This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: yY8K3ht4/8gRLFYjRRDXU6aSDAlcQtCuT2rzSBKzB2w= Subject key identifier: DA:29:03:A1:77:67:6A:FF:82:29:6F:C3:89:F0:6D:62:69:7E:A5:0C Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019BF6BEAFB8EA775FEDD538649A364F1346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 20:00:50 +0000 Manifest this update: Sun 25 Jan 2026 20:00:50 +0000 Manifest next update: Mon 26 Jan 2026 20:00:50 +0000 Files and hashes: 1: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: n1uI6LzZ6QoTmRkNTrXoRY9fLYaXxUc4IYNxB3apk/M=) 2: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 3: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 4: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 5: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 6: ICgtilE1KfRqPpdrsKq-9ieun7U.roa (hash: jAB4w8zNNLfJaxE/GqWwjjdxDfor3RlSbFXaC5OV0hQ=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:af:b8:ea:77:5f:ed:d5:38:64:9a:36:4f:13:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 25 20:00:50 2026 GMT Not After : Jan 26 20:00:50 2026 GMT Subject: CN=da2903a177676aff82296fc389f06d62697ea50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:e4:7b:b1:1e:4f:cc:96:ea:f5:eb:99:b6: 00:ef:66:3b:3a:1d:28:39:c5:8f:e9:25:ad:b4:53: e7:57:0b:60:38:ed:fb:ea:fe:e8:49:01:dd:79:ee: 5a:3a:02:a6:ee:dc:a3:46:24:23:63:71:2e:cb:04: 19:2b:a1:29:c5:37:c9:1e:1a:96:cc:7c:19:72:92: 65:29:3f:1b:8b:64:5c:2a:26:c4:67:fa:71:56:55: 19:0c:55:50:39:c1:b3:80:a1:16:7d:53:2d:5a:1e: 13:e4:b7:2d:62:fd:97:91:dd:78:96:5b:13:4d:af: 8a:8c:09:0c:c3:59:51:8d:b5:cf:d5:09:23:46:9c: 85:de:59:76:74:5b:49:39:00:d2:40:f4:bf:50:73: 77:13:6c:7a:91:88:47:1d:de:94:f7:27:1e:92:97: a4:3e:f4:0e:6f:7a:6c:88:10:0e:ca:f0:29:3a:11: b5:50:cd:60:63:6f:11:28:28:7b:5d:18:e4:e5:82: a6:c6:f9:7e:ee:d3:d2:1d:76:51:88:3a:e3:7f:a0: 37:37:34:af:aa:8b:24:38:7a:e4:04:04:1a:b6:95: 7a:8c:3f:8c:ac:4c:4f:b9:dc:f8:4a:01:dc:0c:4e: 1f:10:03:f6:ba:d3:c2:50:cd:10:6b:cb:88:47:c2: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:29:03:A1:77:67:6A:FF:82:29:6F:C3:89:F0:6D:62:69:7E:A5:0C X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4c:ce:f1:cd:58:a5:52:6b:77:f2:10:ed:08:fd:d9:69:fa: a9:dc:0a:47:73:1b:d6:1d:e2:ee:d6:51:ae:5b:39:9f:3e:e3: 37:02:4e:a5:45:69:d2:05:16:64:f5:71:4c:69:37:31:76:c5: ac:8d:9f:d2:d9:6a:d9:2c:6b:bd:55:bd:c9:87:51:fa:1e:58: 41:2d:5d:46:82:d6:cb:7a:a5:d7:9f:33:d5:73:8c:bc:3b:ed: a5:9e:96:21:8b:0b:9b:12:a0:2c:f1:d2:f0:5a:dd:02:dc:52: da:86:a2:f1:4c:7d:c0:3b:aa:0d:b0:ec:31:7d:f5:91:b5:03: f8:31:ba:53:7e:a8:d5:21:30:e6:95:32:fb:63:e6:0c:03:06: c4:a2:67:b4:19:1d:a5:5c:31:77:04:be:39:e7:45:28:27:98: fd:74:b1:5d:25:7e:87:c5:b3:41:73:e8:c5:46:2e:fe:cf:40: fc:62:4b:e7:ed:bf:16:28:f0:48:87:09:4d:0b:0f:a1:41:da: da:35:25:38:74:32:f9:a8:aa:7a:2e:6f:72:66:05:8e:1b:2e: 7a:43:7b:3e:54:97:c2:e3:13:16:ae:29:a4:12:34:ff:9b:1d: 6b:b2:a7:68:0f:56:27:7f:a9:1b:94:43:96:0e:d6:18:72:6c: 6f:b0:13:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vq+46ndf7dU4ZJo2TxNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTI1MjAwMDUwWhcNMjYwMTI2MjAwMDUwWjAzMTEwLwYDVQQD EyhkYTI5MDNhMTc3Njc2YWZmODIyOTZmYzM4OWYwNmQ2MjY5N2VhNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZrke7EeT8yW6vXrmbYA72Y7Oh0o OcWP6SWttFPnVwtgOO376v7oSQHdee5aOgKm7tyjRiQjY3EuywQZK6EpxTfJHhqW zHwZcpJlKT8bi2RcKibEZ/pxVlUZDFVQOcGzgKEWfVMtWh4T5LctYv2Xkd14llsT Ta+KjAkMw1lRjbXP1QkjRpyF3ll2dFtJOQDSQPS/UHN3E2x6kYhHHd6U9ycekpek PvQOb3psiBAOyvApOhG1UM1gY28RKCh7XRjk5YKmxvl+7tPSHXZRiDrjf6A3NzSv qoskOHrkBAQatpV6jD+MrExPudz4SgHcDE4fEAP2utPCUM0Qa8uIR8Li2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNopA6F3Z2r/gilvw4nwbWJpfqUMMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkzO8c1Y pVJrd/IQ7Qj92Wn6qdwKR3Mb1h3i7tZRrls5nz7jNwJOpUVp0gUWZPVxTGk3MXbF rI2f0tlq2SxrvVW9yYdR+h5YQS1dRoLWy3ql158z1XOMvDvtpZ6WIYsLmxKgLPHS 8FrdAtxS2oai8Ux9wDuqDbDsMX31kbUD+DG6U36o1SEw5pUy+2PmDAMGxKJntBkd pVwxdwS+OedFKCeY/XSxXSV+h8WzQXPoxUYu/s9A/GJL5+2/FijwSIcJTQsPoUHa 2jUlOHQy+aiqei5vcmYFjhsuekN7PlSXwuMTFq4ppBI0/5sda7KnaA9WJ3+pG5RD lg7WGHJsb7ATew== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:29 2026 by rpki-client