This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json) Hash identifier: KXMmhoh0E++AeGYVPp5V8eqyIqo+idZm/tfDUYIH1UE= Subject key identifier: CD:FE:AA:33:45:9C:B1:54:C2:4B:E8:F6:CD:F1:F5:91:B0:2E:C4:3A Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Certificate serial: 019BF6F5DA7F7D54BD0115DA7AF653A3C97A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 21:01:05 +0000 Manifest this update: Sun 25 Jan 2026 21:01:05 +0000 Manifest next update: Mon 26 Jan 2026 21:01:05 +0000 Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: bLzm4Bb/ojORfdrpSC1NIgiiRF+xes8Q+j4fLNcoBn0=) 2: Il1ID2RxyZYdXeAA-tDaWu2vVsc.roa (hash: 6+mijpfkNMy87275e7tZmlawfvYntrqLE1F17eyeHFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:da:7f:7d:54:bd:01:15:da:7a:f6:53:a3:c9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Validity Not Before: Jan 25 21:01:05 2026 GMT Not After : Jan 26 21:01:05 2026 GMT Subject: CN=cdfeaa33459cb154c24be8f6cdf1f591b02ec43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:70:57:a9:66:85:bf:27:55:fd:5b:b9:bf: 32:3f:22:04:9d:62:c1:93:54:eb:5c:56:5e:ba:9b: 91:2e:e1:80:57:c9:6a:d0:9d:2f:72:eb:5d:c6:8c: 0f:01:8a:c3:7c:00:99:f8:34:08:6f:91:0d:83:cb: 23:87:e6:bc:5c:06:ff:ca:36:bc:e4:fd:58:fb:f8: bc:6c:cc:75:d5:cf:83:e7:51:9b:c5:7c:4c:51:4b: 9f:09:d0:0a:c2:6a:50:1e:6b:e3:0c:ae:8d:05:06: 59:15:f1:4d:f9:0a:cf:18:bb:7e:fe:d9:59:7a:ec: 9b:b6:31:a1:1a:ae:aa:44:d5:02:e3:c3:d0:9e:6d: 20:49:21:02:c1:1f:2c:f5:48:7d:17:b4:c8:16:60: 81:15:89:5b:13:40:64:a5:40:1c:fd:b3:1a:4c:a8: c2:99:90:1c:9a:cb:11:6a:77:29:6e:09:01:2f:82: 85:ad:fb:34:5f:58:71:ed:45:0d:75:c8:af:2b:80: 9c:be:53:5e:78:60:9f:e5:57:e1:81:cc:de:c1:6a: 70:9b:a9:d5:26:3c:99:c7:63:13:e0:75:2a:66:7f: 81:4d:cc:7f:56:01:95:a3:7e:9b:2e:1c:b3:f1:06: 4d:96:59:3b:bb:38:36:24:84:68:4b:f3:62:c2:f2: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FE:AA:33:45:9C:B1:54:C2:4B:E8:F6:CD:F1:F5:91:B0:2E:C4:3A X509v3 Authority Key Identifier: keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:eb:23:ff:ae:4b:ab:23:a6:6d:28:79:88:18:54:53:5a:78: 1e:4e:a1:56:33:db:2f:02:6c:71:55:f6:3d:d1:55:75:50:b6: 30:3e:8d:10:6e:02:1b:99:91:68:b8:3b:d5:48:79:1b:8d:a3: c2:f5:b4:1f:85:89:f9:54:ca:0d:7b:84:05:68:1f:33:3a:b5: f4:06:f0:0a:5d:cb:95:cc:fb:6e:af:b8:b7:2d:c5:78:a4:81: 38:94:09:67:8b:a9:76:10:97:9c:94:89:80:c1:8e:47:4e:23: 5e:dc:a1:8d:47:6c:30:89:6b:e9:c8:23:2a:73:5f:f0:ed:22: 27:03:26:90:3c:fa:9b:7d:02:31:e0:c3:ac:78:db:19:50:d7: a6:8e:99:15:93:51:63:d0:41:e2:42:3a:af:a3:b8:44:c2:3e: e3:14:a5:3f:c3:8c:d6:00:d1:33:0f:82:f5:1f:28:c6:d4:e3: e0:85:63:7b:97:81:38:1c:b6:5e:43:2f:ec:58:2c:41:89:87: fb:42:57:ce:7b:29:49:53:fc:a1:a4:c4:8e:ce:44:79:ab:b2: 8e:83:cf:fb:d2:c2:76:c9:e0:fd:f7:24:72:de:99:aa:ef:d5: fe:7a:63:79:f6:0d:d5:6c:5d:2d:58:42:a4:8b:c5:5b:0b:3e: f7:2d:bd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29dp/fVS9ARXaevZTo8l6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5 NmRmYWYwHhcNMjYwMTI1MjEwMTA1WhcNMjYwMTI2MjEwMTA1WjAzMTEwLwYDVQQD EyhjZGZlYWEzMzQ1OWNiMTU0YzI0YmU4ZjZjZGYxZjU5MWIwMmVjNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0hwV6lmhb8nVf1bub8yPyIEnWLB k1TrXFZeupuRLuGAV8lq0J0vcutdxowPAYrDfACZ+DQIb5ENg8sjh+a8XAb/yja8 5P1Y+/i8bMx11c+D51GbxXxMUUufCdAKwmpQHmvjDK6NBQZZFfFN+QrPGLt+/tlZ euybtjGhGq6qRNUC48PQnm0gSSECwR8s9Uh9F7TIFmCBFYlbE0BkpUAc/bMaTKjC mZAcmssRancpbgkBL4KFrfs0X1hx7UUNdcivK4CcvlNeeGCf5VfhgczewWpwm6nV JjyZx2MT4HUqZn+BTcx/VgGVo36bLhyz8QZNllk7uzg2JIRoS/NiwvLLdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3+qjNFnLFUwkvo9s3x9ZGwLsQ6MB8GA1UdIwQY MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+sj/65L qyOmbSh5iBhUU1p4Hk6hVjPbLwJscVX2PdFVdVC2MD6NEG4CG5mRaLg71Uh5G42j wvW0H4WJ+VTKDXuEBWgfMzq19AbwCl3Llcz7bq+4ty3FeKSBOJQJZ4updhCXnJSJ gMGOR04jXtyhjUdsMIlr6cgjKnNf8O0iJwMmkDz6m30CMeDDrHjbGVDXpo6ZFZNR Y9BB4kI6r6O4RMI+4xSlP8OM1gDRMw+C9R8oxtTj4IVje5eBOBy2XkMv7FgsQYmH +0JXznspSVP8oaTEjs5EeauyjoPP+9LCdsng/fckct6Zqu/V/npjefYN1WxdLVhC pIvFWws+9y29vQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:52 2026 by rpki-client