This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json) Hash identifier: gwMSb826sgHkxtGGRhz69hGhEZGMshXZq8d29bvHk6w= Subject key identifier: DA:E2:97:6B:A8:B4:EB:61:5F:1B:6D:46:EF:82:C8:0E:FA:E5:67:F5 Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019BF6F55CF72D42CCD22064B28CD5BC8F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft Manifest number: 128D Signing time: Sun 25 Jan 2026 21:00:33 +0000 Manifest this update: Sun 25 Jan 2026 21:00:33 +0000 Manifest next update: Mon 26 Jan 2026 21:00:33 +0000 Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=) 2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=) 3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: CYZKqUv2cHjgFZR2143eygGG0s0WcjPy6g3v6T4fpmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:5c:f7:2d:42:cc:d2:20:64:b2:8c:d5:bc:8f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Jan 25 21:00:33 2026 GMT Not After : Jan 26 21:00:33 2026 GMT Subject: CN=dae2976ba8b4eb615f1b6d46ef82c80efae567f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6e:ff:1b:88:ff:a1:1f:6f:74:05:88:e0:0b: 3a:70:24:4a:93:36:d3:b6:c3:f1:f5:9e:82:13:43: 73:eb:7f:57:79:8c:10:78:42:f6:8c:46:3f:48:02: 91:7a:0f:e5:53:0d:ca:20:79:1c:0f:2f:9f:c1:f6: 72:8f:6a:0d:73:52:52:ae:92:d2:46:13:8c:2c:bb: bc:65:23:39:0a:2b:91:eb:5d:b1:14:50:bb:de:19: 87:12:22:3e:4a:63:87:83:db:1e:50:6c:32:59:c9: 8f:a3:4b:de:06:1a:92:a3:2f:73:dc:c2:20:c9:9e: 7d:98:a0:e2:85:cf:de:4c:59:e9:48:5c:d1:a2:ed: 92:93:a8:c9:1d:02:0c:78:7d:f3:e5:d5:b2:9e:4a: 1f:61:3b:c2:c3:01:70:5c:98:d7:80:f1:fa:33:59: d6:50:05:95:6e:cf:c7:58:35:6e:e7:c7:74:95:9b: 89:0b:48:d8:90:e4:21:cd:0a:6c:23:a8:6c:4f:d4: 28:7d:55:46:1a:6f:75:cb:38:18:80:0b:58:2e:2b: a1:36:66:45:4d:8e:cc:e2:31:54:7e:02:55:d9:60: 72:c2:67:4c:eb:0c:d1:b7:15:54:9d:f4:6b:2f:ad: 0b:20:3a:e6:08:59:89:2e:f1:a2:e4:86:4a:0f:93: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E2:97:6B:A8:B4:EB:61:5F:1B:6D:46:EF:82:C8:0E:FA:E5:67:F5 X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:51:67:5c:b9:0c:df:8e:7c:6d:2b:3a:3d:bf:f8:30:3a:57: fc:7f:3c:e4:5e:af:d6:a8:a3:93:be:6d:0b:8a:83:a9:69:cb: b8:82:ec:48:ea:a8:44:1d:7a:4b:9e:4d:b3:c3:25:ca:d1:27: 4a:4b:65:23:6f:80:b4:3a:a4:83:88:78:c3:dd:84:4b:b3:8e: 27:56:05:e0:37:f9:f3:67:30:b3:c9:52:c0:8e:98:1e:f7:71: da:a0:2f:ee:35:64:af:b1:a2:4e:1a:8e:f3:e5:e8:1c:db:20: 46:4a:57:8a:f0:97:8c:ad:2d:fc:78:1a:6f:68:79:0d:af:a4: 06:47:ec:84:19:4b:00:56:91:95:88:97:28:72:f8:ec:06:04: 8a:01:cf:db:b6:45:1b:c8:53:19:bf:de:51:3c:cc:f2:ba:8d: 09:4c:95:52:20:2b:3e:c8:60:eb:ac:be:30:5f:55:76:38:02: 46:16:f8:41:52:57:1b:4f:61:36:81:00:6a:a8:98:7d:4f:9a: bf:83:e0:a7:fc:55:fb:76:9d:7d:88:78:56:7a:1d:34:f4:2a: f5:44:24:6a:ee:d1:8e:70:84:4e:0f:28:c4:aa:4d:79:9e:5e: 3b:e4:6b:ea:55:cd:17:34:bc:48:dd:8a:49:d3:f0:9a:5f:69: a7:70:61:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Vz3LULM0iBksozVvI9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjYwMTI1MjEwMDMzWhcNMjYwMTI2MjEwMDMzWjAzMTEwLwYDVQQD EyhkYWUyOTc2YmE4YjRlYjYxNWYxYjZkNDZlZjgyYzgwZWZhZTU2N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG7/G4j/oR9vdAWI4As6cCRKkzbT tsPx9Z6CE0Nz639XeYwQeEL2jEY/SAKReg/lUw3KIHkcDy+fwfZyj2oNc1JSrpLS RhOMLLu8ZSM5CiuR612xFFC73hmHEiI+SmOHg9seUGwyWcmPo0veBhqSoy9z3MIg yZ59mKDihc/eTFnpSFzRou2Sk6jJHQIMeH3z5dWynkofYTvCwwFwXJjXgPH6M1nW UAWVbs/HWDVu58d0lZuJC0jYkOQhzQpsI6hsT9QofVVGGm91yzgYgAtYLiuhNmZF TY7M4jFUfgJV2WBywmdM6wzRtxVUnfRrL60LIDrmCFmJLvGi5IZKD5O6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNril2uotOthXxttRu+CyA765Wf1MB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1FnXLkM 3458bSs6Pb/4MDpX/H885F6v1qijk75tC4qDqWnLuILsSOqoRB16S55Ns8MlytEn SktlI2+AtDqkg4h4w92ES7OOJ1YF4Df582cws8lSwI6YHvdx2qAv7jVkr7GiThqO 8+XoHNsgRkpXivCXjK0t/Hgab2h5Da+kBkfshBlLAFaRlYiXKHL47AYEigHP27ZF G8hTGb/eUTzM8rqNCUyVUiArPshg66y+MF9VdjgCRhb4QVJXG09hNoEAaqiYfU+a v4Pgp/xV+3adfYh4VnodNPQq9UQkau7RjnCETg8oxKpNeZ5eO+Rr6lXNFzS8SN2K SdPwml9pp3Bhkg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:51:15 2026 by rpki-client