This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json) Hash identifier: fY9celPdmR3K2qCtKsmvuWXI2V+zuA550pRGmDKA8VY= Subject key identifier: CE:C6:86:09:29:CA:98:ED:46:1E:4C:0F:E3:43:A0:D1:42:02:9F:75 Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Certificate serial: 019BF53EB9F927C1F7D120A38CFF527ED8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft Manifest number: 0EC8 Signing time: Sun 25 Jan 2026 13:01:27 +0000 Manifest this update: Sun 25 Jan 2026 13:01:27 +0000 Manifest next update: Mon 26 Jan 2026 13:01:27 +0000 Files and hashes: 1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=) 2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: cWL1/5BZXedtlRIpEqHnZulKO66DE5YaDymVbxOwIKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:b9:f9:27:c1:f7:d1:20:a3:8c:ff:52:7e:d8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Validity Not Before: Jan 25 13:01:27 2026 GMT Not After : Jan 26 13:01:27 2026 GMT Subject: CN=cec6860929ca98ed461e4c0fe343a0d142029f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:e0:08:7e:14:70:cc:0d:6f:d7:1a:1d:9e: 44:99:b9:90:9b:4d:96:fd:db:c4:9f:2e:86:f2:02: 82:dd:ba:7a:87:67:61:53:58:91:d3:a4:a6:46:f4: 67:2a:03:d8:51:cd:a4:f2:3b:e2:d5:b9:81:04:a4: d8:ef:14:44:57:49:73:c2:3c:67:41:f8:37:ab:21: 0c:d7:fd:26:76:b5:e5:6c:8f:10:c6:e5:79:e4:f8: 73:ca:f5:fa:2d:60:44:0b:cb:70:33:40:72:d6:02: f1:0c:77:bd:5b:c3:bd:73:fd:30:94:6e:50:72:fc: 58:19:b0:1f:70:78:e6:cf:c9:a0:87:13:0b:f3:31: 1d:90:7c:29:15:52:d3:e4:d6:63:2a:b3:87:db:e0: ad:54:36:9c:70:bd:a0:f2:a2:d8:42:fb:a9:e1:0d: 3a:52:7c:6d:22:1d:07:b6:e1:03:6c:37:ee:3e:f7: ad:ea:4e:fd:56:15:7a:8c:44:09:b3:1c:92:ec:d8: ce:f7:64:5b:bf:f1:82:31:1d:09:3f:e3:e7:9b:ce: f2:71:0c:46:35:29:94:ca:2e:1b:0d:a6:f4:e8:f0: 29:a9:90:13:ff:61:4b:9e:8d:a6:9c:e7:cd:b9:98: 74:1c:9e:a7:ed:95:62:5b:e2:d4:e9:8b:c8:a3:3d: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C6:86:09:29:CA:98:ED:46:1E:4C:0F:E3:43:A0:D1:42:02:9F:75 X509v3 Authority Key Identifier: keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:95:c9:99:77:84:11:2d:ea:32:eb:aa:48:2a:b0:40:5a: 3b:9a:fe:62:0c:88:3c:93:4b:7e:bb:3c:62:c0:4a:51:61:8f: a7:5d:d7:d3:2c:d4:f0:15:f5:19:23:93:6d:e0:1a:e5:40:cd: 3d:a0:9f:5b:32:ac:c0:9e:70:12:82:38:6f:c9:bf:9d:c7:19: 48:56:e9:8b:3d:c1:ec:5f:03:86:6e:8b:7f:b9:46:62:58:3a: a8:4b:d0:27:c0:30:be:80:97:44:2e:49:5e:26:5c:ad:b3:29: 4c:d4:ff:dc:5c:04:37:87:68:9e:a3:f0:55:d2:fc:ac:b9:e8: ed:8d:c5:8e:6b:9f:28:d1:18:64:73:bd:71:ac:8b:85:89:04: 63:b6:db:a4:ff:70:f1:58:6f:e4:c6:ff:4e:ab:0e:b9:59:e3: 2a:d6:a6:34:ef:51:bb:a5:43:e9:8f:3d:57:f0:0c:7a:74:28: 01:cf:36:fe:0b:76:ce:9e:a3:ec:ed:80:19:a9:34:31:b9:86: 1e:72:14:02:3f:2a:0f:ac:27:d1:da:e3:74:a7:35:f0:17:d7: c9:a8:e8:e3:96:e4:b3:9c:55:05:4c:d9:45:be:62:44:48:61: 07:b4:e2:92:62:39:3b:09:6e:3f:d1:9e:bd:84:44:44:0d:6b: 51:52:16:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Prn5J8H30SCjjP9SftjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw ODYyZDkwHhcNMjYwMTI1MTMwMTI3WhcNMjYwMTI2MTMwMTI3WjAzMTEwLwYDVQQD EyhjZWM2ODYwOTI5Y2E5OGVkNDYxZTRjMGZlMzQzYTBkMTQyMDI5Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DzgCH4UcMwNb9caHZ5EmbmQm02W /dvEny6G8gKC3bp6h2dhU1iR06SmRvRnKgPYUc2k8jvi1bmBBKTY7xREV0lzwjxn Qfg3qyEM1/0mdrXlbI8QxuV55PhzyvX6LWBEC8twM0By1gLxDHe9W8O9c/0wlG5Q cvxYGbAfcHjmz8mghxML8zEdkHwpFVLT5NZjKrOH2+CtVDaccL2g8qLYQvup4Q06 UnxtIh0HtuEDbDfuPvet6k79VhV6jEQJsxyS7NjO92Rbv/GCMR0JP+Pnm87ycQxG NSmUyi4bDab06PApqZAT/2FLno2mnOfNuZh0HJ6n7ZViW+LU6YvIoz1aFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7GhgkpypjtRh5MD+NDoNFCAp91MB8GA1UdIwQY MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt YmEwZDNiMmQzNmUwLzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoGVyZl3 hBEt6jLrqkgqsEBaO5r+YgyIPJNLfrs8YsBKUWGPp13X0yzU8BX1GSOTbeAa5UDN PaCfWzKswJ5wEoI4b8m/nccZSFbpiz3B7F8Dhm6Lf7lGYlg6qEvQJ8AwvoCXRC5J XiZcrbMpTNT/3FwEN4donqPwVdL8rLno7Y3FjmufKNEYZHO9cayLhYkEY7bbpP9w 8Vhv5Mb/TqsOuVnjKtamNO9Ru6VD6Y89V/AMenQoAc82/gt2zp6j7O2AGak0MbmG HnIUAj8qD6wn0drjdKc18BfXyajo45bks5xVBUzZRb5iREhhB7TikmI5OwluP9Ge vYRERA1rUVIWow== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:50 2026 by rpki-client