This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: teB0cW+VFwPfp+yPns2Kg1rUprdhchAXgUR63Du5MPQ= Subject key identifier: 04:0C:CA:6B:9B:79:8D:6A:86:71:7B:28:2F:B7:01:21:A3:00:CE:96 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019BF49CBA461290E412D3C9BCEEFD6B3845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1820 Signing time: Sun 25 Jan 2026 10:04:30 +0000 Manifest this update: Sun 25 Jan 2026 10:04:30 +0000 Manifest next update: Mon 26 Jan 2026 10:04:30 +0000 Files and hashes: 1: 7OvMfMdZMoxoXbVwcG3vdsD0emA.roa (hash: EMD+bundCUSTuwY2sg618ZEWmpfQlcn6nadBIwBXs08=) 2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: Ztqw78ZRqkZ9r4dUve4yORASgjY.roa (hash: 4/5tXQGDZtxlbqEHC4WR/Itl5GBMMX7/czzhSvOR3QU=) 7: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 8: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: vuXSp34QKstfiFU3YXWpfpwO24g8rlLB54OCcFSDPRg=) 9: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 10: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 11: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 12: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 13: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 14: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 15: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (hash: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A=) 16: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:9c:ba:46:12:90:e4:12:d3:c9:bc:ee:fd:6b:38:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 25 10:04:30 2026 GMT Not After : Jan 26 10:04:30 2026 GMT Subject: CN=040cca6b9b798d6a86717b282fb70121a300ce96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:d3:e8:ba:2e:60:01:7b:37:fa:e3:2d:d3: 67:ba:42:9b:9d:f4:0c:12:fa:fa:cb:21:5a:56:a7: e1:d7:33:d4:35:f6:1d:83:52:ff:f0:fa:d1:97:c2: df:29:3c:de:2a:74:4c:17:4f:73:be:7f:92:c8:d0: e9:62:0c:5a:89:c0:af:4b:04:f4:41:93:0f:58:13: 80:34:c7:c0:ef:e2:fb:d6:26:3a:44:16:58:e5:68: bf:4e:b3:e9:d8:85:e8:f3:a4:27:be:da:1b:27:98: 3a:be:49:67:6f:aa:fe:05:97:16:d3:cc:7f:c8:33: 29:60:b3:64:93:a5:9b:7f:8b:b6:ff:e1:78:7f:d1: 90:f0:27:a0:e5:6c:ed:5a:fb:80:01:02:9a:25:84: fd:74:de:6f:08:b1:20:1e:3b:f7:5d:fb:c6:5f:72: f3:df:74:6b:19:d0:6e:de:c5:ee:d9:5a:d8:48:10: 67:0b:75:62:00:58:6e:c8:52:0a:61:ca:ae:dd:69: 23:9a:81:da:dc:88:73:3b:75:c1:4a:30:61:0f:74: d0:2e:96:f7:f0:14:ac:22:f6:75:2b:2c:e7:7f:c5: b2:73:6c:cc:e9:b9:4a:92:03:77:10:f3:a4:fd:aa: f3:e5:e2:b7:64:f2:28:4e:92:6c:c8:b7:a9:f8:4c: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0C:CA:6B:9B:79:8D:6A:86:71:7B:28:2F:B7:01:21:A3:00:CE:96 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:30:ba:1e:f6:e2:9b:9d:9f:80:0c:9d:75:97:78:0f:cc:f5: 16:6b:07:de:e7:59:a8:e1:39:f1:07:a8:57:b7:3b:52:dd:b4: f9:08:ad:3e:7f:1c:a1:b7:47:32:3f:f3:8c:cd:96:1b:73:0d: 56:d0:b1:54:48:60:7b:4d:38:df:fe:66:25:74:ae:b6:66:76: aa:33:9b:49:a4:e3:fb:39:2a:c2:63:00:77:f6:80:60:98:f3: 70:62:34:18:31:69:48:50:88:20:9c:07:3d:8f:c9:e9:81:f4: 01:9c:e6:f2:7f:19:61:28:04:e2:19:30:5c:e8:f0:54:29:27: 1a:10:c4:e0:27:5f:05:de:db:20:09:e6:91:ee:c0:c3:8e:c7: 9f:37:d0:1b:88:88:28:19:87:17:12:70:ff:c3:2c:85:5e:cc: 16:5a:3f:46:40:99:f5:57:83:ca:2f:ae:3d:d9:c7:c9:30:a8: cd:7f:08:ee:3b:0f:4e:b5:10:df:09:f4:44:d4:01:53:b5:11: 96:ea:37:5c:e8:c6:23:b7:2e:26:5a:62:18:32:94:79:4a:3d: 3f:49:b9:99:0a:b0:86:5b:fd:16:11:78:15:3a:3e:50:7f:3f: 62:45:98:3e:e5:bb:68:93:2e:85:51:d0:e1:17:af:1a:5d:c8: 46:b4:cd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0nLpGEpDkEtPJvO79azhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTI1MTAwNDMwWhcNMjYwMTI2MTAwNDMwWjAzMTEwLwYDVQQD EygwNDBjY2E2YjliNzk4ZDZhODY3MTdiMjgyZmI3MDEyMWEzMDBjZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoXT6LouYAF7N/rjLdNnukKbnfQM Evr6yyFaVqfh1zPUNfYdg1L/8PrRl8LfKTzeKnRMF09zvn+SyNDpYgxaicCvSwT0 QZMPWBOANMfA7+L71iY6RBZY5Wi/TrPp2IXo86QnvtobJ5g6vklnb6r+BZcW08x/ yDMpYLNkk6Wbf4u2/+F4f9GQ8Ceg5WztWvuAAQKaJYT9dN5vCLEgHjv3XfvGX3Lz 33RrGdBu3sXu2VrYSBBnC3ViAFhuyFIKYcqu3WkjmoHa3IhzO3XBSjBhD3TQLpb3 8BSsIvZ1Kyznf8Wyc2zM6blKkgN3EPOk/arz5eK3ZPIoTpJsyLep+EzaCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQMymubeY1qhnF7KC+3ASGjAM6WMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzC6Hvbi m52fgAyddZd4D8z1FmsH3udZqOE58QeoV7c7Ut20+QitPn8cobdHMj/zjM2WG3MN VtCxVEhge0043/5mJXSutmZ2qjObSaTj+zkqwmMAd/aAYJjzcGI0GDFpSFCIIJwH PY/J6YH0AZzm8n8ZYSgE4hkwXOjwVCknGhDE4CdfBd7bIAnmke7Aw47HnzfQG4iI KBmHFxJw/8MshV7MFlo/RkCZ9VeDyi+uPdnHyTCozX8I7jsPTrUQ3wn0RNQBU7UR luo3XOjGI7cuJlpiGDKUeUo9P0m5mQqwhlv9FhF4FTo+UH8/YkWYPuW7aJMuhVHQ 4RevGl3IRrTN+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:14 2026 by rpki-client