This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json) Hash identifier: 6Buk2Ee5pwoQCmr10odHtYyGBYccgd6P1/l5RDL9Ytw= Subject key identifier: 29:46:9C:B7:77:14:23:A3:97:01:79:79:EF:FC:70:3C:A7:D8:E7:4C Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019BF386F22036E7052A9A0016C86A1CFFC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft Manifest number: 1128 Signing time: Sun 25 Jan 2026 05:01:05 +0000 Manifest this update: Sun 25 Jan 2026 05:01:05 +0000 Manifest next update: Mon 26 Jan 2026 05:01:05 +0000 Files and hashes: 1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=) 2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=) 3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=) 4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=) 5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: dgD402Nq0IXKWcxd+UtFlQXV6Y9k5rylM9RnGsFcVbo=) 6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=) 7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=) 8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=) 9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:f2:20:36:e7:05:2a:9a:00:16:c8:6a:1c:ff:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 25 05:01:05 2026 GMT Not After : Jan 26 05:01:05 2026 GMT Subject: CN=29469cb7771423a397017979effc703ca7d8e74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:bc:51:ff:e7:1e:8a:9f:9d:d4:9e:99:a3: 6f:df:53:83:a1:1a:69:40:a6:dd:09:3d:c7:7a:6f: 97:20:a5:8a:cb:11:ad:49:1f:fe:de:18:b5:03:f0: 60:d7:52:59:e0:53:3d:83:de:09:56:42:1f:56:9f: e5:94:ae:bf:8b:85:d1:4b:a3:c2:77:a4:37:f8:00: 0d:5f:f1:d8:1d:9b:80:91:33:26:9a:b9:8b:e7:02: 69:23:d5:2b:b2:cc:c8:00:e6:aa:aa:d4:3c:a4:76: ed:47:59:6c:56:62:6b:9c:3d:40:1d:fc:77:4b:f7: eb:22:9c:74:3a:39:4c:b2:95:39:64:1b:54:18:0d: 27:d3:48:79:66:ca:c9:eb:54:16:0c:e0:07:b8:01: 9f:34:07:87:bb:51:8b:2f:d4:d8:36:7d:34:81:a5: 3b:5c:22:b1:54:ec:3b:d9:9f:cc:9d:67:0e:b3:40: e5:2f:29:3f:13:d6:66:bd:a7:2c:14:eb:c8:84:4e: 01:ae:9d:9c:4f:fd:ae:8a:e9:b8:06:a1:13:ef:9a: 79:1a:81:46:7f:55:1c:a4:6f:80:1e:84:75:3e:d2: 90:a6:6f:d9:cf:dd:8e:76:e8:1b:40:f8:5b:09:de: cc:74:6f:7b:08:8e:0a:68:93:8d:6c:23:14:da:b3: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:46:9C:B7:77:14:23:A3:97:01:79:79:EF:FC:70:3C:A7:D8:E7:4C X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ae:6f:26:cf:c8:31:b5:f2:17:34:a0:5a:42:6c:f6:73:77: 32:92:06:7a:77:a4:ff:50:ba:06:39:70:72:75:18:b9:d9:de: 2c:7c:23:c9:a1:f4:c6:03:fc:a8:86:a9:ee:c5:5c:ad:4f:39: 65:a4:93:19:ee:74:e5:f7:42:62:71:e2:3b:ac:45:47:62:8e: d9:2c:82:80:9e:cf:84:06:f4:a0:b0:a7:be:3a:c7:0d:ab:48: 37:65:76:84:eb:90:03:67:1f:f0:09:28:a7:61:6b:32:42:c5: 78:f4:8c:7c:93:06:62:79:69:99:c6:88:e9:ed:bf:50:da:3b: ba:19:8e:2d:58:c7:31:06:fd:33:2c:53:26:ac:3e:97:08:5a: 11:2b:c8:d2:5c:b2:e5:97:4f:ab:3a:f5:70:4c:a5:11:5c:cb: b6:39:5a:db:3a:42:6e:bc:d5:28:ee:ae:f7:e0:0a:83:29:59: 2f:6b:48:f4:c5:4c:b4:4d:8d:fc:5a:fa:60:d8:f8:c3:d7:ca: b7:4f:71:b3:b6:38:93:6b:1a:23:b3:06:ff:30:dd:a7:ed:62: 28:09:c2:f6:83:2f:ed:01:e3:09:7b:58:5a:bb:17:e9:28:53: 47:ad:7e:34:84:b9:69:8e:06:4f:41:16:6c:9f:5e:39:b9:08: 5a:c2:86:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhvIgNucFKpoAFshqHP/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTI1MDUwMTA1WhcNMjYwMTI2MDUwMTA1WjAzMTEwLwYDVQQD EygyOTQ2OWNiNzc3MTQyM2EzOTcwMTc5NzllZmZjNzAzY2E3ZDhlNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE28Uf/nHoqfndSemaNv31ODoRpp QKbdCT3Hem+XIKWKyxGtSR/+3hi1A/Bg11JZ4FM9g94JVkIfVp/llK6/i4XRS6PC d6Q3+AANX/HYHZuAkTMmmrmL5wJpI9UrsszIAOaqqtQ8pHbtR1lsVmJrnD1AHfx3 S/frIpx0OjlMspU5ZBtUGA0n00h5ZsrJ61QWDOAHuAGfNAeHu1GLL9TYNn00gaU7 XCKxVOw72Z/MnWcOs0DlLyk/E9ZmvacsFOvIhE4Brp2cT/2uium4BqET75p5GoFG f1UcpG+AHoR1PtKQpm/Zz92OdugbQPhbCd7MdG97CI4KaJONbCMU2rPiRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClGnLd3FCOjlwF5ee/8cDyn2OdMMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa5vJs/I MbXyFzSgWkJs9nN3MpIGenek/1C6BjlwcnUYudneLHwjyaH0xgP8qIap7sVcrU85 ZaSTGe505fdCYnHiO6xFR2KO2SyCgJ7PhAb0oLCnvjrHDatIN2V2hOuQA2cf8Ako p2FrMkLFePSMfJMGYnlpmcaI6e2/UNo7uhmOLVjHMQb9MyxTJqw+lwhaESvI0lyy 5ZdPqzr1cEylEVzLtjla2zpCbrzVKO6u9+AKgylZL2tI9MVMtE2N/Fr6YNj4w9fK t09xs7Y4k2saI7MG/zDdp+1iKAnC9oMv7QHjCXtYWrsX6ShTR61+NIS5aY4GT0EW bJ9eObkIWsKGiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:35 2026 by rpki-client