This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json) Hash identifier: X+6ZVxERYlF5/doH1nc0lLgF8lpfeGSO5v1Z73ICSnk= Subject key identifier: 04:C7:07:AD:41:F4:DB:8B:AD:4D:0D:56:81:11:12:5F:E0:9D:0A:2D Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Certificate serial: 019BF38710772F9CBB8F36C8A3C418BFCDCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft Manifest number: 14C4 Signing time: Sun 25 Jan 2026 05:01:13 +0000 Manifest this update: Sun 25 Jan 2026 05:01:13 +0000 Manifest next update: Mon 26 Jan 2026 05:01:13 +0000 Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=) 2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=) 3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: bWPMizs5g5/C3NYJ0oQztxy0ckxZ7+PEd+XP4crjTUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:10:77:2f:9c:bb:8f:36:c8:a3:c4:18:bf:cd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Validity Not Before: Jan 25 05:01:13 2026 GMT Not After : Jan 26 05:01:13 2026 GMT Subject: CN=04c707ad41f4db8bad4d0d568111125fe09d0a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:0d:67:d6:8a:37:ce:ed:0c:d5:e4:0b:bc: d9:ca:06:e2:70:23:aa:a1:74:32:89:2a:cf:87:51: c1:98:48:b7:fe:6d:3b:48:a0:2e:12:7f:d5:39:d3: 15:2f:95:ed:65:23:58:e6:77:0d:33:6c:d1:ab:64: fb:22:6c:34:66:fe:e5:cf:d0:12:73:56:ae:a2:c3: 86:d8:73:1e:8d:3f:51:b6:06:f4:ec:95:28:87:6c: de:2e:37:b9:7f:2d:23:76:d6:f0:f4:2c:4e:c2:f9: d7:9b:8b:d5:17:aa:8f:66:8c:d5:98:10:1b:56:3e: 62:36:c9:b8:db:f2:d0:c7:22:12:35:00:9e:d5:ff: 03:91:78:b5:da:54:29:82:49:14:b8:25:43:2f:fe: 9f:38:5a:d2:90:c7:5c:f7:9c:3a:f6:e3:f7:5b:a6: 99:76:6a:9d:af:9e:2e:98:65:0f:33:6e:ab:6d:28: 1c:10:73:bc:6b:24:3c:0b:f1:01:4b:92:a9:ea:e9: bd:85:ac:22:7d:05:24:72:64:ab:5e:05:42:ff:f2: cb:8d:28:fb:39:fd:41:10:30:9c:4f:04:d9:31:90: 52:01:5f:b9:aa:5b:8a:95:cd:0e:44:b6:55:88:c0: e1:5d:a5:82:37:db:14:73:4e:21:86:58:d1:20:92: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:07:AD:41:F4:DB:8B:AD:4D:0D:56:81:11:12:5F:E0:9D:0A:2D X509v3 Authority Key Identifier: keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e0:fc:2d:0a:61:f9:20:fa:b2:b5:9f:b3:64:e3:66:8f:8a: 29:c0:14:9f:2d:2c:84:f8:87:46:bf:46:94:3c:ee:84:13:b4: 67:08:bc:12:13:94:d0:72:5c:b5:c9:56:61:76:8f:c6:ba:96: 3d:5f:f5:46:9d:c6:24:6b:ae:c8:9a:09:ba:fb:18:da:c1:25: 75:7b:dc:06:7f:df:16:75:0f:3b:5b:8f:d5:67:16:8d:49:1a: e7:49:6c:3a:fc:7b:3a:52:05:cc:e2:86:cf:d9:11:e5:6a:f6: ea:36:5f:d0:a1:71:85:16:9b:4b:b2:8d:4e:ca:5e:c6:32:43: 67:60:29:e8:34:a0:7d:50:4e:a9:ab:52:4e:ff:91:cd:2c:5e: 00:8f:fa:56:b2:bc:d4:20:fa:4b:23:93:50:24:44:23:9d:b4: f5:be:bb:44:31:4c:a2:74:9f:8d:26:83:e0:b8:af:35:af:bf: 9b:1d:10:6f:18:10:60:3e:a2:a5:6e:95:44:c2:1a:27:07:43: 27:3c:2c:eb:48:ba:ab:f9:33:af:66:2b:e3:a7:4e:59:cf:86: 5a:71:c7:1b:84:6e:67:f1:7c:b7:16:a8:65:6e:05:12:f2:74: 2f:e4:9f:c2:68:8a:ea:5c:f2:00:4b:e6:98:d6:c0:14:8c:e0: ff:b0:e7:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhxB3L5y7jzbIo8QYv83KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi ZWRmOTcwHhcNMjYwMTI1MDUwMTEzWhcNMjYwMTI2MDUwMTEzWjAzMTEwLwYDVQQD EygwNGM3MDdhZDQxZjRkYjhiYWQ0ZDBkNTY4MTExMTI1ZmUwOWQwYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrYNZ9aKN87tDNXkC7zZygbicCOq oXQyiSrPh1HBmEi3/m07SKAuEn/VOdMVL5XtZSNY5ncNM2zRq2T7Imw0Zv7lz9AS c1auosOG2HMejT9Rtgb07JUoh2zeLje5fy0jdtbw9CxOwvnXm4vVF6qPZozVmBAb Vj5iNsm42/LQxyISNQCe1f8DkXi12lQpgkkUuCVDL/6fOFrSkMdc95w69uP3W6aZ dmqdr54umGUPM26rbSgcEHO8ayQ8C/EBS5Kp6um9hawifQUkcmSrXgVC//LLjSj7 Of1BEDCcTwTZMZBSAV+5qluKlc0ORLZViMDhXaWCN9sUc04hhljRIJIBuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATHB61B9NuLrU0NVoEREl/gnQotMB8GA1UdIwQY MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOD8LQph +SD6srWfs2TjZo+KKcAUny0shPiHRr9GlDzuhBO0Zwi8EhOU0HJctclWYXaPxrqW PV/1Rp3GJGuuyJoJuvsY2sEldXvcBn/fFnUPO1uP1WcWjUka50lsOvx7OlIFzOKG z9kR5Wr26jZf0KFxhRabS7KNTspexjJDZ2Ap6DSgfVBOqatSTv+RzSxeAI/6VrK8 1CD6SyOTUCREI5209b67RDFMonSfjSaD4LivNa+/mx0QbxgQYD6ipW6VRMIaJwdD Jzws60i6q/kzr2Yr46dOWc+GWnHHG4RuZ/F8txaoZW4FEvJ0L+SfwmiK6lzyAEvm mNbAFIzg/7Dncw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:33 2026 by rpki-client