This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json) Hash identifier: KRSXO9vQCS+r6n913R4HV1OFFnBqmZDFvStbR3t9Ya8= Subject key identifier: BD:5C:57:3A:AF:A9:89:22:82:11:AB:65:29:73:87:E4:8D:31:C3:39 Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Certificate serial: 019BF4622CD2251A3E4534ED4F6DAD28C525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft Manifest number: 14F7 Signing time: Sun 25 Jan 2026 09:00:33 +0000 Manifest this update: Sun 25 Jan 2026 09:00:33 +0000 Manifest next update: Mon 26 Jan 2026 09:00:33 +0000 Files and hashes: 1: RXn30h9BpJvoZDBG_VhKAWNPT5w.roa (hash: e20aIXT8+TI5fnLf21yjBd8FPloZZbocy7TNGbWjDGk=) 2: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (hash: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8=) 3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 1eyIkcMrnIfB3vyhgRgoKvxa8zI4SR7r2cR3E2QXnnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:2c:d2:25:1a:3e:45:34:ed:4f:6d:ad:28:c5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Validity Not Before: Jan 25 09:00:33 2026 GMT Not After : Jan 26 09:00:33 2026 GMT Subject: CN=bd5c573aafa989228211ab65297387e48d31c339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:75:84:37:7b:c4:15:80:f1:57:0a:73:ae: 31:d9:12:84:ff:c1:6c:1a:b5:71:bc:4b:a9:26:32: 40:67:a3:47:0a:5b:d0:37:e8:2a:b0:39:79:04:03: 24:e6:4b:8a:83:79:9c:f3:c7:4b:54:28:d4:99:2c: cd:7f:00:31:04:26:cb:67:05:14:13:59:b5:69:f2: 2b:fc:bb:5f:66:16:a3:ad:23:83:7e:c3:50:2a:f3: d2:7d:fc:c6:87:bb:6d:fd:a4:3f:63:10:70:12:bb: 6e:44:6d:e3:2f:98:4f:5e:c5:b1:ce:a6:41:91:ab: 29:18:90:27:b3:77:a7:77:26:fe:97:13:09:c5:87: 77:c6:5b:c0:15:81:68:a4:f4:13:34:39:6e:7a:c0: 27:f5:ae:cd:ad:d0:8c:e1:a0:fb:d4:6d:48:b8:84: a7:0c:af:39:a6:a5:0e:b2:19:bb:88:49:3f:fb:b8: 6d:df:94:22:ba:c7:14:da:5a:6f:99:f9:51:03:ba: 29:c2:b0:dd:f6:05:c8:90:47:47:e9:a9:a2:a6:ab: f6:7d:df:68:5e:38:48:07:d4:13:4a:24:93:0b:2d: 55:70:5b:fb:3c:88:95:df:bb:f8:14:e4:e0:5b:e6: 7f:13:77:02:28:cf:b5:a3:83:0c:25:01:89:64:c6: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5C:57:3A:AF:A9:89:22:82:11:AB:65:29:73:87:E4:8D:31:C3:39 X509v3 Authority Key Identifier: keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:99:38:d5:46:44:87:d4:7b:2f:64:54:a5:ff:2d:3c:77:99: 22:f1:ae:ff:3f:ad:fc:2c:d2:1e:2d:ff:88:f1:47:02:28:fb: 93:93:ea:02:7e:12:5f:2f:65:e1:e0:2a:42:9f:ce:12:11:f1: 23:75:50:82:7a:6d:2d:92:ea:ca:10:d9:76:50:a0:83:3c:76: c4:d6:a7:ba:20:04:19:51:a0:47:ed:6b:c1:b7:96:08:ed:cc: 80:e6:d1:83:15:cc:43:4a:28:5e:62:ce:f6:5d:b1:6a:57:0b: 1e:36:af:90:e4:c8:7b:d2:1d:d6:62:82:22:81:e7:f7:42:39: 8b:62:45:51:56:b5:37:b4:7a:74:70:44:43:ca:ac:e5:f3:c4: 2a:9d:0c:07:8c:bc:41:9d:8b:b2:2c:42:2c:8e:df:12:11:d7: 42:68:a8:72:d8:0b:68:be:ed:f7:c6:13:8b:fe:92:ab:28:fa: ef:38:3a:93:0c:dd:d9:d5:c4:58:60:c7:d4:85:8f:79:df:ef: bf:89:93:a9:8e:87:44:9a:a0:c8:c1:64:cf:aa:82:ec:aa:c9: 00:78:91:08:2d:09:0c:21:37:db:60:6d:f1:c5:ee:94:b7:18: cb:f9:48:ba:8b:b0:66:5c:73:9f:25:01:24:c2:8c:c4:81:6b: c1:3c:3d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YizSJRo+RTTtT22tKMUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3 MDBjN2MwHhcNMjYwMTI1MDkwMDMzWhcNMjYwMTI2MDkwMDMzWjAzMTEwLwYDVQQD EyhiZDVjNTczYWFmYTk4OTIyODIxMWFiNjUyOTczODdlNDhkMzFjMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxJ1hDd7xBWA8VcKc64x2RKE/8Fs GrVxvEupJjJAZ6NHClvQN+gqsDl5BAMk5kuKg3mc88dLVCjUmSzNfwAxBCbLZwUU E1m1afIr/LtfZhajrSODfsNQKvPSffzGh7tt/aQ/YxBwErtuRG3jL5hPXsWxzqZB kaspGJAns3endyb+lxMJxYd3xlvAFYFopPQTNDluesAn9a7NrdCM4aD71G1IuISn DK85pqUOshm7iEk/+7ht35QiuscU2lpvmflRA7opwrDd9gXIkEdH6amipqv2fd9o XjhIB9QTSiSTCy1VcFv7PIiV37v4FOTgW+Z/E3cCKM+1o4MMJQGJZMblBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1cVzqvqYkighGrZSlzh+SNMcM5MB8GA1UdIwQY MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5k41UZE h9R7L2RUpf8tPHeZIvGu/z+t/CzSHi3/iPFHAij7k5PqAn4SXy9l4eAqQp/OEhHx I3VQgnptLZLqyhDZdlCggzx2xNanuiAEGVGgR+1rwbeWCO3MgObRgxXMQ0ooXmLO 9l2xalcLHjavkOTIe9Id1mKCIoHn90I5i2JFUVa1N7R6dHBEQ8qs5fPEKp0MB4y8 QZ2LsixCLI7fEhHXQmioctgLaL7t98YTi/6Sqyj67zg6kwzd2dXEWGDH1IWPed/v v4mTqY6HRJqgyMFkz6qC7KrJAHiRCC0JDCE322Bt8cXulLcYy/lIuouwZlxznyUB JMKMxIFrwTw9Xg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:41:20 2026 by rpki-client