This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json) Hash identifier: mJWdlaJzFJk1pK3eJ1I7UIr9wVivD/yUtubjzUOHO9A= Subject key identifier: 10:10:49:1E:54:50:BD:DB:9C:99:1A:E6:14:82:A9:33:18:DA:7F:7C Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0 Certificate serial: 019BF8E4625A0446D981670F34714DDF800E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft Manifest number: 10AE Signing time: Mon 26 Jan 2026 06:01:15 +0000 Manifest this update: Mon 26 Jan 2026 06:01:15 +0000 Manifest next update: Tue 27 Jan 2026 06:01:15 +0000 Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=) 2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: U0onzOVv4GSyqz5Hb/1tbp0sgR1D6gHlG3tKcLdHcoE=) 3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:62:5a:04:46:d9:81:67:0f:34:71:4d:df:80:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0 Validity Not Before: Jan 26 06:01:15 2026 GMT Not After : Jan 27 06:01:15 2026 GMT Subject: CN=1010491e5450bddb9c991ae61482a93318da7f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:73:c4:20:81:1b:6b:ea:8c:76:b0:b4:e4: e9:06:b4:de:37:95:3f:c5:49:2c:66:10:12:fd:09: 36:95:77:b1:cf:bd:c2:26:3e:a8:0b:e0:5d:9f:46: b4:7e:7a:03:dd:15:e9:61:06:41:15:8e:74:63:44: 83:26:69:52:f4:74:a9:95:2f:07:11:49:39:55:96: 54:99:fa:28:9d:09:84:d9:4e:85:ef:d1:5a:d4:78: cf:2b:31:a8:d7:a2:48:6c:01:2f:62:5f:e4:47:13: db:7a:8b:8a:6d:95:f9:d9:25:55:74:48:21:60:c3: a2:4a:aa:c9:b7:18:2f:3c:40:5d:f2:5a:04:5d:62: 7f:05:9a:84:cd:20:ef:3a:2d:16:af:b7:90:92:8d: 99:f7:d7:c5:b9:59:e5:bd:13:ae:a7:b0:db:79:e7: 0d:7a:72:db:a1:b6:16:15:4c:17:9f:5f:41:49:1d: 09:8b:f3:18:8a:72:6a:a9:a1:04:7e:19:37:60:c5: e0:15:63:5b:86:36:68:3d:60:30:68:1c:69:e5:c0: 09:e4:55:3c:36:5d:12:d4:cb:16:a4:a3:e0:a2:2a: b5:d8:22:c9:7d:d0:5c:de:c7:48:bf:17:0b:48:88: 1e:9d:26:ca:1c:b3:25:d8:5c:e2:99:14:6c:ae:f7: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:49:1E:54:50:BD:DB:9C:99:1A:E6:14:82:A9:33:18:DA:7F:7C X509v3 Authority Key Identifier: keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:c2:b5:c1:37:8b:cf:de:00:d6:28:a0:85:57:07:c4:cb: 90:90:25:81:2b:dc:03:63:cf:4f:78:25:ac:fb:f9:fe:4b:1d: 66:5f:bb:2a:a7:d1:5d:50:67:b1:0b:48:b2:77:0a:51:33:90: 1e:b7:c1:fa:d4:31:a5:58:1d:18:a6:8b:60:13:94:15:72:be: ca:05:e9:6e:fa:b4:0d:27:0a:0d:33:6a:22:a2:64:f1:bc:29: 8f:59:a1:2f:57:8e:fa:f3:c5:04:92:6e:58:f4:c9:f2:61:7b: bf:69:31:f0:27:38:40:09:67:c6:fb:04:83:2b:ab:58:f4:b0: d9:5f:21:9c:09:67:6d:7e:23:6b:3e:3c:ac:de:94:5b:b6:77: 09:08:47:da:21:8d:54:96:84:3c:37:10:a6:58:a1:f2:20:1e: c2:d1:b3:f0:43:38:ab:c8:72:15:0b:09:fa:26:b8:cb:f6:a4: 2d:51:e8:fa:2a:47:8a:9d:03:58:02:11:fe:cd:1b:c9:2e:7e: 37:82:30:ed:09:66:fb:27:10:be:4f:88:a5:78:d1:a0:12:5c: 45:8c:f8:7a:c9:95:97:f8:7d:f8:49:ae:6b:d1:cf:37:e9:5e: c0:81:e2:bd:8b:cf:d5:6b:b9:16:17:fc:08:ff:b5:73:ef:93: 95:d0:43:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45GJaBEbZgWcPNHFN34AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk ZWZiYTAwHhcNMjYwMTI2MDYwMTE1WhcNMjYwMTI3MDYwMTE1WjAzMTEwLwYDVQQD EygxMDEwNDkxZTU0NTBiZGRiOWM5OTFhZTYxNDgyYTkzMzE4ZGE3ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygNzxCCBG2vqjHawtOTpBrTeN5U/ xUksZhAS/Qk2lXexz73CJj6oC+Bdn0a0fnoD3RXpYQZBFY50Y0SDJmlS9HSplS8H EUk5VZZUmfoonQmE2U6F79Fa1HjPKzGo16JIbAEvYl/kRxPbeouKbZX52SVVdEgh YMOiSqrJtxgvPEBd8loEXWJ/BZqEzSDvOi0Wr7eQko2Z99fFuVnlvROup7DbeecN enLbobYWFUwXn19BSR0Ji/MYinJqqaEEfhk3YMXgFWNbhjZoPWAwaBxp5cAJ5FU8 Nl0S1MsWpKPgoiq12CLJfdBc3sdIvxcLSIgenSbKHLMl2FzimRRsrvde+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAQSR5UUL3bnJka5hSCqTMY2n98MB8GA1UdIwQY MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZbCtcE3 i8/eANYooIVXB8TLkJAlgSvcA2PPT3glrPv5/ksdZl+7KqfRXVBnsQtIsncKUTOQ HrfB+tQxpVgdGKaLYBOUFXK+ygXpbvq0DScKDTNqIqJk8bwpj1mhL1eO+vPFBJJu WPTJ8mF7v2kx8Cc4QAlnxvsEgyurWPSw2V8hnAlnbX4jaz48rN6UW7Z3CQhH2iGN VJaEPDcQplih8iAewtGz8EM4q8hyFQsJ+ia4y/akLVHo+ipHip0DWAIR/s0byS5+ N4Iw7Qlm+ycQvk+IpXjRoBJcRYz4esmVl/h9+Emua9HPN+lewIHivYvP1Wu5Fhf8 CP+1c++TldBD+g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:44 2026 by rpki-client