This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json) Hash identifier: dMfVoHtOOU/tEUPaMihj0hIVoDogsZPAT0/Zu6GO5uU= Subject key identifier: 55:27:29:48:CE:D4:B0:5D:5F:A8:D0:DE:50:F5:E4:1A:75:25:76:34 Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Certificate serial: 019BF6BF6E268C93C448D7A25B49B1388D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft Manifest number: 145D Signing time: Sun 25 Jan 2026 20:01:39 +0000 Manifest this update: Sun 25 Jan 2026 20:01:39 +0000 Manifest next update: Mon 26 Jan 2026 20:01:39 +0000 Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: PaeCEGdJ8j/5agqkjs4knHJ68XM54OTj03wmwyGWRw8=) 2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:6e:26:8c:93:c4:48:d7:a2:5b:49:b1:38:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Validity Not Before: Jan 25 20:01:39 2026 GMT Not After : Jan 26 20:01:39 2026 GMT Subject: CN=55272948ced4b05d5fa8d0de50f5e41a75257634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:ed:ea:00:7c:c3:b5:6f:10:6c:cc:17:77: f3:ae:f4:08:ec:15:69:1d:af:ae:b8:4e:dd:aa:f3: 8a:c5:aa:30:00:07:10:5b:0e:25:df:a9:6c:59:23: bf:b6:19:e1:14:d3:79:17:8c:71:29:ab:28:37:9a: 38:4d:b3:c0:1a:bc:ef:1c:19:d0:8d:79:48:68:13: f6:a0:06:6d:5f:6a:cc:21:64:c4:7e:60:de:ba:1b: 0e:e7:38:15:4e:56:06:ae:28:bb:bf:b6:9f:7c:85: de:a1:73:34:65:4a:c9:69:f1:ab:37:79:5b:ed:00: 95:df:89:86:b9:19:38:21:35:3f:d9:80:bc:3a:a3: 88:51:9e:74:3c:cf:fd:e1:f0:cb:30:cd:79:7c:dd: 19:98:25:f3:ab:cc:a1:0a:73:79:75:a9:2a:f9:a1: 6c:d0:5a:06:5e:00:43:fd:c3:66:c8:a5:d8:15:6e: 5b:69:23:ec:09:36:c4:19:63:9d:c7:97:26:96:23: e0:6d:e0:36:c1:4a:47:08:66:40:9f:d0:f8:4d:59: 3f:e6:59:c0:ea:f9:d4:de:89:1a:79:64:db:45:5f: c8:65:63:de:7f:86:15:90:0b:fe:75:55:4b:6e:84: d3:a1:e7:c9:b6:9e:02:fb:d5:11:7b:24:33:ab:28: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:27:29:48:CE:D4:B0:5D:5F:A8:D0:DE:50:F5:E4:1A:75:25:76:34 X509v3 Authority Key Identifier: keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d5:ed:c8:65:32:d5:46:af:f3:7d:99:fd:a5:44:44:df:5e: af:32:31:7d:b2:67:32:b2:ef:fe:a2:f8:81:6d:10:36:9c:7f: 54:9a:ff:06:56:96:fc:2b:5c:a7:a1:bf:fe:c2:b3:96:91:d9: f2:40:96:eb:c9:76:0b:af:4e:ea:3c:57:30:fb:f6:18:eb:a3: 89:0c:c9:e1:b3:fc:02:f7:ec:b3:d4:00:7e:30:e3:f5:e5:6f: e2:e7:48:96:bc:59:37:d4:d3:b3:32:df:2d:87:54:4d:78:02: 7c:45:86:e8:b4:d6:a4:21:f7:9d:40:df:85:d1:4d:96:1b:f0: 8a:e1:34:aa:08:b3:f0:23:3c:1d:13:49:b2:c6:20:9c:0c:d0: 40:f0:78:84:f1:3f:9c:2a:8d:1e:3b:00:20:05:fa:6f:c7:12: b6:5a:97:46:85:4f:0f:00:9b:55:cd:66:e8:56:88:7d:44:96: 3c:69:38:14:5e:f0:8f:ea:ea:b1:f9:42:1e:f9:b1:ca:46:b1: c5:7e:41:3b:23:87:82:7a:36:d8:86:35:c3:ae:1f:ce:9a:63: a6:3a:1d:2f:b9:b0:42:5e:c5:f6:f4:82:67:96:13:b9:2c:20: c5:58:ce:25:17:11:03:b4:9b:37:fb:65:82:07:59:17:39:47: 60:f1:aa:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v24mjJPESNeiW0mxOI2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw MGJhNjgwHhcNMjYwMTI1MjAwMTM5WhcNMjYwMTI2MjAwMTM5WjAzMTEwLwYDVQQD Eyg1NTI3Mjk0OGNlZDRiMDVkNWZhOGQwZGU1MGY1ZTQxYTc1MjU3NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XPt6gB8w7VvEGzMF3fzrvQI7BVp Ha+uuE7dqvOKxaowAAcQWw4l36lsWSO/thnhFNN5F4xxKasoN5o4TbPAGrzvHBnQ jXlIaBP2oAZtX2rMIWTEfmDeuhsO5zgVTlYGrii7v7affIXeoXM0ZUrJafGrN3lb 7QCV34mGuRk4ITU/2YC8OqOIUZ50PM/94fDLMM15fN0ZmCXzq8yhCnN5dakq+aFs 0FoGXgBD/cNmyKXYFW5baSPsCTbEGWOdx5cmliPgbeA2wUpHCGZAn9D4TVk/5lnA 6vnU3okaeWTbRV/IZWPef4YVkAv+dVVLboTToefJtp4C+9UReyQzqyginwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUnKUjO1LBdX6jQ3lD15Bp1JXY0MB8GA1UdIwQY MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdXtyGUy 1Uav832Z/aVERN9erzIxfbJnMrLv/qL4gW0QNpx/VJr/BlaW/Ctcp6G//sKzlpHZ 8kCW68l2C69O6jxXMPv2GOujiQzJ4bP8Avfss9QAfjDj9eVv4udIlrxZN9TTszLf LYdUTXgCfEWG6LTWpCH3nUDfhdFNlhvwiuE0qgiz8CM8HRNJssYgnAzQQPB4hPE/ nCqNHjsAIAX6b8cStlqXRoVPDwCbVc1m6FaIfUSWPGk4FF7wj+rqsflCHvmxykax xX5BOyOHgno22IY1w64fzppjpjodL7mwQl7F9vSCZ5YTuSwgxVjOJRcRA7SbN/tl ggdZFzlHYPGq4w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:26 2026 by rpki-client