This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json) Hash identifier: EE0ARdlu6v0OTg3WD/RORFJ7voQfkBdFDMnDiikq3yc= Subject key identifier: 72:0C:56:0D:34:7A:3C:56:11:AE:9A:65:17:18:82:0A:C0:BB:8A:2C Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Certificate serial: 019BF8085CEA1007C59579E3BAF5355C27E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 02:00:55 +0000 Manifest this update: Mon 26 Jan 2026 02:00:55 +0000 Manifest next update: Tue 27 Jan 2026 02:00:55 +0000 Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=) 2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: vZ6+6A2oOUoo1NeFMh9b08TpqsNbqMoUCVbRkMY+gME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:5c:ea:10:07:c5:95:79:e3:ba:f5:35:5c:27:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Validity Not Before: Jan 26 02:00:55 2026 GMT Not After : Jan 27 02:00:55 2026 GMT Subject: CN=720c560d347a3c5611ae9a651718820ac0bb8a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ec:44:8e:58:c9:e9:ba:cf:5e:e5:bb:41:1c: 53:51:0e:22:ac:a0:15:24:e3:fc:4d:61:75:b6:0e: 4f:65:4e:2a:44:e3:42:59:86:12:9a:b9:2c:85:12: 8b:49:50:c3:44:d0:4a:d1:f3:df:28:2b:a7:5e:fa: 2d:cf:26:21:0c:6a:a1:69:4f:c5:18:c1:5d:85:a4: 4a:17:d8:e6:f8:f1:ab:cf:2b:51:86:50:41:01:b3: b7:64:d8:9a:23:9a:ca:4c:9a:a4:d2:02:c1:28:06: a1:4a:4c:67:53:3a:f7:2c:7d:05:f6:0e:3c:69:1f: 09:ce:e5:ee:15:17:bd:d1:08:d2:47:15:9b:79:35: d3:59:6f:21:9d:50:ce:33:ba:2a:83:dd:33:c1:9f: 93:a9:a3:fa:0e:86:eb:45:7b:4e:6e:31:6e:77:15: 95:fc:36:01:85:ba:0f:67:2b:cb:4b:bd:ab:d7:2e: eb:5d:38:16:ef:3c:be:8e:46:df:5b:c9:77:dc:e8: 0e:27:d2:03:c3:86:eb:aa:44:b1:32:3b:63:70:f2: 97:21:3b:99:92:30:ee:04:8b:bf:38:36:d8:6b:3a: 66:4a:81:e6:79:75:9c:cf:0e:85:fa:15:38:59:65: 6f:7f:6e:54:f4:53:0c:d7:06:5d:39:65:e9:70:71: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:56:0D:34:7A:3C:56:11:AE:9A:65:17:18:82:0A:C0:BB:8A:2C X509v3 Authority Key Identifier: keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c6:3c:09:86:e6:4b:c2:7b:6a:53:26:15:be:91:a8:96:df: 65:65:e8:22:6f:14:b8:a0:9f:8d:b3:a4:f9:5a:bf:58:eb:7c: 61:53:d9:ac:a0:70:13:17:ae:29:c7:9c:c2:72:97:53:3c:dc: 34:78:9a:d9:6b:ab:82:01:a7:b4:b8:c6:69:31:7b:e4:c5:a4: 52:3b:25:66:28:dc:82:bf:33:6e:fd:3c:d8:0e:15:63:10:ad: ac:c0:f5:d3:a5:c5:e3:28:65:b0:6a:48:93:53:bf:e4:e9:00: 86:f4:62:13:fa:65:e8:11:87:e1:01:f8:83:85:01:3b:68:75: fe:ab:93:e6:8c:a4:5c:a4:f1:60:a5:45:05:3f:a4:aa:7a:15: d1:da:46:0c:a0:3e:b4:6a:32:50:19:8c:b1:91:66:d1:ba:d6: 67:59:23:36:40:60:13:df:84:dc:3c:cb:41:d5:68:cb:7e:ad: 34:0b:fd:03:30:09:57:96:24:76:7f:ce:22:7b:a1:34:06:ee: a4:dd:21:48:44:73:86:76:8d:ce:84:a4:b3:99:7a:d8:cc:37: 50:c1:ec:06:de:ee:29:14:82:86:24:01:d6:34:b0:d2:66:3a: cf:74:6d:f9:70:c2:40:06:fa:3e:9d:6b:ac:42:4d:cf:6a:40: 02:d1:51:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CFzqEAfFlXnjuvU1XCfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh YWI2OWEwHhcNMjYwMTI2MDIwMDU1WhcNMjYwMTI3MDIwMDU1WjAzMTEwLwYDVQQD Eyg3MjBjNTYwZDM0N2EzYzU2MTFhZTlhNjUxNzE4ODIwYWMwYmI4YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOxEjljJ6brPXuW7QRxTUQ4irKAV JOP8TWF1tg5PZU4qRONCWYYSmrkshRKLSVDDRNBK0fPfKCunXvotzyYhDGqhaU/F GMFdhaRKF9jm+PGrzytRhlBBAbO3ZNiaI5rKTJqk0gLBKAahSkxnUzr3LH0F9g48 aR8JzuXuFRe90QjSRxWbeTXTWW8hnVDOM7oqg90zwZ+TqaP6DobrRXtObjFudxWV /DYBhboPZyvLS72r1y7rXTgW7zy+jkbfW8l33OgOJ9IDw4brqkSxMjtjcPKXITuZ kjDuBIu/ODbYazpmSoHmeXWczw6F+hU4WWVvf25U9FMM1wZdOWXpcHGLBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIMVg00ejxWEa6aZRcYggrAu4osMB8GA1UdIwQY MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsY8CYbm S8J7alMmFb6RqJbfZWXoIm8UuKCfjbOk+Vq/WOt8YVPZrKBwExeuKcecwnKXUzzc NHia2WurggGntLjGaTF75MWkUjslZijcgr8zbv082A4VYxCtrMD106XF4yhlsGpI k1O/5OkAhvRiE/pl6BGH4QH4g4UBO2h1/quT5oykXKTxYKVFBT+kqnoV0dpGDKA+ tGoyUBmMsZFm0brWZ1kjNkBgE9+E3DzLQdVoy36tNAv9AzAJV5Ykdn/OInuhNAbu pN0hSERzhnaNzoSks5l62Mw3UMHsBt7uKRSChiQB1jSw0mY6z3Rt+XDCQAb6Pp1r rEJNz2pAAtFRlA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:00 2026 by rpki-client