This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json) Hash identifier: NzeY0QpS7FTZPsm9tlRuLRSKy0Ul1T5Sn6eFFBM8TtE= Subject key identifier: 77:37:4B:72:F1:C5:4E:9C:4B:5F:7E:1A:36:5D:05:78:09:76:11:D9 Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Certificate serial: 019BF5751F36A2D82ECD49D8A4789F50F9EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft Manifest number: 036F Signing time: Sun 25 Jan 2026 14:00:52 +0000 Manifest this update: Sun 25 Jan 2026 14:00:52 +0000 Manifest next update: Mon 26 Jan 2026 14:00:52 +0000 Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=) 2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: 9NzGVkPo8A/milvXrAOBOsCzN6JdE4DnsiaTWyBTZJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:1f:36:a2:d8:2e:cd:49:d8:a4:78:9f:50:f9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Validity Not Before: Jan 25 14:00:52 2026 GMT Not After : Jan 26 14:00:52 2026 GMT Subject: CN=77374b72f1c54e9c4b5f7e1a365d0578097611d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:02:86:d1:79:d4:51:7b:d1:64:17:9d:ba: 1d:f7:57:0c:86:5c:f4:98:3f:53:11:6b:05:bb:7d: f7:4e:f4:03:24:35:36:78:f5:e2:69:e7:15:81:46: 49:10:68:2b:50:a6:3b:d8:1b:90:02:c5:03:19:2c: 81:eb:ad:0e:4c:f4:e8:b5:a8:e3:93:32:05:a7:cc: a7:79:11:15:45:9a:c5:7a:cf:db:1e:64:32:d8:b8: 52:26:30:b3:4c:42:5b:12:cf:d7:5d:a3:a0:12:82: b5:b2:82:1d:49:8f:fe:aa:6c:1a:4f:52:ab:d2:03: 1a:e7:63:e8:29:a4:bd:92:ac:af:05:2f:a0:22:7f: b6:b5:9f:f4:ef:c7:0f:94:53:36:dc:82:38:b2:8a: 22:3c:a4:96:a4:66:0c:52:73:de:b1:28:99:83:80: 08:c8:5b:48:54:e8:34:9d:be:f4:80:9d:fe:14:63: 67:0e:93:17:2f:e1:29:a4:1f:14:f1:c0:a4:74:0c: 90:77:19:af:16:19:fd:01:7c:49:cf:c0:86:bc:f6: ba:e0:09:a0:db:06:8a:14:09:5d:e2:48:c0:d4:b2: 18:6e:7e:3a:6d:af:3e:a0:de:76:62:e3:af:8d:99: bc:34:45:c9:1e:51:0f:e6:c4:5b:0f:77:b0:a3:cf: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:37:4B:72:F1:C5:4E:9C:4B:5F:7E:1A:36:5D:05:78:09:76:11:D9 X509v3 Authority Key Identifier: keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ea:54:b3:50:5b:4e:49:ef:c7:12:a9:6b:45:9f:03:01:de: c9:64:c6:66:e4:a6:f7:98:3d:81:17:54:c2:5a:22:25:a4:40: 4b:01:de:50:f9:32:99:f8:9b:e2:0c:29:30:99:69:55:7b:78: 0e:fd:47:4e:59:72:5d:3c:73:41:e8:77:ba:e4:a8:27:6b:70: ba:92:59:a2:86:d3:5b:ff:99:61:32:61:16:b2:23:3f:94:a0: d4:18:35:52:24:fc:4e:09:3a:c8:5b:e5:0e:7b:82:72:88:2e: 85:40:24:4b:4b:9a:ae:83:fb:06:e5:73:67:5d:f2:11:48:6b: 4a:30:66:aa:95:9e:5a:de:63:ae:b3:75:e5:b2:37:e2:36:7b: 77:77:11:26:7e:9c:6e:a2:9c:52:1e:4f:b1:ef:a8:c0:31:ef: b1:f5:3e:6f:4d:20:5a:eb:86:85:d4:25:8b:c9:5d:bc:e1:70: 05:8a:0c:be:67:4c:ab:65:6e:b2:0d:ad:8d:2c:e9:4a:c8:b1: 5a:62:cd:6c:1d:14:42:fb:2f:df:79:1f:18:9f:6d:47:2c:15: 17:9a:13:7e:04:83:ac:d3:62:99:ec:7e:56:b8:e1:51:2b:a0: 1a:3f:bb:1c:b3:03:5b:50:00:13:6e:b9:44:56:da:ca:f1:3f: b5:1b:71:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dR82otguzUnYpHifUPnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3 Y2ViNDYwHhcNMjYwMTI1MTQwMDUyWhcNMjYwMTI2MTQwMDUyWjAzMTEwLwYDVQQD Eyg3NzM3NGI3MmYxYzU0ZTljNGI1ZjdlMWEzNjVkMDU3ODA5NzYxMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VQChtF51FF70WQXnbod91cMhlz0 mD9TEWsFu333TvQDJDU2ePXiaecVgUZJEGgrUKY72BuQAsUDGSyB660OTPTotajj kzIFp8yneREVRZrFes/bHmQy2LhSJjCzTEJbEs/XXaOgEoK1soIdSY/+qmwaT1Kr 0gMa52PoKaS9kqyvBS+gIn+2tZ/078cPlFM23II4sooiPKSWpGYMUnPesSiZg4AI yFtIVOg0nb70gJ3+FGNnDpMXL+EppB8U8cCkdAyQdxmvFhn9AXxJz8CGvPa64Amg 2waKFAld4kjA1LIYbn46ba8+oN52YuOvjZm8NEXJHlEP5sRbD3ewo8/WswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc3S3LxxU6cS19+GjZdBXgJdhHZMB8GA1UdIwQY MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0 LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOpUs1Bb TknvxxKpa0WfAwHeyWTGZuSm95g9gRdUwloiJaRASwHeUPkymfib4gwpMJlpVXt4 Dv1HTllyXTxzQeh3uuSoJ2twupJZoobTW/+ZYTJhFrIjP5Sg1Bg1UiT8Tgk6yFvl DnuCcoguhUAkS0uaroP7BuVzZ13yEUhrSjBmqpWeWt5jrrN15bI34jZ7d3cRJn6c bqKcUh5Pse+owDHvsfU+b00gWuuGhdQli8ldvOFwBYoMvmdMq2Vusg2tjSzpSsix WmLNbB0UQvsv33kfGJ9tRywVF5oTfgSDrNNimex+VrjhUSugGj+7HLMDW1AAE265 RFbayvE/tRtxVA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:54 2026 by rpki-client