This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json) Hash identifier: vz5MwHIDxSv6I6qWL3sH8UiLNdi77UN8GgTAcINCp7w= Subject key identifier: 77:D3:76:5C:B9:B4:BE:A4:5D:EA:8D:11:A1:61:49:5F:68:B0:B6:85 Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Certificate serial: 019BF507420ADEFEF471A8B22C14596E8706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 12:00:52 +0000 Manifest this update: Sun 25 Jan 2026 12:00:52 +0000 Manifest next update: Mon 26 Jan 2026 12:00:52 +0000 Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: wN93OoowPnsTuEB+6wu+sLNTyNdd5PS2fNghUGoog7M=) 2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:42:0a:de:fe:f4:71:a8:b2:2c:14:59:6e:87:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Validity Not Before: Jan 25 12:00:52 2026 GMT Not After : Jan 26 12:00:52 2026 GMT Subject: CN=77d3765cb9b4bea45dea8d11a161495f68b0b685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:b0:f2:24:cf:60:dc:1a:4d:d3:2d:cf:db: 33:87:d7:41:35:36:ae:ab:88:58:b0:cd:45:1f:d9: 83:44:3a:09:6d:c6:1c:38:ef:fe:9e:e8:d7:7c:28: fc:49:80:d0:8b:9e:47:ec:2c:27:7c:eb:6e:66:99: 85:3a:73:c1:14:f1:f4:04:7a:34:39:7b:f3:9c:6a: c7:ea:a7:38:4c:d7:4e:ed:f7:bc:bb:3c:4c:42:79: 5e:ac:a0:03:f2:03:72:c7:e2:22:dd:2a:ef:cb:fe: d8:7f:0c:8f:82:19:8a:10:64:1d:d6:a6:bc:71:4f: ac:96:2d:bf:0b:42:d9:bd:2a:a6:15:5c:2b:f2:f3: 67:7a:b1:c8:7c:62:93:a0:28:93:cb:92:53:9e:e4: 08:3d:4a:ef:fe:34:fe:e1:53:a4:31:e2:45:2b:09: f2:b3:f9:8d:0d:de:f2:50:74:99:3e:e2:bb:b0:e8: 50:74:e0:a3:3e:ac:4b:ea:71:81:21:86:c7:15:49: 3f:bd:82:04:ce:01:76:a4:8b:26:77:48:85:e2:89: 27:8a:1b:9e:87:1f:f3:e4:c0:93:b2:8a:8b:2d:b0: 6d:7f:11:ac:08:e6:a2:e4:e7:b1:7d:5c:bc:d2:d7: 36:da:73:6f:99:25:73:19:7e:c2:fc:93:f1:a1:cc: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:76:5C:B9:B4:BE:A4:5D:EA:8D:11:A1:61:49:5F:68:B0:B6:85 X509v3 Authority Key Identifier: keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d6:2e:a0:be:38:fb:5d:1e:7c:28:90:e0:a0:6d:97:22:ab: 88:66:93:2d:dd:21:19:e4:aa:56:1c:27:4f:99:4a:c9:06:5b: 92:08:79:0f:9a:46:7b:ea:8c:5b:53:ba:fb:31:96:b6:1c:9f: 96:c2:98:c7:ef:3b:8e:59:72:2d:92:b7:f7:ef:d0:4a:54:a0: 6e:fe:27:32:99:25:cd:ff:e5:2f:8e:45:c9:d7:3a:d2:78:60: 6a:f3:1e:c9:ab:e8:c1:17:7c:70:25:17:3c:f5:48:d2:6d:ab: 3c:a0:7b:14:00:dd:c1:50:d5:c4:39:45:8c:96:e4:47:e5:bf: 44:50:ea:9c:df:e6:e3:45:ca:6e:3b:ed:13:1c:68:d8:c1:5a: 12:02:ec:45:1b:96:0b:8c:20:ea:c0:8f:4a:5d:6c:92:90:32: 9d:3d:6f:52:34:b0:82:fe:45:0b:67:56:e2:66:8d:52:56:e7: 4e:65:9f:91:a9:79:ab:4a:7e:89:a2:59:e0:28:89:79:4b:95: 06:ba:c3:1a:21:f2:92:8e:88:48:7a:b5:aa:c6:36:8f:44:6f: c0:93:7d:34:42:53:a1:4f:1a:78:7e:4f:e6:29:3b:d2:ea:97: 35:bc:68:d5:de:e6:b2:14:4a:5e:22:a2:f2:18:57:22:4e:33: de:49:be:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0IK3v70caiyLBRZbocGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx YzdmM2IwHhcNMjYwMTI1MTIwMDUyWhcNMjYwMTI2MTIwMDUyWjAzMTEwLwYDVQQD Eyg3N2QzNzY1Y2I5YjRiZWE0NWRlYThkMTFhMTYxNDk1ZjY4YjBiNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMKw8iTPYNwaTdMtz9szh9dBNTau q4hYsM1FH9mDRDoJbcYcOO/+nujXfCj8SYDQi55H7CwnfOtuZpmFOnPBFPH0BHo0 OXvznGrH6qc4TNdO7fe8uzxMQnlerKAD8gNyx+Ii3Srvy/7YfwyPghmKEGQd1qa8 cU+sli2/C0LZvSqmFVwr8vNnerHIfGKToCiTy5JTnuQIPUrv/jT+4VOkMeJFKwny s/mNDd7yUHSZPuK7sOhQdOCjPqxL6nGBIYbHFUk/vYIEzgF2pIsmd0iF4oknihue hx/z5MCTsoqLLbBtfxGsCOai5OexfVy80tc22nNvmSVzGX7C/JPxoczyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfTdly5tL6kXeqNEaFhSV9osLaFMB8GA1UdIwQY MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0 LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtYuoL44 +10efCiQ4KBtlyKriGaTLd0hGeSqVhwnT5lKyQZbkgh5D5pGe+qMW1O6+zGWthyf lsKYx+87jllyLZK39+/QSlSgbv4nMpklzf/lL45Fydc60nhgavMeyavowRd8cCUX PPVI0m2rPKB7FADdwVDVxDlFjJbkR+W/RFDqnN/m40XKbjvtExxo2MFaEgLsRRuW C4wg6sCPSl1skpAynT1vUjSwgv5FC2dW4maNUlbnTmWfkal5q0p+iaJZ4CiJeUuV BrrDGiHyko6ISHq1qsY2j0RvwJN9NEJToU8aeH5P5ik70uqXNbxo1d7mshRKXiKi 8hhXIk4z3km+tQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:51 2026 by rpki-client