This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json) Hash identifier: xmu6ziUvR3TWDNV9C3M3bpJj1fPatFCOYRyeXl98QFw= Subject key identifier: A8:EC:4F:A8:47:FE:56:B5:77:04:E3:54:EA:02:AD:B0:9E:C2:84:4A Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019BF2AB1370FA030D15DA159C0341F4C2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft Manifest number: 0ACA Signing time: Sun 25 Jan 2026 01:00:56 +0000 Manifest this update: Sun 25 Jan 2026 01:00:56 +0000 Manifest next update: Mon 26 Jan 2026 01:00:56 +0000 Files and hashes: 1: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: FLum2RSQCuKaqcSBF7NWyUQKJzwJtYs1uBYbeh2SJgk=) 2: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=) 3: GT10PWWk40LjIYF15OP2Wd_xt-I.roa (hash: loBYBLOnVHrWiz+2I6Up0zBWAHuCROfUTDMKwTlcM6s=) 4: KV-kXiax0brWWeQZDEBKQIQ7lj0.roa (hash: VaX4IhwjfnzcwylL43ff4dLH5Qhw2TlZSvdp0A2GC5g=) 5: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=) 6: UkKSFgRU0i3KaGnHwMCMWucAEJg.roa (hash: 5Ch+ryXt3IKffn5gHuwCN/ReoHH/iCHv2Si1y+KwSg0=) 7: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=) 8: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=) 9: avmhdb_wzCiEf_bFZVLepM346tM.roa (hash: Fd2kheVgg0mzBwUJ7cAsgm0+4NKEkBm1SzUz47egMuw=) 10: cq5oEfhpwOAB3SATuFVA2r_HrW0.roa (hash: AXB6GDcfWkIUxEgaZTV6RBJ8X36uSaSobiHqDrLQUBA=) 11: hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa (hash: OOYOWz2G4m3FFRMrCNHPvogLHfi53TOFEQWueZF5XRA=) 12: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=) 13: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=) 14: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:13:70:fa:03:0d:15:da:15:9c:03:41:f4:c2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 25 01:00:56 2026 GMT Not After : Jan 26 01:00:56 2026 GMT Subject: CN=a8ec4fa847fe56b57704e354ea02adb09ec2844a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:47:ea:6d:d9:3b:76:33:fc:33:2b:7e:8c: ae:74:b0:45:7a:83:15:33:7f:f4:f6:dd:c5:98:4f: f2:cb:9f:5e:26:46:93:6e:bd:c8:f2:e7:ae:97:0e: e5:e1:8e:5e:12:10:94:74:94:c3:a8:ab:c3:8e:93: 60:97:c6:a1:25:17:e6:31:d6:83:eb:bf:0e:c4:a2: e7:8a:fe:5e:e7:c7:87:50:02:c8:33:95:96:72:8b: a6:56:28:e5:cd:04:08:7a:71:85:77:d4:ab:8a:d9: 21:ca:94:19:a6:2d:ed:95:0b:2c:ff:9d:60:4d:2b: ac:ce:ef:98:55:29:02:ca:3a:52:68:09:af:75:e7: 7f:e1:02:fc:dc:68:f5:95:d8:d4:84:4a:55:ad:a9: 8b:11:9f:67:79:7f:db:c5:49:e5:73:2b:bb:bb:fe: 05:45:05:98:fb:c8:25:a9:b0:79:99:16:b0:f1:4e: 8c:98:99:15:e4:39:e9:55:f4:d0:f2:dc:46:84:fe: 34:97:eb:83:a0:f7:33:02:ae:6a:8e:d0:2b:ed:65: df:92:76:52:d7:37:ef:b6:c3:4a:20:64:86:75:94: 73:c7:e4:51:fa:4d:00:c0:4a:38:86:37:0a:b4:6c: 85:54:86:d4:5b:3e:40:55:b9:18:cf:2a:20:b7:f1: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EC:4F:A8:47:FE:56:B5:77:04:E3:54:EA:02:AD:B0:9E:C2:84:4A X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d7:74:f2:1d:dd:de:14:a7:09:23:13:78:b7:8a:53:cd:df: ea:c7:a2:95:d9:87:3f:5f:e9:02:4c:d2:c1:61:78:7a:36:3c: 01:4e:c4:0d:64:76:7a:a0:4e:e4:37:00:c7:f1:f9:fc:f8:62: a7:af:c9:ce:f7:c9:c7:a3:d7:4c:33:45:2e:fc:ff:2d:46:f5: 57:eb:31:0b:62:bc:5a:ec:28:f5:40:24:6a:28:41:ee:d4:8d: c7:9f:a7:55:d0:25:c6:75:95:52:45:ca:d1:a6:5f:df:ec:5e: 0b:5f:76:0d:a4:d4:30:e7:ab:03:19:2f:48:15:a7:fa:81:e1: 0e:1c:bc:a1:95:e9:ac:df:4f:6e:17:a5:91:93:85:98:e3:90: 6f:dd:6c:5c:99:22:9f:4a:c5:f6:c0:8a:de:cc:7e:db:e4:59: 79:56:30:73:29:e9:63:2f:93:31:a4:61:11:f7:33:4c:69:f9: aa:d8:db:20:9b:68:8a:20:4f:0d:e8:02:5e:44:30:61:dc:cd: ea:36:a5:3b:a8:1e:ec:7d:99:9a:9f:53:f0:05:b3:0b:2c:0c: 63:7b:c1:28:e5:31:ec:ec:00:fd:d1:ff:9e:b3:83:6a:4c:a2: a4:ce:2d:be:59:5b:2e:e6:5b:fe:0b:7f:99:75:f4:c3:ca:91: ef:e0:3e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqxNw+gMNFdoVnANB9MLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTI1MDEwMDU2WhcNMjYwMTI2MDEwMDU2WjAzMTEwLwYDVQQD EyhhOGVjNGZhODQ3ZmU1NmI1NzcwNGUzNTRlYTAyYWRiMDllYzI4NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bJH6m3ZO3Yz/DMrfoyudLBFeoMV M3/09t3FmE/yy59eJkaTbr3I8ueulw7l4Y5eEhCUdJTDqKvDjpNgl8ahJRfmMdaD 678OxKLniv5e58eHUALIM5WWcoumVijlzQQIenGFd9SritkhypQZpi3tlQss/51g TSuszu+YVSkCyjpSaAmvded/4QL83Gj1ldjUhEpVramLEZ9neX/bxUnlcyu7u/4F RQWY+8glqbB5mRaw8U6MmJkV5DnpVfTQ8txGhP40l+uDoPczAq5qjtAr7WXfknZS 1zfvtsNKIGSGdZRzx+RR+k0AwEo4hjcKtGyFVIbUWz5AVbkYzyogt/G3dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjsT6hH/la1dwTjVOoCrbCewoRKMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdd08h3d 3hSnCSMTeLeKU83f6seildmHP1/pAkzSwWF4ejY8AU7EDWR2eqBO5DcAx/H5/Phi p6/JzvfJx6PXTDNFLvz/LUb1V+sxC2K8Wuwo9UAkaihB7tSNx5+nVdAlxnWVUkXK 0aZf3+xeC192DaTUMOerAxkvSBWn+oHhDhy8oZXprN9PbhelkZOFmOOQb91sXJki n0rF9sCK3sx+2+RZeVYwcynpYy+TMaRhEfczTGn5qtjbIJtoiiBPDegCXkQwYdzN 6jalO6ge7H2Zmp9T8AWzCywMY3vBKOUx7OwA/dH/nrODakyipM4tvllbLuZb/gt/ mXX0w8qR7+A+uw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:45 2026 by rpki-client