This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json) Hash identifier: EX9krkLDbcyPILMLj7oTiOml3gmYWMRbVs4LH6TxdTo= Subject key identifier: B4:EB:D2:16:44:35:6E:9F:8F:8D:C9:78:E9:9A:EB:1F:4E:EE:3A:97 Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a Certificate serial: 019BF6879EF722B72135F6C2E8E915B24335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:00:41 +0000 Manifest this update: Sun 25 Jan 2026 19:00:41 +0000 Manifest next update: Mon 26 Jan 2026 19:00:41 +0000 Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=) 2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: +0TN/dhU6u8HjxDuanlyUPXr6/XX0KwG3H6cEaqmpWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:9e:f7:22:b7:21:35:f6:c2:e8:e9:15:b2:43:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a Validity Not Before: Jan 25 19:00:41 2026 GMT Not After : Jan 26 19:00:41 2026 GMT Subject: CN=b4ebd21644356e9f8f8dc978e99aeb1f4eee3a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:06:40:43:69:be:a0:7a:29:31:d9:08:35: f8:3e:f5:98:f0:88:d0:33:fc:4f:c5:1d:c8:85:39: 07:10:cf:bb:81:40:6f:92:7e:3e:42:47:86:0b:9a: e2:ee:50:d4:19:1a:1b:b1:15:b0:c6:de:78:7a:6a: 25:65:a2:92:b8:30:ed:1a:64:ce:53:82:e6:66:a4: f8:34:1b:b4:d0:cb:da:ad:32:de:3a:ee:c5:12:77: 71:e8:cf:07:d4:cf:cb:e0:c8:4a:e6:bc:3c:b6:70: 3f:9d:4a:43:ef:58:a9:6d:18:2e:57:50:89:de:e8: ad:e9:85:4e:e1:6d:3d:ea:6a:5e:b6:cc:6d:c8:b2: 30:6f:5a:dc:fb:67:41:5a:c5:d3:41:fe:8b:6c:c6: 34:38:92:dd:e4:72:60:67:b9:ea:77:78:21:f5:20: 39:be:1c:de:68:13:6f:77:01:a6:2b:8f:98:69:b2: 5d:20:1e:19:79:85:96:21:0f:fc:4d:cc:7a:65:9d: d9:f0:82:ab:fb:41:60:11:93:b4:95:35:08:b8:27: d8:03:4d:cc:7b:41:50:d4:55:0a:e0:b2:34:b4:d7: df:ea:2e:bc:f3:bb:49:ad:40:33:9a:1e:47:25:cd: ad:fa:72:f6:72:72:3e:04:d6:8a:cb:8f:d6:bc:61: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EB:D2:16:44:35:6E:9F:8F:8D:C9:78:E9:9A:EB:1F:4E:EE:3A:97 X509v3 Authority Key Identifier: keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:50:b6:90:16:76:72:43:c2:08:62:a2:92:f5:b5:b7:d9:2c: 98:71:43:d3:b5:ea:c4:a7:75:40:f8:3b:b5:fa:cb:bb:63:b7: 81:0a:82:7b:76:c6:3a:aa:34:93:ce:d9:67:99:d7:5a:1f:4d: f4:3d:e4:1e:c7:b8:c1:8c:e8:ee:29:03:8b:2f:de:36:85:38: 15:f6:30:b3:63:08:d6:9f:01:90:b5:29:03:6d:c0:cd:c6:10: 3e:0d:0d:8f:27:37:ee:b6:d3:a2:dd:35:f3:92:d4:64:f6:bb: e3:73:ed:ad:8c:f7:cd:a1:97:ac:37:2b:48:0b:dc:e1:b3:f1: d4:ca:8c:15:39:22:4c:b9:5c:2e:40:a0:f0:6f:70:86:c1:59: 63:8e:74:83:ea:94:d3:24:44:b1:87:d4:43:72:1e:7f:34:ce: 1a:a3:39:63:45:b0:18:0a:d5:1d:6e:e6:03:7a:1d:bd:9d:ce: 6e:95:c5:39:6e:69:5d:3f:70:74:ae:f8:02:e2:8e:7b:57:be: 7f:b6:5b:6e:9e:63:2c:3f:a0:82:5f:b0:c6:1d:c9:3b:12:f4: 53:65:ad:0e:04:21:ee:2b:a8:64:c9:7a:57:cd:ad:a4:af:a9: 20:ad:66:f6:5b:b8:3a:fb:2b:ab:4c:80:ca:b2:46:83:42:c7: 68:48:d2:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h573IrchNfbC6OkVskM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw OGJiNWEwHhcNMjYwMTI1MTkwMDQxWhcNMjYwMTI2MTkwMDQxWjAzMTEwLwYDVQQD EyhiNGViZDIxNjQ0MzU2ZTlmOGY4ZGM5NzhlOTlhZWIxZjRlZWUzYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEGQENpvqB6KTHZCDX4PvWY8IjQ M/xPxR3IhTkHEM+7gUBvkn4+QkeGC5ri7lDUGRobsRWwxt54emolZaKSuDDtGmTO U4LmZqT4NBu00MvarTLeOu7FEndx6M8H1M/L4MhK5rw8tnA/nUpD71ipbRguV1CJ 3uit6YVO4W096mpetsxtyLIwb1rc+2dBWsXTQf6LbMY0OJLd5HJgZ7nqd3gh9SA5 vhzeaBNvdwGmK4+YabJdIB4ZeYWWIQ/8Tcx6ZZ3Z8IKr+0FgEZO0lTUIuCfYA03M e0FQ1FUK4LI0tNff6i6887tJrUAzmh5HJc2t+nL2cnI+BNaKy4/WvGHJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTr0hZENW6fj43JeOma6x9O7jqXMB8GA1UdIwQY MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFC2kBZ2 ckPCCGKikvW1t9ksmHFD07XqxKd1QPg7tfrLu2O3gQqCe3bGOqo0k87ZZ5nXWh9N 9D3kHse4wYzo7ikDiy/eNoU4FfYws2MI1p8BkLUpA23AzcYQPg0Njyc37rbTot01 85LUZPa743PtrYz3zaGXrDcrSAvc4bPx1MqMFTkiTLlcLkCg8G9whsFZY450g+qU 0yREsYfUQ3IefzTOGqM5Y0WwGArVHW7mA3odvZ3ObpXFOW5pXT9wdK74AuKOe1e+ f7Zbbp5jLD+ggl+wxh3JOxL0U2WtDgQh7iuoZMl6V82tpK+pIK1m9lu4Ovsrq0yA yrJGg0LHaEjSjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:10 2026 by rpki-client