This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json) Hash identifier: 69lHuVrEka8+v0vj4A4VhcV8pRKIWMZBtUAfEktCVJw= Subject key identifier: 3B:3F:AF:68:FB:AF:93:96:25:D2:F7:7F:CA:BE:81:A9:DA:C1:16:92 Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019BF3F4EDC645BBB00E2796F090A6651210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft Manifest number: 1142 Signing time: Sun 25 Jan 2026 07:01:13 +0000 Manifest this update: Sun 25 Jan 2026 07:01:13 +0000 Manifest next update: Mon 26 Jan 2026 07:01:13 +0000 Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=) 2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: qHtf4VI1p1Y970BWOpXpe5kGsbsh/0w09TC0haG/NMM=) 3: UfBREIbpw0HouYObEC1LRUOZq_w.roa (hash: f4bMUJiYsD0+ToNj+lpzpSNMBInPraZjyj4OiPgA3CY=) 4: sq6m1FOXK52o6uTxOqe6Hm1SOOY.roa (hash: VWjwuEuO3NTNcpVAcvUXrXMeZI6YpyY7QfPuhsD8Kas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:ed:c6:45:bb:b0:0e:27:96:f0:90:a6:65:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Jan 25 07:01:13 2026 GMT Not After : Jan 26 07:01:13 2026 GMT Subject: CN=3b3faf68fbaf939625d2f77fcabe81a9dac11692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:90:13:1f:da:36:5b:f4:dc:51:f6:e2:4d: 06:39:ea:e3:0c:d6:d7:0e:21:a7:54:91:5d:18:d3: d4:cc:c1:52:46:4e:d0:50:70:02:71:61:7b:3f:a6: 24:ec:61:25:a0:05:e3:64:45:34:ba:ba:56:4b:25: c5:0d:4e:23:0a:e5:d5:2d:c4:db:f2:4b:1c:76:20: 10:94:e8:b3:e3:4b:2b:d6:32:4e:af:04:81:99:7d: c0:47:2d:08:0d:43:6a:3a:92:8c:96:2e:66:4d:59: ca:f1:1c:0e:a4:c5:cf:76:c1:ca:5d:8a:68:66:f1: fe:27:8a:59:be:74:f1:aa:68:6e:35:c3:be:c7:8c: fd:66:2f:02:8c:7e:b0:0a:75:89:7b:fd:7b:69:d3: 0c:7b:82:d6:42:18:42:95:a9:d1:f0:9d:28:df:cb: fc:8b:8c:fc:a4:ea:5f:35:6c:10:ad:58:c7:cf:c1: fb:2a:dc:4e:09:26:d2:ec:2a:44:17:82:ec:46:8c: 89:2a:63:dc:63:4b:4e:17:52:23:46:90:68:b4:61: 1c:af:11:ea:c6:0a:34:e4:16:9c:d5:76:0d:4d:22: e7:32:c2:a0:a5:a1:b8:15:2d:33:42:34:6b:56:e1: ba:54:f4:f2:f7:83:94:d1:e2:18:64:b4:ed:77:32: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3F:AF:68:FB:AF:93:96:25:D2:F7:7F:CA:BE:81:A9:DA:C1:16:92 X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:22:f2:7e:c4:75:3f:1d:04:00:91:7c:76:8a:6d:79:3c:cd: 5b:bf:32:72:af:90:4c:ca:27:c4:12:c8:34:36:c6:f9:85:5a: 0c:73:89:78:32:6d:e0:33:0c:f8:3f:68:d9:3e:43:e6:a4:ca: d1:2a:4f:47:d6:06:40:bc:3b:82:cd:a8:69:a3:d4:d2:fd:fa: ce:bc:50:af:9e:65:c8:89:75:1c:c3:4c:39:ed:86:f8:1d:a0: d9:43:6b:67:4b:dc:10:c7:90:e5:f0:9d:ce:00:42:d3:c7:ae: f3:0f:5c:b6:ac:86:01:cc:6d:cc:95:87:3e:c2:ab:e8:53:ff: fd:84:cc:60:16:58:b1:0d:c2:b2:db:a2:37:b4:fe:9b:5b:7e: 79:b6:be:45:fa:2a:ce:1f:3e:ea:86:8e:47:7d:c4:be:21:cf: 59:60:d9:61:79:78:9e:f8:0a:bc:b2:07:47:a0:d1:23:87:4d: 9d:cd:11:e3:fd:5b:68:4d:ab:1a:d5:b6:98:12:76:f4:da:21: 44:8c:d2:70:80:26:63:a7:78:53:5e:61:f2:2a:9a:ac:72:4a: 78:45:03:1e:86:85:4e:41:c4:d4:ed:17:65:dd:e4:c6:89:76: 0a:de:26:1c:18:96:38:01:bd:f6:52:dc:3a:42:fc:e5:b9:d0: ab:38:ed:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9O3GRbuwDieW8JCmZRIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjYwMTI1MDcwMTEzWhcNMjYwMTI2MDcwMTEzWjAzMTEwLwYDVQQD EygzYjNmYWY2OGZiYWY5Mzk2MjVkMmY3N2ZjYWJlODFhOWRhYzExNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGCQEx/aNlv03FH24k0GOerjDNbX DiGnVJFdGNPUzMFSRk7QUHACcWF7P6Yk7GEloAXjZEU0urpWSyXFDU4jCuXVLcTb 8kscdiAQlOiz40sr1jJOrwSBmX3ARy0IDUNqOpKMli5mTVnK8RwOpMXPdsHKXYpo ZvH+J4pZvnTxqmhuNcO+x4z9Zi8CjH6wCnWJe/17adMMe4LWQhhClanR8J0o38v8 i4z8pOpfNWwQrVjHz8H7KtxOCSbS7CpEF4LsRoyJKmPcY0tOF1IjRpBotGEcrxHq xgo05Bac1XYNTSLnMsKgpaG4FS0zQjRrVuG6VPTy94OU0eIYZLTtdzKAcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs/r2j7r5OWJdL3f8q+ganawRaSMB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSLyfsR1 Px0EAJF8dopteTzNW78ycq+QTMonxBLINDbG+YVaDHOJeDJt4DMM+D9o2T5D5qTK 0SpPR9YGQLw7gs2oaaPU0v36zrxQr55lyIl1HMNMOe2G+B2g2UNrZ0vcEMeQ5fCd zgBC08eu8w9ctqyGAcxtzJWHPsKr6FP//YTMYBZYsQ3CstuiN7T+m1t+eba+Rfoq zh8+6oaOR33EviHPWWDZYXl4nvgKvLIHR6DRI4dNnc0R4/1baE2rGtW2mBJ29Noh RIzScIAmY6d4U15h8iqarHJKeEUDHoaFTkHE1O0XZd3kxol2Ct4mHBiWOAG99lLc OkL85bnQqzjt2Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:27 2026 by rpki-client