This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json) Hash identifier: ei9HvjGPrG84OsS0Uqg1eq4vb0DW80CPcVF5UB2lu1A= Subject key identifier: 2C:E7:B0:CA:7F:2E:26:7F:DD:E9:90:B6:FA:E9:FA:6B:70:E9:32:27 Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Certificate serial: 019BF651398BA795AE4146B9F02C7913DAAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft Manifest number: 0296 Signing time: Sun 25 Jan 2026 18:01:16 +0000 Manifest this update: Sun 25 Jan 2026 18:01:16 +0000 Manifest next update: Mon 26 Jan 2026 18:01:16 +0000 Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=) 2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: dAXEuVkPLZ88mtBjDno9JR4RviO8Lt0LpCVAXNyuoE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:39:8b:a7:95:ae:41:46:b9:f0:2c:79:13:da:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Validity Not Before: Jan 25 18:01:16 2026 GMT Not After : Jan 26 18:01:16 2026 GMT Subject: CN=2ce7b0ca7f2e267fdde990b6fae9fa6b70e93227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:87:0b:ac:8a:0d:dc:c1:46:8b:07:1c:12: ad:56:2f:85:8b:a1:8d:fb:67:26:00:73:28:9f:3c: 39:e0:59:f0:75:6f:f6:91:f4:be:21:77:6d:83:d4: 3e:d0:02:b1:90:2c:4b:fe:cc:3c:18:2d:20:68:39: d6:d3:d5:ad:bb:43:8d:77:48:13:11:e9:42:0f:42: 9b:7b:da:57:10:7c:b4:e7:43:0a:92:c4:84:eb:d9: 11:a2:e0:8d:fc:92:ed:03:d0:a6:d7:2a:44:b8:08: 60:6a:54:38:7a:28:b4:03:32:de:d1:af:09:98:27: 52:c0:b7:1a:ff:cd:2e:16:9a:a0:08:81:30:27:4f: e3:37:3a:40:b3:6a:9e:a4:9e:13:bb:fb:db:5d:ad: fb:23:67:6f:67:76:87:20:3e:fa:a1:df:42:90:fe: e8:55:a1:f0:22:d2:13:7c:20:73:7b:ac:e3:26:ef: 30:b7:93:a9:da:76:54:45:b0:1f:cf:f3:b6:13:61: 1b:12:76:b1:de:4b:6a:a1:f2:6c:df:5c:0c:3d:db: f0:45:25:d3:0f:9c:8d:23:6c:7c:09:87:2e:8e:4a: f8:aa:a0:f7:cd:56:a2:cc:9f:13:86:d4:2e:a2:29: 79:53:89:7b:c5:b6:20:52:08:fe:44:33:24:a1:84: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:B0:CA:7F:2E:26:7F:DD:E9:90:B6:FA:E9:FA:6B:70:E9:32:27 X509v3 Authority Key Identifier: keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a4:e4:fb:cc:fd:72:c1:f9:6b:7a:d9:31:95:37:e5:4a:c9: f4:f8:5f:b3:46:0e:29:26:94:63:ba:96:06:1c:68:0d:1c:72: a1:6c:8e:17:74:81:0c:f0:94:5e:82:a0:a9:b4:63:d4:ef:2d: 0e:72:ca:c3:1e:24:7c:0f:05:12:0b:e3:e7:28:f4:d9:6e:e3: aa:86:ff:89:b5:51:a8:51:b1:22:ea:a3:11:4f:29:19:26:0c: 8b:5b:a7:5e:1b:b5:fb:3a:ac:06:30:43:90:a1:42:5c:9e:50: ff:e2:40:c3:2e:bf:3b:6b:c7:bb:05:ee:ee:a0:11:f2:29:e9: b5:b6:ff:76:3a:75:fc:4a:d1:21:d9:df:51:f0:8b:fe:c0:f1: bd:86:88:a6:ce:f4:15:31:dd:a7:7d:94:ba:91:1b:04:6f:8f: 31:a2:d0:59:dc:6c:e4:19:2f:dc:70:c9:bd:c2:a6:c3:1d:da: d5:73:02:0e:f9:c9:fb:54:9f:72:24:51:ee:2f:3b:8e:10:b7: 63:8c:5b:22:b1:9e:fa:e0:c9:5f:3c:09:38:ba:a9:3a:b5:dd: 16:92:62:50:de:ca:db:fa:50:93:b1:8f:8b:eb:c7:40:e3:f3: 41:44:a8:04:be:6c:33:51:cc:f6:94:02:2b:46:1e:9f:82:23: 6b:61:2f:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UTmLp5WuQUa58Cx5E9qqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5 ZDFiNTUwHhcNMjYwMTI1MTgwMTE2WhcNMjYwMTI2MTgwMTE2WjAzMTEwLwYDVQQD EygyY2U3YjBjYTdmMmUyNjdmZGRlOTkwYjZmYWU5ZmE2YjcwZTkzMjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrOHC6yKDdzBRosHHBKtVi+Fi6GN +2cmAHMonzw54FnwdW/2kfS+IXdtg9Q+0AKxkCxL/sw8GC0gaDnW09Wtu0ONd0gT EelCD0Kbe9pXEHy050MKksSE69kRouCN/JLtA9Cm1ypEuAhgalQ4eii0AzLe0a8J mCdSwLca/80uFpqgCIEwJ0/jNzpAs2qepJ4Tu/vbXa37I2dvZ3aHID76od9CkP7o VaHwItITfCBze6zjJu8wt5Op2nZURbAfz/O2E2EbEnax3ktqofJs31wMPdvwRSXT D5yNI2x8CYcujkr4qqD3zVaizJ8ThtQuoil5U4l7xbYgUgj+RDMkoYSzYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCznsMp/LiZ/3emQtvrp+mtw6TInMB8GA1UdIwQY MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6Tk+8z9 csH5a3rZMZU35UrJ9Phfs0YOKSaUY7qWBhxoDRxyoWyOF3SBDPCUXoKgqbRj1O8t DnLKwx4kfA8FEgvj5yj02W7jqob/ibVRqFGxIuqjEU8pGSYMi1unXhu1+zqsBjBD kKFCXJ5Q/+JAwy6/O2vHuwXu7qAR8inptbb/djp1/ErRIdnfUfCL/sDxvYaIps70 FTHdp32UupEbBG+PMaLQWdxs5Bkv3HDJvcKmwx3a1XMCDvnJ+1SfciRR7i87jhC3 Y4xbIrGe+uDJXzwJOLqpOrXdFpJiUN7K2/pQk7GPi+vHQOPzQUSoBL5sM1HM9pQC K0Yen4Ija2Ev9A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:05 2026 by rpki-client