This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json) Hash identifier: XscdKG4RnLUyWDAml1twuSn3kFuAvch40gX7+Xfz4Mg= Subject key identifier: 6F:9B:6C:2E:13:9A:6E:4C:11:1F:CC:11:FE:AF:07:A2:6B:C3:81:50 Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Certificate serial: 019BF72D2F09082104B134E255FF9B86122C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:01:31 +0000 Manifest this update: Sun 25 Jan 2026 22:01:31 +0000 Manifest next update: Mon 26 Jan 2026 22:01:31 +0000 Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: 40AnrIlz6RBTbxkQ2JbWR6YrFhowrdY4NBA0eQKl9rY=) 2: _1uaADsxq12x8Ida7C5U5GdcwqY.roa (hash: M/706uhTR0kxovup6hnBaKH4VlgykklF/JkrjqrTN+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:2f:09:08:21:04:b1:34:e2:55:ff:9b:86:12:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Validity Not Before: Jan 25 22:01:31 2026 GMT Not After : Jan 26 22:01:31 2026 GMT Subject: CN=6f9b6c2e139a6e4c111fcc11feaf07a26bc38150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:25:15:64:58:1e:bd:48:89:36:3a:0d:af: a6:fc:81:35:92:e1:9b:cf:ce:df:41:5b:7a:d8:47: 02:a7:77:36:9e:45:25:cb:4b:e5:ba:50:d4:72:da: f1:95:0a:57:06:e2:c9:7c:f8:90:b5:eb:e4:b2:01: 9c:a3:67:87:38:9d:a4:c3:c8:a2:5e:8a:56:6d:ab: e3:62:a7:3f:7d:c9:f1:ac:f5:11:ea:1e:4f:a3:e5: b0:d1:6d:18:3f:4b:17:a8:af:be:b8:55:0c:f9:48: b3:49:f4:2f:3b:cb:61:fc:a7:ee:10:f8:4c:2e:d9: a9:a7:1f:08:be:1e:19:79:3e:c8:9d:89:9c:f0:0d: 38:d7:25:49:69:5f:f2:09:8c:a0:42:bf:6a:ff:dc: 6e:de:6a:b0:6e:8d:00:39:c3:53:5d:78:11:5c:96: 72:41:89:3c:32:63:f2:e2:c0:53:4b:46:89:a3:d5: d6:36:df:a7:a8:7c:d9:4d:c2:36:7b:ba:72:00:0e: c0:eb:d6:a8:ab:11:74:e0:45:60:51:ee:ab:da:04: 52:a1:cb:e1:0a:dc:bd:eb:2f:fc:7e:99:df:fc:81: 05:f1:b2:5e:74:8d:fd:66:c6:75:26:24:a2:38:9a: 8d:a2:65:5b:3c:55:44:b9:84:e6:69:09:81:0d:ed: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9B:6C:2E:13:9A:6E:4C:11:1F:CC:11:FE:AF:07:A2:6B:C3:81:50 X509v3 Authority Key Identifier: keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:72:ef:91:cd:65:fa:58:0b:d4:d4:2e:6b:ad:25:85:55:c7: 2b:25:27:63:f6:a2:74:3c:f3:93:0b:e4:c8:c7:52:7e:0a:b6: f3:55:ee:d6:7b:fc:2c:bc:f0:f3:7f:77:a0:c4:41:18:f0:e5: 4d:da:a1:ed:74:6d:c8:fe:4a:97:38:21:7d:66:1f:87:c8:e5: e5:7b:a6:84:53:c3:9f:39:b7:78:9f:91:40:7c:68:e4:0f:55: 88:cd:d1:7a:ef:1a:cd:88:90:76:da:96:e2:db:00:53:a0:36: b2:27:7d:9e:5d:c9:49:ea:58:35:c4:8f:e8:a4:b3:2a:00:8d: d7:35:66:b3:16:2a:f7:f4:2f:08:8f:65:35:95:c5:24:a9:ac: 2e:ad:e8:32:e0:50:9c:54:e3:7d:50:28:df:5b:94:36:b2:23: 18:7d:2d:ae:69:ff:e0:22:e8:30:de:0f:64:44:ad:1e:da:d6: cc:e5:47:a1:da:a5:a2:dd:f2:e7:c9:9a:07:6a:5b:af:62:9b: 09:7b:ca:ec:91:b7:6c:a8:16:29:4f:e4:d2:50:c9:01:3a:3a: 31:73:aa:5e:b5:b7:56:fb:05:0b:b9:79:c2:32:9d:98:fe:d4: f7:c4:10:46:1c:71:0a:a9:98:10:41:bf:53:fd:a3:55:f4:3a: f2:3f:6b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LS8JCCEEsTTiVf+bhhIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzg5MzM3NWFkMTU1YjVmZmNlZDNjYmVlMjUzNWI4NjU5 ZmUzODkwHhcNMjYwMTI1MjIwMTMxWhcNMjYwMTI2MjIwMTMxWjAzMTEwLwYDVQQD Eyg2ZjliNmMyZTEzOWE2ZTRjMTExZmNjMTFmZWFmMDdhMjZiYzM4MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnMlFWRYHr1IiTY6Da+m/IE1kuGb z87fQVt62EcCp3c2nkUly0vlulDUctrxlQpXBuLJfPiQtevksgGco2eHOJ2kw8ii XopWbavjYqc/fcnxrPUR6h5Po+Ww0W0YP0sXqK++uFUM+UizSfQvO8th/KfuEPhM Ltmppx8Ivh4ZeT7InYmc8A041yVJaV/yCYygQr9q/9xu3mqwbo0AOcNTXXgRXJZy QYk8MmPy4sBTS0aJo9XWNt+nqHzZTcI2e7pyAA7A69aoqxF04EVgUe6r2gRSocvh Cty96y/8fpnf/IEF8bJedI39ZsZ1JiSiOJqNomVbPFVEuYTmaQmBDe04DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+bbC4Tmm5MER/MEf6vB6Jrw4FQMB8GA1UdIwQY MBaAFAvIkzda0VW1/87Ty+4lNbhln+OJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUt MGVkMDc4ZjRiY2FmLzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUtMGVkMDc4ZjRiY2Fm LzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXLvkc1l +lgL1NQua60lhVXHKyUnY/aidDzzkwvkyMdSfgq281Xu1nv8LLzw8393oMRBGPDl Tdqh7XRtyP5KlzghfWYfh8jl5XumhFPDnzm3eJ+RQHxo5A9ViM3Reu8azYiQdtqW 4tsAU6A2sid9nl3JSepYNcSP6KSzKgCN1zVmsxYq9/QvCI9lNZXFJKmsLq3oMuBQ nFTjfVAo31uUNrIjGH0trmn/4CLoMN4PZEStHtrWzOVHodqlot3y58maB2pbr2Kb CXvK7JG3bKgWKU/k0lDJATo6MXOqXrW3VvsFC7l5wjKdmP7U98QQRhxxCqmYEEG/ U/2jVfQ68j9rOA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:43 2026 by rpki-client