This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json) Hash identifier: NgluH9Opo6fKz+Yn6Hw8NKDVQIWozOoMans01i1WED0= Subject key identifier: D2:09:96:25:E4:6A:07:5E:7D:44:69:9D:48:86:B1:B8:46:72:BC:3E Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Certificate serial: 019BF72D08185A440234A5A388321CA0F5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft Manifest number: 0E90 Signing time: Sun 25 Jan 2026 22:01:22 +0000 Manifest this update: Sun 25 Jan 2026 22:01:22 +0000 Manifest next update: Mon 26 Jan 2026 22:01:22 +0000 Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=) 2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: 7JmEmUSry+kk5tKAmdW92bNtPGN+ylht05OaU5TIG3w=) 3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:08:18:5a:44:02:34:a5:a3:88:32:1c:a0:f5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Validity Not Before: Jan 25 22:01:22 2026 GMT Not After : Jan 26 22:01:22 2026 GMT Subject: CN=d2099625e46a075e7d44699d4886b1b84672bc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:21:15:30:76:9f:d6:36:f4:0b:4c:75:57: f2:8a:88:f2:b0:53:12:e8:e0:65:d8:eb:d8:6c:de: 20:cd:7f:f1:f6:6c:39:09:b6:62:f2:cf:3c:e9:a5: 21:a6:13:c4:41:02:ac:5d:b6:c7:47:75:7c:88:0d: f0:81:ed:e0:24:54:40:82:48:e4:c6:3d:72:45:2e: d9:43:2b:8f:d0:69:3b:b5:14:84:8b:95:f9:58:a2: 2b:4f:81:ba:eb:c8:bf:98:c9:99:81:14:5e:17:6f: 0e:09:d5:16:ff:2a:54:1b:56:46:ff:fb:47:5d:bf: dd:95:2d:d7:48:b3:30:d6:67:67:e9:7f:ec:a2:2e: 66:12:c7:17:be:3e:7e:d9:ce:25:d2:f3:61:c2:50: 96:22:47:5d:67:a5:76:cd:8a:89:77:83:d2:af:d6: 71:59:46:b7:22:31:70:0d:7a:4b:86:20:ac:37:f5: 54:72:6d:29:42:00:a7:2e:df:2b:be:75:1a:34:eb: d2:e5:95:a9:26:b9:ab:88:f3:76:aa:76:e8:a0:b5: 7f:1e:b0:03:7b:da:aa:1c:1c:14:cc:d6:08:3c:84: 11:5e:ee:53:cc:38:aa:08:b2:7f:36:95:d4:75:65: 14:e7:a1:3b:eb:7f:ca:ba:46:89:fe:2b:e7:36:a4: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:96:25:E4:6A:07:5E:7D:44:69:9D:48:86:B1:B8:46:72:BC:3E X509v3 Authority Key Identifier: keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:14:a2:cf:6d:18:ee:38:6f:e4:12:31:43:c1:3b:1b:6b:02: 54:c6:14:d2:50:55:a0:91:4f:0f:04:80:d6:51:9e:3d:21:00: 4c:ea:a5:66:f0:8c:c5:7d:6d:50:e8:7d:78:0a:51:f0:6a:54: 0f:d3:23:13:ca:d6:f7:da:d3:37:0a:9c:94:fd:43:1a:1a:74: cb:10:0d:a5:74:e9:22:e7:f5:ee:e8:a3:1d:2f:8a:3d:5b:c6: e9:65:4d:a5:f7:49:73:7a:2b:6d:d7:53:16:9f:96:28:fa:87: 9c:f3:6c:48:6c:06:bf:99:93:72:0a:f9:e0:0f:11:52:10:c5: c3:b7:a0:05:10:34:cb:0c:df:84:e0:01:a7:8f:49:76:d0:6c: 6e:b2:0d:3d:79:96:e7:66:f8:11:ea:a8:f5:bd:d6:6f:bf:71: 9d:6f:fb:73:86:b8:80:56:da:cb:d4:37:9f:a5:c2:45:77:62: 29:c0:e1:a3:73:b4:5f:43:37:a3:94:b6:cb:bb:10:d4:80:74: 5f:91:91:6c:17:5a:14:25:93:2a:5c:48:88:50:2a:f4:8e:0d: 52:2f:cc:6b:a5:32:ac:e5:c6:e9:be:d2:15:3d:03:24:49:68: c0:94:68:10:57:33:3d:fb:1c:ec:cc:c2:c5:90:4d:e5:62:44: 24:2b:6d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQgYWkQCNKWjiDIcoPXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl YjdlY2QwHhcNMjYwMTI1MjIwMTIyWhcNMjYwMTI2MjIwMTIyWjAzMTEwLwYDVQQD EyhkMjA5OTYyNWU0NmEwNzVlN2Q0NDY5OWQ0ODg2YjFiODQ2NzJiYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtekhFTB2n9Y29AtMdVfyiojysFMS 6OBl2OvYbN4gzX/x9mw5CbZi8s886aUhphPEQQKsXbbHR3V8iA3wge3gJFRAgkjk xj1yRS7ZQyuP0Gk7tRSEi5X5WKIrT4G668i/mMmZgRReF28OCdUW/ypUG1ZG//tH Xb/dlS3XSLMw1mdn6X/soi5mEscXvj5+2c4l0vNhwlCWIkddZ6V2zYqJd4PSr9Zx WUa3IjFwDXpLhiCsN/VUcm0pQgCnLt8rvnUaNOvS5ZWpJrmriPN2qnbooLV/HrAD e9qqHBwUzNYIPIQRXu5TzDiqCLJ/NpXUdWUU56E763/KukaJ/ivnNqTHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIJliXkagdefURpnUiGsbhGcrw+MB8GA1UdIwQY MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhSiz20Y 7jhv5BIxQ8E7G2sCVMYU0lBVoJFPDwSA1lGePSEATOqlZvCMxX1tUOh9eApR8GpU D9MjE8rW99rTNwqclP1DGhp0yxANpXTpIuf17uijHS+KPVvG6WVNpfdJc3orbddT Fp+WKPqHnPNsSGwGv5mTcgr54A8RUhDFw7egBRA0ywzfhOABp49JdtBsbrINPXmW 52b4Eeqo9b3Wb79xnW/7c4a4gFbay9Q3n6XCRXdiKcDho3O0X0M3o5S2y7sQ1IB0 X5GRbBdaFCWTKlxIiFAq9I4NUi/Ma6UyrOXG6b7SFT0DJElowJRoEFczPfsc7MzC xZBN5WJEJCttTg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:22 2026 by rpki-client