This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: NDC+8mpwk3COTUR2NzTtrpr370bXNZ1uX6X5SsakEo4= Subject key identifier: DA:27:54:59:AF:9E:0C:31:A0:5A:A3:25:A9:AD:23:B6:65:0C:22:A9 Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019BF507385D3E29BE5795752B38DBB1B007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 11F8 Signing time: Sun 25 Jan 2026 12:00:49 +0000 Manifest this update: Sun 25 Jan 2026 12:00:49 +0000 Manifest next update: Mon 26 Jan 2026 12:00:49 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: keVympZbNEoj8nXVZnp6ZiV+chKtYmmuOncd8+1bVR0=) 2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:38:5d:3e:29:be:57:95:75:2b:38:db:b1:b0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Jan 25 12:00:49 2026 GMT Not After : Jan 26 12:00:49 2026 GMT Subject: CN=da275459af9e0c31a05aa325a9ad23b6650c22a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:60:d9:f7:58:dc:91:f4:95:1c:69:a9:94: ed:e6:8b:e8:3c:08:7c:22:20:dd:17:34:8b:e3:c0: 6c:07:6e:24:68:ff:0b:6e:22:48:50:3c:3d:05:cf: cb:aa:1d:ea:d5:33:43:76:8e:ab:b6:8f:d2:c3:06: 9e:3f:ae:a5:4d:17:24:4e:5c:1c:76:b3:5c:15:b5: 97:77:5f:0e:40:ef:f4:5b:56:69:06:5e:d6:2b:8d: 36:c3:94:36:eb:7c:89:58:4e:ba:29:8e:85:ed:e6: fc:83:1f:89:c7:55:59:eb:ef:f8:9b:97:6f:39:41: e9:29:3d:96:f3:3b:3a:b5:e3:dc:a8:ac:a8:39:2a: 2a:b6:32:36:0f:0a:08:a9:81:5d:6c:47:dd:1f:d1: ed:f6:cc:b6:1a:fa:90:d0:d6:7b:83:7b:ec:e6:45: 9c:07:66:1f:10:a6:25:67:87:0e:cf:b3:0d:88:4c: fa:6b:b9:a8:aa:18:00:b6:43:72:c4:a7:2a:6c:1c: 79:20:6b:52:f6:a4:46:5d:e2:80:bc:6a:dc:8a:e3: 44:b5:81:98:30:88:ca:a7:f1:eb:5c:7f:46:12:af: f6:fd:72:90:b5:57:62:47:33:63:f3:89:25:13:66: 48:cd:b3:79:e9:c6:1c:3d:ab:6d:6c:91:a3:d6:ae: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:27:54:59:AF:9E:0C:31:A0:5A:A3:25:A9:AD:23:B6:65:0C:22:A9 X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:f8:76:be:7e:69:60:ad:50:32:9a:c5:5a:99:d3:6d:de: de:0e:22:f4:4c:c2:70:11:ad:46:8c:71:70:da:a9:4a:61:d2: fc:43:35:fd:d4:6e:09:5b:c0:0c:a8:93:a1:7c:b3:61:02:7b: 1f:fa:95:ba:e3:07:49:83:b0:f7:d4:c6:7b:98:be:3f:d1:4d: f2:57:66:a7:fe:17:e6:a7:52:4a:75:cf:3f:68:a5:44:b1:ef: 5a:f4:cf:17:8a:b5:a7:1b:ca:f2:d4:2e:ac:65:2b:43:fa:ce: ca:2d:f5:f6:b9:53:33:21:ee:53:6c:6f:86:2e:d8:f2:f8:67: 71:81:8e:60:38:c4:9c:54:07:96:0e:b1:aa:cb:33:7b:ce:7c: 2a:40:22:eb:35:db:67:ee:77:61:58:56:7b:5d:01:d9:35:86: 08:6c:63:53:03:0c:87:40:e6:01:c1:6d:f1:a7:d7:ea:ed:2b: 06:ae:24:d0:91:f9:15:cc:ff:3d:f2:3e:57:93:1e:35:16:c1: 2a:08:48:44:34:1c:c0:df:cd:e3:75:71:0c:49:11:72:59:57: 86:4b:00:ef:f7:7c:3a:1d:a7:96:2b:10:49:9c:07:70:64:af: ce:b4:4a:bd:29:2a:2a:a6:07:68:ca:64:dd:7f:c0:51:df:41: dc:f1:99:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzhdPim+V5V1KzjbsbAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjYwMTI1MTIwMDQ5WhcNMjYwMTI2MTIwMDQ5WjAzMTEwLwYDVQQD EyhkYTI3NTQ1OWFmOWUwYzMxYTA1YWEzMjVhOWFkMjNiNjY1MGMyMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWVg2fdY3JH0lRxpqZTt5ovoPAh8 IiDdFzSL48BsB24kaP8LbiJIUDw9Bc/Lqh3q1TNDdo6rto/SwwaeP66lTRckTlwc drNcFbWXd18OQO/0W1ZpBl7WK402w5Q263yJWE66KY6F7eb8gx+Jx1VZ6+/4m5dv OUHpKT2W8zs6tePcqKyoOSoqtjI2DwoIqYFdbEfdH9Ht9sy2GvqQ0NZ7g3vs5kWc B2YfEKYlZ4cOz7MNiEz6a7moqhgAtkNyxKcqbBx5IGtS9qRGXeKAvGrciuNEtYGY MIjKp/HrXH9GEq/2/XKQtVdiRzNj84klE2ZIzbN56cYcPattbJGj1q7dbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNonVFmvngwxoFqjJamtI7ZlDCKpMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLD4dr5+ aWCtUDKaxVqZ023e3g4i9EzCcBGtRoxxcNqpSmHS/EM1/dRuCVvADKiToXyzYQJ7 H/qVuuMHSYOw99TGe5i+P9FN8ldmp/4X5qdSSnXPP2ilRLHvWvTPF4q1pxvK8tQu rGUrQ/rOyi319rlTMyHuU2xvhi7Y8vhncYGOYDjEnFQHlg6xqssze858KkAi6zXb Z+53YVhWe10B2TWGCGxjUwMMh0DmAcFt8afX6u0rBq4k0JH5Fcz/PfI+V5MeNRbB KghIRDQcwN/N43VxDEkRcllXhksA7/d8Oh2nlisQSZwHcGSvzrRKvSkqKqYHaMpk 3X/AUd9B3PGZrw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:29 2026 by rpki-client