This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json) Hash identifier: dkjHvkjgBjJA0P91vAgNIZFo29W2oTJIluHuDRSxZeg= Subject key identifier: 29:6D:CA:2C:1A:6B:E2:DD:02:C1:55:F9:72:4B:C5:79:AD:82:D9:34 Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Certificate serial: 019BF7D23DEE6F74DED1DF758BF22AFFE999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft Manifest number: 08E4 Signing time: Mon 26 Jan 2026 01:01:49 +0000 Manifest this update: Mon 26 Jan 2026 01:01:49 +0000 Manifest next update: Tue 27 Jan 2026 01:01:49 +0000 Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: MtxiEgpfac98xoaXjzG8pWPbtfdHlWv/vfoj1Qi1YIQ=) 2: SFBkTzYwiLINrSxoZ2---TI2yUs.roa (hash: vAkDpmYQupbLbDU1ZR0gvrEp2AeDlJtoQMFulae2sms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:3d:ee:6f:74:de:d1:df:75:8b:f2:2a:ff:e9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Validity Not Before: Jan 26 01:01:49 2026 GMT Not After : Jan 27 01:01:49 2026 GMT Subject: CN=296dca2c1a6be2dd02c155f9724bc579ad82d934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:a2:f9:71:1d:90:9c:1c:2f:de:3b:fe:de: 3b:54:fb:f2:63:2c:f3:2c:a0:34:08:cf:e9:43:cf: 2a:7a:5a:1f:22:4c:0f:65:f1:23:5e:ca:a2:a9:84: 96:39:ca:8f:37:a7:f5:b5:59:1c:01:7a:98:a9:49: 19:43:ae:f3:11:e2:f7:cf:38:a3:8c:90:86:85:b5: 84:01:cf:78:73:14:86:8c:25:07:26:9b:9f:51:d6: 9f:d2:b9:f2:c4:bf:ac:a3:51:98:64:82:20:ec:2e: 0c:21:9d:5a:38:27:1b:ef:d4:8f:f8:26:65:53:f5: ba:07:8d:bf:c4:a7:f6:de:48:1d:57:09:7c:e5:a6: f3:fe:9e:0a:3e:23:83:99:1d:6c:4b:67:af:e8:96: bf:03:ee:ce:3a:c3:7c:b3:1c:d3:db:82:00:f3:dd: 64:a4:d5:82:9c:91:85:b9:20:e7:cb:af:69:c0:aa: ec:c7:d7:40:57:c9:0f:ee:d8:1a:c6:08:4e:55:65: cc:19:94:80:ae:70:6d:d7:de:cb:87:38:c1:1a:6c: 4d:c8:3b:14:7a:a4:69:ae:e2:c5:15:a2:4d:a0:c3: 36:ed:54:86:d9:cb:fa:c4:a8:51:96:da:60:89:3b: 02:7f:8a:86:e7:f7:12:17:c0:1b:3e:5b:c9:d8:ea: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6D:CA:2C:1A:6B:E2:DD:02:C1:55:F9:72:4B:C5:79:AD:82:D9:34 X509v3 Authority Key Identifier: keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:36:fc:9c:8d:cc:13:74:3f:af:24:32:24:89:af:91:82:dc: c9:6e:01:92:39:39:40:27:3e:e8:8d:43:52:c3:cc:27:9d:ee: fb:7e:3d:de:66:3f:6f:be:a2:d9:cc:97:da:ef:bc:4a:ed:64: 39:0c:14:5f:09:0f:51:f1:54:30:a2:98:ae:88:72:c6:1f:01: c7:97:ba:7e:6d:1c:75:f2:8f:19:9f:ec:39:64:55:23:5d:53: e6:c9:9b:4e:80:4e:3e:b7:99:01:09:9e:1f:05:4e:89:bd:a5: b7:5b:02:e2:35:28:d9:ed:07:fb:11:e3:61:4b:f6:33:76:3d: bc:95:4c:d3:94:82:97:62:b2:8d:e5:9b:93:78:66:a9:79:1b: a1:58:6a:8c:d9:a5:28:f4:8e:0b:1a:35:5f:7a:18:5b:90:bf: 6c:d2:f2:1b:eb:e2:25:32:f0:56:e9:24:5b:c1:34:ef:8f:55: 54:4a:cb:79:26:30:8f:8e:58:7b:ec:2c:25:c5:d6:ae:28:03: 5f:83:e9:8e:4a:2e:8e:61:38:50:82:dd:3c:2d:49:d5:e2:0f: 82:aa:1e:22:8f:1d:b1:9f:e0:e5:34:74:a1:36:75:11:42:2c: 20:9b:f4:a3:ea:5a:45:35:26:dc:15:f7:49:93:05:25:cb:de: 14:b2:9d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30j3ub3Te0d91i/Iq/+mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5 ZTY1YTEwHhcNMjYwMTI2MDEwMTQ5WhcNMjYwMTI3MDEwMTQ5WjAzMTEwLwYDVQQD EygyOTZkY2EyYzFhNmJlMmRkMDJjMTU1Zjk3MjRiYzU3OWFkODJkOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u+i+XEdkJwcL947/t47VPvyYyzz LKA0CM/pQ88qelofIkwPZfEjXsqiqYSWOcqPN6f1tVkcAXqYqUkZQ67zEeL3zzij jJCGhbWEAc94cxSGjCUHJpufUdaf0rnyxL+so1GYZIIg7C4MIZ1aOCcb79SP+CZl U/W6B42/xKf23kgdVwl85abz/p4KPiODmR1sS2ev6Ja/A+7OOsN8sxzT24IA891k pNWCnJGFuSDny69pwKrsx9dAV8kP7tgaxghOVWXMGZSArnBt197LhzjBGmxNyDsU eqRpruLFFaJNoMM27VSG2cv6xKhRltpgiTsCf4qG5/cSF8AbPlvJ2OouCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCltyiwaa+LdAsFV+XJLxXmtgtk0MB8GA1UdIwQY MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTb8nI3M E3Q/ryQyJImvkYLcyW4Bkjk5QCc+6I1DUsPMJ53u+3493mY/b76i2cyX2u+8Su1k OQwUXwkPUfFUMKKYrohyxh8Bx5e6fm0cdfKPGZ/sOWRVI11T5smbToBOPreZAQme HwVOib2lt1sC4jUo2e0H+xHjYUv2M3Y9vJVM05SCl2KyjeWbk3hmqXkboVhqjNml KPSOCxo1X3oYW5C/bNLyG+viJTLwVukkW8E0749VVErLeSYwj45Ye+wsJcXWrigD X4PpjkoujmE4UILdPC1J1eIPgqoeIo8dsZ/g5TR0oTZ1EUIsIJv0o+paRTUm3BX3 SZMFJcveFLKd/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:52:28 2026 by rpki-client