59: ea:75:ed:47:d5:53:51:6e:05:94:49:4a:aa:4a:97: 7e:a1:52:a6:a0:8c:f1:a7:92:05:8c:48:84:3b:91: a4:26:95:a2:3a:ed:8c:fb:ac:05:74:1a:49:15:aa: 04:8a:f0:5a:78:7c:1d:13:17:8c:ca:d1:ea:ca:2d: 38:d7:e4:0c:ce:69:65:0d:b9:eb:a0:32:04:3d:0c: de:88:10:5d:d8:e5:f8:db:ad:22:9d:94:dd:ec:57: 9e:ed:dd:a5:8c:33:0b:78:f0:37:ac:83:5d:0b:64: 1f:fa:85:13:a6:a0:c0:72:a2:79:8d:97:8d:1b:87: 49:d4:c7:24:05:9d:fa:fa:0c:aa:41:91:8b:5e:f5: d4:0b:57:d1:74:c4:dd:60:11:5c:d4:74:76:93:94: 08:36:ed:04:a1:d2:f7:87:d5:5d:a6:d7:31:81:59: b9:60:84:1e:e2:d4:af:b6:1c:b9:ce:d4:64:92:d8: 21:c7:63:71:ca:7d:82:0e:88:22:46:50:86:64:56: 42:00:60:26:49:7f:2f:37:47:23:95:ad:2b:5e:9a: db:d9:31:ff:11:cb:58:bc:c5:0b:17:d3:87:cb:0a: 98:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C3:0D:A8:56:EA:5C:80:A2:35:A4:00:A3:E9:FF:9E:54:97:D2:F4 X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:02:49:0d:d3:c2:27:21:dd:01:76:a3:38:3a:eb:b2:33:8a: 17:e4:4d:f6:cc:66:82:05:8b:e4:42:9a:a9:ac:41:6f:1c:91: a5:8e:da:98:33:23:8d:97:05:b3:dc:ec:1c:7f:b6:27:df:29: 91:f5:4e:3f:69:86:bf:71:d1:3d:91:99:be:5d:50:bd:46:53: b4:55:2c:d6:04:2c:64:c7:70:e7:aa:f8:8f:2c:56:4a:92:9e: e1:ac:af:8a:d5:18:cd:67:08:b0:25:cc:6b:d4:3a:39:f8:7b: bf:cf:67:7b:3f:cf:94:47:2e:ef:92:72:9b:d6:4e:e1:f9:03: bf:13:f2:c4:f3:fd:a0:18:e3:57:e2:3c:b1:a8:aa:0c:5a:04: 8e:fc:cc:75:a1:e1:cf:78:93:9f:2d:f5:89:dc:90:7f:d3:1d: b1:62:d2:3f:57:3e:c9:12:ae:29:a1:5e:f5:69:2f:89:4c:4a: 9c:54:67:a1:90:c6:ef:9b:88:ca:12:cc:d9:c8:c5:b5:7d:60: 60:37:83:9c:d0:20:21:e6:26:c1:ac:f6:f4:7f:7d:fb:ec:ba: bd:c5:71:dc:c5:08:38:a6:c8:49:86:8a:c1:95:ca:9f:ab:10: f1:e0:93:9e:09:58:ca:ed:91:59:75:0f:82:75:7e:fa:68:a7: 4f:98:45:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqvytNxJNhzhgtJwaJYDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjYwMTI1MDEwMDUwWhcNMjYwMTI2MDEwMDUwWjAzMTEwLwYDVQQD EyhhOGMzMGRhODU2ZWE1YzgwYTIzNWE0MDBhM2U5ZmY5ZTU0OTdkMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6huzSQxMtQF+Fuqh745W8nUPQL 3gi2rmiIuVnqde1H1VNRbgWUSUqqSpd+oVKmoIzxp5IFjEiEO5GkJpWiOu2M+6wF dBpJFaoEivBaeHwdExeMytHqyi041+QMzmllDbnroDIEPQzeiBBd2OX4260inZTd 7Fee7d2ljDMLePA3rINdC2Qf+oUTpqDAcqJ5jZeNG4dJ1MckBZ36+gyqQZGLXvXU C1fRdMTdYBFc1HR2k5QINu0EodL3h9VdptcxgVm5YIQe4tSvthy5ztRkktghx2Nx yn2CDogiRlCGZFZCAGAmSX8vN0cjla0rXprb2TH/EctYvMULF9OHywqYJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjDDahW6lyAojWkAKPp/55Ul9L0MB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQJJDdPC JyHdAXajODrrsjOKF+RN9sxmggWL5EKaqaxBbxyRpY7amDMjjZcFs9zsHH+2J98p kfVOP2mGv3HRPZGZvl1QvUZTtFUs1gQsZMdw56r4jyxWSpKe4ayvitUYzWcIsCXM a9Q6Ofh7v89nez/PlEcu75Jym9ZO4fkDvxPyxPP9oBjjV+I8saiqDFoEjvzMdaHh z3iTny31idyQf9MdsWLSP1c+yRKuKaFe9WkviUxKnFRnoZDG75uIyhLM2cjFtX1g YDeDnNAgIeYmwaz29H99++y6vcVx3MUIOKbISYaKwZXKn6sQ8eCTnglYyu2RWXUP gnV++minT5hFTg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:49 2026 by rpki-client