This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json) Hash identifier: EJm04aimcOpaO1BJIiJXoVssnpMhSCW3oBUrmY7H58c= Subject key identifier: 7E:CA:7E:F2:62:D1:73:5E:17:F5:CB:C4:CD:BE:95:B2:14:7E:AA:4D Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Certificate serial: 019BF7D1AAD46E578CA6056345E65E72A79E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 01:01:11 +0000 Manifest this update: Mon 26 Jan 2026 01:01:11 +0000 Manifest next update: Tue 27 Jan 2026 01:01:11 +0000 Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: UXmFo6nOpeTBdUvVpyKcrM6RG0uinrevvVI2x/rDK4E=) 2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:aa:d4:6e:57:8c:a6:05:63:45:e6:5e:72:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Validity Not Before: Jan 26 01:01:11 2026 GMT Not After : Jan 27 01:01:11 2026 GMT Subject: CN=7eca7ef262d1735e17f5cbc4cdbe95b2147eaa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:9c:e6:ad:b7:13:80:7a:5e:f2:84:9a:35: 8c:5f:30:9d:83:8f:31:7e:b4:a2:c0:a5:34:09:d8: e7:65:d4:8d:74:6f:64:d2:56:9c:fb:ab:a1:60:8c: fa:77:c6:57:b4:92:93:38:8c:41:e6:2d:a1:ff:16: a3:80:d2:9f:d9:ea:69:3e:46:27:e7:7d:fd:46:b6: 16:18:00:f3:22:12:4d:38:90:63:23:e8:6c:92:53: a9:72:46:97:a8:01:86:eb:ef:43:b1:31:9f:9b:36: 5f:0e:4a:47:a6:a1:9a:ff:c1:3d:56:b3:cc:fd:a1: e0:0b:05:96:a0:bb:06:4e:a6:0c:34:c9:c0:81:f3: 00:b6:9d:93:cb:5c:49:69:8d:d6:e5:18:41:24:7f: 01:ef:fb:b5:e8:ca:82:49:c5:f2:13:5b:6b:90:f1: a3:58:f7:c0:0b:ee:08:2f:a9:0e:d2:1b:8f:94:fb: 97:67:02:b8:48:52:81:49:69:c5:4b:c8:5d:72:3e: 7c:71:2b:b6:ce:23:86:13:6f:98:86:ec:ef:bf:6a: 05:26:d3:91:26:28:ea:35:98:2f:c2:d5:f2:98:a5: a5:3d:5a:79:07:dc:f3:e2:63:bc:c7:67:7c:67:a2: 96:ec:e5:34:c5:a8:47:f4:c9:c3:8a:73:3c:55:b2: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:7E:F2:62:D1:73:5E:17:F5:CB:C4:CD:BE:95:B2:14:7E:AA:4D X509v3 Authority Key Identifier: keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:21:9d:70:dc:55:9e:a3:5e:95:95:ec:80:5f:42:67:0a:52: 83:f8:12:27:13:93:1d:53:aa:9b:03:21:3f:9c:8b:75:f2:8d: 48:b8:9c:84:9e:d8:6a:4d:97:79:40:be:ac:29:3b:46:25:8e: 48:e6:6f:b3:51:23:e2:5d:98:a6:5b:ba:6f:63:22:01:90:4f: 95:d4:8c:99:95:ae:1a:38:c6:66:5f:bc:61:3a:b9:ff:9d:ba: 39:22:35:8d:23:98:a0:30:ec:cf:a2:ce:f4:12:f1:75:30:9a: fb:c1:90:86:3e:74:24:8c:10:a6:c2:e8:18:dd:eb:d2:1b:68: d5:26:d0:14:5b:7a:b7:68:66:ab:7e:55:44:0e:14:d2:a9:18: a1:95:af:15:78:90:58:22:50:a0:fc:37:d9:df:c8:a8:cd:f7: 1d:6e:2b:30:4d:b1:76:11:0f:fa:26:a6:c5:df:b3:a3:0c:b7: 0f:31:0f:5e:a0:77:d2:67:b6:7a:34:df:f2:b5:ea:08:b9:c7: 69:11:4e:f9:84:7e:42:97:3c:12:36:52:88:2d:6e:26:3e:2a: a8:54:e3:9c:dd:6f:38:de:ae:7a:85:4a:28:d6:6e:06:e0:23: 6c:de:61:18:9f:69:43:20:58:ba:17:79:86:9a:e6:7e:11:b3: 78:5f:b7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30arUbleMpgVjReZecqeeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk NTM2MDYwHhcNMjYwMTI2MDEwMTExWhcNMjYwMTI3MDEwMTExWjAzMTEwLwYDVQQD Eyg3ZWNhN2VmMjYyZDE3MzVlMTdmNWNiYzRjZGJlOTViMjE0N2VhYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKc5q23E4B6XvKEmjWMXzCdg48x frSiwKU0CdjnZdSNdG9k0lac+6uhYIz6d8ZXtJKTOIxB5i2h/xajgNKf2eppPkYn 5339RrYWGADzIhJNOJBjI+hsklOpckaXqAGG6+9DsTGfmzZfDkpHpqGa/8E9VrPM /aHgCwWWoLsGTqYMNMnAgfMAtp2Ty1xJaY3W5RhBJH8B7/u16MqCScXyE1trkPGj WPfAC+4IL6kO0huPlPuXZwK4SFKBSWnFS8hdcj58cSu2ziOGE2+Yhuzvv2oFJtOR JijqNZgvwtXymKWlPVp5B9zz4mO8x2d8Z6KW7OU0xahH9MnDinM8VbKeyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7KfvJi0XNeF/XLxM2+lbIUfqpNMB8GA1UdIwQY MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCGdcNxV nqNelZXsgF9CZwpSg/gSJxOTHVOqmwMhP5yLdfKNSLichJ7Yak2XeUC+rCk7RiWO SOZvs1Ej4l2Yplu6b2MiAZBPldSMmZWuGjjGZl+8YTq5/526OSI1jSOYoDDsz6LO 9BLxdTCa+8GQhj50JIwQpsLoGN3r0hto1SbQFFt6t2hmq35VRA4U0qkYoZWvFXiQ WCJQoPw32d/IqM33HW4rME2xdhEP+iamxd+zowy3DzEPXqB30me2ejTf8rXqCLnH aRFO+YR+Qpc8EjZSiC1uJj4qqFTjnN1vON6ueoVKKNZuBuAjbN5hGJ9pQyBYuhd5 hprmfhGzeF+3mA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:45 2026 by rpki-client