This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json) Hash identifier: nSVfBf/HP5FEr5lCBG2uojgFmUIaRXGr/dmW0PqPJx8= Subject key identifier: 76:13:CB:69:5E:C5:0B:45:97:90:C1:CE:C1:72:CF:87:D6:9B:39:C0 Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019BF79B019B7CF2FB8C7468F42022FCC578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft Manifest number: 107B Signing time: Mon 26 Jan 2026 00:01:29 +0000 Manifest this update: Mon 26 Jan 2026 00:01:29 +0000 Manifest next update: Tue 27 Jan 2026 00:01:29 +0000 Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 0HfHvk8GAxzOFhx2rrLlB059tkXXvMIVHakYJCu08cU=) 2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=) 3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9b:01:9b:7c:f2:fb:8c:74:68:f4:20:22:fc:c5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Jan 26 00:01:29 2026 GMT Not After : Jan 27 00:01:29 2026 GMT Subject: CN=7613cb695ec50b459790c1cec172cf87d69b39c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:97:8a:2b:ea:23:53:7e:3e:29:21:7c:be: a9:97:e5:63:c6:93:11:a6:1d:db:68:df:b2:ab:d0: 4c:d3:4f:c6:6f:e2:da:f8:ef:ed:d1:bf:7f:a7:ce: 9f:f6:26:5e:3c:dc:ea:07:36:3b:ac:c3:34:01:2d: fd:0a:6e:a8:cd:3e:95:39:b6:24:e9:59:69:41:a9: 3b:aa:4e:6b:c9:44:76:26:3f:97:55:54:54:ce:7d: 58:25:e0:b9:7a:8a:68:0d:78:d7:7a:e6:bc:ed:e2: c9:19:32:1c:9d:ad:2c:87:e7:34:45:a5:58:51:25: 70:ea:46:18:7d:b6:5c:79:48:ff:e9:a7:79:14:37: a8:33:d8:40:40:29:76:40:b0:d2:a1:23:11:55:a1: 2c:17:b3:c6:d0:4c:d6:8c:76:70:35:68:bd:36:75: fe:c8:ad:32:28:bd:fd:53:a4:76:c8:bb:fa:31:4c: 00:2e:dd:fd:58:9e:0a:a2:fc:de:4f:c8:01:91:b6: 42:f4:76:e9:32:7c:ce:4c:43:b8:5c:c6:4c:23:49: f9:f7:73:fa:17:20:6a:7d:48:17:50:40:b2:d5:00: 69:38:c3:fd:75:ba:b4:b8:e8:50:0a:5b:61:85:a3: 2c:42:44:bd:b1:e4:03:c9:53:67:c7:e1:28:1b:58: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:13:CB:69:5E:C5:0B:45:97:90:C1:CE:C1:72:CF:87:D6:9B:39:C0 X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e4:13:01:92:4e:f5:25:c4:2a:05:c7:d5:f1:de:d6:29:1c: fa:5f:4d:1f:33:2c:4e:27:22:81:4e:cf:df:37:f2:23:36:3d: c8:7a:04:4e:66:ef:e2:97:6d:1a:15:cc:7b:f3:79:8f:39:31: d4:6f:6f:36:f3:a0:a0:a8:95:17:02:0b:86:b9:d3:b9:53:60: 8e:e5:77:0d:9d:44:de:ff:3d:fa:10:d2:ee:14:11:1d:c7:cb: dc:c4:51:7f:61:71:ef:8d:e4:3c:19:94:46:a6:60:c3:24:0b: 20:65:ae:9b:3b:ca:3e:20:65:ad:7a:40:aa:7b:fa:49:03:9b: 41:d7:5a:fd:39:e4:9c:47:02:de:b9:38:80:15:ec:f6:bb:f0: c4:28:98:aa:8f:97:c5:63:c1:81:37:cf:54:38:b9:56:63:2e: b2:ee:c3:43:b4:c3:48:5b:92:cc:16:73:ae:f9:cb:07:12:1f: 9d:a2:70:a7:54:0f:87:4b:f7:ac:7c:d4:97:c3:ef:c5:de:fb: bc:7f:f0:33:e8:d5:33:e7:31:01:fc:52:30:6b:4e:bd:9b:04: 1f:f1:3e:35:30:f9:ae:50:74:72:9c:9e:f3:46:74:33:b7:58: d9:47:72:cd:dd:e7:78:b4:24:a1:86:53:fe:08:30:ae:43:ac: dd:79:de:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mwGbfPL7jHRo9CAi/MV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjYwMTI2MDAwMTI5WhcNMjYwMTI3MDAwMTI5WjAzMTEwLwYDVQQD Eyg3NjEzY2I2OTVlYzUwYjQ1OTc5MGMxY2VjMTcyY2Y4N2Q2OWIzOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM2XiivqI1N+PikhfL6pl+VjxpMR ph3baN+yq9BM00/Gb+La+O/t0b9/p86f9iZePNzqBzY7rMM0AS39Cm6ozT6VObYk 6VlpQak7qk5ryUR2Jj+XVVRUzn1YJeC5eopoDXjXeua87eLJGTIcna0sh+c0RaVY USVw6kYYfbZceUj/6ad5FDeoM9hAQCl2QLDSoSMRVaEsF7PG0EzWjHZwNWi9NnX+ yK0yKL39U6R2yLv6MUwALt39WJ4KovzeT8gBkbZC9HbpMnzOTEO4XMZMI0n593P6 FyBqfUgXUECy1QBpOMP9dbq0uOhQClthhaMsQkS9seQDyVNnx+EoG1j6IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYTy2lexQtFl5DBzsFyz4fWmznAMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeQTAZJO 9SXEKgXH1fHe1ikc+l9NHzMsTicigU7P3zfyIzY9yHoETmbv4pdtGhXMe/N5jzkx 1G9vNvOgoKiVFwILhrnTuVNgjuV3DZ1E3v89+hDS7hQRHcfL3MRRf2Fx743kPBmU RqZgwyQLIGWumzvKPiBlrXpAqnv6SQObQdda/TnknEcC3rk4gBXs9rvwxCiYqo+X xWPBgTfPVDi5VmMusu7DQ7TDSFuSzBZzrvnLBxIfnaJwp1QPh0v3rHzUl8Pvxd77 vH/wM+jVM+cxAfxSMGtOvZsEH/E+NTD5rlB0cpye80Z0M7dY2Udyzd3neLQkoYZT /ggwrkOs3XneUg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:43 2026 by rpki-client