This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: A3FCjPSCmA1kv72NV8szsWYD5WfSKmLPmbEaK6KMkXU= Subject key identifier: 60:0C:5F:69:33:12:D1:2D:9D:6C:1B:4B:EE:62:DA:68:6B:30:D8:A3 Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BF3BDC198443E7611415682BA45EEBADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: 0D Signing time: Sun 25 Jan 2026 06:00:57 +0000 Manifest this update: Sun 25 Jan 2026 06:00:57 +0000 Manifest next update: Mon 26 Jan 2026 06:00:57 +0000 Files and hashes: 1: 1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa (hash: 18hDzxZD6W/2Cgc6fR050YsgjzIhOA4O135SZaLSjNQ=) 2: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: W3CEA7pVk65BrtJ+0Poxpz6Jz2jjrRRstkRJDyKYk7k=) 3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 6: W6axFsn-vbQYLWwnDT47_wx3Q3c.roa (hash: Rtry8Utgwi6S+gFf7iEFH1/gJHIzc/FxYDg1Nh4bbns=) 7: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 8: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 9: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 10: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 11: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 12: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:c1:98:44:3e:76:11:41:56:82:ba:45:ee:ba:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 25 06:00:57 2026 GMT Not After : Jan 26 06:00:57 2026 GMT Subject: CN=600c5f693312d12d9d6c1b4bee62da686b30d8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:09:9a:18:8a:3a:ad:72:4c:e8:b3:00:3c: 65:69:01:ff:36:32:46:3d:d8:a7:77:dc:ed:8a:ff: 7e:d6:90:35:cc:34:8d:b9:12:87:3c:df:2b:7c:c8: c8:53:2f:25:aa:1a:6a:20:43:c2:f5:99:56:b7:e5: cc:00:35:64:8f:11:f7:25:6a:52:5f:87:c9:b2:18: 5d:8c:f5:0c:ab:8e:50:ff:cc:57:91:1f:ce:45:97: 4e:c8:11:dc:cb:9d:00:88:ba:e9:c5:bf:62:b9:18: 02:b2:df:06:6a:5e:ed:a9:08:42:78:d1:4a:e3:d5: c9:a8:04:4c:ab:01:b6:29:ef:2a:e5:d6:0f:91:11: 68:2f:0a:2f:30:86:eb:c2:c3:a2:ab:79:75:90:e3: a6:63:ab:eb:61:d8:84:2d:88:08:95:47:3e:c0:90: 30:2f:dc:95:78:c5:d3:8c:03:97:c4:61:c0:d4:81: 18:bd:ca:a0:fb:6b:80:65:ef:7e:69:86:cc:fb:b0: 63:e5:9b:f0:14:89:6e:8f:25:d4:1f:da:f5:d9:c2: 48:c2:81:a9:1c:d8:f5:c5:35:dc:e6:16:99:7a:3f: 98:f4:96:44:34:fa:c3:e9:cb:4b:b6:63:f7:fb:13: 7d:db:8f:64:e9:e3:b8:5b:50:57:d7:6d:eb:ac:2b: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0C:5F:69:33:12:D1:2D:9D:6C:1B:4B:EE:62:DA:68:6B:30:D8:A3 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:27:c4:10:3c:d6:cb:a8:fe:84:cb:ca:cf:2b:68:54:65:9c: 04:a3:39:0a:bd:36:0c:a4:3e:dd:19:73:6e:f6:24:05:13:ed: 77:2c:fe:0d:de:01:4a:19:b9:e4:82:db:3e:1f:e9:cb:53:ac: 2b:f4:15:76:18:7d:35:83:7f:b6:9a:38:d7:53:a0:37:d4:6c: db:b2:b1:20:39:aa:07:b0:92:7a:c5:a4:b1:0d:a7:7d:6d:17: 6e:60:77:57:21:59:e5:0f:8a:fe:2e:79:9e:ee:c5:b9:a0:0f: 0c:0c:3f:6d:50:c3:5d:b9:a4:aa:6c:a7:7d:21:e8:0e:31:3b: 97:3f:d7:4e:61:f2:77:f8:8b:2c:61:e6:d1:68:73:c3:7f:0f: 03:0b:e6:4b:e8:df:40:5f:11:43:0d:c4:de:10:bd:90:45:ce: f4:2f:2d:7b:27:3c:3c:a5:79:e4:81:c4:66:8e:8a:00:2d:d8: 11:0c:e4:10:98:04:c0:e5:2e:b4:32:05:9a:66:df:31:b3:fd: f5:c2:39:a5:29:93:0d:e3:0d:24:f8:50:48:bc:f7:89:1a:0b: 0a:72:dd:d9:4c:e6:2a:5d:f5:74:a4:44:2a:7b:cb:e4:d5:7b: dc:cc:2e:dd:86:1e:73:6b:01:b5:46:84:d5:f9:aa:34:1e:b4: bf:9c:86:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcGYRD52EUFWgrpF7rrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTI1MDYwMDU3WhcNMjYwMTI2MDYwMDU3WjAzMTEwLwYDVQQD Eyg2MDBjNWY2OTMzMTJkMTJkOWQ2YzFiNGJlZTYyZGE2ODZiMzBkOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIYJmhiKOq1yTOizADxlaQH/NjJG Pdind9ztiv9+1pA1zDSNuRKHPN8rfMjIUy8lqhpqIEPC9ZlWt+XMADVkjxH3JWpS X4fJshhdjPUMq45Q/8xXkR/ORZdOyBHcy50AiLrpxb9iuRgCst8Gal7tqQhCeNFK 49XJqARMqwG2Ke8q5dYPkRFoLwovMIbrwsOiq3l1kOOmY6vrYdiELYgIlUc+wJAw L9yVeMXTjAOXxGHA1IEYvcqg+2uAZe9+aYbM+7Bj5ZvwFIlujyXUH9r12cJIwoGp HNj1xTXc5haZej+Y9JZENPrD6ctLtmP3+xN9249k6eO4W1BX123rrCtDnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAMX2kzEtEtnWwbS+5i2mhrMNijMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCfEEDzW y6j+hMvKzytoVGWcBKM5Cr02DKQ+3RlzbvYkBRPtdyz+Dd4BShm55ILbPh/py1Os K/QVdhh9NYN/tpo411OgN9Rs27KxIDmqB7CSesWksQ2nfW0XbmB3VyFZ5Q+K/i55 nu7FuaAPDAw/bVDDXbmkqmynfSHoDjE7lz/XTmHyd/iLLGHm0Whzw38PAwvmS+jf QF8RQw3E3hC9kEXO9C8teyc8PKV55IHEZo6KAC3YEQzkEJgEwOUutDIFmmbfMbP9 9cI5pSmTDeMNJPhQSLz3iRoLCnLd2UzmKl31dKREKnvL5NV73Mwu3YYec2sBtUaE 1fmqNB60v5yGog== -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:43 2026 by rpki-client