This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json) Hash identifier: cS/weX+TTwY/TOs2bsicKv9urPOmPKhi7mfCVzoAdZw= Subject key identifier: F6:24:F0:19:E1:82:5C:DA:65:84:87:E0:54:1E:E9:21:0A:DE:B2:E2 Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Certificate serial: 019BF83F5716CBA2A791DDB5D9CFED3AD0BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:00:59 +0000 Manifest this update: Mon 26 Jan 2026 03:00:59 +0000 Manifest next update: Tue 27 Jan 2026 03:00:59 +0000 Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=) 2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: kz4XdeKmxQTJZdfytu8XRWG/iOMtlWeNZWjr/1oL6fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:57:16:cb:a2:a7:91:dd:b5:d9:cf:ed:3a:d0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Validity Not Before: Jan 26 03:00:59 2026 GMT Not After : Jan 27 03:00:59 2026 GMT Subject: CN=f624f019e1825cda658487e0541ee9210adeb2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:c1:fc:fb:bd:ac:c2:ff:6c:fb:e8:98:c4: 23:4d:4d:24:cd:58:41:a2:7e:ab:45:58:a0:81:85: 49:8c:38:24:79:a4:a0:5e:7b:83:d1:39:0c:c0:75: 38:7a:37:41:d6:67:89:25:62:e4:86:a7:ff:61:ba: 25:28:a1:d8:4b:ff:80:c7:0a:2e:97:89:7a:7a:d5: 3f:db:ee:e0:92:97:ca:65:1e:0c:a2:67:9f:dc:1d: 56:bb:d2:fb:e8:7b:b6:53:5e:a9:24:e5:95:75:e7: b4:f7:54:5d:1d:92:3d:53:e3:c6:91:ea:ed:f1:09: c9:84:02:6b:c5:9e:b3:cc:8c:56:99:db:f3:23:2c: fd:7c:6c:1d:6b:6b:0d:5c:10:2f:b0:e4:eb:3d:d3: 0a:03:82:bf:2b:84:83:60:c8:29:71:61:0c:cf:13: 86:3b:90:25:15:08:d8:fb:d5:bf:e3:f4:2f:1a:3a: 8f:d0:43:c2:e7:ad:09:d1:2f:53:f0:fe:ca:11:4a: f1:ca:28:50:1f:02:ad:e0:21:84:de:c0:9e:3d:70: dc:9c:4b:c4:cd:68:e2:76:f7:08:8b:d6:4c:42:fe: 82:10:1b:43:a8:4b:16:21:fb:9e:5d:7a:40:27:d0: fb:90:f7:8d:3e:ab:67:42:8c:19:1a:4b:04:18:33: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:F0:19:E1:82:5C:DA:65:84:87:E0:54:1E:E9:21:0A:DE:B2:E2 X509v3 Authority Key Identifier: keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3c:5a:53:45:44:a7:30:3b:85:45:a4:26:db:bc:97:42:57: 5b:1c:c4:05:08:39:1d:b1:ac:0e:05:49:2c:b9:8d:12:ee:1b: 98:bc:8c:ab:54:93:52:90:0b:fa:a2:f9:ad:fa:03:f5:18:23: 80:e5:d5:89:80:a1:26:d2:bb:75:19:df:fd:e1:8d:dc:c7:76: 5e:9a:04:38:4f:1c:a1:61:43:e0:69:70:0b:92:18:d4:91:24: 63:88:d8:7c:71:56:e7:6d:b2:0e:ef:b7:05:3d:19:03:6a:51: 9e:2c:f5:55:cf:c6:49:3c:f7:f1:e2:01:a5:06:d0:ac:a6:b4: 71:73:54:a5:7c:f3:b1:e6:a0:7a:0c:a3:36:5d:c6:02:be:95: b9:6e:70:4f:1e:86:69:b4:40:81:b7:37:cc:a8:e0:7d:d3:17: 7b:1f:c5:8f:1b:80:74:a4:cb:e4:ad:91:80:fd:eb:a1:bc:df: 1e:42:3e:00:06:80:ad:a7:91:dc:13:86:5f:68:35:4c:ee:2a: 9b:98:18:de:6b:19:e0:9e:bd:8d:59:aa:45:6c:7e:f6:65:20: b5:3a:ea:31:5f:b8:cd:b5:57:25:b6:ac:03:70:26:eb:18:c7: 43:dc:f6:71:fc:c2:a3:d1:f5:a9:3a:71:9b:c8:58:5f:6a:69: f5:5e:a0:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P1cWy6Knkd212c/tOtC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk YWI0MGIwHhcNMjYwMTI2MDMwMDU5WhcNMjYwMTI3MDMwMDU5WjAzMTEwLwYDVQQD EyhmNjI0ZjAxOWUxODI1Y2RhNjU4NDg3ZTA1NDFlZTkyMTBhZGViMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a3B/Pu9rML/bPvomMQjTU0kzVhB on6rRViggYVJjDgkeaSgXnuD0TkMwHU4ejdB1meJJWLkhqf/YbolKKHYS/+Axwou l4l6etU/2+7gkpfKZR4Momef3B1Wu9L76Hu2U16pJOWVdee091RdHZI9U+PGkert 8QnJhAJrxZ6zzIxWmdvzIyz9fGwda2sNXBAvsOTrPdMKA4K/K4SDYMgpcWEMzxOG O5AlFQjY+9W/4/QvGjqP0EPC560J0S9T8P7KEUrxyihQHwKt4CGE3sCePXDcnEvE zWjidvcIi9ZMQv6CEBtDqEsWIfueXXpAJ9D7kPeNPqtnQowZGksEGDNjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYk8BnhglzaZYSH4FQe6SEK3rLiMB8GA1UdIwQY MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt MzY0ODMxMzlkYzVlLzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzxaU0VE pzA7hUWkJtu8l0JXWxzEBQg5HbGsDgVJLLmNEu4bmLyMq1STUpAL+qL5rfoD9Rgj gOXViYChJtK7dRnf/eGN3Md2XpoEOE8coWFD4GlwC5IY1JEkY4jYfHFW522yDu+3 BT0ZA2pRniz1Vc/GSTz38eIBpQbQrKa0cXNUpXzzseagegyjNl3GAr6VuW5wTx6G abRAgbc3zKjgfdMXex/FjxuAdKTL5K2RgP3robzfHkI+AAaAraeR3BOGX2g1TO4q m5gY3msZ4J69jVmqRWx+9mUgtTrqMV+4zbVXJbasA3Am6xjHQ9z2cfzCo9H1qTpx m8hYX2pp9V6gQw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:41 2026 by rpki-client