This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json) Hash identifier: x/hJHosvzRe3wHP7kj9TkW5mIB9/wNogSV+ck/w57+I= Subject key identifier: 8B:63:4B:72:DC:06:ED:2B:07:5B:86:06:CE:3A:D6:C6:34:9E:74:46 Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89 Certificate serial: 019BF763AA13D7AC3829AD997756D3E18BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 23:01:02 +0000 Manifest this update: Sun 25 Jan 2026 23:01:02 +0000 Manifest next update: Mon 26 Jan 2026 23:01:02 +0000 Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: xLkwnhQLchT7XdxE+qPQhgL1oSuok8effYs+zXLArUQ=) 2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:aa:13:d7:ac:38:29:ad:99:77:56:d3:e1:8b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89 Validity Not Before: Jan 25 23:01:02 2026 GMT Not After : Jan 26 23:01:02 2026 GMT Subject: CN=8b634b72dc06ed2b075b8606ce3ad6c6349e7446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:c3:ee:14:bb:93:bd:35:6c:20:6f:5a:58: 91:bf:e5:51:53:f4:5c:fc:28:28:45:15:dc:32:1f: 62:d2:6a:2c:7e:24:4f:6b:72:9d:31:26:ea:00:1c: eb:ef:cf:e5:2c:29:3a:c2:f1:ed:3a:d8:79:46:ba: 3a:7b:f9:29:0a:6c:cd:a9:cc:d6:9d:96:35:08:2d: be:d5:07:40:69:be:0a:69:85:90:17:a9:d3:cb:dc: c5:99:59:53:03:3e:bf:dd:9c:bb:0a:bd:b5:60:3d: f1:4f:55:7f:94:ed:13:8b:73:82:64:e1:69:38:26: a1:63:db:51:bb:a6:54:04:97:92:af:83:31:6c:59: 4d:8c:af:de:dd:1e:58:0a:e4:11:c6:42:09:21:c4: 4f:fa:cc:e5:5f:f7:17:ab:8e:67:65:08:83:a7:2e: 23:43:02:8b:7f:7a:1d:7d:f5:7a:cd:51:7e:43:b8: 4f:53:c8:1c:64:96:d1:c8:07:64:24:77:9e:70:ce: 20:16:ae:4f:20:e1:6b:26:5a:3d:c0:d8:c4:a2:10: 19:2f:b7:6b:9c:ce:7b:1f:6f:96:17:e6:64:73:4a: 03:2b:a6:a6:ef:6b:4f:58:36:c5:02:50:83:b0:ae: 45:82:45:36:b1:26:c0:5d:a3:b9:28:43:d8:d1:8b: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:4B:72:DC:06:ED:2B:07:5B:86:06:CE:3A:D6:C6:34:9E:74:46 X509v3 Authority Key Identifier: keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fc:8d:21:db:f9:e3:d7:dc:f9:a3:69:8a:28:bd:ec:f2:88: 82:d0:d9:8d:e4:7c:f7:2c:28:7a:b4:86:6d:78:ba:9a:71:2f: 8c:09:0a:71:fe:94:ad:da:76:11:12:aa:08:37:ac:db:11:d9: 38:f8:1b:db:8e:6c:6d:d0:3d:a4:3f:e7:0a:54:4b:7c:37:d5: 36:a0:97:34:13:72:31:dd:ba:be:12:c5:32:d3:51:d2:ae:32: 19:e4:46:ed:13:68:63:80:3d:28:79:86:68:59:6c:46:80:22: 19:7b:c4:f6:b9:08:2e:2c:f2:cc:9d:89:e3:69:28:8d:3b:77: 49:5b:df:75:97:72:db:b3:7e:35:be:03:ce:53:7d:26:39:de: 4c:a2:b8:4e:8f:0e:37:91:8f:a1:43:5c:6e:35:44:9c:55:07: 44:3c:c6:97:b9:ba:7f:6a:cc:dc:cb:2a:29:c1:bc:82:35:37: 76:9e:89:33:29:6c:65:5a:2b:5c:c0:d9:c8:64:d7:a4:7f:55: ef:e6:b5:4f:a4:3d:f8:c9:a2:3d:e7:c3:f0:2f:b0:48:c5:04: c5:c6:eb:7b:35:b0:33:8c:71:8b:43:b3:d0:fa:8b:49:bf:fe: bb:39:4e:68:e7:87:e6:e1:e8:a5:8c:18:6e:f8:e6:5b:cb:26: 9f:15:de:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6oT16w4Ka2Zd1bT4YvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh OWJhODkwHhcNMjYwMTI1MjMwMTAyWhcNMjYwMTI2MjMwMTAyWjAzMTEwLwYDVQQD Eyg4YjYzNGI3MmRjMDZlZDJiMDc1Yjg2MDZjZTNhZDZjNjM0OWU3NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42vD7hS7k701bCBvWliRv+VRU/Rc /CgoRRXcMh9i0mosfiRPa3KdMSbqABzr78/lLCk6wvHtOth5Rro6e/kpCmzNqczW nZY1CC2+1QdAab4KaYWQF6nTy9zFmVlTAz6/3Zy7Cr21YD3xT1V/lO0Ti3OCZOFp OCahY9tRu6ZUBJeSr4MxbFlNjK/e3R5YCuQRxkIJIcRP+szlX/cXq45nZQiDpy4j QwKLf3odffV6zVF+Q7hPU8gcZJbRyAdkJHeecM4gFq5PIOFrJlo9wNjEohAZL7dr nM57H2+WF+Zkc0oDK6am72tPWDbFAlCDsK5FgkU2sSbAXaO5KEPY0YspxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItjS3LcBu0rB1uGBs461sY0nnRGMB8GA1UdIwQY MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0 LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/yNIdv5 49fc+aNpiii97PKIgtDZjeR89ywoerSGbXi6mnEvjAkKcf6Urdp2ERKqCDes2xHZ OPgb245sbdA9pD/nClRLfDfVNqCXNBNyMd26vhLFMtNR0q4yGeRG7RNoY4A9KHmG aFlsRoAiGXvE9rkILizyzJ2J42kojTt3SVvfdZdy27N+Nb4DzlN9JjneTKK4To8O N5GPoUNcbjVEnFUHRDzGl7m6f2rM3MsqKcG8gjU3dp6JMylsZVorXMDZyGTXpH9V 7+a1T6Q9+MmiPefD8C+wSMUExcbrezWwM4xxi0Oz0PqLSb/+uzlOaOeH5uHopYwY bvjmW8smnxXe6g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:45 2026 by rpki-client