This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json) Hash identifier: aiWJg545aD1Z44PI08Rx+XlkuhQRysfdPsp27bRNNiQ= Subject key identifier: 05:71:5F:A7:BC:69:DB:41:F0:31:96:34:84:54:43:AE:E9:A2:37:9B Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Certificate serial: 019BF8760713B8B53C35FB7F2EF96C2A45CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:00:43 +0000 Manifest this update: Mon 26 Jan 2026 04:00:43 +0000 Manifest next update: Tue 27 Jan 2026 04:00:43 +0000 Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=) 2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: eHMkQUd2TLp51adECTk3eS83iNSzknP5tQ1PtIdAcgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:07:13:b8:b5:3c:35:fb:7f:2e:f9:6c:2a:45:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Validity Not Before: Jan 26 04:00:43 2026 GMT Not After : Jan 27 04:00:43 2026 GMT Subject: CN=05715fa7bc69db41f0319634845443aee9a2379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:11:1b:30:b0:92:e0:3d:73:b0:26:13:02: b8:9b:c9:0c:79:09:6d:70:2c:6f:e5:d0:96:88:8b: 88:c9:48:7e:16:52:a7:43:dd:13:8c:34:a3:aa:d8: f1:93:1b:65:62:19:51:86:47:a9:9b:78:6c:42:53: 4e:ea:ea:88:ba:41:af:e1:51:c4:c9:70:ad:0e:fa: 40:55:d6:30:df:f7:38:f1:9d:aa:8f:a7:09:c7:95: 75:7e:90:78:23:11:bc:00:b4:77:96:5e:04:86:3e: de:57:f2:fd:8a:84:44:8b:81:85:a5:0e:3a:2f:d9: 58:6f:26:e9:a9:ec:89:d0:3f:bb:89:6d:9b:f7:86: f0:71:78:b4:b8:e3:1c:99:12:87:92:63:5c:d6:3e: df:6d:45:55:4f:bc:2d:4d:ef:84:d2:c9:5d:79:68: 30:52:f9:70:0a:5a:d9:ca:15:f4:6b:18:4d:ce:85: 9e:e1:27:35:bd:7f:4d:8a:43:89:d1:57:0f:95:15: 99:f0:a2:e5:1f:5f:69:98:6c:86:c0:ef:95:36:81: 81:bf:c8:ec:99:ea:ff:8c:cd:eb:19:fb:f5:bc:00: a5:f6:15:00:55:1e:13:5a:ad:1a:0e:43:ca:47:c5: a9:d5:14:3c:61:4b:a6:87:bb:27:63:c9:c2:c4:eb: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:71:5F:A7:BC:69:DB:41:F0:31:96:34:84:54:43:AE:E9:A2:37:9B X509v3 Authority Key Identifier: keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:df:ff:39:19:9b:22:aa:96:d7:e3:59:49:61:41:73:7a: 43:09:fe:c0:0a:1f:d8:dd:4c:dd:53:b8:42:bb:3f:5a:f5:04: 27:81:07:6e:1c:aa:b9:52:b9:9b:09:9a:e3:83:91:02:7c:38: 67:8f:22:fb:ad:9f:f1:e4:ad:ad:87:6e:ff:3f:09:f9:aa:82: 62:80:a8:e4:95:1f:c0:85:79:a2:6c:9f:0d:12:c5:a3:58:b3: 71:ea:f8:ba:f6:af:32:02:c8:93:02:cd:27:7b:0e:7c:18:a1: 2b:46:e8:a8:81:26:60:72:7b:b6:69:0f:a7:7f:5c:24:2e:cf: 48:97:41:c9:2f:56:61:e5:d2:bb:cd:aa:6c:84:a2:7e:b2:35: b2:47:e0:80:65:b0:de:e3:61:2f:29:ea:cc:31:ff:e9:2b:bf: 13:71:c6:96:fe:3d:46:e1:4c:10:dd:d8:96:3f:bd:a1:0e:17: 83:fa:12:95:5a:68:08:9f:ca:4a:81:67:d9:93:4b:6f:ab:cc: bb:99:41:3c:0e:76:14:2e:ff:cc:fb:d0:72:07:2b:ec:8e:c1: d7:c8:00:1e:e9:93:50:4a:61:0a:ab:c8:04:50:42:3c:c3:01: a8:cd:3f:50:0a:92:77:71:69:59:64:30:9c:8b:e8:56:5e:3e: 96:31:97:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dgcTuLU8Nft/LvlsKkXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj YjE3YWQwHhcNMjYwMTI2MDQwMDQzWhcNMjYwMTI3MDQwMDQzWjAzMTEwLwYDVQQD EygwNTcxNWZhN2JjNjlkYjQxZjAzMTk2MzQ4NDU0NDNhZWU5YTIzNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SERGzCwkuA9c7AmEwK4m8kMeQlt cCxv5dCWiIuIyUh+FlKnQ90TjDSjqtjxkxtlYhlRhkepm3hsQlNO6uqIukGv4VHE yXCtDvpAVdYw3/c48Z2qj6cJx5V1fpB4IxG8ALR3ll4Ehj7eV/L9ioREi4GFpQ46 L9lYbybpqeyJ0D+7iW2b94bwcXi0uOMcmRKHkmNc1j7fbUVVT7wtTe+E0sldeWgw UvlwClrZyhX0axhNzoWe4Sc1vX9NikOJ0VcPlRWZ8KLlH19pmGyGwO+VNoGBv8js mer/jM3rGfv1vACl9hUAVR4TWq0aDkPKR8Wp1RQ8YUumh7snY8nCxOvI7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVxX6e8adtB8DGWNIRUQ67pojebMB8GA1UdIwQY MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3 LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkrf/zkZ myKqltfjWUlhQXN6Qwn+wAof2N1M3VO4Qrs/WvUEJ4EHbhyquVK5mwma44ORAnw4 Z48i+62f8eStrYdu/z8J+aqCYoCo5JUfwIV5omyfDRLFo1izcer4uvavMgLIkwLN J3sOfBihK0boqIEmYHJ7tmkPp39cJC7PSJdByS9WYeXSu82qbISifrI1skfggGWw 3uNhLynqzDH/6Su/E3HGlv49RuFMEN3Ylj+9oQ4Xg/oSlVpoCJ/KSoFn2ZNLb6vM u5lBPA52FC7/zPvQcgcr7I7B18gAHumTUEphCqvIBFBCPMMBqM0/UAqSd3FpWWQw nIvoVl4+ljGX5g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:38 2026 by rpki-client