This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json) Hash identifier: kWG+BmW0JVYBA1CLjmH5Wz5B2UiGhJrcy3P4xdH14aY= Subject key identifier: 1A:60:79:1E:E5:21:81:75:FB:5F:E7:82:52:BF:2C:16:7B:E2:C8:F2 Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366 Certificate serial: 019BF6BF471D11E256D7DE527A9070FCBF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft Manifest number: 0121 Signing time: Sun 25 Jan 2026 20:01:29 +0000 Manifest this update: Sun 25 Jan 2026 20:01:29 +0000 Manifest next update: Mon 26 Jan 2026 20:01:29 +0000 Files and hashes: 1: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: E2c42dXNZ7zKfDitd1MVI7OElp9d1jVSLP0rAMxgyf8=) 2: FQxNg7AnkMBIxSPt-ywRlwPzZU0.roa (hash: mDMc0kRW89SXaN2WszngnBY0Vg6QXvcafmxW2mS8Fw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:47:1d:11:e2:56:d7:de:52:7a:90:70:fc:bf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366 Validity Not Before: Jan 25 20:01:29 2026 GMT Not After : Jan 26 20:01:29 2026 GMT Subject: CN=1a60791ee5218175fb5fe78252bf2c167be2c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:3e:8d:e0:9a:84:f6:2b:2e:6c:04:53:a0: 6d:6a:08:c8:c8:7b:e6:b5:df:26:53:19:77:eb:4c: 81:68:05:29:7d:46:c1:da:62:b3:af:70:e2:09:e9: b9:7b:83:ba:a3:58:54:82:6c:d1:c0:39:01:be:7b: c9:4a:89:ca:86:ae:83:24:58:b3:69:3a:81:e7:b2: 0b:0f:90:b2:cd:e4:a5:b6:2a:29:88:b6:1a:a4:99: d0:fb:ca:d6:11:d6:f9:08:eb:30:00:0a:07:bf:28: 45:53:16:39:fe:41:15:f2:89:72:5c:2b:b2:2e:c2: ff:a8:17:dd:a2:eb:38:3e:bf:08:3e:58:05:ce:1c: 8e:57:91:16:98:de:94:b7:fe:8e:a8:3f:9a:9a:f5: 13:91:c2:e4:85:b1:d2:fc:c5:9e:38:f9:fb:8d:a2: d9:65:b5:3a:32:2e:8a:7d:34:58:6e:f0:bc:17:48: 8d:2c:00:f7:a6:d3:32:7a:76:12:a4:97:41:ae:be: 94:2d:7c:19:5a:ee:2d:8c:01:bc:c6:a6:17:3c:a5: e3:78:97:a1:50:d1:b5:ec:82:d0:79:20:fb:d8:69: 42:a4:d0:c0:b9:3e:79:01:de:b0:40:e8:3f:f4:4c: c5:fe:78:3b:9d:69:52:1d:80:1f:5b:d8:4a:9e:bf: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:79:1E:E5:21:81:75:FB:5F:E7:82:52:BF:2C:16:7B:E2:C8:F2 X509v3 Authority Key Identifier: keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:9c:30:28:62:0f:d1:5e:af:6f:9e:25:3c:cf:59:1a:25: 34:ea:d7:5c:e2:0e:b5:ae:9c:d0:9d:b9:4a:4e:71:12:27:75: 5b:f5:b4:36:12:2b:8a:eb:48:9e:b2:d5:37:cf:24:cb:11:11: de:9d:7b:f6:ef:d4:87:8d:a9:4c:36:47:76:a8:1c:88:d6:20: 84:eb:de:3f:7f:34:14:07:f8:72:56:a6:f3:45:51:fb:1f:08: 16:5c:90:26:2d:b1:15:fa:90:f0:20:d6:55:ab:f8:b8:31:12: b6:42:cf:b9:a9:d6:57:66:cd:f7:e0:39:b2:0a:7b:2e:50:d0: d6:7c:ae:64:b2:fd:a6:c3:9c:13:fe:34:8a:09:0f:1f:44:46: 24:47:81:3a:b9:4e:ff:ab:a6:27:c7:4d:dc:08:ac:bc:ce:fd: ad:a3:f9:92:6e:95:94:26:e5:44:3a:21:1c:36:e9:1a:53:ca: 4f:94:87:f6:bd:af:d6:14:e5:b1:1f:00:d2:d6:27:13:87:03: a3:9a:da:82:6b:ee:2d:57:b0:e5:d7:56:c0:2d:ec:19:2a:cc: 89:73:45:8e:dd:e0:ad:b8:5f:a5:5c:89:0d:1d:bd:c8:59:10: 24:d9:a0:c4:28:87:78:7b:9e:69:78:55:44:d8:9c:48:92:af: 34:4c:9b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0cdEeJW195SepBw/L98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTk0ZTdhMzFkYjc5MzdmYWI1MmZjYzM4OTA1OWQzNDUx ZjIzNjYwHhcNMjYwMTI1MjAwMTI5WhcNMjYwMTI2MjAwMTI5WjAzMTEwLwYDVQQD EygxYTYwNzkxZWU1MjE4MTc1ZmI1ZmU3ODI1MmJmMmMxNjdiZTJjOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcs+jeCahPYrLmwEU6BtagjIyHvm td8mUxl360yBaAUpfUbB2mKzr3DiCem5e4O6o1hUgmzRwDkBvnvJSonKhq6DJFiz aTqB57ILD5CyzeSltiopiLYapJnQ+8rWEdb5COswAAoHvyhFUxY5/kEV8olyXCuy LsL/qBfdous4Pr8IPlgFzhyOV5EWmN6Ut/6OqD+amvUTkcLkhbHS/MWeOPn7jaLZ ZbU6Mi6KfTRYbvC8F0iNLAD3ptMyenYSpJdBrr6ULXwZWu4tjAG8xqYXPKXjeJeh UNG17ILQeSD72GlCpNDAuT55Ad6wQOg/9EzF/ng7nWlSHYAfW9hKnr/e7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpgeR7lIYF1+1/nglK/LBZ74sjyMB8GA1UdIwQY MBaAFPBZTnox23k3+rUvzDiQWdNFHyNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGIt YjU3ZjUwZjAwODA0LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGItYjU3ZjUwZjAwODA0 LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwacMChi D9Fer2+eJTzPWRolNOrXXOIOta6c0J25Sk5xEid1W/W0NhIriutInrLVN88kyxER 3p179u/Uh42pTDZHdqgciNYghOveP380FAf4clam80VR+x8IFlyQJi2xFfqQ8CDW Vav4uDEStkLPuanWV2bN9+A5sgp7LlDQ1nyuZLL9psOcE/40igkPH0RGJEeBOrlO /6umJ8dN3AisvM79raP5km6VlCblRDohHDbpGlPKT5SH9r2v1hTlsR8A0tYnE4cD o5ragmvuLVew5ddWwC3sGSrMiXNFjt3grbhfpVyJDR29yFkQJNmgxCiHeHueaXhV RNicSJKvNEybzg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:22 2026 by rpki-client