This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json) Hash identifier: NlEP16slfjcHGuu2NvLs58qMhR8r+w28mtQfxso3C98= Subject key identifier: 8F:82:E1:78:39:62:EB:F7:39:81:38:CB:AC:FF:E8:9D:CC:02:FF:ED Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Certificate serial: 019BF57518E88784EA751EC1AB12B71BF07F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft Manifest number: 0882 Signing time: Sun 25 Jan 2026 14:00:50 +0000 Manifest this update: Sun 25 Jan 2026 14:00:50 +0000 Manifest next update: Mon 26 Jan 2026 14:00:50 +0000 Files and hashes: 1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=) 2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: KA4Coz/RXsb42dJsTPN/zJjb6ImM7JL23WfA1pVZNsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:18:e8:87:84:ea:75:1e:c1:ab:12:b7:1b:f0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Validity Not Before: Jan 25 14:00:50 2026 GMT Not After : Jan 26 14:00:50 2026 GMT Subject: CN=8f82e1783962ebf7398138cbacffe89dcc02ffed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:d5:51:ad:42:47:fb:04:21:47:fc:3e:62: 60:d0:c1:ff:a3:fc:9c:d6:72:ad:8b:ed:a8:9c:f1: 3b:16:2f:c1:53:07:e6:42:0c:f3:a2:97:e7:33:cb: 3b:d4:14:5b:7c:cb:54:a7:92:a9:d5:9f:f5:27:b8: 07:64:47:2d:70:f0:db:5e:a5:a5:b9:04:66:a0:57: df:03:6b:d7:ee:91:35:f8:d5:af:5f:95:7c:d7:20: d8:c3:c0:55:b3:54:3d:6e:c4:33:14:89:54:04:aa: 52:fe:33:06:fe:f0:08:ab:d1:5e:13:ba:f7:e0:d6: 44:b7:1b:6b:b2:71:0c:a2:2c:61:46:6a:71:c3:f1: e8:ca:dc:69:16:75:46:9a:45:12:76:59:6d:e9:89: 31:99:50:4c:ea:e8:82:f3:ed:f2:74:4e:2d:78:b0: fe:9e:61:b7:16:73:f1:b3:50:14:5e:8a:a6:e8:27: 85:34:1c:f7:dd:a0:65:3e:44:73:38:5f:b0:0d:fd: be:b0:3b:9b:70:39:84:c4:84:f0:a2:d1:f0:55:50: 3d:80:fb:a6:4a:44:43:4f:c5:a0:d5:76:31:1d:8c: 63:b3:c1:ad:7e:55:5b:86:7f:50:6a:12:a3:33:92: 5f:ae:05:dd:d0:3f:8c:3e:77:24:9e:fb:3b:4d:9d: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:82:E1:78:39:62:EB:F7:39:81:38:CB:AC:FF:E8:9D:CC:02:FF:ED X509v3 Authority Key Identifier: keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7b:3d:8b:23:b2:ff:06:f9:01:0c:19:de:12:af:57:5b:28: 92:c3:35:e0:66:d8:97:48:6b:2e:ee:0a:ca:f3:18:e3:be:e5: e8:54:1c:d6:bd:02:12:7e:89:cf:35:13:e9:3e:0d:ac:54:04: c0:c2:b1:27:2d:e0:f0:ef:da:f8:9e:b2:a1:8f:d2:af:fe:08: 82:b5:fe:8f:c9:40:53:19:16:88:7d:48:4c:fd:3a:b0:b5:6e: b5:53:14:7e:62:2a:8f:00:0d:41:8e:32:da:c0:c2:2b:e2:ec: da:da:27:63:96:9c:c4:59:5f:99:cc:4f:2f:a0:ed:8f:5d:31: f4:18:4c:48:bd:50:c1:bf:58:fa:c6:3c:56:9e:bc:cc:b2:51: 93:46:60:84:31:dc:53:c0:12:b7:c8:b5:a6:00:a4:48:10:54: 54:37:ff:c1:77:fb:6b:cf:27:53:33:66:15:9b:b9:1f:78:0a: 3d:0f:e7:22:d5:06:2b:56:30:83:22:5e:af:30:3d:ae:75:a9: 3e:81:29:c6:97:63:bc:e8:69:e8:22:b5:5c:ff:b6:6e:49:75: 53:ae:43:29:94:43:76:75:76:b3:1f:7a:c5:56:cb:f8:b4:db: 94:55:98:12:69:6a:6b:5e:74:8d:60:0d:3b:49:d3:9a:f9:18: f0:09:55:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRjoh4TqdR7BqxK3G/B/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0 NTY2YzkwHhcNMjYwMTI1MTQwMDUwWhcNMjYwMTI2MTQwMDUwWjAzMTEwLwYDVQQD Eyg4ZjgyZTE3ODM5NjJlYmY3Mzk4MTM4Y2JhY2ZmZTg5ZGNjMDJmZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNTVUa1CR/sEIUf8PmJg0MH/o/yc 1nKti+2onPE7Fi/BUwfmQgzzopfnM8s71BRbfMtUp5Kp1Z/1J7gHZEctcPDbXqWl uQRmoFffA2vX7pE1+NWvX5V81yDYw8BVs1Q9bsQzFIlUBKpS/jMG/vAIq9FeE7r3 4NZEtxtrsnEMoixhRmpxw/HoytxpFnVGmkUSdllt6YkxmVBM6uiC8+3ydE4teLD+ nmG3FnPxs1AUXoqm6CeFNBz33aBlPkRzOF+wDf2+sDubcDmExITwotHwVVA9gPum SkRDT8Wg1XYxHYxjs8GtflVbhn9QahKjM5JfrgXd0D+MPncknvs7TZ1TpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+C4Xg5Yuv3OYE4y6z/6J3MAv/tMB8GA1UdIwQY MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt NDU3NDA2MmFlY2I1LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1 LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHs9iyOy /wb5AQwZ3hKvV1soksM14GbYl0hrLu4KyvMY477l6FQc1r0CEn6JzzUT6T4NrFQE wMKxJy3g8O/a+J6yoY/Sr/4IgrX+j8lAUxkWiH1ITP06sLVutVMUfmIqjwANQY4y 2sDCK+Ls2tonY5acxFlfmcxPL6Dtj10x9BhMSL1Qwb9Y+sY8Vp68zLJRk0ZghDHc U8ASt8i1pgCkSBBUVDf/wXf7a88nUzNmFZu5H3gKPQ/nItUGK1YwgyJerzA9rnWp PoEpxpdjvOhp6CK1XP+2bkl1U65DKZRDdnV2sx96xVbL+LTblFWYEmlqa150jWAN O0nTmvkY8AlVtA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:05 2026 by rpki-client