This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json) Hash identifier: fwzJ+IXDghebCM/o54gabf3pDrTjo1hhbsO9ZHRorzI= Subject key identifier: D2:7C:32:89:3E:E4:0B:3B:12:C5:59:78:62:03:71:EB:AC:ED:72:03 Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27 Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127 Certificate serial: 019BF4632FF89FDDB5B788627CDBD9445EE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 09:01:39 +0000 Manifest this update: Sun 25 Jan 2026 09:01:39 +0000 Manifest next update: Mon 26 Jan 2026 09:01:39 +0000 Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 7jBAWSGm2ST7lpdvgLwmLTtH20sqcj7TvI7CFR6RJDI=) 2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=) 3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2f:f8:9f:dd:b5:b7:88:62:7c:db:d9:44:5e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127 Validity Not Before: Jan 25 09:01:39 2026 GMT Not After : Jan 26 09:01:39 2026 GMT Subject: CN=d27c32893ee40b3b12c55978620371ebaced7203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:e7:55:2d:67:aa:c7:de:f0:07:b7:e9:fc: 37:e6:79:23:1c:d3:e7:36:a7:88:05:cc:14:48:1b: 7a:74:11:ca:71:7e:1b:60:66:4f:74:3c:57:f7:2d: ab:3d:d6:2b:af:57:08:d0:94:bc:39:90:3e:1a:e6: 3d:17:79:07:fe:54:90:ea:2c:ed:93:70:1c:39:dc: 02:1a:b4:23:bc:87:02:63:bd:93:a0:54:7a:ad:e6: 2a:ee:7b:bf:60:d0:7e:87:9c:45:77:42:7f:64:8b: b5:11:95:49:2b:b6:af:da:c4:2b:9c:d2:3f:87:9f: b5:1e:c9:13:25:de:41:a0:5a:e1:a1:70:3c:5d:72: 7a:27:ca:e8:e2:45:ce:94:3f:2b:25:76:ed:98:43: 2a:92:24:84:c2:c4:b3:f4:85:3e:da:e3:93:93:2a: 8a:b3:98:41:4f:89:35:4c:f9:49:5c:e8:01:c6:5f: 2c:6d:a6:ec:91:aa:a7:ab:34:c0:b6:45:76:7c:a9: df:db:79:e7:ca:49:06:e0:50:35:0e:18:8c:59:9c: 7e:e5:db:44:3b:50:ea:0a:02:bd:5d:d4:55:09:6e: eb:6f:dc:ff:88:99:53:a4:b5:dd:3a:bc:bf:22:a8: df:7f:7e:39:c3:fe:57:eb:05:3c:9d:22:64:c6:98: fe:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7C:32:89:3E:E4:0B:3B:12:C5:59:78:62:03:71:EB:AC:ED:72:03 X509v3 Authority Key Identifier: keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:00:99:0b:f6:b3:c2:68:1d:75:82:e2:49:95:1d:53:a0:31: 3e:24:c1:d2:bf:77:08:32:68:4f:06:2b:33:76:d6:1b:c6:73: 6a:fa:38:68:d4:62:a2:19:84:ac:e7:b9:88:e4:76:11:5b:31: 69:ef:b7:11:45:32:be:cc:4d:20:af:21:f4:2b:fa:04:cb:a1: e3:a9:50:5e:f7:b3:4f:82:88:55:26:dd:99:c7:b4:26:fc:05: 0d:12:8e:51:c8:18:2d:09:89:9f:5f:93:85:e2:f4:71:36:3a: fa:93:c1:75:f0:31:1a:d6:70:2d:f5:9e:7f:35:91:e0:73:09: 12:a4:8b:66:02:eb:30:0a:63:33:87:e4:ee:3b:1b:51:b8:f5: 96:e1:fc:6d:cc:1a:97:9d:5f:f7:ef:c3:04:39:d7:61:9b:1e: 8c:6d:ac:f6:5a:95:5d:f3:cf:5c:7d:8f:48:cc:f3:03:44:a2: e3:80:79:53:4b:bc:bd:ce:80:ca:f8:b2:15:f2:71:d9:53:82: 53:7f:56:2b:3b:91:fe:c5:6b:6d:fa:2c:e3:66:9a:84:7e:fc: ee:37:62:8c:6b:d9:bc:d6:9d:73:e2:a8:8c:d7:07:81:dc:39: 93:1a:be:06:e6:c3:68:98:a3:85:6b:9e:7d:85:40:17:18:26: 9d:82:c9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yy/4n921t4hifNvZRF7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz OWMxMjcwHhcNMjYwMTI1MDkwMTM5WhcNMjYwMTI2MDkwMTM5WjAzMTEwLwYDVQQD EyhkMjdjMzI4OTNlZTQwYjNiMTJjNTU5Nzg2MjAzNzFlYmFjZWQ3MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWvnVS1nqsfe8Ae36fw35nkjHNPn NqeIBcwUSBt6dBHKcX4bYGZPdDxX9y2rPdYrr1cI0JS8OZA+GuY9F3kH/lSQ6izt k3AcOdwCGrQjvIcCY72ToFR6reYq7nu/YNB+h5xFd0J/ZIu1EZVJK7av2sQrnNI/ h5+1HskTJd5BoFrhoXA8XXJ6J8ro4kXOlD8rJXbtmEMqkiSEwsSz9IU+2uOTkyqK s5hBT4k1TPlJXOgBxl8sbabskaqnqzTAtkV2fKnf23nnykkG4FA1DhiMWZx+5dtE O1DqCgK9XdRVCW7rb9z/iJlTpLXdOry/Iqjff345w/5X6wU8nSJkxpj+oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ8Mok+5As7EsVZeGIDceus7XIDMB8GA1UdIwQY MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt NWIwMGZiZjRhNTI5LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5 LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALACZC/az wmgddYLiSZUdU6AxPiTB0r93CDJoTwYrM3bWG8Zzavo4aNRiohmErOe5iOR2EVsx ae+3EUUyvsxNIK8h9Cv6BMuh46lQXvezT4KIVSbdmce0JvwFDRKOUcgYLQmJn1+T heL0cTY6+pPBdfAxGtZwLfWefzWR4HMJEqSLZgLrMApjM4fk7jsbUbj1luH8bcwa l51f9+/DBDnXYZsejG2s9lqVXfPPXH2PSMzzA0Si44B5U0u8vc6AyviyFfJx2VOC U39WKzuR/sVrbfos42aahH787jdijGvZvNadc+KojNcHgdw5kxq+BubDaJijhWue fYVAFxgmnYLJpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:18 2026 by rpki-client