This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json) Hash identifier: +/fHerl/KFWg259+k8O6JBNg/2N2OLVNxXPYYqGbGvs= Subject key identifier: 6D:F4:BD:0F:29:91:9C:3F:44:B9:AD:D8:51:75:EE:E3:FD:A8:B4:E9 Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8 Certificate serial: 019BF7D249A375E9E12E855B9D2A44E642CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft Manifest number: 1362 Signing time: Mon 26 Jan 2026 01:01:52 +0000 Manifest this update: Mon 26 Jan 2026 01:01:52 +0000 Manifest next update: Tue 27 Jan 2026 01:01:52 +0000 Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 6/40KmE6Scz7Va+nzKLw7klUshJyqRkSYQkBwhXDMOQ=) 2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:49:a3:75:e9:e1:2e:85:5b:9d:2a:44:e6:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8 Validity Not Before: Jan 26 01:01:52 2026 GMT Not After : Jan 27 01:01:52 2026 GMT Subject: CN=6df4bd0f29919c3f44b9add85175eee3fda8b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:37:5e:e0:6f:1f:26:8a:a1:45:5c:c4:2e: 64:28:72:45:1e:1d:af:bb:4c:31:84:cc:64:a6:97: 80:53:09:b5:f0:25:e9:82:8e:ee:3e:bd:7d:e7:b8: 22:60:65:c4:32:7a:6f:4a:a5:ad:a4:bf:46:a4:27: 67:35:45:3f:02:a8:7e:fd:31:1d:3a:72:11:7a:95: 28:f7:3a:eb:c6:51:34:10:75:e4:a1:08:b1:3c:1a: 08:4e:62:86:0e:c9:50:6a:be:37:4e:ec:11:e5:62: 4d:da:22:69:0b:5b:58:f2:3b:ed:7a:64:74:b4:d4: a9:4d:75:fd:33:8e:3c:28:70:92:6b:5b:a7:60:8d: f7:6c:10:30:17:2f:06:c9:46:68:bf:44:49:4a:08: 4b:e0:4d:23:87:88:7d:10:10:c0:2c:9b:eb:9f:2f: 22:4a:7d:37:d1:11:eb:d9:0b:01:7b:1f:1d:16:32: 2e:4b:6d:e9:63:df:c3:cb:8c:8d:d7:7b:94:5b:19: b7:48:fc:72:2a:26:d6:db:f0:13:83:86:83:dd:7c: 32:87:96:b7:49:c5:92:45:3a:a2:46:16:2b:4e:38: 72:bb:65:af:c8:6d:c8:6a:91:8a:13:f0:55:d8:8a: 43:c5:12:55:88:b1:10:99:d2:2d:a9:78:af:ab:8d: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:BD:0F:29:91:9C:3F:44:B9:AD:D8:51:75:EE:E3:FD:A8:B4:E9 X509v3 Authority Key Identifier: keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:31:37:7e:ff:8f:d1:dc:b5:d0:ea:4d:86:ee:bb:b4:4f:13: 1c:eb:7c:0d:d3:d1:22:4c:90:1c:d6:fe:fc:60:d5:af:f3:94: f8:c0:c8:c8:28:2a:99:6c:bf:2a:5a:2d:63:0e:db:34:31:54: 0c:11:0d:49:d4:69:9b:04:8c:67:10:f3:de:16:c8:9b:a8:b9: 29:4a:9e:10:5c:dc:ff:da:03:65:38:a4:c1:40:76:bb:0c:d4: 61:01:4a:4b:e3:e3:ac:0b:34:04:ad:8a:4e:e9:ea:89:ce:a7: d1:34:48:72:f8:fc:38:56:8e:13:ff:ca:aa:86:be:39:66:db: 3b:5c:33:3d:45:d9:3b:b4:d0:d4:1a:38:16:9b:0a:64:70:e0: a2:5c:5f:1d:37:7f:4d:09:72:82:45:56:6f:6e:ab:f1:bd:e9: 80:75:86:f1:da:c4:72:2c:2a:90:c7:34:32:f0:11:39:c2:c7: b0:27:c7:5c:79:4a:75:df:d8:70:8e:4b:86:83:b1:f6:d1:20: 07:d7:c1:37:fe:85:2c:18:28:b7:56:0c:46:33:c8:38:6f:26: 39:d6:22:6e:80:cb:0c:3e:85:00:05:5a:44:fe:7f:d0:ec:0f: d5:94:d3:91:a4:72:00:28:78:ed:ae:d6:66:dc:b3:41:f9:91: 09:2b:37:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kmjdenhLoVbnSpE5kLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx OTJkYTgwHhcNMjYwMTI2MDEwMTUyWhcNMjYwMTI3MDEwMTUyWjAzMTEwLwYDVQQD Eyg2ZGY0YmQwZjI5OTE5YzNmNDRiOWFkZDg1MTc1ZWVlM2ZkYThiNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fY3XuBvHyaKoUVcxC5kKHJFHh2v u0wxhMxkppeAUwm18CXpgo7uPr1957giYGXEMnpvSqWtpL9GpCdnNUU/Aqh+/TEd OnIRepUo9zrrxlE0EHXkoQixPBoITmKGDslQar43TuwR5WJN2iJpC1tY8jvtemR0 tNSpTXX9M448KHCSa1unYI33bBAwFy8GyUZov0RJSghL4E0jh4h9EBDALJvrny8i Sn030RHr2QsBex8dFjIuS23pY9/Dy4yN13uUWxm3SPxyKibW2/ATg4aD3Xwyh5a3 ScWSRTqiRhYrTjhyu2WvyG3IapGKE/BV2IpDxRJViLEQmdItqXivq43V7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG30vQ8pkZw/RLmt2FF17uP9qLTpMB8GA1UdIwQY MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxzE3fv+P 0dy10OpNhu67tE8THOt8DdPRIkyQHNb+/GDVr/OU+MDIyCgqmWy/KlotYw7bNDFU DBENSdRpmwSMZxDz3hbIm6i5KUqeEFzc/9oDZTikwUB2uwzUYQFKS+PjrAs0BK2K Tunqic6n0TRIcvj8OFaOE//Kqoa+OWbbO1wzPUXZO7TQ1Bo4FpsKZHDgolxfHTd/ TQlygkVWb26r8b3pgHWG8drEciwqkMc0MvAROcLHsCfHXHlKdd/YcI5LhoOx9tEg B9fBN/6FLBgot1YMRjPIOG8mOdYiboDLDD6FAAVaRP5/0OwP1ZTTkaRyACh47a7W ZtyzQfmRCSs3fg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:19 2026 by rpki-client