This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft File: v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json) Hash identifier: 4jlc+zx6ee+AtQvVa2vx3Eq67tRlwkplWfCyf6FZ0Ss= Subject key identifier: F7:13:99:BB:EE:E8:69:4E:29:E3:E3:31:19:E1:DE:BD:F7:DD:A5:03 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019BF5E2FCC0219BA35A489B359A7ED946AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft Manifest number: 17F5 Signing time: Sun 25 Jan 2026 16:00:52 +0000 Manifest this update: Sun 25 Jan 2026 16:00:52 +0000 Manifest next update: Mon 26 Jan 2026 16:00:52 +0000 Files and hashes: 1: Flz_OFQsmX-w-Rd12UyQRHMKatw.roa (hash: JA3smf8ytCG+n6SIrvOZ9o06IVKgViJsuYy9wwAuvgw=) 2: Iso7UtudzqybI9P-u3N4xN3OFFA.roa (hash: 0IZeZas6NGaEqB4YndDnq080rW0AwifZGEDKnTQjRRg=) 3: R-fseu38BXZxWnP0LRUzT06RrV0.roa (hash: WBYn5t2LzQwRk5CEk7ZRIj5Al789B5wx6blN8odTtJA=) 4: Ul_Wf7zGibMnBoONOBmC-CbebuE.roa (hash: rHROysQB1FOGTFZPpOKof8CKn+9ezFraJbOm+zE4tGw=) 5: iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa (hash: OfSTMvRyldawaL7wcMvycL+8+eQXeUtcB3572S96OXc=) 6: k1dO5v20V18ZdNp1zmkc6LIciGg.roa (hash: 438dqyns6emIjrk0QOOi1yUCaMjxkliDFNzKcc/PdRA=) 7: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: dRhDLK7XoJo6Hd4BVzaRpZXDllw9P5681hrjG5LwCVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:fc:c0:21:9b:a3:5a:48:9b:35:9a:7e:d9:46:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 25 16:00:52 2026 GMT Not After : Jan 26 16:00:52 2026 GMT Subject: CN=f71399bbeee8694e29e3e33119e1debdf7dda503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:92:60:2f:f2:75:2d:dd:ec:e6:4b:43:1b: 30:4b:86:b8:87:78:34:f6:a9:c4:fc:86:cc:8a:49: 7c:3d:c9:a3:8f:54:33:66:f9:b4:ef:88:ea:b2:01: 9a:6e:dd:61:91:54:3e:d6:59:d7:3c:f7:46:8f:0c: 84:0b:1e:aa:0a:c2:a9:29:1b:6a:ed:b0:e6:0c:05: f9:31:30:2b:6b:80:3f:2b:67:f7:cd:93:d6:f6:87: 10:8e:ca:31:69:02:e5:ae:5b:2a:98:eb:36:60:eb: 53:ba:ed:df:78:2a:bf:0a:cb:2e:91:d1:ea:6b:82: db:10:ac:46:29:84:2c:72:22:83:7f:71:bc:79:c8: 3d:16:a3:a6:2c:36:2d:da:b2:30:55:0e:4e:81:be: 04:a6:58:e3:fa:e7:3a:5e:89:ae:84:43:6f:af:13: 81:df:28:9a:27:2b:f5:c0:dd:ad:ab:29:7f:24:f9: 9f:4c:a5:7b:29:c1:1e:8c:dd:64:14:08:ef:1c:b2: 8d:57:21:d8:d5:9d:af:a7:05:b8:8b:cb:9f:bf:f3: 6d:2c:d1:a0:20:c4:35:91:de:00:15:7d:24:9b:64: 60:c6:35:04:a7:f9:1c:85:1d:33:c9:e7:b9:db:e4: e3:cc:8b:2f:16:9d:74:ed:4e:83:19:8f:9e:e0:2a: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:99:BB:EE:E8:69:4E:29:E3:E3:31:19:E1:DE:BD:F7:DD:A5:03 X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:13:4a:d3:84:ae:50:30:b0:6f:77:57:61:ce:88:2f:1a:55: d3:1d:bd:6c:60:69:f5:44:40:23:04:d2:8f:08:1d:c8:e3:ed: 85:b8:dd:43:fd:d6:fa:5e:85:bc:0e:ab:a2:a0:37:ce:bf:97: 0e:70:b7:4b:d9:8c:82:9f:d5:bd:e3:4d:88:73:3a:e6:1b:35: ea:c9:80:fa:d5:0e:2d:54:a6:2c:ba:e2:cb:fd:40:10:41:b4: 50:c7:11:cd:bc:1d:c0:03:cd:ac:0d:7c:e0:17:4e:b5:2b:c9: d3:4d:54:43:78:d7:92:88:d0:ed:f6:f1:19:21:04:54:d9:85: 42:82:19:a2:39:81:94:52:9b:71:9f:5d:d1:fa:e0:d9:04:09: 3b:a3:66:2e:72:5b:26:eb:73:80:03:4f:37:41:93:b7:42:9f: f8:2f:0e:f0:c1:30:08:97:9f:b5:c5:2f:f9:f9:6b:80:f1:55: c1:f8:6f:8d:90:59:46:43:ef:e9:f4:dd:b2:33:01:64:5b:d7: c7:23:6e:45:43:dc:f9:b8:99:48:91:af:e7:70:1a:be:22:8b: 7b:2e:99:e6:66:83:dc:dd:d3:fd:49:19:66:bb:76:8b:d7:47: a8:8d:50:e8:2d:2d:33:77:a3:b8:b4:27:6e:ee:d7:37:5b:16: f2:8b:f6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14vzAIZujWkibNZp+2UarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTI1MTYwMDUyWhcNMjYwMTI2MTYwMDUyWjAzMTEwLwYDVQQD EyhmNzEzOTliYmVlZTg2OTRlMjllM2UzMzExOWUxZGViZGY3ZGRhNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXCSYC/ydS3d7OZLQxswS4a4h3g0 9qnE/IbMikl8Pcmjj1QzZvm074jqsgGabt1hkVQ+1lnXPPdGjwyECx6qCsKpKRtq 7bDmDAX5MTAra4A/K2f3zZPW9ocQjsoxaQLlrlsqmOs2YOtTuu3feCq/CssukdHq a4LbEKxGKYQsciKDf3G8ecg9FqOmLDYt2rIwVQ5Ogb4Epljj+uc6XomuhENvrxOB 3yiaJyv1wN2tqyl/JPmfTKV7KcEejN1kFAjvHLKNVyHY1Z2vpwW4i8ufv/NtLNGg IMQ1kd4AFX0km2RgxjUEp/kchR0zyee52+TjzIsvFp107U6DGY+e4CplLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcTmbvu6GlOKePjMRnh3r333aUDMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBNK04Su UDCwb3dXYc6ILxpV0x29bGBp9URAIwTSjwgdyOPthbjdQ/3W+l6FvA6roqA3zr+X DnC3S9mMgp/VveNNiHM65hs16smA+tUOLVSmLLriy/1AEEG0UMcRzbwdwAPNrA18 4BdOtSvJ001UQ3jXkojQ7fbxGSEEVNmFQoIZojmBlFKbcZ9d0frg2QQJO6NmLnJb JutzgANPN0GTt0Kf+C8O8MEwCJeftcUv+flrgPFVwfhvjZBZRkPv6fTdsjMBZFvX xyNuRUPc+biZSJGv53AaviKLey6Z5maD3N3T/UkZZrt2i9dHqI1Q6C0tM3ejuLQn bu7XN1sW8ov2gw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:40 2026 by rpki-client