This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: 9xa7QoeYiDkPVi8P0n6tJOCVFFykL/BdlNWZMDI1ZVU= Subject key identifier: F8:4B:76:65:51:6E:5E:65:AF:CF:5D:7D:E9:C9:95:5F:57:AB:FB:0A Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019BF5E3F68DE03A141892CA1052B27D9532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0F6C Signing time: Sun 25 Jan 2026 16:01:56 +0000 Manifest this update: Sun 25 Jan 2026 16:01:56 +0000 Manifest next update: Mon 26 Jan 2026 16:01:56 +0000 Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=) 2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: LsqIkcAAGBYqY6Ts6BesDpRoAOzM+WINkBiwatbtL54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f6:8d:e0:3a:14:18:92:ca:10:52:b2:7d:95:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Jan 25 16:01:56 2026 GMT Not After : Jan 26 16:01:56 2026 GMT Subject: CN=f84b7665516e5e65afcf5d7de9c9955f57abfb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:f9:7f:6c:46:96:c8:9f:03:8c:8b:46:ba: 6b:66:49:94:16:2d:2e:8a:6c:78:10:f6:af:0e:36: b6:56:28:0c:c3:2d:ab:a0:ad:13:79:68:7f:fb:27: 74:a6:05:cb:0d:ad:d2:d9:d7:18:3f:59:e4:9a:e1: 3c:42:16:27:69:24:19:0e:54:53:83:4f:17:d6:bf: 23:3b:e3:aa:ac:18:5c:46:34:12:7a:c6:62:e2:10: 15:7b:a5:df:da:e8:25:2a:f9:e4:44:c8:63:fc:c9: 2b:ca:d1:3e:e1:d7:bf:a2:6b:f1:4b:a7:3f:68:d4: 24:e8:09:ed:f7:aa:01:a5:f5:4b:cd:bb:a9:46:8c: e2:40:ad:74:83:51:b1:00:59:97:ad:99:6f:af:b9: f6:c8:1a:c6:f4:12:b5:8d:92:a4:e1:45:9a:4d:11: de:2b:8c:e1:b9:94:b8:e3:0d:03:f2:8b:f2:ae:45: 00:31:75:fa:b9:de:99:12:76:52:b3:c9:a0:46:c0: d9:00:a5:bd:66:0d:e2:d0:98:1b:b5:ce:35:76:1f: 8b:c7:f5:14:54:5f:1e:79:ab:5e:0b:cb:b8:a9:9d: 83:b0:43:dc:c3:bb:aa:df:79:24:7e:00:18:d9:33: 19:47:ee:c9:93:bb:5d:b4:41:c5:ab:20:a7:06:6a: 5a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:76:65:51:6E:5E:65:AF:CF:5D:7D:E9:C9:95:5F:57:AB:FB:0A X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cf:76:2e:c2:eb:a9:1c:f1:08:57:c7:88:14:3b:a5:4a:03: 26:44:f8:62:7e:2e:45:4d:84:ce:a3:f3:e4:17:34:f0:94:fd: e0:f9:40:1f:c8:35:0f:c8:68:bb:e4:42:12:1b:40:ba:16:92: 3f:4c:2c:77:da:0e:b6:ee:a4:06:81:6f:f7:23:d9:60:d1:06: 50:0f:f1:a4:a0:ce:c3:21:82:df:06:3f:77:6d:25:19:ec:d8: ad:0d:76:66:de:1d:58:1a:86:3e:81:c4:fc:fd:3c:6a:9a:13: ce:27:e8:76:8e:6c:64:d1:11:1d:c2:51:2a:64:f8:07:1f:b1: 25:2e:3b:9e:46:ac:2d:62:ba:a7:5c:f1:6b:28:e4:09:8a:ae: 8b:f3:0c:e3:3f:8f:5b:91:73:6b:f0:fc:3e:a3:2f:fa:92:2c: 70:c7:c3:12:79:1b:28:ae:2f:9c:a1:99:e1:65:15:c1:05:6c: 3e:5f:cd:d1:7a:95:9e:64:48:b9:c9:2c:38:0c:18:f2:5e:a7: 90:ea:8d:34:2b:14:a3:28:b3:69:6b:3d:2f:65:fe:b5:78:5c: b3:07:e1:2b:d0:60:54:63:c7:a3:7f:ae:44:bc:33:70:21:66: bc:68:06:1a:21:a2:e1:41:be:b4:1a:7c:0b:d5:5c:aa:95:65: ce:20:27:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/aN4DoUGJLKEFKyfZUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjYwMTI1MTYwMTU2WhcNMjYwMTI2MTYwMTU2WjAzMTEwLwYDVQQD EyhmODRiNzY2NTUxNmU1ZTY1YWZjZjVkN2RlOWM5OTU1ZjU3YWJmYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLX5f2xGlsifA4yLRrprZkmUFi0u imx4EPavDja2VigMwy2roK0TeWh/+yd0pgXLDa3S2dcYP1nkmuE8QhYnaSQZDlRT g08X1r8jO+OqrBhcRjQSesZi4hAVe6Xf2uglKvnkRMhj/MkrytE+4de/omvxS6c/ aNQk6Ant96oBpfVLzbupRoziQK10g1GxAFmXrZlvr7n2yBrG9BK1jZKk4UWaTRHe K4zhuZS44w0D8ovyrkUAMXX6ud6ZEnZSs8mgRsDZAKW9Zg3i0Jgbtc41dh+Lx/UU VF8eeateC8u4qZ2DsEPcw7uq33kkfgAY2TMZR+7Jk7tdtEHFqyCnBmpa9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhLdmVRbl5lr89dfenJlV9Xq/sKMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM92LsLr qRzxCFfHiBQ7pUoDJkT4Yn4uRU2EzqPz5Bc08JT94PlAH8g1D8hou+RCEhtAuhaS P0wsd9oOtu6kBoFv9yPZYNEGUA/xpKDOwyGC3wY/d20lGezYrQ12Zt4dWBqGPoHE /P08apoTzifodo5sZNERHcJRKmT4Bx+xJS47nkasLWK6p1zxayjkCYqui/MM4z+P W5Fza/D8PqMv+pIscMfDEnkbKK4vnKGZ4WUVwQVsPl/N0XqVnmRIucksOAwY8l6n kOqNNCsUoyizaWs9L2X+tXhcswfhK9BgVGPHo3+uRLwzcCFmvGgGGiGi4UG+tBp8 C9VcqpVlziAncQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:18 2026 by rpki-client