This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json) Hash identifier: 76yC1kfbfmkyraD1Qk+2mGfrK+MvfCn3/2dn/lx1SnQ= Subject key identifier: 01:40:B3:59:B3:88:BF:3B:71:00:89:AD:A0:D8:8E:31:FB:6D:C7:A3 Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019BF53EFA26EBCB800CB36D8F7262AEB1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft Manifest number: 147D Signing time: Sun 25 Jan 2026 13:01:43 +0000 Manifest this update: Sun 25 Jan 2026 13:01:43 +0000 Manifest next update: Mon 26 Jan 2026 13:01:43 +0000 Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: M1ghsnR4SHdfe4MHgkMHHLQ31H23rsr88S8NedLaOp4=) 2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:fa:26:eb:cb:80:0c:b3:6d:8f:72:62:ae:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Jan 25 13:01:43 2026 GMT Not After : Jan 26 13:01:43 2026 GMT Subject: CN=0140b359b388bf3b710089ada0d88e31fb6dc7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:15:8f:96:76:7c:f7:9c:a1:7f:44:3a:72: 7d:c1:5d:7e:c5:e8:f1:56:ee:3a:5e:30:de:80:67: 4f:48:e6:bb:dd:59:3a:37:b2:78:03:32:38:12:ae: 63:86:05:6d:10:40:7c:7a:61:bf:61:67:c9:37:bb: a0:e2:ba:f1:de:45:7d:7e:d8:33:a6:a1:f2:91:91: dd:82:d5:de:c1:6d:7a:dc:ea:d9:e9:5d:ec:15:1e: 4f:2a:21:a6:ea:b4:6f:16:24:1a:80:54:7f:6d:00: 83:40:f3:9e:97:48:86:e0:ad:12:47:0f:e3:06:fa: 47:e6:8c:b2:cc:fa:65:ca:a1:7f:90:3c:f7:94:39: bf:af:7c:12:87:e4:03:bf:22:31:d6:25:76:b5:06: ab:8e:26:8f:e0:e2:ee:ff:dd:03:74:a0:f6:9a:d2: 75:de:22:c2:cf:99:63:b6:0c:8e:05:47:17:a8:c2: 41:c4:1a:f9:78:21:60:fe:be:0d:79:64:a7:46:cc: 07:8e:a4:f1:ef:72:73:0d:1a:c6:e2:c1:dc:65:2d: 1b:e7:d5:f3:63:ab:9d:e5:94:1a:49:cc:98:d4:0d: 5c:21:e2:7d:f1:08:17:d8:f3:d2:e5:2f:c0:33:cf: c4:30:00:0f:45:ee:b0:fc:2d:54:41:3d:a1:3a:70: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:40:B3:59:B3:88:BF:3B:71:00:89:AD:A0:D8:8E:31:FB:6D:C7:A3 X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:61:21:bc:5a:43:75:27:7e:77:e0:27:d9:e4:0e:1a:4d:22: f4:56:e2:87:4d:fd:50:f3:a8:77:5b:2a:f9:b6:dd:ba:33:cf: 08:fc:4c:33:09:13:6d:1d:8e:cb:07:5e:0c:86:de:55:ff:cc: 65:9a:b5:1c:28:f4:bb:ec:f2:f3:39:12:9a:87:2e:a8:40:b9: 8b:67:77:a6:d1:44:fc:1d:b1:ec:c0:e8:2c:42:80:ab:32:5c: 46:78:d3:4e:51:53:1a:11:78:61:f0:d9:19:04:54:17:6b:fc: 3e:31:f1:32:8a:49:51:d4:a1:88:f8:a4:bc:19:41:57:bf:73: f7:22:98:f1:69:b8:3a:58:4e:f2:4f:6b:06:18:be:41:10:10: a0:a9:df:9f:ef:02:6f:3a:07:c0:02:99:5c:46:fc:70:43:41: 3b:d1:5a:9f:67:9f:f2:34:32:f2:af:d2:98:e2:8e:02:c9:35: 5f:0f:8c:4b:a6:eb:cc:de:f2:19:b2:34:5f:a0:a4:8b:c9:96: 46:a4:af:73:17:00:fb:99:e7:f5:01:9b:fb:5a:1c:28:9e:8e: 0a:ae:2a:ae:a5:c5:12:17:06:86:44:d7:a8:14:79:6d:9f:8d: 54:6a:4e:fe:8c:ba:97:44:7d:89:3f:2b:28:50:7b:74:b6:91: 2f:10:92:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pvom68uADLNtj3JirrHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjYwMTI1MTMwMTQzWhcNMjYwMTI2MTMwMTQzWjAzMTEwLwYDVQQD EygwMTQwYjM1OWIzODhiZjNiNzEwMDg5YWRhMGQ4OGUzMWZiNmRjN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0oVj5Z2fPecoX9EOnJ9wV1+xejx Vu46XjDegGdPSOa73Vk6N7J4AzI4Eq5jhgVtEEB8emG/YWfJN7ug4rrx3kV9ftgz pqHykZHdgtXewW163OrZ6V3sFR5PKiGm6rRvFiQagFR/bQCDQPOel0iG4K0SRw/j BvpH5oyyzPplyqF/kDz3lDm/r3wSh+QDvyIx1iV2tQarjiaP4OLu/90DdKD2mtJ1 3iLCz5ljtgyOBUcXqMJBxBr5eCFg/r4NeWSnRswHjqTx73JzDRrG4sHcZS0b59Xz Y6ud5ZQaScyY1A1cIeJ98QgX2PPS5S/AM8/EMAAPRe6w/C1UQT2hOnCHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFAs1mziL87cQCJraDYjjH7bcejMB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2EhvFpD dSd+d+An2eQOGk0i9Fbih039UPOod1sq+bbdujPPCPxMMwkTbR2OywdeDIbeVf/M ZZq1HCj0u+zy8zkSmocuqEC5i2d3ptFE/B2x7MDoLEKAqzJcRnjTTlFTGhF4YfDZ GQRUF2v8PjHxMopJUdShiPikvBlBV79z9yKY8Wm4OlhO8k9rBhi+QRAQoKnfn+8C bzoHwAKZXEb8cENBO9Fan2ef8jQy8q/SmOKOAsk1Xw+MS6brzN7yGbI0X6Cki8mW RqSvcxcA+5nn9QGb+1ocKJ6OCq4qrqXFEhcGhkTXqBR5bZ+NVGpO/oy6l0R9iT8r KFB7dLaRLxCSqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:41 2026 by rpki-client