This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json) Hash identifier: hYLtJOatLcjwEjeletaxJtc+P5uoSWkDEBRfD1i+1Es= Subject key identifier: B0:31:3D:EF:BB:C1:4A:0C:AB:9A:4C:DE:ED:EA:D0:80:78:B3:FF:E8 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019BF6F5990869CD917CB4A287D84F363CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft Manifest number: 0CD6 Signing time: Sun 25 Jan 2026 21:00:49 +0000 Manifest this update: Sun 25 Jan 2026 21:00:49 +0000 Manifest next update: Mon 26 Jan 2026 21:00:49 +0000 Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: vPmAT72uU8T/9kK81zFvn+7NxULLXlQVvb67AWq9cSM=) 2: MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa (hash: Qd2SVc4TBTw+56gUg4ZW2uBmux+ll/A2gumdDvDs79g=) 3: NJRcO67OlUn-IGiJT8guZ_TuAV8.roa (hash: seZ+L6NijADUgFTgnLwHb3u5+uU9gSkf5FEv7ta5fbk=) 4: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=) 5: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:99:08:69:cd:91:7c:b4:a2:87:d8:4f:36:3c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Jan 25 21:00:49 2026 GMT Not After : Jan 26 21:00:49 2026 GMT Subject: CN=b0313defbbc14a0cab9a4cdeedead08078b3ffe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:10:9e:42:13:7a:57:b4:dd:6c:83:34:ca: c2:a6:57:6a:7f:f4:b4:1b:02:f8:ba:7c:3f:b9:48: 2c:4a:87:dd:20:07:8b:19:27:27:8d:ec:8c:b3:0d: 99:0f:6f:5a:2d:84:c9:0a:d0:aa:7c:72:ec:bc:7a: f7:be:01:a5:e0:8e:48:ad:e1:60:96:1b:d5:03:74: f4:db:b5:bc:f8:b5:97:f5:60:b9:2c:9b:cc:e8:1d: b5:6e:79:df:ce:40:d9:32:69:33:2b:ca:17:10:ac: 49:d7:e2:ee:ef:89:59:da:5e:fc:fe:ef:9a:de:38: 8c:a6:74:d4:6a:66:ae:58:5a:1c:59:06:10:c1:d0: 88:0e:76:21:ae:ec:b6:9f:b8:b4:92:00:1e:15:67: 00:a7:2f:09:de:17:5f:e7:dd:a4:27:6a:42:a8:f0: 48:21:27:ae:8f:0b:6e:c5:b0:36:e0:f3:7f:d6:5a: 18:a8:ec:5c:df:5a:60:53:5b:b8:4c:06:c4:f9:13: ab:a1:54:05:69:4d:85:c5:56:6a:a9:f3:55:5f:1e: 2e:45:99:c4:4c:58:99:d8:0a:9b:19:40:d9:1c:17: 62:87:d4:53:e7:9f:fb:4a:1a:7f:07:44:71:6d:50: fd:14:9f:0b:d3:60:0f:ef:fe:72:43:52:88:b1:49: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:31:3D:EF:BB:C1:4A:0C:AB:9A:4C:DE:ED:EA:D0:80:78:B3:FF:E8 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:47:70:10:2f:c5:3b:16:e7:6b:22:f7:88:81:f6:fc:db:82: c9:20:a9:7e:3e:57:d8:4c:b9:42:23:d5:bd:e5:86:cd:dd:59: 7f:a0:43:36:3d:a4:ee:c6:65:d3:79:83:35:fc:bf:b6:c2:dd: 10:35:06:62:30:09:36:b8:e3:3c:ff:db:95:73:36:37:d8:db: aa:8c:62:30:ce:a5:b3:a1:5e:d5:d0:f4:21:91:6f:ad:d0:8f: b5:e8:9f:b2:76:9f:5c:cf:4c:2a:60:bf:06:38:8a:92:5d:38: 0d:3d:01:41:15:ee:ec:09:21:ee:2a:1d:a7:35:25:c5:32:e8: b6:69:94:5c:22:80:35:45:28:7c:43:47:c9:e6:97:2d:80:58: 21:a5:40:b2:e2:03:4f:c0:b1:35:90:a6:60:7e:0d:68:52:2e: 22:f8:1f:55:49:c5:c7:d5:36:fc:b1:6c:99:03:45:5c:41:e8: b9:97:81:21:0f:ac:e2:66:9b:cf:56:1e:3f:81:60:be:e7:22: 56:70:fe:ef:c9:a9:8a:c6:d2:bb:92:ff:1f:6d:d9:67:f2:f1: f7:80:85:28:ba:70:b8:46:16:0c:54:89:bb:65:cd:48:41:ae: b4:c2:e5:d6:fb:9c:b1:88:1d:19:d2:34:6c:71:c2:d5:30:ca: fb:b7:e4:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZkIac2RfLSih9hPNjz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjYwMTI1MjEwMDQ5WhcNMjYwMTI2MjEwMDQ5WjAzMTEwLwYDVQQD EyhiMDMxM2RlZmJiYzE0YTBjYWI5YTRjZGVlZGVhZDA4MDc4YjNmZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqYQnkITele03WyDNMrCpldqf/S0 GwL4unw/uUgsSofdIAeLGScnjeyMsw2ZD29aLYTJCtCqfHLsvHr3vgGl4I5IreFg lhvVA3T027W8+LWX9WC5LJvM6B21bnnfzkDZMmkzK8oXEKxJ1+Lu74lZ2l78/u+a 3jiMpnTUamauWFocWQYQwdCIDnYhruy2n7i0kgAeFWcApy8J3hdf592kJ2pCqPBI ISeujwtuxbA24PN/1loYqOxc31pgU1u4TAbE+ROroVQFaU2FxVZqqfNVXx4uRZnE TFiZ2AqbGUDZHBdih9RT55/7Shp/B0RxbVD9FJ8L02AP7/5yQ1KIsUnV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAxPe+7wUoMq5pM3u3q0IB4s//oMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkdwEC/F OxbnayL3iIH2/NuCySCpfj5X2Ey5QiPVveWGzd1Zf6BDNj2k7sZl03mDNfy/tsLd EDUGYjAJNrjjPP/blXM2N9jbqoxiMM6ls6Fe1dD0IZFvrdCPteifsnafXM9MKmC/ BjiKkl04DT0BQRXu7Akh7iodpzUlxTLotmmUXCKANUUofENHyeaXLYBYIaVAsuID T8CxNZCmYH4NaFIuIvgfVUnFx9U2/LFsmQNFXEHouZeBIQ+s4mabz1YeP4Fgvuci VnD+78mpisbSu5L/H23ZZ/Lx94CFKLpwuEYWDFSJu2XNSEGutMLl1vucsYgdGdI0 bHHC1TDK+7fkZA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:32:39 2026 by rpki-client