This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json) Hash identifier: w7SYouMylYdf4eItd2nkDsXpRvzDG7kPtPpaaIoBm7Q= Subject key identifier: 68:D2:7F:AA:4A:09:9A:BD:48:A0:6A:C2:73:56:97:F7:3B:77:9C:8F Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Certificate serial: 019BF6519F10612954B55F4B83C383ED8B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft Manifest number: 0D33 Signing time: Sun 25 Jan 2026 18:01:42 +0000 Manifest this update: Sun 25 Jan 2026 18:01:42 +0000 Manifest next update: Mon 26 Jan 2026 18:01:42 +0000 Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: FyLZseIT/2UJDPf9kXZRgEqhL3a3iHu1aC3I6M2qZa0=) 2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:9f:10:61:29:54:b5:5f:4b:83:c3:83:ed:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Validity Not Before: Jan 25 18:01:42 2026 GMT Not After : Jan 26 18:01:42 2026 GMT Subject: CN=68d27faa4a099abd48a06ac2735697f73b779c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:67:43:d0:a7:2b:b3:b9:3b:98:5e:cc:7c: 08:e0:4f:07:d0:54:fb:a7:dd:91:67:89:da:17:f7: a1:4e:0e:86:b2:8c:9f:fc:81:c8:e5:0c:ec:da:00: a0:91:69:0e:25:07:12:f0:23:20:2e:30:bf:d8:5e: e6:ca:60:cb:37:7c:8e:68:da:eb:23:ce:02:02:29: ea:47:bd:5c:bf:3a:fc:52:9d:32:04:8a:61:53:7b: 61:9d:44:77:58:25:a3:de:09:36:a5:62:a6:11:08: 90:e2:c6:2d:23:37:db:c3:54:9e:87:09:66:be:36: 6b:03:ed:4b:a0:ab:6e:c9:e8:85:b9:75:37:97:39: 16:1a:c0:3c:f1:f5:a0:5a:9b:20:cf:d5:9d:bd:f9: 23:9f:48:17:05:96:70:33:2a:40:a5:18:56:0c:ff: 76:d9:06:ee:07:10:63:ae:79:3c:42:f7:e0:b6:69: 6d:8c:13:a9:d5:d8:b8:5a:c0:25:5e:07:c1:d0:94: 70:42:2d:24:d2:e9:d8:be:95:68:19:e2:4e:80:dd: f4:a7:21:45:49:7a:b7:94:f6:6b:d0:66:07:75:00: c7:8b:9c:37:61:2a:80:4b:8a:bc:16:84:fa:ee:1f: cd:49:a1:68:25:83:7c:97:a3:5c:36:5f:8b:dc:4d: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:7F:AA:4A:09:9A:BD:48:A0:6A:C2:73:56:97:F7:3B:77:9C:8F X509v3 Authority Key Identifier: keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b1:d1:29:fa:f2:5b:59:85:81:50:ef:a0:f6:1e:36:25:1a: 13:8d:10:35:72:7c:c6:6b:5f:5f:49:96:05:eb:fc:ea:4f:60: 9f:e2:27:03:cd:83:09:1e:d0:ab:1d:1b:7a:ea:79:95:ac:22: 75:4d:80:7c:67:ed:1c:81:bf:bd:4a:7a:e3:09:44:9f:34:1e: 6c:76:80:a5:ae:52:89:67:65:59:a8:36:93:c0:96:1c:ec:99: d9:2a:ad:00:88:34:51:76:03:af:e4:dd:a0:9f:c1:41:0b:d5: 68:8e:98:c8:e2:b3:ba:4c:d8:e7:c2:4e:40:86:b0:56:79:4e: 30:23:86:ed:14:9e:b4:a1:04:cb:d1:e3:58:7f:cd:d4:ca:4b: 1e:cc:cf:f1:29:56:13:2e:c0:e0:fb:b4:9d:19:ae:10:e6:93: 76:9a:e5:b3:82:5e:b7:d1:dc:42:a6:ca:04:e2:5a:bd:ec:90: 64:cc:00:e9:36:7b:85:8c:54:27:4a:ca:0e:17:ad:c5:54:ab: 52:f8:f6:b2:78:5f:af:22:ad:21:ef:87:a5:40:25:46:d4:3e: d9:7e:ba:e9:0a:75:c9:b1:f8:fe:3a:ff:57:bb:ab:3e:6d:84: 64:71:e2:81:b8:77:88:59:e4:a2:5d:98:6e:f7:78:2c:dd:65: 46:b2:da:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZ8QYSlUtV9Lg8OD7YswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm MDk1MTYwHhcNMjYwMTI1MTgwMTQyWhcNMjYwMTI2MTgwMTQyWjAzMTEwLwYDVQQD Eyg2OGQyN2ZhYTRhMDk5YWJkNDhhMDZhYzI3MzU2OTdmNzNiNzc5YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtydnQ9CnK7O5O5hezHwI4E8H0FT7 p92RZ4naF/ehTg6Gsoyf/IHI5Qzs2gCgkWkOJQcS8CMgLjC/2F7mymDLN3yOaNrr I84CAinqR71cvzr8Up0yBIphU3thnUR3WCWj3gk2pWKmEQiQ4sYtIzfbw1Sehwlm vjZrA+1LoKtuyeiFuXU3lzkWGsA88fWgWpsgz9Wdvfkjn0gXBZZwMypApRhWDP92 2QbuBxBjrnk8QvfgtmltjBOp1di4WsAlXgfB0JRwQi0k0unYvpVoGeJOgN30pyFF SXq3lPZr0GYHdQDHi5w3YSqAS4q8FoT67h/NSaFoJYN8l6NcNl+L3E2TewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjSf6pKCZq9SKBqwnNWl/c7d5yPMB8GA1UdIwQY MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3 LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALHRKfry W1mFgVDvoPYeNiUaE40QNXJ8xmtfX0mWBev86k9gn+InA82DCR7Qqx0beup5lawi dU2AfGftHIG/vUp64wlEnzQebHaApa5SiWdlWag2k8CWHOyZ2SqtAIg0UXYDr+Td oJ/BQQvVaI6YyOKzukzY58JOQIawVnlOMCOG7RSetKEEy9HjWH/N1MpLHszP8SlW Ey7A4Pu0nRmuEOaTdprls4Jet9HcQqbKBOJaveyQZMwA6TZ7hYxUJ0rKDhetxVSr Uvj2snhfryKtIe+HpUAlRtQ+2X666Qp1ybH4/jr/V7urPm2EZHHigbh3iFnkol2Y bvd4LN1lRrLahg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:58 2026 by rpki-client