This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json) Hash identifier: q4uo7BHWLs/im984DRQ7bot+5eo2SYa6Xwqnya5I2eE= Subject key identifier: B5:6C:F0:E6:09:BD:29:B1:8C:B1:EC:A9:FD:0F:62:4C:CF:82:19:CE Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019BF50724FB62CB23EA62E55D998AD4A4BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft Manifest number: 13D9 Signing time: Sun 25 Jan 2026 12:00:44 +0000 Manifest this update: Sun 25 Jan 2026 12:00:44 +0000 Manifest next update: Mon 26 Jan 2026 12:00:44 +0000 Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: 8zH3Hg0kJj2O1yWWVtiCeu/T/dTrDygsy4xJ688+ePg=) 2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=) 3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=) 4: ofUu4lRg92WUSco00177ziw81JU.roa (hash: htA+c0kcWkcBhio4o0E3T+qCJhv0CReLZ/At0DindSM=) 5: rSVWZGYoBERbKX00eTTj6GskQQY.roa (hash: kOS02MkC6Ky3Q2cl6xLkqgyvm3m1fLFrEvR8p8JJSnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:24:fb:62:cb:23:ea:62:e5:5d:99:8a:d4:a4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Jan 25 12:00:44 2026 GMT Not After : Jan 26 12:00:44 2026 GMT Subject: CN=b56cf0e609bd29b18cb1eca9fd0f624ccf8219ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:de:d9:c2:92:76:29:45:14:f0:fa:11:67: 72:41:4d:57:b5:f0:16:0b:da:43:3c:48:40:84:3e: 0e:5d:ba:14:71:04:7f:5f:a1:88:3c:4b:39:4e:cc: ac:27:60:d1:ab:49:6e:fe:c2:f6:a7:d5:13:49:de: 98:c8:30:ef:b0:e7:f9:33:fb:84:3a:82:fd:ed:99: 8a:11:19:db:54:53:84:b8:cc:00:da:b2:b0:73:dc: f3:0d:9b:5b:fd:22:c7:23:3e:72:2d:3e:7d:3d:4d: f1:ae:51:9f:21:14:a7:11:c0:b3:44:74:19:6d:68: df:d3:58:d8:55:91:ca:41:19:ef:35:a2:a7:8b:36: 0d:4d:d3:fe:20:5d:b7:75:a1:f4:2e:22:dd:f7:da: 77:ed:03:c3:18:23:5f:ed:fd:1d:fe:90:51:97:0a: f5:69:4d:c1:97:0b:81:3e:55:71:bf:51:81:e3:9a: 56:b7:41:fd:30:ac:ca:58:9f:99:92:c9:b6:c9:2e: 0c:08:ba:06:e8:25:39:e7:ca:15:80:6f:15:e8:cf: 2c:6a:45:69:9b:14:f5:d6:74:fb:84:af:e7:db:68: 88:38:25:57:86:aa:a5:79:b9:0a:44:bb:d0:2a:92: 7a:ce:2e:a3:ea:70:89:29:16:0d:3c:b7:78:b6:6b: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:F0:E6:09:BD:29:B1:8C:B1:EC:A9:FD:0F:62:4C:CF:82:19:CE X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9e:71:11:87:f2:f6:79:a3:dc:e8:8e:d9:91:10:8d:d8:a5: 49:17:17:e2:7f:59:52:ec:06:a2:2d:77:c7:a7:ff:74:0a:e9: 35:65:2b:1b:f4:70:f8:f2:6d:55:31:f8:19:3c:74:96:a7:28: fe:c1:9e:c5:d8:17:b8:ab:11:ed:74:66:52:5f:69:c4:a7:99: 3a:e7:03:db:80:b5:a6:50:f4:6b:68:8e:8f:40:e7:5e:05:47: 7c:10:e2:f3:c6:d2:0a:35:39:04:5c:14:c6:54:c1:69:88:c5: 7e:72:3f:48:33:72:02:98:6b:9a:f3:fd:97:f6:c6:93:7f:2b: 58:9c:0a:04:2c:94:f6:e8:90:c8:e3:a3:0a:40:2e:55:ae:ac: 34:8e:76:a8:dd:3e:58:63:1f:30:1f:7c:2b:fa:f8:34:f5:75: b9:36:7f:82:f0:59:00:f2:5b:da:b4:40:5d:1a:f7:67:c1:01: cb:a7:d7:fa:36:d2:66:42:74:70:64:e2:64:a4:48:4d:ad:5c: 07:22:29:06:82:48:2e:bf:47:75:09:49:70:7f:d3:21:47:e4: 67:7f:94:4d:42:90:4d:19:f9:eb:7b:c9:70:34:47:d7:63:a0: d9:ec:f0:17:21:6b:8a:8e:99:f2:9c:4c:29:df:27:0a:b9:8a: f1:41:e1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1ByT7Yssj6mLlXZmK1KS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjYwMTI1MTIwMDQ0WhcNMjYwMTI2MTIwMDQ0WjAzMTEwLwYDVQQD EyhiNTZjZjBlNjA5YmQyOWIxOGNiMWVjYTlmZDBmNjI0Y2NmODIxOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Pe2cKSdilFFPD6EWdyQU1XtfAW C9pDPEhAhD4OXboUcQR/X6GIPEs5TsysJ2DRq0lu/sL2p9UTSd6YyDDvsOf5M/uE OoL97ZmKERnbVFOEuMwA2rKwc9zzDZtb/SLHIz5yLT59PU3xrlGfIRSnEcCzRHQZ bWjf01jYVZHKQRnvNaKnizYNTdP+IF23daH0LiLd99p37QPDGCNf7f0d/pBRlwr1 aU3BlwuBPlVxv1GB45pWt0H9MKzKWJ+Zksm2yS4MCLoG6CU558oVgG8V6M8sakVp mxT11nT7hK/n22iIOCVXhqqlebkKRLvQKpJ6zi6j6nCJKRYNPLd4tmuB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVs8OYJvSmxjLHsqf0PYkzPghnOMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp5xEYfy 9nmj3OiO2ZEQjdilSRcX4n9ZUuwGoi13x6f/dArpNWUrG/Rw+PJtVTH4GTx0lqco /sGexdgXuKsR7XRmUl9pxKeZOucD24C1plD0a2iOj0DnXgVHfBDi88bSCjU5BFwU xlTBaYjFfnI/SDNyAphrmvP9l/bGk38rWJwKBCyU9uiQyOOjCkAuVa6sNI52qN0+ WGMfMB98K/r4NPV1uTZ/gvBZAPJb2rRAXRr3Z8EBy6fX+jbSZkJ0cGTiZKRITa1c ByIpBoJILr9HdQlJcH/TIUfkZ3+UTUKQTRn563vJcDRH12Og2ezwFyFrio6Z8pxM Kd8nCrmK8UHhdw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:31 2026 by rpki-client