This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json) Hash identifier: oCewU5I5dAcq89aumkYLJHpuDV00Ky2mm6Gg0/OI8Ns= Subject key identifier: CC:A6:3E:19:E2:11:99:05:2D:AF:E4:D3:09:E8:6E:2B:E9:03:01:11 Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019BF8E3BA8D5A86D9A44620891E26B20623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft Manifest number: 128E Signing time: Mon 26 Jan 2026 06:00:32 +0000 Manifest this update: Mon 26 Jan 2026 06:00:32 +0000 Manifest next update: Tue 27 Jan 2026 06:00:32 +0000 Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=) 2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=) 3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: DbvuUruY9AuRuxGisn9gtH0HGJUIZmt7Ft1nSnDNk+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:ba:8d:5a:86:d9:a4:46:20:89:1e:26:b2:06:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Jan 26 06:00:32 2026 GMT Not After : Jan 27 06:00:32 2026 GMT Subject: CN=cca63e19e21199052dafe4d309e86e2be9030111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:6e:8b:61:d5:f7:90:62:2f:fe:02:fe:b3: 00:5d:2c:c9:d3:89:ab:02:07:4f:dc:75:b4:01:50: 8b:a6:1a:96:b7:1b:88:7d:95:09:c8:8b:34:b8:21: cc:09:08:8a:61:fa:2c:a3:b1:3e:a8:77:15:11:b0: 74:60:ba:bd:3f:e7:93:3c:3d:35:e4:95:50:e5:3c: 24:a4:0e:80:f0:f0:b7:87:17:9a:b4:7e:fb:19:18: 2c:19:ac:85:38:63:98:12:75:36:bf:ae:b7:20:ee: 1d:e0:f7:d4:cd:04:39:36:52:96:d5:01:3c:2e:32: f2:2c:c1:a2:9a:7d:53:3e:33:46:e3:2d:15:26:65: d0:e6:95:e5:83:a4:f0:38:89:7a:5d:6c:5b:a0:f7: 1d:18:48:0d:e7:11:6d:6d:97:81:a4:36:db:a9:0c: df:c8:73:ee:5c:5d:d1:2a:5e:d9:5a:05:97:b7:31: 7a:01:0d:35:18:41:dd:b6:09:e6:77:ec:79:cc:75: c8:31:be:12:e4:f4:ac:49:9c:66:5b:32:27:4c:cf: 2f:e0:ab:9b:fb:84:3a:73:7a:03:bd:f0:7a:a9:61: 20:21:fe:8c:9e:1b:a6:2a:55:32:dc:11:dd:48:f0: 1c:c7:cf:d3:4e:80:e2:14:ec:9a:9c:0b:ba:e5:e3: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A6:3E:19:E2:11:99:05:2D:AF:E4:D3:09:E8:6E:2B:E9:03:01:11 X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:01:2b:a3:1f:53:dd:d9:d2:10:52:49:05:0d:59:72:e2:25: 51:eb:12:8e:8a:29:50:3e:35:b8:fd:1c:61:b1:1a:15:0d:9c: a9:4f:d9:ff:bd:1b:b2:b3:f5:56:dc:27:28:b2:71:53:8e:b6: ba:9d:8e:6c:15:b8:89:8d:16:1f:ea:21:56:01:55:ff:c1:1a: e2:26:fb:ba:f8:fe:d3:da:45:77:50:a1:ec:b4:34:ab:64:a2: 6a:34:ba:69:97:74:5c:fe:c6:9e:20:2c:20:d9:17:57:cc:3f: d7:fb:2f:ce:3d:76:61:8c:10:ed:4d:d3:dd:a7:1b:b6:a3:49: 6a:4a:5f:61:0e:aa:da:ba:93:50:26:1d:2e:b6:ad:1d:e2:02: 25:ff:3b:52:74:ff:dc:74:22:cc:fa:2f:f4:0d:01:ca:e7:7c: 48:bb:e1:71:ed:b4:42:cb:99:20:3a:07:eb:93:48:9b:00:59: 8a:2f:de:8b:fd:3b:60:26:95:dc:f3:bb:b7:05:82:0b:87:2c: ea:df:64:a7:f3:39:eb:74:5e:71:f0:1c:24:10:43:4d:c6:2a: ba:d7:a8:a6:28:ad:4a:4a:0e:03:78:d7:08:25:7d:35:b5:35: c9:8e:2b:8d:ef:9c:19:d9:0b:8e:45:bb:e5:c8:d6:95:8f:e5: 91:ab:69:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv447qNWobZpEYgiR4msgYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjYwMTI2MDYwMDMyWhcNMjYwMTI3MDYwMDMyWjAzMTEwLwYDVQQD EyhjY2E2M2UxOWUyMTE5OTA1MmRhZmU0ZDMwOWU4NmUyYmU5MDMwMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBJui2HV95BiL/4C/rMAXSzJ04mr AgdP3HW0AVCLphqWtxuIfZUJyIs0uCHMCQiKYfoso7E+qHcVEbB0YLq9P+eTPD01 5JVQ5TwkpA6A8PC3hxeatH77GRgsGayFOGOYEnU2v663IO4d4PfUzQQ5NlKW1QE8 LjLyLMGimn1TPjNG4y0VJmXQ5pXlg6TwOIl6XWxboPcdGEgN5xFtbZeBpDbbqQzf yHPuXF3RKl7ZWgWXtzF6AQ01GEHdtgnmd+x5zHXIMb4S5PSsSZxmWzInTM8v4Kub +4Q6c3oDvfB6qWEgIf6MnhumKlUy3BHdSPAcx8/TToDiFOyanAu65eOc8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMymPhniEZkFLa/k0wnobivpAwERMB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwErox9T 3dnSEFJJBQ1ZcuIlUesSjoopUD41uP0cYbEaFQ2cqU/Z/70bsrP1VtwnKLJxU462 up2ObBW4iY0WH+ohVgFV/8Ea4ib7uvj+09pFd1Ch7LQ0q2SiajS6aZd0XP7GniAs INkXV8w/1/svzj12YYwQ7U3T3acbtqNJakpfYQ6q2rqTUCYdLratHeICJf87UnT/ 3HQizPov9A0Byud8SLvhce20QsuZIDoH65NImwBZii/ei/07YCaV3PO7twWCC4cs 6t9kp/M563RecfAcJBBDTcYquteopiitSkoOA3jXCCV9NbU1yY4rje+cGdkLjkW7 5cjWlY/lkatpfg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:14 2026 by rpki-client