This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json) Hash identifier: TXdTOgHLSy00oGyuS46b0YL87n0ztZA7kGe1QTUZDlc= Subject key identifier: 9F:6B:93:0F:5F:59:38:8B:46:4D:2D:7C:C3:15:59:F8:22:43:C4:E8 Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef Certificate serial: 019BF3866EB4956E9346219715CD3B658FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft Manifest number: 0212 Signing time: Sun 25 Jan 2026 05:00:32 +0000 Manifest this update: Sun 25 Jan 2026 05:00:32 +0000 Manifest next update: Mon 26 Jan 2026 05:00:32 +0000 Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: SLEcxHUkXs1npmW84pt2IzZvhsMoXSBFR6yzt4EBnAI=) 2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:6e:b4:95:6e:93:46:21:97:15:cd:3b:65:8f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef Validity Not Before: Jan 25 05:00:32 2026 GMT Not After : Jan 26 05:00:32 2026 GMT Subject: CN=9f6b930f5f59388b464d2d7cc31559f82243c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:28:d1:d3:aa:ae:51:7f:f4:04:a0:70:47: cb:77:76:e5:e9:a7:3a:e8:61:c2:79:a6:21:39:3b: 89:8b:6e:ef:d8:5d:18:97:c7:ff:35:23:f6:a8:82: 84:ac:d1:9e:45:7b:8a:62:e2:b1:5f:54:b7:36:ff: 62:71:a3:6b:64:ee:fc:f3:42:f4:6c:3f:3f:59:16: 99:48:5e:ce:a0:30:c5:b7:28:c6:ec:be:b4:f9:44: 3e:ea:52:cf:3a:d4:ed:64:37:a3:76:bc:c7:69:dc: 09:68:07:7c:8f:9e:bb:35:43:65:77:40:6c:c2:46: 17:cc:fc:60:97:32:b6:4d:21:4d:27:e5:0d:d9:48: 71:26:4d:70:47:d5:d6:62:70:d3:80:b1:bf:ca:fc: b3:cb:59:8a:f2:d4:04:aa:19:99:9f:6f:cc:fe:86: d5:2c:dd:d7:09:ae:f9:11:3b:02:13:bf:87:14:f1: cd:dd:97:c5:1f:7b:b7:83:bd:e1:8e:53:b3:66:55: 7b:46:1d:eb:0a:39:b2:02:7a:5e:d6:09:e3:9d:29: 0c:7b:9e:85:62:7c:de:92:38:0b:58:7d:2b:59:0e: 69:fb:5d:f6:88:bc:df:74:e1:69:6d:16:f4:8f:38: 14:14:d1:71:bb:b3:ed:5e:55:74:2b:db:67:e0:ac: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6B:93:0F:5F:59:38:8B:46:4D:2D:7C:C3:15:59:F8:22:43:C4:E8 X509v3 Authority Key Identifier: keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:69:c2:9d:1f:f0:97:59:87:c8:b7:f6:6c:d5:a0:73:db:65: 75:a5:aa:89:9e:0f:26:06:52:aa:63:8d:06:fa:c8:75:9e:4a: 72:70:42:4d:01:7a:74:c5:07:41:e5:28:6c:00:69:8c:6f:83: 05:f5:ef:2e:e2:1f:b7:9a:49:1e:58:4e:90:6b:08:31:34:0f: c2:74:82:f4:1d:06:3c:87:1b:57:41:11:9b:25:bc:78:34:a3: f8:5e:fd:b9:51:e3:e8:69:37:91:99:f4:07:8b:61:69:94:47: 5e:b8:a7:2d:ad:7b:ec:1f:fa:13:fe:d0:9f:9f:46:ff:b0:7a: ce:af:a9:a2:27:4c:eb:a0:f1:de:45:5c:2e:d0:db:ec:f8:f4: c9:3b:b1:5e:c3:6b:2e:f4:c7:06:a0:48:07:5e:80:09:25:96: e3:a1:1c:a4:f4:02:9b:ef:e9:d7:ea:b8:4c:79:22:dc:bd:4b: a0:be:85:03:ad:cb:a2:65:98:04:66:53:b6:b1:94:79:3b:1e: 57:3f:57:3a:b8:ed:7c:ef:02:a0:3c:8c:75:37:21:1d:60:71: 77:6a:92:88:a2:b5:a1:66:38:99:f3:29:96:b8:55:8f:5a:37: e0:d6:07:5a:a4:79:7a:c1:6d:a8:28:97:b7:d8:91:26:38:fb: fe:6c:47:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhm60lW6TRiGXFc07ZY+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyODY4MzJhZGRhNDBhOTdlYjg2M2E1YTY0ODJjOTQ2OTMx YTY2ZWYwHhcNMjYwMTI1MDUwMDMyWhcNMjYwMTI2MDUwMDMyWjAzMTEwLwYDVQQD Eyg5ZjZiOTMwZjVmNTkzODhiNDY0ZDJkN2NjMzE1NTlmODIyNDNjNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6co0dOqrlF/9ASgcEfLd3bl6ac6 6GHCeaYhOTuJi27v2F0Yl8f/NSP2qIKErNGeRXuKYuKxX1S3Nv9icaNrZO7880L0 bD8/WRaZSF7OoDDFtyjG7L60+UQ+6lLPOtTtZDejdrzHadwJaAd8j567NUNld0Bs wkYXzPxglzK2TSFNJ+UN2UhxJk1wR9XWYnDTgLG/yvyzy1mK8tQEqhmZn2/M/obV LN3XCa75ETsCE7+HFPHN3ZfFH3u3g73hjlOzZlV7Rh3rCjmyAnpe1gnjnSkMe56F YnzekjgLWH0rWQ5p+132iLzfdOFpbRb0jzgUFNFxu7PtXlV0K9tn4KxmHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9rkw9fWTiLRk0tfMMVWfgiQ8ToMB8GA1UdIwQY MBaAFPKGgyrdpAqX64Y6WmSCyUaTGmbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDIt ZDk0MzExNDBlNmYxLzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDItZDk0MzExNDBlNmYx LzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2nCnR/w l1mHyLf2bNWgc9tldaWqiZ4PJgZSqmONBvrIdZ5KcnBCTQF6dMUHQeUobABpjG+D BfXvLuIft5pJHlhOkGsIMTQPwnSC9B0GPIcbV0ERmyW8eDSj+F79uVHj6Gk3kZn0 B4thaZRHXrinLa177B/6E/7Qn59G/7B6zq+poidM66Dx3kVcLtDb7Pj0yTuxXsNr LvTHBqBIB16ACSWW46EcpPQCm+/p1+q4THki3L1LoL6FA63LomWYBGZTtrGUeTse Vz9XOrjtfO8CoDyMdTchHWBxd2qSiKK1oWY4mfMplrhVj1o34NYHWqR5esFtqCiX t9iRJjj7/mxH2Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:09 2026 by rpki-client