This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json) Hash identifier: iglB2byc5Jm3+y7zWuTsaqhJ1lj5t+qVit/0IVzRElk= Subject key identifier: D9:2E:55:95:27:44:9D:1B:76:49:C5:29:0F:9F:56:74:43:BB:74:36 Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019BF687872E926EAD07ABA1A532B8A84ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft Manifest number: 04CA Signing time: Sun 25 Jan 2026 19:00:35 +0000 Manifest this update: Sun 25 Jan 2026 19:00:35 +0000 Manifest next update: Mon 26 Jan 2026 19:00:35 +0000 Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: l48CCASeS8U7aI52q6QLyMuX8wwTeZGebuK1O5JmkK4=) 2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=) 3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=) 4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:87:2e:92:6e:ad:07:ab:a1:a5:32:b8:a8:4a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Jan 25 19:00:35 2026 GMT Not After : Jan 26 19:00:35 2026 GMT Subject: CN=d92e559527449d1b7649c5290f9f567443bb7436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:73:3a:b4:a5:14:64:d9:d7:53:60:9b:4f:cc: da:0d:23:05:82:01:0c:67:26:d7:6c:e3:89:83:70: fb:73:6d:1c:a9:39:5e:6b:9d:f2:6b:16:9c:d9:6f: b7:8e:22:9e:eb:e5:49:c7:10:14:39:8d:76:d5:34: 04:a2:bc:74:9d:68:b2:2f:bd:9e:04:dd:64:2c:55: 3b:71:d2:8e:7e:71:22:ed:b8:c6:0e:49:cd:e8:6f: 8a:f0:ce:c2:64:81:82:07:3f:d8:20:42:18:30:35: 5f:d9:ed:c2:e7:05:dd:18:6e:64:01:6d:32:a9:6e: 98:28:03:a9:c2:b0:bc:44:90:80:05:b4:e6:a5:98: 3c:95:ce:c2:44:d8:67:d0:1d:89:ca:ac:c8:4d:61: e0:0f:5f:0d:df:e9:ea:7d:dd:83:3a:7c:49:06:bd: de:29:fb:09:3a:d4:21:8a:fd:3d:e1:8e:a5:ea:94: e5:15:0a:00:11:7e:ba:90:ef:79:5a:c4:c2:1e:3f: 2b:f4:aa:c5:c3:7d:c7:b7:a1:c3:9b:b8:3d:9a:86: e1:38:3b:71:5a:75:48:d1:fd:d8:7d:85:37:6b:49: a5:45:a5:04:99:e0:2a:dd:48:ce:c5:70:b6:ae:3b: 86:b7:15:7d:f5:2a:a1:7c:4b:0e:aa:52:8a:7d:e8: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:55:95:27:44:9D:1B:76:49:C5:29:0F:9F:56:74:43:BB:74:36 X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7d:c9:c3:a6:2c:8d:03:52:e6:cf:2d:09:59:58:d5:3b:b3: 83:bd:b7:68:39:9d:53:33:f2:04:eb:4e:44:64:4d:da:a0:a7: 23:59:58:1a:42:9b:8a:bc:70:84:f1:ac:88:e9:62:75:5b:7c: 25:c8:14:6e:8a:84:cc:ed:42:88:2b:81:6e:9d:6c:44:63:92: f4:b4:44:54:c6:2f:34:60:46:40:cc:e4:f3:d8:af:d1:4b:1c: 24:08:a2:92:b1:30:52:91:3b:79:69:34:b7:d2:f4:c2:77:91: 30:3c:be:cb:f1:9d:90:ff:1b:f6:cd:f3:6f:37:15:b9:6b:94: 5a:95:10:05:9c:0b:d4:8c:e7:e3:ba:ef:e8:7c:c9:28:c4:2f: ca:9e:ce:0c:2d:48:bd:63:67:59:e7:b3:74:69:c0:25:2e:7e: 2f:88:2a:eb:54:69:95:4e:f5:73:4c:c4:be:fc:e5:c4:59:3d: 5b:92:61:72:96:be:49:ff:43:02:d1:0a:c8:66:ff:b1:55:bd: 4e:6b:bb:3e:ca:53:16:d9:65:2b:35:1a:15:83:5b:ad:58:8a: 4a:26:ee:4c:b7:13:33:8a:75:9b:09:3c:23:f1:6d:09:31:ea: 38:92:b8:89:37:44:dc:f8:83:bc:3f:7c:8f:79:bd:a8:9e:43: 88:70:1a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4cukm6tB6uhpTK4qErLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjYwMTI1MTkwMDM1WhcNMjYwMTI2MTkwMDM1WjAzMTEwLwYDVQQD EyhkOTJlNTU5NTI3NDQ5ZDFiNzY0OWM1MjkwZjlmNTY3NDQzYmI3NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nM6tKUUZNnXU2CbT8zaDSMFggEM ZybXbOOJg3D7c20cqTlea53yaxac2W+3jiKe6+VJxxAUOY121TQEorx0nWiyL72e BN1kLFU7cdKOfnEi7bjGDknN6G+K8M7CZIGCBz/YIEIYMDVf2e3C5wXdGG5kAW0y qW6YKAOpwrC8RJCABbTmpZg8lc7CRNhn0B2JyqzITWHgD18N3+nqfd2DOnxJBr3e KfsJOtQhiv094Y6l6pTlFQoAEX66kO95WsTCHj8r9KrFw33Ht6HDm7g9mobhODtx WnVI0f3YfYU3a0mlRaUEmeAq3UjOxXC2rjuGtxV99SqhfEsOqlKKfeiKMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkuVZUnRJ0bdknFKQ+fVnRDu3Q2MB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX3Jw6Ys jQNS5s8tCVlY1Tuzg723aDmdUzPyBOtORGRN2qCnI1lYGkKbirxwhPGsiOlidVt8 JcgUboqEzO1CiCuBbp1sRGOS9LREVMYvNGBGQMzk89iv0UscJAiikrEwUpE7eWk0 t9L0wneRMDy+y/GdkP8b9s3zbzcVuWuUWpUQBZwL1Izn47rv6HzJKMQvyp7ODC1I vWNnWeezdGnAJS5+L4gq61RplU71c0zEvvzlxFk9W5Jhcpa+Sf9DAtEKyGb/sVW9 Tmu7PspTFtllKzUaFYNbrViKSibuTLcTM4p1mwk8I/FtCTHqOJK4iTdE3PiDvD98 j3m9qJ5DiHAaxA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:11 2026 by rpki-client