This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json) Hash identifier: dEijPdixXmhaZ3Ayia395WUwA45mEsmYDJqcp0jbjLw= Subject key identifier: 35:B9:A3:F1:94:1B:AB:17:FE:01:F8:43:B9:52:E2:55:90:33:EE:9A Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Certificate serial: 019BF3F50E5CF14F8DE92AACADA91771C0C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft Manifest number: 0C0D Signing time: Sun 25 Jan 2026 07:01:21 +0000 Manifest this update: Sun 25 Jan 2026 07:01:21 +0000 Manifest next update: Mon 26 Jan 2026 07:01:21 +0000 Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: 3jKez/fnjlvIsbwO1qYk7uRs3J6E1cQRfv3XwKp6Wtk=) 2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=) 3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:0e:5c:f1:4f:8d:e9:2a:ac:ad:a9:17:71:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Validity Not Before: Jan 25 07:01:21 2026 GMT Not After : Jan 26 07:01:21 2026 GMT Subject: CN=35b9a3f1941bab17fe01f843b952e2559033ee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1e:bb:38:0d:7d:33:2d:a1:b3:5d:31:b3:29: 28:2d:be:e0:c8:ce:59:a7:66:3d:c9:f1:dc:2c:26: fa:5f:89:fb:90:73:6e:4a:c2:69:6f:99:26:18:0d: 45:1b:cb:8b:cf:c8:6a:e8:b6:9b:ae:e3:1d:ac:dc: 7b:e6:56:22:fd:48:0c:90:fb:99:4a:a7:30:6b:2f: 3c:1b:5c:3b:2f:7a:5a:83:69:5d:8f:87:a4:f9:01: c3:a8:a6:45:9f:51:c5:cc:d5:99:80:ec:4b:cc:cf: ac:08:07:bc:dd:1a:8e:18:29:f1:35:91:83:78:4f: e5:66:0b:ed:1b:8b:3f:22:fd:9d:21:d6:3d:0b:b1: d9:1d:0e:61:12:9c:92:1f:2c:ec:1c:0b:30:63:aa: 30:49:70:c1:07:45:59:d2:f2:7a:df:29:5f:fb:55: 18:ff:e5:29:80:bb:ca:88:d8:fe:e1:12:4b:11:7d: 24:4f:f0:ed:eb:05:4c:58:c1:57:73:54:a6:2f:7a: 22:85:40:73:1a:c7:d4:48:ef:99:20:36:c0:a2:c1: c3:ba:70:93:0c:b9:48:75:83:c7:de:ae:8c:cb:27: 55:07:97:0a:98:82:48:d9:98:7e:18:f4:94:7c:af: 0b:fb:d0:16:12:e0:14:59:8f:27:ba:9b:03:44:e6: 64:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:A3:F1:94:1B:AB:17:FE:01:F8:43:B9:52:E2:55:90:33:EE:9A X509v3 Authority Key Identifier: keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:5d:d6:fe:2f:87:4b:21:5d:ee:b1:77:e7:9a:74:54:d2: 0c:c9:43:ae:db:5a:8a:47:87:a1:28:3b:0e:ab:33:0a:18:fb: 42:bc:ba:83:66:ae:46:86:2e:e3:f3:c1:f0:64:48:91:a8:e9: 9a:42:a2:39:cd:6e:a2:91:e2:0c:d8:1e:2d:d4:77:93:34:6d: 15:04:cd:b6:33:30:59:a7:03:a3:74:47:68:6f:67:b1:6e:4b: ea:d0:34:6b:4e:7a:09:7c:c4:19:a4:8a:69:81:fe:89:34:b0: 59:aa:a5:8d:f6:1e:a8:20:c1:12:87:ef:63:f4:c0:3c:a7:c5: 4a:7d:eb:5a:41:e7:7f:36:4e:1b:d0:d1:9c:72:0d:58:65:d2: 6e:3d:ef:0e:df:c3:a1:dc:c8:31:67:39:f8:6c:94:b8:05:b0: 49:d4:d8:3d:fb:b4:5d:23:a9:1b:40:e5:ff:23:fb:1d:f8:0d: 2b:c2:15:5c:ca:3e:16:a7:9b:ae:b4:6e:27:b4:c0:74:60:99: 31:a7:f5:25:45:3f:a0:a9:20:84:68:8a:8b:41:e2:0b:79:17: f6:7f:7c:eb:d4:3e:70:eb:a8:c9:88:eb:ad:01:f3:2b:94:d4: dc:53:ec:0a:a1:c9:98:d2:db:83:75:b3:e6:13:9f:f0:f7:48: bc:6e:84:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Q5c8U+N6SqsrakXccDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0 YTViOGYwHhcNMjYwMTI1MDcwMTIxWhcNMjYwMTI2MDcwMTIxWjAzMTEwLwYDVQQD EygzNWI5YTNmMTk0MWJhYjE3ZmUwMWY4NDNiOTUyZTI1NTkwMzNlZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7x67OA19My2hs10xsykoLb7gyM5Z p2Y9yfHcLCb6X4n7kHNuSsJpb5kmGA1FG8uLz8hq6LabruMdrNx75lYi/UgMkPuZ Sqcway88G1w7L3pag2ldj4ek+QHDqKZFn1HFzNWZgOxLzM+sCAe83RqOGCnxNZGD eE/lZgvtG4s/Iv2dIdY9C7HZHQ5hEpySHyzsHAswY6owSXDBB0VZ0vJ63ylf+1UY /+UpgLvKiNj+4RJLEX0kT/Dt6wVMWMFXc1SmL3oihUBzGsfUSO+ZIDbAosHDunCT DLlIdYPH3q6MyydVB5cKmIJI2Zh+GPSUfK8L+9AWEuAUWY8nupsDROZkKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW5o/GUG6sX/gH4Q7lS4lWQM+6aMB8GA1UdIwQY MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJVd1v4v h0shXe6xd+eadFTSDMlDrttaikeHoSg7DqszChj7Qry6g2auRoYu4/PB8GRIkajp mkKiOc1uopHiDNgeLdR3kzRtFQTNtjMwWacDo3RHaG9nsW5L6tA0a056CXzEGaSK aYH+iTSwWaqljfYeqCDBEofvY/TAPKfFSn3rWkHnfzZOG9DRnHINWGXSbj3vDt/D odzIMWc5+GyUuAWwSdTYPfu0XSOpG0Dl/yP7HfgNK8IVXMo+FqebrrRuJ7TAdGCZ Maf1JUU/oKkghGiKi0HiC3kX9n9869Q+cOuoyYjrrQHzK5TU3FPsCqHJmNLbg3Wz 5hOf8PdIvG6EKw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:13 2026 by rpki-client