This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: uV35MiELzax03Mfx4lx2QTYLRf/sUCAQo1x/5xKtpwQ= Subject key identifier: 01:1C:46:0B:EB:E5:49:AF:8D:20:92:9B:34:20:42:C8:37:35:0C:34 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019BF951F5D5D07BBBC56E629024ADEA09CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 17F3 Signing time: Mon 26 Jan 2026 08:00:56 +0000 Manifest this update: Mon 26 Jan 2026 08:00:56 +0000 Manifest next update: Tue 27 Jan 2026 08:00:56 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: 82Dobllf4z1ABla7nSI34LARt1CDzFm7j14oo30seEw=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=) 12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:f5:d5:d0:7b:bb:c5:6e:62:90:24:ad:ea:09:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 26 08:00:56 2026 GMT Not After : Jan 27 08:00:56 2026 GMT Subject: CN=011c460bebe549af8d20929b342042c837350c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:8c:a4:d7:62:e6:4b:c3:bf:8e:d1:d1:ea: 5a:8e:5f:90:a4:7a:aa:69:0f:fa:00:6d:7f:b5:a1: d9:3b:d9:3c:e7:8b:47:7d:d1:95:e7:0f:de:fc:ba: 71:1e:d9:b7:ea:98:15:63:96:70:45:29:33:2a:a0: de:6f:1f:ea:68:d3:7b:ff:87:eb:eb:86:cd:b0:cb: 3c:1f:7d:a4:c7:0a:92:d1:e6:2f:e4:c7:39:86:bf: 9b:fd:69:21:c0:90:9a:a3:2b:65:32:12:6a:03:1d: 59:9e:fd:d4:b1:a4:4c:05:f5:d6:c3:db:5a:e4:b5: 30:69:66:a5:35:c7:ec:99:d8:e0:00:5b:48:3e:05: 47:dd:cf:c5:ab:93:75:cd:04:90:e0:6f:33:0b:51: 36:d7:78:71:9e:84:28:6b:60:25:95:c4:26:53:bd: d1:7c:ce:46:4a:35:f7:66:aa:3b:64:c5:30:a2:50: c1:99:34:53:ef:3c:c4:87:c3:80:d1:15:cd:88:e0: 55:d7:a9:4f:ed:d3:02:cb:27:8b:f9:57:c6:a0:9b: 6e:a8:9d:25:57:30:f4:5b:28:a4:d8:aa:63:be:bc: ad:5f:83:b5:bd:a7:e5:ba:11:b0:0c:b1:b4:37:68: eb:16:1a:18:af:c6:3b:a9:79:eb:f7:70:09:91:27: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1C:46:0B:EB:E5:49:AF:8D:20:92:9B:34:20:42:C8:37:35:0C:34 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ba:a0:e4:08:ef:03:aa:ce:0c:d9:d8:55:80:e2:28:44:34: 31:b6:32:0c:00:a3:a8:b5:50:07:c2:46:9c:8c:1f:54:df:88: 82:04:4f:7e:d9:b6:80:fb:65:10:06:35:e3:10:db:b2:77:b8: d0:3d:cf:4b:05:47:6c:eb:db:b9:32:6f:dc:1d:06:4c:a1:06: 6d:52:6b:86:55:af:ad:eb:9c:7d:ec:03:b8:12:0f:86:8c:90: fe:d1:fd:52:72:a0:e0:45:2d:ad:9d:21:c4:e5:69:f4:d0:90: a7:b4:cf:22:f6:58:70:07:52:9a:a6:0c:4b:19:80:e5:dc:86: 2f:e5:2f:51:eb:17:1f:3f:c3:ce:c8:89:d4:c9:07:93:8b:00: 9c:56:2b:c0:b3:eb:9c:2b:15:84:33:3c:b9:b3:29:cc:e1:79: 87:7d:8d:ca:84:d9:58:5a:cf:1b:0c:14:5e:9f:e6:98:c6:7a: 07:55:c6:70:1f:40:49:ff:3b:8d:18:a8:17:b4:b8:87:5e:1e: 42:73:2e:de:fb:6b:f5:5f:99:fc:09:00:9b:d0:f3:dd:b7:84: 59:78:96:46:fb:fb:9a:0f:37:fd:14:ae:6b:3f:c1:ba:08:6b: d9:72:a1:0c:02:4b:ca:7c:fc:ac:e3:db:91:12:02:20:80:7d: ef:58:86:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UfXV0Hu7xW5ikCSt6gnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTI2MDgwMDU2WhcNMjYwMTI3MDgwMDU2WjAzMTEwLwYDVQQD EygwMTFjNDYwYmViZTU0OWFmOGQyMDkyOWIzNDIwNDJjODM3MzUwYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9iMpNdi5kvDv47R0epajl+QpHqq aQ/6AG1/taHZO9k854tHfdGV5w/e/LpxHtm36pgVY5ZwRSkzKqDebx/qaNN7/4fr 64bNsMs8H32kxwqS0eYv5Mc5hr+b/WkhwJCaoytlMhJqAx1Znv3UsaRMBfXWw9ta 5LUwaWalNcfsmdjgAFtIPgVH3c/Fq5N1zQSQ4G8zC1E213hxnoQoa2AllcQmU73R fM5GSjX3Zqo7ZMUwolDBmTRT7zzEh8OA0RXNiOBV16lP7dMCyyeL+VfGoJtuqJ0l VzD0Wyik2KpjvrytX4O1vafluhGwDLG0N2jrFhoYr8Y7qXnr93AJkSdNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEcRgvr5UmvjSCSmzQgQsg3NQw0MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7qg5Ajv A6rODNnYVYDiKEQ0MbYyDACjqLVQB8JGnIwfVN+IggRPftm2gPtlEAY14xDbsne4 0D3PSwVHbOvbuTJv3B0GTKEGbVJrhlWvreucfewDuBIPhoyQ/tH9UnKg4EUtrZ0h xOVp9NCQp7TPIvZYcAdSmqYMSxmA5dyGL+UvUesXHz/DzsiJ1MkHk4sAnFYrwLPr nCsVhDM8ubMpzOF5h32NyoTZWFrPGwwUXp/mmMZ6B1XGcB9ASf87jRioF7S4h14e QnMu3vtr9V+Z/AkAm9Dz3beEWXiWRvv7mg83/RSuaz/Bughr2XKhDAJLynz8rOPb kRICIIB971iGkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:06 2026 by rpki-client