This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: w9aehIOul8u1sHuK6MIn4grMyrcKRYXneSbjTwgC0jw= Subject key identifier: 65:D1:42:7B:A6:8F:54:B2:E4:B6:ED:3A:89:0D:A8:83:29:9A:92:BC Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019BF5076DC4B7C3C0596C29F63FA9B7F1A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 13EA Signing time: Sun 25 Jan 2026 12:01:03 +0000 Manifest this update: Sun 25 Jan 2026 12:01:03 +0000 Manifest next update: Mon 26 Jan 2026 12:01:03 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: FAQlfRFro9hIt9MYv+CQ+ICK32Z0BVJBwE/7nWBBvvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:6d:c4:b7:c3:c0:59:6c:29:f6:3f:a9:b7:f1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 25 12:01:03 2026 GMT Not After : Jan 26 12:01:03 2026 GMT Subject: CN=65d1427ba68f54b2e4b6ed3a890da883299a92bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:27:c2:b2:1d:ff:17:2b:47:d5:3a:32:71: bf:b2:92:c4:41:c6:14:be:b7:14:79:64:47:bc:53: a6:74:cf:bb:ac:ff:02:08:05:6e:94:91:ff:3d:16: 9d:cc:0d:e2:c2:02:58:0f:f8:af:cc:50:1e:90:21: d4:e4:a8:08:9c:da:67:dd:40:bd:76:d2:a9:ea:15: 7a:50:05:a6:1e:16:57:df:3f:0f:37:6a:9a:88:26: 87:ac:50:78:ec:a7:5e:09:c6:74:b2:9f:74:7d:ab: c6:59:45:06:5d:80:b4:8e:97:c7:9d:95:3b:35:e1: 8b:86:3d:44:c6:63:a6:b5:55:ea:7f:34:62:03:b5: 24:9a:b2:c1:a4:34:c0:51:74:eb:06:cc:6b:3b:97: 5b:e5:f1:79:45:00:27:33:06:6e:20:3b:da:b6:65: 2a:18:ec:7a:be:e4:99:1e:fb:f2:b1:b7:30:2f:ad: 6b:db:47:e3:b1:01:24:40:03:06:df:db:bd:20:c2: 27:82:b1:55:bc:8c:71:df:2b:a1:57:e1:59:6c:45: 8e:59:e4:29:2e:af:5d:c6:54:c7:0d:45:83:aa:b5: ce:3e:0c:ca:77:8d:e5:63:c5:3d:c8:99:e1:67:13: ab:66:e4:58:7a:2e:45:ea:0c:68:d3:4c:a4:95:12: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:42:7B:A6:8F:54:B2:E4:B6:ED:3A:89:0D:A8:83:29:9A:92:BC X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:03:ec:74:8f:66:91:72:12:b0:95:01:de:62:46:d2:a3:e2: 4f:5f:ef:30:00:fc:63:60:f8:8e:1b:5a:58:78:f5:02:33:26: 4d:ce:41:3a:05:b9:e4:cf:d2:a5:62:db:5c:0b:c2:0d:9e:b4: 67:aa:d0:98:63:07:8d:f2:1f:01:55:f6:b2:49:be:3b:d8:f7: 37:ff:88:89:16:f4:91:b2:66:0e:c4:60:bb:03:08:32:a4:af: 2c:d7:2b:88:be:6f:6d:f9:44:c4:00:12:4e:20:d0:51:22:83: b3:dd:0f:be:10:f4:e0:4b:d6:48:80:93:62:b0:9b:70:78:f4: e3:82:b1:67:53:72:09:57:8c:07:3b:ee:82:cd:ce:3d:a2:f6: c3:2e:41:b0:aa:0a:a7:52:bf:40:16:a2:71:c2:65:14:0e:e2: d1:31:26:75:7f:8c:b3:a4:b5:d6:1d:f6:df:29:be:21:f5:a1: 31:8a:cb:6f:d9:6a:21:af:93:80:a7:fc:89:2c:97:cc:66:7c: ab:46:61:0c:04:dd:62:39:fe:3a:9b:50:87:61:5f:24:6f:b4: 2c:dd:d3:85:5b:a8:2f:bc:50:27:d5:e5:15:ed:e6:7d:8c:1b: 24:85:c0:ea:9b:d2:98:05:e1:19:c1:37:18:36:b3:fe:80:ab: 66:fe:f4:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B23Et8PAWWwp9j+pt/GiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTI1MTIwMTAzWhcNMjYwMTI2MTIwMTAzWjAzMTEwLwYDVQQD Eyg2NWQxNDI3YmE2OGY1NGIyZTRiNmVkM2E4OTBkYTg4MzI5OWE5MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPonwrId/xcrR9U6MnG/spLEQcYU vrcUeWRHvFOmdM+7rP8CCAVulJH/PRadzA3iwgJYD/ivzFAekCHU5KgInNpn3UC9 dtKp6hV6UAWmHhZX3z8PN2qaiCaHrFB47KdeCcZ0sp90favGWUUGXYC0jpfHnZU7 NeGLhj1ExmOmtVXqfzRiA7UkmrLBpDTAUXTrBsxrO5db5fF5RQAnMwZuIDvatmUq GOx6vuSZHvvysbcwL61r20fjsQEkQAMG39u9IMIngrFVvIxx3yuhV+FZbEWOWeQp Lq9dxlTHDUWDqrXOPgzKd43lY8U9yJnhZxOrZuRYei5F6gxo00yklRI6kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXRQnumj1Sy5LbtOokNqIMpmpK8MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAPsdI9m kXISsJUB3mJG0qPiT1/vMAD8Y2D4jhtaWHj1AjMmTc5BOgW55M/SpWLbXAvCDZ60 Z6rQmGMHjfIfAVX2skm+O9j3N/+IiRb0kbJmDsRguwMIMqSvLNcriL5vbflExAAS TiDQUSKDs90PvhD04EvWSICTYrCbcHj044KxZ1NyCVeMBzvugs3OPaL2wy5BsKoK p1K/QBaiccJlFA7i0TEmdX+Ms6S11h323ym+IfWhMYrLb9lqIa+TgKf8iSyXzGZ8 q0ZhDATdYjn+OptQh2FfJG+0LN3ThVuoL7xQJ9XlFe3mfYwbJIXA6pvSmAXhGcE3 GDaz/oCrZv702g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:16 2026 by rpki-client