This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json) Hash identifier: FtfAQcjrzfqwgo9NDgUhvLKoAOKxzM4fy3vwonk680U= Subject key identifier: 93:C7:5D:49:98:0A:11:8B:56:B3:54:62:BD:67:C2:98:FE:99:61:10 Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78 Certificate serial: 019BF5076D41CF5EFDCB35032AE51314D5AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft Manifest number: 08E6 Signing time: Sun 25 Jan 2026 12:01:03 +0000 Manifest this update: Sun 25 Jan 2026 12:01:03 +0000 Manifest next update: Mon 26 Jan 2026 12:01:03 +0000 Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 74IAfxgK9Lt5AgjXNqK+b5ikSUSXJeFJxdshdBf1+3Q=) 2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=) 3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:6d:41:cf:5e:fd:cb:35:03:2a:e5:13:14:d5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78 Validity Not Before: Jan 25 12:01:03 2026 GMT Not After : Jan 26 12:01:03 2026 GMT Subject: CN=93c75d49980a118b56b35462bd67c298fe996110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:28:e4:c9:00:a6:99:9f:f9:dc:b8:34:84: f6:3a:13:83:37:88:41:ad:fa:fa:fc:4a:4e:7b:a3: 54:d6:d2:f5:65:ea:ba:d9:0a:df:82:80:43:c1:76: 56:7e:f3:30:ca:b4:b3:79:d4:85:8b:78:45:9a:07: 0d:5a:90:e3:a4:53:1a:6e:08:e2:bd:7f:b8:07:a8: 9c:2a:46:c0:2b:30:3b:c1:1a:d2:05:68:1a:23:16: 99:96:34:63:4a:c1:23:80:e2:f5:b5:01:49:f4:35: b1:f9:3c:f8:fa:2d:ff:f1:a3:99:38:8c:63:73:97: f1:06:5e:64:9a:ab:90:de:44:27:51:5d:6f:96:c8: 0e:29:de:f4:7a:6d:2b:9c:fa:8e:af:9b:54:a4:4e: b4:3b:76:f0:f2:4d:17:ae:4b:15:cb:91:02:c1:52: f2:1c:03:c5:7c:c0:0c:73:67:0c:ab:bd:4f:00:f2: ee:64:dd:f7:e2:b4:15:53:1e:ea:e1:e1:61:f3:c8: 5d:0e:f1:46:a3:33:7a:ae:d4:a5:44:82:70:c3:29: 9d:61:f5:bd:b6:5a:a1:b4:ea:1e:aa:3d:5b:07:33: 98:26:f5:b1:c2:73:cf:78:e4:23:17:5e:58:ae:bf: 39:89:f8:25:08:de:02:cc:01:c4:0a:c6:8c:a9:f6: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:5D:49:98:0A:11:8B:56:B3:54:62:BD:67:C2:98:FE:99:61:10 X509v3 Authority Key Identifier: keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6c:9b:aa:c2:df:0a:54:06:2c:80:91:af:36:ae:7f:dd:d4: 3e:7f:07:a2:f1:ab:2b:e1:7e:e4:00:b6:f6:27:67:67:7f:27: fb:05:ac:34:35:94:96:3b:8f:01:d5:47:c9:c5:16:65:fb:59: a9:6e:6e:0a:8d:ab:c8:8b:38:5a:83:3b:f6:1f:a4:f3:8c:cf: 2f:0a:36:97:fa:38:21:35:ac:2b:db:40:9a:bf:59:ec:0d:3e: 94:6a:b4:bd:d8:e5:89:e7:14:08:55:20:46:09:82:c5:5e:5e: 60:99:ea:28:19:aa:5d:1b:91:92:5d:4a:30:93:4d:da:5d:94: c7:85:0d:90:a5:cf:02:73:eb:d3:4a:b3:43:82:75:b4:08:9f: d2:b1:f3:8b:ca:06:f8:06:40:43:aa:23:e6:5d:37:5c:d0:f4: 5f:fb:db:28:ae:2d:bc:c7:12:d4:2c:59:92:30:96:79:9b:85: e4:76:25:e1:6f:8f:48:94:f0:55:5d:91:e7:7e:2e:9a:be:2c: 94:56:9b:56:bb:ad:1b:8d:d1:67:f4:8b:2c:4f:2d:86:9e:43: c4:b6:a7:77:7e:2b:50:34:a2:33:f7:c5:ed:63:73:a4:d3:1a: dd:36:e4:5f:2d:59:3e:dc:42:e7:cc:e7:f1:69:e5:6b:21:b9: f2:a3:26:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B21Bz179yzUDKuUTFNWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx YThlNzgwHhcNMjYwMTI1MTIwMTAzWhcNMjYwMTI2MTIwMTAzWjAzMTEwLwYDVQQD Eyg5M2M3NWQ0OTk4MGExMThiNTZiMzU0NjJiZDY3YzI5OGZlOTk2MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuco5MkAppmf+dy4NIT2OhODN4hB rfr6/EpOe6NU1tL1Zeq62QrfgoBDwXZWfvMwyrSzedSFi3hFmgcNWpDjpFMabgji vX+4B6icKkbAKzA7wRrSBWgaIxaZljRjSsEjgOL1tQFJ9DWx+Tz4+i3/8aOZOIxj c5fxBl5kmquQ3kQnUV1vlsgOKd70em0rnPqOr5tUpE60O3bw8k0XrksVy5ECwVLy HAPFfMAMc2cMq71PAPLuZN334rQVUx7q4eFh88hdDvFGozN6rtSlRIJwwymdYfW9 tlqhtOoeqj1bBzOYJvWxwnPPeOQjF15Yrr85ifglCN4CzAHECsaMqfZ0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPHXUmYChGLVrNUYr1nwpj+mWEQMB8GA1UdIwQY MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5 LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWybqsLf ClQGLICRrzauf93UPn8HovGrK+F+5AC29idnZ38n+wWsNDWUljuPAdVHycUWZftZ qW5uCo2ryIs4WoM79h+k84zPLwo2l/o4ITWsK9tAmr9Z7A0+lGq0vdjliecUCFUg RgmCxV5eYJnqKBmqXRuRkl1KMJNN2l2Ux4UNkKXPAnPr00qzQ4J1tAif0rHzi8oG +AZAQ6oj5l03XND0X/vbKK4tvMcS1CxZkjCWeZuF5HYl4W+PSJTwVV2R534umr4s lFabVrutG43RZ/SLLE8thp5DxLand34rUDSiM/fF7WNzpNMa3TbkXy1ZPtxC58zn 8WnlayG58qMmig== -----END CERTIFICATE-----Generated at Sun Jan 25 16:29:46 2026 by rpki-client