This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json) Hash identifier: pY5K2OvORn10LcpNbrtqMeidjANt1zogOv2ToFHTs1w= Subject key identifier: 05:73:88:55:A8:82:08:23:26:C8:24:E0:D1:77:05:F1:73:E8:48:4E Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17 Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917 Certificate serial: 019BF5752D4E877D3665617E0B88B90E03FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft Manifest number: 1325 Signing time: Sun 25 Jan 2026 14:00:55 +0000 Manifest this update: Sun 25 Jan 2026 14:00:55 +0000 Manifest next update: Mon 26 Jan 2026 14:00:55 +0000 Files and hashes: 1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=) 2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: kK94aiAdwR6vgXcQh6sYzhQ5Y8rUyGu1XOE/6oEoRGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2d:4e:87:7d:36:65:61:7e:0b:88:b9:0e:03:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917 Validity Not Before: Jan 25 14:00:55 2026 GMT Not After : Jan 26 14:00:55 2026 GMT Subject: CN=05738855a882082326c824e0d17705f173e8484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:d9:ca:22:bc:fc:d6:f0:e8:6d:3d:19:b3: 1b:5d:80:2b:2b:b3:e7:ae:08:75:4f:40:07:a1:57: 9a:23:23:38:8e:e6:cf:c8:b4:d2:64:c0:18:eb:97: 2d:72:33:75:b4:a6:fd:34:b1:35:e5:4b:21:f4:90: b2:65:f9:5b:e4:0a:0e:04:0d:18:32:cc:c1:7b:fc: 47:69:b3:b5:5e:f5:c5:2b:07:f6:7c:f6:5d:07:81: 89:32:58:69:76:ac:e4:92:10:6c:06:c6:eb:13:88: 97:12:04:38:9d:a0:45:66:3d:ea:8d:2a:29:5e:a5: 9c:28:ca:7c:e2:4b:b8:05:41:ba:19:b1:54:d3:65: a2:ae:1a:41:88:d0:4c:9e:79:9f:54:74:52:91:a9: ad:3d:e7:b0:26:33:e9:4e:03:59:9c:fa:5a:92:d3: 44:2f:88:62:16:37:28:81:75:d7:16:14:db:3a:d2: 18:30:fd:ca:5c:5f:2e:6c:da:32:59:89:b9:4e:75: df:3d:35:c1:87:75:f3:8a:b0:66:bc:8f:d5:2c:dd: ab:28:f7:0c:f6:16:c1:00:07:75:50:5a:f5:e2:eb: 8f:45:a3:52:64:77:7c:22:95:c7:8f:63:0f:da:6f: d3:77:f0:27:4f:f0:4f:91:c6:e7:ce:7e:1c:58:cc: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:88:55:A8:82:08:23:26:C8:24:E0:D1:77:05:F1:73:E8:48:4E X509v3 Authority Key Identifier: keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8b:4b:07:8a:35:90:09:c7:cb:f7:06:51:8a:c3:ce:97:87: a8:60:37:fb:9e:bb:d8:18:88:c0:1f:51:49:bb:02:26:30:0e: 97:1e:ab:0a:f6:4e:3f:96:54:b2:14:9c:bd:a6:a6:83:84:7f: 76:0f:cc:7c:d7:06:a7:ad:26:32:87:28:e4:7e:79:b9:ab:9e: 22:e9:85:ed:6b:98:f7:6d:c9:20:3e:7d:33:91:7a:1a:94:61: 07:01:91:96:26:bd:dc:07:1c:12:49:4a:07:90:2e:0a:ce:e7: a5:df:30:2e:d4:17:80:2d:e9:df:6b:b5:53:b3:98:11:b0:51: 7b:cb:ea:a7:69:d9:3e:b5:de:4e:78:3c:0a:95:67:e8:00:7b: 7e:42:33:f8:ce:bf:16:5d:b3:c8:22:59:23:c3:a1:ef:7b:f9: 66:99:fa:6a:53:94:7e:34:ab:6c:11:13:48:c1:95:52:51:05: 06:cb:da:06:e7:89:64:31:0e:e2:ac:94:46:52:67:14:9c:d2: 17:44:cf:2f:89:9d:d5:4c:32:de:42:8c:26:60:fd:47:da:69: 16:b6:26:c9:23:1e:3b:ea:50:7e:dc:d9:c2:59:46:93:aa:18: ea:7b:29:4c:67:4d:6c:06:81:4c:62:e7:67:52:63:d8:a2:b0: 7e:1e:6d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dS1Oh302ZWF+C4i5DgP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZWJmYzRlNTlmN2U2NDY0NjBkOTAzMTE1NjZkZjFmNDdl ZGE5MTcwHhcNMjYwMTI1MTQwMDU1WhcNMjYwMTI2MTQwMDU1WjAzMTEwLwYDVQQD EygwNTczODg1NWE4ODIwODIzMjZjODI0ZTBkMTc3MDVmMTczZTg0ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AfZyiK8/Nbw6G09GbMbXYArK7Pn rgh1T0AHoVeaIyM4jubPyLTSZMAY65ctcjN1tKb9NLE15Ush9JCyZflb5AoOBA0Y MszBe/xHabO1XvXFKwf2fPZdB4GJMlhpdqzkkhBsBsbrE4iXEgQ4naBFZj3qjSop XqWcKMp84ku4BUG6GbFU02WirhpBiNBMnnmfVHRSkamtPeewJjPpTgNZnPpaktNE L4hiFjcogXXXFhTbOtIYMP3KXF8ubNoyWYm5TnXfPTXBh3XzirBmvI/VLN2rKPcM 9hbBAAd1UFr14uuPRaNSZHd8IpXHj2MP2m/Td/AnT/BPkcbnzn4cWMzPmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVziFWogggjJsgk4NF3BfFz6EhOMB8GA1UdIwQY MBaAFK3r/E5Z9+ZGRg2QMRVm3x9H7akXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmIt ODY2MjY2NDcwODZjLzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmItODY2MjY2NDcwODZj LzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQItLB4o1 kAnHy/cGUYrDzpeHqGA3+5672BiIwB9RSbsCJjAOlx6rCvZOP5ZUshScvaamg4R/ dg/MfNcGp60mMoco5H55uaueIumF7WuY923JID59M5F6GpRhBwGRlia93AccEklK B5AuCs7npd8wLtQXgC3p32u1U7OYEbBRe8vqp2nZPrXeTng8CpVn6AB7fkIz+M6/ Fl2zyCJZI8Oh73v5Zpn6alOUfjSrbBETSMGVUlEFBsvaBueJZDEO4qyURlJnFJzS F0TPL4md1Uwy3kKMJmD9R9ppFrYmySMeO+pQftzZwllGk6oY6nspTGdNbAaBTGLn Z1Jj2KKwfh5tFg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:13 2026 by rpki-client