This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json) Hash identifier: Zv8xxptFQP0FWT37M+FPhY8AoXEZG+5S3oW+/LeCEL8= Subject key identifier: 0D:3D:93:71:96:16:36:B7:7C:2F:B1:7B:5C:18:B9:E9:23:56:E7:30 Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf Certificate serial: 019BF87699395CCD89FCE40BB67B04190EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft Manifest number: 14D6 Signing time: Mon 26 Jan 2026 04:01:20 +0000 Manifest this update: Mon 26 Jan 2026 04:01:20 +0000 Manifest next update: Tue 27 Jan 2026 04:01:20 +0000 Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=) 2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=) 3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: gco2AxvXBv2yFjm5NRqyTfm+LX4hqWReUCFobUYA9iU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:99:39:5c:cd:89:fc:e4:0b:b6:7b:04:19:0e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf Validity Not Before: Jan 26 04:01:20 2026 GMT Not After : Jan 27 04:01:20 2026 GMT Subject: CN=0d3d9371961636b77c2fb17b5c18b9e92356e730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:2a:a9:44:b0:93:fd:30:a2:59:e6:7e:ac: 44:f9:f5:06:d2:a8:aa:04:66:e3:b1:f3:a0:f7:e7: d4:97:23:ef:75:21:20:db:f8:9f:bf:48:9b:f9:08: 5f:24:43:8c:38:bc:8e:78:77:4d:74:88:62:90:f5: b9:3a:56:ed:02:55:9c:82:ca:bf:f5:2d:04:ae:ef: 2d:d1:94:a7:29:b5:1a:05:4d:57:30:92:74:7c:28: ae:c4:6b:f6:45:9a:56:ac:2b:96:61:55:eb:2c:09: b8:38:2d:67:6d:65:44:e5:eb:6e:b9:4f:b8:46:f1: d1:4a:18:70:76:e6:7b:84:ab:7c:a1:9e:ec:be:68: 21:10:13:b4:88:e7:1a:80:15:32:d1:96:85:e6:8f: 9d:12:8f:68:bc:48:6b:ed:ec:91:72:88:9e:28:cf: 75:d9:c4:20:80:44:7a:fd:e9:6c:44:d7:c0:bd:14: e7:e7:35:98:ad:6a:31:23:78:3b:17:65:9c:1a:ac: 42:00:b4:33:f6:40:ca:a8:a9:18:f3:9e:e9:10:da: c4:77:b4:56:28:36:64:b6:b5:4a:b1:e9:c1:bc:70: ba:56:81:65:27:12:7a:91:ed:ec:ba:37:e5:05:1e: 37:3e:d0:e2:a1:24:8c:cf:b1:2b:0d:23:8e:b9:ca: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:93:71:96:16:36:B7:7C:2F:B1:7B:5C:18:B9:E9:23:56:E7:30 X509v3 Authority Key Identifier: keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:09:a2:e6:d2:2a:e9:c3:0f:d1:08:c9:83:87:47:f0:e7:43: d7:e0:a0:b7:08:99:08:97:f0:67:50:b1:c5:f5:bc:c1:db:3a: 59:50:be:9f:92:6d:f1:17:e8:72:09:8c:bd:9d:a9:81:ca:25: 5a:e9:1f:78:33:35:bd:dd:bc:59:f3:be:09:05:17:39:74:4e: eb:4b:a0:42:68:66:f7:13:e9:a8:e5:e1:00:8a:20:e6:f5:ed: 02:3b:94:c1:6a:8b:7b:3e:73:cb:3c:f7:1a:1f:66:24:36:67: 2a:a3:7f:7f:d0:6f:d0:45:fb:8b:b0:49:e9:05:a4:2e:47:32: cd:87:ed:b9:59:7b:12:96:37:1a:e5:11:46:16:e8:58:70:7f: ba:24:b1:6d:ae:a9:ee:46:72:ac:95:69:73:27:c6:83:85:9b: 76:0d:cc:86:8c:3d:0f:56:db:6d:f8:a5:49:3d:1f:7c:39:d9: 70:12:0f:8f:f2:a9:a0:10:3e:f0:5c:ba:fe:31:45:8b:14:02: 4c:22:37:b4:59:e9:4e:99:32:cd:b3:56:96:6f:8e:c8:fa:2d: f4:36:a0:5f:49:29:01:f0:45:2e:a7:ea:e1:19:3e:f5:39:07: b4:83:69:aa:ba:e3:b0:f7:3d:e5:37:35:99:96:ca:52:0d:75: 66:7c:4e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpk5XM2J/OQLtnsEGQ74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz MzVjY2YwHhcNMjYwMTI2MDQwMTIwWhcNMjYwMTI3MDQwMTIwWjAzMTEwLwYDVQQD EygwZDNkOTM3MTk2MTYzNmI3N2MyZmIxN2I1YzE4YjllOTIzNTZlNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7sqqUSwk/0wolnmfqxE+fUG0qiq BGbjsfOg9+fUlyPvdSEg2/ifv0ib+QhfJEOMOLyOeHdNdIhikPW5OlbtAlWcgsq/ 9S0Eru8t0ZSnKbUaBU1XMJJ0fCiuxGv2RZpWrCuWYVXrLAm4OC1nbWVE5etuuU+4 RvHRShhwduZ7hKt8oZ7svmghEBO0iOcagBUy0ZaF5o+dEo9ovEhr7eyRcoieKM91 2cQggER6/elsRNfAvRTn5zWYrWoxI3g7F2WcGqxCALQz9kDKqKkY857pENrEd7RW KDZktrVKsenBvHC6VoFlJxJ6ke3sujflBR43PtDioSSMz7ErDSOOucqfawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA09k3GWFja3fC+xe1wYuekjVucwMB8GA1UdIwQY MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgmi5tIq 6cMP0QjJg4dH8OdD1+CgtwiZCJfwZ1CxxfW8wds6WVC+n5Jt8RfocgmMvZ2pgcol WukfeDM1vd28WfO+CQUXOXRO60ugQmhm9xPpqOXhAIog5vXtAjuUwWqLez5zyzz3 Gh9mJDZnKqN/f9Bv0EX7i7BJ6QWkLkcyzYftuVl7EpY3GuURRhboWHB/uiSxba6p 7kZyrJVpcyfGg4Wbdg3Mhow9D1bbbfilST0ffDnZcBIPj/KpoBA+8Fy6/jFFixQC TCI3tFnpTpkyzbNWlm+OyPot9DagX0kpAfBFLqfq4Rk+9TkHtINpqrrjsPc95Tc1 mZbKUg11ZnxOxA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:49 2026 by rpki-client