This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json) Hash identifier: GJthZby1Ff+kI0t7BY6Iw76pD87+JBA809n9MFPVfeA= Subject key identifier: EA:75:A7:3C:50:2C:EC:00:AF:D8:AA:83:CD:AE:F0:67:AE:4D:E8:2C Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Certificate serial: 019BF4D0CAF76EC8996FCA1103D0CC4A2D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft Manifest number: 0139 Signing time: Sun 25 Jan 2026 11:01:22 +0000 Manifest this update: Sun 25 Jan 2026 11:01:22 +0000 Manifest next update: Mon 26 Jan 2026 11:01:22 +0000 Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: 5nq17leFxGKOpQaz8v5ituZVDFRXGJ/fPs2e4bFUUVg=) 2: _CKH0NPKePgQmfkQwBAqF7isKR0.roa (hash: ghaupre6oze0hToZ8lc6XJoP3I8j3iyx30t5QLH2zrM=) 3: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (hash: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:ca:f7:6e:c8:99:6f:ca:11:03:d0:cc:4a:2d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Validity Not Before: Jan 25 11:01:22 2026 GMT Not After : Jan 26 11:01:22 2026 GMT Subject: CN=ea75a73c502cec00afd8aa83cdaef067ae4de82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:44:a7:a4:fe:92:92:00:2f:82:c2:93:12: 8d:00:5a:98:75:44:21:08:e7:67:ef:3a:6c:f9:c1: 94:d5:1c:85:11:4d:23:70:4d:7b:47:b2:5a:b5:17: 1a:bc:59:44:ed:97:a6:85:80:0a:f0:cf:d7:d7:26: ea:49:f5:e7:01:a3:3b:28:c1:be:4f:3d:7d:05:16: 0d:2f:49:62:4c:18:8e:a8:be:66:53:49:c5:07:1e: 59:a1:7f:43:2e:f5:e5:87:36:ad:0b:87:04:11:75: b3:31:c8:02:f7:d7:15:3a:c9:64:76:bc:4d:83:78: 80:ad:1c:99:4e:30:fc:9a:df:b8:4f:12:65:5e:a6: 84:dc:04:99:3c:c3:2c:9b:2a:cc:9a:8b:33:1d:54: 2c:78:f4:c4:32:43:bd:41:eb:24:bb:64:76:64:95: cd:9b:42:bf:1b:0f:32:fa:99:3d:73:44:a7:d5:12: f3:fb:39:b8:38:e6:f4:ae:fe:94:d2:50:3b:cb:82: 64:f1:1e:cf:de:f2:1d:86:a9:e3:75:29:b7:de:bd: bf:01:62:b2:74:c5:39:75:86:53:12:96:98:81:99: 27:fc:9a:3e:fa:53:52:55:be:d1:10:87:7b:90:ac: 8f:a7:9d:23:d3:07:e3:ba:7e:f1:f7:ea:06:ba:86: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:A7:3C:50:2C:EC:00:AF:D8:AA:83:CD:AE:F0:67:AE:4D:E8:2C X509v3 Authority Key Identifier: keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9d:b1:3d:40:e2:95:d8:1d:86:d7:16:88:06:ed:3a:74:71: d6:c7:48:c8:0e:0b:73:e1:71:99:9a:57:57:a8:f9:12:f4:67: ae:62:0a:2a:d1:a1:a7:77:4e:63:c3:7a:2e:8e:49:3e:5d:96: 13:43:29:4d:9b:63:db:67:7c:89:73:fc:20:ab:bc:3c:e1:5a: 15:6c:71:e8:67:8d:85:7f:cc:90:bc:9f:0f:e2:af:fc:f4:55: 0c:81:f1:b4:7c:7d:eb:5d:b5:27:07:5c:91:b8:37:27:22:15: cb:fd:96:4a:c4:c4:15:29:8f:65:e1:7e:a3:46:a0:f9:b6:78: 8e:f7:3c:80:22:c8:9b:9f:51:40:2e:6a:46:61:78:e8:79:5c: c8:eb:af:be:5a:e5:93:c6:e4:7b:67:b5:6b:94:4d:46:37:4b: ef:ce:67:0a:d7:69:7f:52:fc:60:03:38:b4:a7:fb:b8:17:28: 52:d8:99:96:9e:31:bc:3d:8e:37:32:9d:4c:54:96:c4:14:e3: a8:8e:8c:88:13:14:a0:45:f9:95:67:2d:86:0d:61:c3:b8:75: 49:8e:c1:7a:0a:99:8e:b6:0f:fe:ea:2a:5b:99:bf:40:f5:a0: 63:bf:06:dd:1b:68:22:82:93:8e:f6:0e:ce:45:10:13:97:75: 5f:03:6a:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Mr3bsiZb8oRA9DMSi18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWExN2RkM2JlYjhkYzg0OGZiZTc2MjkwNjFkNjA4MDE0 MWU3ZDQwHhcNMjYwMTI1MTEwMTIyWhcNMjYwMTI2MTEwMTIyWjAzMTEwLwYDVQQD EyhlYTc1YTczYzUwMmNlYzAwYWZkOGFhODNjZGFlZjA2N2FlNGRlODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW1Ep6T+kpIAL4LCkxKNAFqYdUQh COdn7zps+cGU1RyFEU0jcE17R7JatRcavFlE7ZemhYAK8M/X1ybqSfXnAaM7KMG+ Tz19BRYNL0liTBiOqL5mU0nFBx5ZoX9DLvXlhzatC4cEEXWzMcgC99cVOslkdrxN g3iArRyZTjD8mt+4TxJlXqaE3ASZPMMsmyrMmoszHVQsePTEMkO9Qesku2R2ZJXN m0K/Gw8y+pk9c0Sn1RLz+zm4OOb0rv6U0lA7y4Jk8R7P3vIdhqnjdSm33r2/AWKy dMU5dYZTEpaYgZkn/Jo++lNSVb7REId7kKyPp50j0wfjun7x9+oGuoZUFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp1pzxQLOwAr9iqg82u8GeuTegsMB8GA1UdIwQY MBaAFPBaF907643ISPvnYpBh1ggBQefUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2It M2QxM2U5Nzc2ZmY3LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2ItM2QxM2U5Nzc2ZmY3 LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT52xPUDi ldgdhtcWiAbtOnRx1sdIyA4Lc+FxmZpXV6j5EvRnrmIKKtGhp3dOY8N6Lo5JPl2W E0MpTZtj22d8iXP8IKu8POFaFWxx6GeNhX/MkLyfD+Kv/PRVDIHxtHx96121Jwdc kbg3JyIVy/2WSsTEFSmPZeF+o0ag+bZ4jvc8gCLIm59RQC5qRmF46HlcyOuvvlrl k8bke2e1a5RNRjdL785nCtdpf1L8YAM4tKf7uBcoUtiZlp4xvD2ONzKdTFSWxBTj qI6MiBMUoEX5lWcthg1hw7h1SY7BegqZjrYP/uoqW5m/QPWgY78G3RtoIoKTjvYO zkUQE5d1XwNqwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:59 2026 by rpki-client