This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json) Hash identifier: PBsvmUg/ja2gZQmdSzOKy0fxWhF20ZIrJ8kshyX0c30= Subject key identifier: 68:CD:B3:E6:6D:51:F1:55:BB:99:88:06:28:B9:5C:B6:90:D6:D9:39 Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2 Certificate serial: 019BF91B53DB8E3FB7634C96003F87AD7F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 07:01:16 +0000 Manifest this update: Mon 26 Jan 2026 07:01:16 +0000 Manifest next update: Tue 27 Jan 2026 07:01:16 +0000 Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: jGCnaEFzJEfTGcgMyb0jUHQTlK0xSoDKuv7alVj/ZRk=) 2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:53:db:8e:3f:b7:63:4c:96:00:3f:87:ad:7f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2 Validity Not Before: Jan 26 07:01:16 2026 GMT Not After : Jan 27 07:01:16 2026 GMT Subject: CN=68cdb3e66d51f155bb99880628b95cb690d6d939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:30:ed:8d:fb:ab:43:62:60:ae:88:9d:af: cc:e6:75:e1:17:8c:52:1e:ff:6c:b8:55:f2:a1:b6: d9:c2:aa:c4:f2:fa:a9:5e:7d:df:76:ea:bc:d3:0a: 45:6e:77:f4:b3:d2:98:52:d6:67:88:f4:b1:1f:8f: 74:1f:fd:54:f3:18:df:27:e6:a4:01:55:fd:33:02: 71:7a:77:26:5d:dd:83:a8:98:05:f8:8d:ee:99:cd: 2e:e3:ed:55:26:ba:5e:e3:e7:71:03:71:18:d4:9a: 29:90:30:3c:21:59:a1:c1:d3:98:86:c2:83:eb:96: 85:f2:3a:02:98:1d:3f:15:a7:fe:fd:73:c2:34:c2: 0e:fd:51:94:9a:22:9f:06:47:b4:b0:0b:21:f2:db: b6:4a:6d:4d:60:85:e7:00:5c:68:00:ba:c9:21:22: 9c:77:c9:09:9e:f6:ae:b5:1f:82:48:91:c4:4f:85: 4d:31:f8:7b:cb:a5:e7:cf:02:46:02:90:f4:d5:4a: 49:e1:26:df:b1:2b:aa:d6:b4:4b:5a:9b:0d:e6:cd: 86:70:07:e7:d6:f1:18:72:60:3a:7c:b7:3a:5b:95: f7:d8:d4:53:e7:ff:8f:db:ea:08:93:79:96:57:92: ad:fa:6f:aa:a1:04:7b:3a:4f:f1:1c:9a:ad:c2:a7: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:B3:E6:6D:51:F1:55:BB:99:88:06:28:B9:5C:B6:90:D6:D9:39 X509v3 Authority Key Identifier: keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:db:ad:bc:e2:43:32:b1:47:a2:65:e4:2e:04:e8:66:72:91: dd:07:ad:67:1b:86:09:3d:cc:12:10:4d:08:26:ca:e6:eb:8d: 5e:9c:f6:ec:d4:01:d6:af:e2:28:a7:fc:d6:70:b8:dc:2d:eb: c5:d5:30:fb:77:30:79:87:fe:a9:1f:83:70:2b:13:61:00:1d: 07:a3:cb:f6:99:ba:ca:ca:4c:05:08:b9:33:ee:bd:88:f4:ab: 35:e0:cd:b6:b3:2a:0d:ff:7e:ae:10:bf:04:0f:33:53:0f:2d: 0d:85:d5:69:b3:a8:30:d8:73:e9:b5:fb:00:7d:a5:7d:bc:ac: d7:c8:5e:e0:ce:7e:c8:1d:cb:cc:08:27:d0:e8:62:4a:56:35: e9:53:88:65:21:06:9f:11:df:e0:93:85:60:15:05:60:75:91: 5d:6c:bd:31:e8:0a:e2:9e:21:e2:f6:16:e2:cd:67:02:f3:f5: 38:64:5d:52:e8:76:a6:2d:b3:36:ce:d4:d2:38:cb:3f:4a:0d: e2:d8:44:19:71:35:dd:31:8a:0e:79:7d:a1:25:82:3b:17:0f: 79:b4:bc:97:78:91:92:ad:bc:0a:45:8c:78:4e:e0:a2:56:7f: a8:50:5d:72:76:54:d3:2a:6f:bc:76:a2:60:db:b4:20:26:65: 4e:93:3d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G1Pbjj+3Y0yWAD+HrX8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODYyN2UzNmE0ZTE2YmRjMzlmMGI1NTBkNzRmZDcxZTQ0 MmQyYzIwHhcNMjYwMTI2MDcwMTE2WhcNMjYwMTI3MDcwMTE2WjAzMTEwLwYDVQQD Eyg2OGNkYjNlNjZkNTFmMTU1YmI5OTg4MDYyOGI5NWNiNjkwZDZkOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgEw7Y37q0NiYK6Ina/M5nXhF4xS Hv9suFXyobbZwqrE8vqpXn3fduq80wpFbnf0s9KYUtZniPSxH490H/1U8xjfJ+ak AVX9MwJxencmXd2DqJgF+I3umc0u4+1VJrpe4+dxA3EY1JopkDA8IVmhwdOYhsKD 65aF8joCmB0/Faf+/XPCNMIO/VGUmiKfBke0sAsh8tu2Sm1NYIXnAFxoALrJISKc d8kJnvautR+CSJHET4VNMfh7y6XnzwJGApD01UpJ4SbfsSuq1rRLWpsN5s2GcAfn 1vEYcmA6fLc6W5X32NRT5/+P2+oIk3mWV5Kt+m+qoQR7Ok/xHJqtwqegswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjNs+ZtUfFVu5mIBii5XLaQ1tk5MB8GA1UdIwQY MBaAFPOGJ+NqTha9w58LVQ10/XHkQtLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQt ODQyNDM3ZDI3Mjc5LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQtODQyNDM3ZDI3Mjc5 LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdutvOJD MrFHomXkLgToZnKR3QetZxuGCT3MEhBNCCbK5uuNXpz27NQB1q/iKKf81nC43C3r xdUw+3cweYf+qR+DcCsTYQAdB6PL9pm6yspMBQi5M+69iPSrNeDNtrMqDf9+rhC/ BA8zUw8tDYXVabOoMNhz6bX7AH2lfbys18he4M5+yB3LzAgn0OhiSlY16VOIZSEG nxHf4JOFYBUFYHWRXWy9MegK4p4h4vYW4s1nAvP1OGRdUuh2pi2zNs7U0jjLP0oN 4thEGXE13TGKDnl9oSWCOxcPebS8l3iRkq28CkWMeE7golZ/qFBdcnZU0ypvvHai YNu0ICZlTpM9mA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:18 2026 by rpki-client