This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json) Hash identifier: /xsEgaU698G+/tjAiMuY9KM4wfVPORf2KfHWSvtiT2k= Subject key identifier: 58:79:B3:56:C9:64:E7:51:F3:A5:87:30:D1:C5:FE:F8:65:C4:17:1F Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae Certificate serial: 019BFAD23C0D763580287FE9F73381B75B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft Manifest number: 076A Signing time: Mon 26 Jan 2026 15:00:40 +0000 Manifest this update: Mon 26 Jan 2026 15:00:40 +0000 Manifest next update: Tue 27 Jan 2026 15:00:40 +0000 Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: QOwpxTwZhXp3IblXECJ9Y7YKkSJaxfduuiHSibbjFUc=) 2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:3c:0d:76:35:80:28:7f:e9:f7:33:81:b7:5b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae Validity Not Before: Jan 26 15:00:40 2026 GMT Not After : Jan 27 15:00:40 2026 GMT Subject: CN=5879b356c964e751f3a58730d1c5fef865c4171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:9c:f0:ce:83:b7:e1:91:31:ea:83:f4:7d: 78:32:11:de:a3:97:7c:60:43:11:06:cf:35:79:00: 15:ef:48:b8:7d:18:05:67:c8:7d:37:ed:28:b4:83: dc:a0:0e:2d:0b:ae:99:e8:a9:2c:9f:ea:55:3d:44: 53:0c:64:da:75:2f:d4:07:0f:97:56:7c:7b:96:5e: 6d:9d:4b:ca:b1:70:bd:bd:bb:a2:66:07:20:42:c4: 7e:f4:d0:ca:c4:fe:21:2c:64:33:8c:a4:64:48:63: 72:34:d8:66:47:7b:08:c6:ee:cc:84:b8:6b:7f:3e: 30:6d:a6:c7:af:39:23:18:97:e7:01:89:89:94:ce: 33:91:47:5f:05:cf:33:28:6e:cc:2d:4d:65:8a:f9: 8a:70:bc:56:87:d6:b2:f1:0f:31:6f:b7:16:c6:f6: a2:e1:6a:1a:26:cf:7c:8f:72:65:ab:76:61:5f:ff: a8:ba:67:0b:fa:89:65:25:00:dc:33:3c:a0:9a:3d: a5:64:d1:5d:02:b2:c4:10:49:06:b2:98:c9:38:94: a2:c2:ac:aa:9c:63:3d:b5:ac:72:42:8c:15:74:e0: 17:5f:95:6f:76:eb:74:2e:17:3c:e7:02:ca:a7:7d: 92:36:ba:e4:97:c2:a9:2c:21:71:e7:d6:29:f5:a1: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:B3:56:C9:64:E7:51:F3:A5:87:30:D1:C5:FE:F8:65:C4:17:1F X509v3 Authority Key Identifier: keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:79:69:d9:3f:f6:57:c0:3c:65:22:c5:b8:22:13:00:48:31: ae:91:1d:ce:4e:ee:35:c2:ab:ff:39:27:37:3e:c9:01:fc:a9: 74:ad:99:dd:11:67:32:79:0f:db:28:ce:b8:4d:ba:76:b9:7b: 55:d0:22:17:11:1a:c0:d0:95:9b:3b:91:22:c0:ee:15:5c:fc: 0f:e9:6c:2f:0d:b4:4b:1d:44:01:2e:98:d4:a5:1f:f9:67:75: 77:3f:b5:0f:bd:53:1c:61:92:a3:2c:b8:18:3b:51:db:22:6e: 97:87:e5:07:2b:f2:69:49:90:eb:02:f7:fe:3c:6a:df:cc:a7: 72:3e:50:fd:f7:a4:b9:39:1c:39:7e:05:ce:f7:e4:dc:44:99: 6d:ca:7c:9b:3a:e1:94:71:f8:f7:25:88:d9:7f:86:5b:81:ba: 6c:27:38:ce:3b:ac:90:43:e1:f6:2a:d8:bc:81:f6:c5:2a:0b: ee:3e:83:4d:f0:ed:2f:cb:ee:29:c5:8d:03:13:a5:a7:ce:b9: fa:8f:6d:ab:72:1c:5f:01:c4:9e:36:8a:72:a9:56:53:cd:6d: 56:8a:99:64:8a:88:79:db:7d:ca:a8:d5:e2:9f:e0:e2:bb:43: c3:33:86:89:6d:39:4b:73:fe:54:14:0c:74:12:da:ef:97:34: a0:a0:80:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60jwNdjWAKH/p9zOBt1sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm NTUyYWUwHhcNMjYwMTI2MTUwMDQwWhcNMjYwMTI3MTUwMDQwWjAzMTEwLwYDVQQD Eyg1ODc5YjM1NmM5NjRlNzUxZjNhNTg3MzBkMWM1ZmVmODY1YzQxNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndac8M6Dt+GRMeqD9H14MhHeo5d8 YEMRBs81eQAV70i4fRgFZ8h9N+0otIPcoA4tC66Z6Kksn+pVPURTDGTadS/UBw+X Vnx7ll5tnUvKsXC9vbuiZgcgQsR+9NDKxP4hLGQzjKRkSGNyNNhmR3sIxu7MhLhr fz4wbabHrzkjGJfnAYmJlM4zkUdfBc8zKG7MLU1livmKcLxWh9ay8Q8xb7cWxvai 4WoaJs98j3Jlq3ZhX/+oumcL+ollJQDcMzygmj2lZNFdArLEEEkGspjJOJSiwqyq nGM9taxyQowVdOAXX5Vvdut0Lhc85wLKp32SNrrkl8KpLCFx59Yp9aE7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh5s1bJZOdR86WHMNHF/vhlxBcfMB8GA1UdIwQY MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3lp2T/2 V8A8ZSLFuCITAEgxrpEdzk7uNcKr/zknNz7JAfypdK2Z3RFnMnkP2yjOuE26drl7 VdAiFxEawNCVmzuRIsDuFVz8D+lsLw20Sx1EAS6Y1KUf+Wd1dz+1D71THGGSoyy4 GDtR2yJul4flByvyaUmQ6wL3/jxq38yncj5Q/fekuTkcOX4Fzvfk3ESZbcp8mzrh lHH49yWI2X+GW4G6bCc4zjuskEPh9irYvIH2xSoL7j6DTfDtL8vuKcWNAxOlp865 +o9tq3IcXwHEnjaKcqlWU81tVoqZZIqIedt9yqjV4p/g4rtDwzOGiW05S3P+VBQM dBLa75c0oKCAug== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:12 2026 by rpki-client