This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json) Hash identifier: zJes4H4wJLnxy2b3CHAjIUO0OcrnyltvmndQuooEntY= Subject key identifier: D3:D8:F1:8C:ED:85:66:71:DA:C5:86:31:7D:A3:3E:0C:F0:72:50:55 Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Certificate serial: 019BF4D0CF74BF8C954706E3DCFD64761180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft Manifest number: 0C27 Signing time: Sun 25 Jan 2026 11:01:23 +0000 Manifest this update: Sun 25 Jan 2026 11:01:23 +0000 Manifest next update: Mon 26 Jan 2026 11:01:23 +0000 Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: Aj6azqxt4dIBqNlHF2jnUI2q1PWKFX5qFkoq2XQQCV8=) 2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:cf:74:bf:8c:95:47:06:e3:dc:fd:64:76:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206 Validity Not Before: Jan 25 11:01:23 2026 GMT Not After : Jan 26 11:01:23 2026 GMT Subject: CN=d3d8f18ced856671dac586317da33e0cf0725055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:70:20:f2:08:a9:8b:3c:69:a3:fd:53:0e: de:9d:8d:cf:bb:88:5e:84:f8:fa:b0:be:9a:f9:68: 88:e7:af:f6:1f:3d:f4:07:9e:d5:26:dd:ad:50:ab: ad:ac:f5:64:51:a2:23:8c:cc:43:0d:d6:09:fd:66: 4a:f6:f6:d7:67:c4:00:6c:c9:d7:b8:b5:70:65:ac: d7:b9:0a:7c:17:f2:3b:1c:c5:84:05:be:54:cd:3c: 93:0f:2f:cf:18:fe:a8:d5:15:e9:0b:4a:eb:24:6c: 96:01:2d:ea:86:f4:58:c9:7a:58:74:71:39:6f:be: 9d:ce:1c:37:71:c7:00:fc:57:5b:a8:2f:83:69:17: cc:7f:93:04:ac:8a:71:56:62:7c:6b:5d:dc:eb:ab: 03:95:d7:4f:5e:e5:82:03:a5:1a:25:b7:47:77:a2: e7:2f:94:48:55:88:34:b3:e5:7c:27:45:53:65:32: 9b:ab:08:71:fc:45:b7:ad:94:30:7c:f0:72:99:e7: a9:bd:c9:c8:bd:27:7c:ef:4a:f1:9a:e2:57:c9:3c: 77:9d:25:9a:85:45:39:76:43:19:88:20:16:89:3f: ff:85:aa:2b:9b:96:d7:50:c4:47:64:69:3c:b2:8e: ac:ed:87:4e:24:03:32:9a:9f:ab:d2:98:c1:5d:c7: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:F1:8C:ED:85:66:71:DA:C5:86:31:7D:A3:3E:0C:F0:72:50:55 X509v3 Authority Key Identifier: keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d9:c8:a4:05:33:9e:d2:a5:69:6c:0a:a3:65:4c:e1:44:08: be:fc:73:b5:e9:f8:db:ed:87:fa:02:46:4e:ba:ad:a7:03:cd: f0:b6:53:73:e2:cc:54:33:08:0a:2b:f0:9b:76:73:b9:f8:d6: b2:50:d3:3a:b0:db:a0:ea:e3:d7:fb:15:20:5d:bb:af:c9:54: 7a:8e:64:67:fb:72:ad:35:44:08:16:3a:01:f7:18:7e:39:52: 73:45:ca:cf:12:dc:7b:e9:d4:8c:bb:9c:f1:2c:9d:7a:63:e3: 9d:b1:31:bd:01:e8:cd:5e:f8:5e:0c:19:3c:72:51:e8:b0:90: 2d:84:a7:e3:0c:8c:a7:2e:0a:8c:0a:6f:3e:b9:85:ce:91:f1: cd:53:fa:a1:2c:6e:10:61:b7:cb:bc:cb:56:ce:0b:42:bb:26: 0a:39:dc:ed:13:da:f9:37:46:f1:b3:55:2f:af:40:41:e7:32: c2:26:9b:a7:ee:bb:e2:58:fb:f5:b9:27:5e:e2:58:16:1b:19: 65:6f:f2:84:3a:e0:ad:24:12:2e:d2:e0:a0:17:ea:c4:4a:59: 09:d9:e3:f2:1e:7c:6f:21:71:df:5c:be:ce:65:5b:77:37:1f: 69:a8:51:df:ce:3e:f9:0a:81:74:e1:cf:e3:29:36:72:66:c5: 02:82:39:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00M90v4yVRwbj3P1kdhGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk MzAyMDYwHhcNMjYwMTI1MTEwMTIzWhcNMjYwMTI2MTEwMTIzWjAzMTEwLwYDVQQD EyhkM2Q4ZjE4Y2VkODU2NjcxZGFjNTg2MzE3ZGEzM2UwY2YwNzI1MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgxwIPIIqYs8aaP9Uw7enY3Pu4he hPj6sL6a+WiI56/2Hz30B57VJt2tUKutrPVkUaIjjMxDDdYJ/WZK9vbXZ8QAbMnX uLVwZazXuQp8F/I7HMWEBb5UzTyTDy/PGP6o1RXpC0rrJGyWAS3qhvRYyXpYdHE5 b76dzhw3cccA/FdbqC+DaRfMf5MErIpxVmJ8a13c66sDlddPXuWCA6UaJbdHd6Ln L5RIVYg0s+V8J0VTZTKbqwhx/EW3rZQwfPBymeepvcnIvSd870rxmuJXyTx3nSWa hUU5dkMZiCAWiT//haorm5bXUMRHZGk8so6s7YdOJAMymp+r0pjBXcdB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPY8YzthWZx2sWGMX2jPgzwclBVMB8GA1UdIwQY MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5 LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtnIpAUz ntKlaWwKo2VM4UQIvvxzten42+2H+gJGTrqtpwPN8LZTc+LMVDMICivwm3ZzufjW slDTOrDboOrj1/sVIF27r8lUeo5kZ/tyrTVECBY6AfcYfjlSc0XKzxLce+nUjLuc 8SydemPjnbExvQHozV74XgwZPHJR6LCQLYSn4wyMpy4KjApvPrmFzpHxzVP6oSxu EGG3y7zLVs4LQrsmCjnc7RPa+TdG8bNVL69AQecywiabp+674lj79bknXuJYFhsZ ZW/yhDrgrSQSLtLgoBfqxEpZCdnj8h58byFx31y+zmVbdzcfaahR384++QqBdOHP 4yk2cmbFAoI5EA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:54 2026 by rpki-client