This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json) Hash identifier: xabWjgqTSFahKJo9YBAFt7GVAFtttLYJKWxTVVxoEJA= Subject key identifier: E7:83:AD:83:78:F2:55:F0:B5:04:C7:11:72:2F:E3:DC:4D:1D:56:6A Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64 Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864 Certificate serial: 019BF4D0B7719E7FED613DFF47ADEBB2D992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft Manifest number: 0174 Signing time: Sun 25 Jan 2026 11:01:17 +0000 Manifest this update: Sun 25 Jan 2026 11:01:17 +0000 Manifest next update: Mon 26 Jan 2026 11:01:17 +0000 Files and hashes: 1: KQelvFl-0S2BnhTjmwfeewzy0K0.roa (hash: eHfnP6Dgwq60SUqBjtwY/17CbS0N6nRtKkrY1JJPGsI=) 2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: D/gOSGBCrojH/NJi66/kaNoK9Hk5J89+8qLx2siHDVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:b7:71:9e:7f:ed:61:3d:ff:47:ad:eb:b2:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864 Validity Not Before: Jan 25 11:01:17 2026 GMT Not After : Jan 26 11:01:17 2026 GMT Subject: CN=e783ad8378f255f0b504c711722fe3dc4d1d566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:45:4c:a4:61:bf:61:fc:49:cc:12:1b:00: 47:90:20:a4:ad:1b:31:21:de:23:e5:d4:32:1c:d6: 4c:1a:c9:af:9a:cc:5c:11:3a:2d:26:3a:4e:9e:45: c3:1a:64:25:5d:9e:61:bc:af:ce:2e:c8:fe:2b:52: c0:b2:d6:38:7a:b1:8d:03:0c:42:d0:34:b5:05:f7: 4a:a1:af:cb:86:9d:2c:56:ec:d7:f9:f3:66:64:35: f5:8e:11:90:80:0a:94:1a:37:c4:7e:c3:92:58:c8: e8:29:01:4d:e9:19:f9:67:af:b3:2c:6c:68:88:bc: 80:9d:75:b7:7f:b9:0f:ea:ad:1f:61:14:87:02:6f: 8d:fb:a7:2d:b7:d0:57:03:b4:29:a9:48:bd:7b:75: 60:f9:9e:0d:30:67:6a:f9:4f:56:42:85:33:b1:0d: a4:db:f2:e4:1a:ab:8e:84:2d:59:03:49:55:2c:64: c1:d3:c2:50:40:df:b0:5a:fa:54:33:a0:08:d9:4c: a9:9e:40:0d:f8:92:46:5f:74:06:76:a9:0f:91:8a: 31:05:b7:fb:ae:f3:09:54:e8:df:76:e9:4c:f7:f3: 4d:ff:bc:52:d6:54:e3:48:37:ea:73:11:e0:fa:a2: 68:c5:30:dc:a7:30:3f:99:3f:ee:8f:00:24:2c:e7: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:AD:83:78:F2:55:F0:B5:04:C7:11:72:2F:E3:DC:4D:1D:56:6A X509v3 Authority Key Identifier: keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9f:6f:2e:4d:9e:fd:f9:08:99:2d:d2:85:38:ba:39:b4:dc: 01:3e:0b:39:9a:f5:ca:8f:3a:f4:1e:4c:3a:86:e3:a6:b8:bd: 0e:26:a0:26:54:51:0f:c2:87:08:6e:ea:ba:7c:99:0f:c5:f6: 73:fb:7e:29:77:9e:5a:a2:65:b9:6d:14:50:fc:a9:05:69:4a: 06:ab:d8:f7:76:c3:f3:6b:6f:01:ee:bd:9a:6b:7f:1d:72:8c: 2f:f1:1e:be:16:91:44:b3:cd:4d:ef:bd:52:5f:68:8d:aa:1e: a6:4c:25:e6:30:14:92:13:d4:d9:94:65:af:77:54:85:f6:10: a3:3b:95:7c:3b:e6:6b:76:04:fc:80:e9:b9:58:a9:77:dd:a5: 24:d1:97:39:1c:9c:92:d4:cb:24:7e:fe:6c:07:a3:e0:e9:5d: 63:87:d2:21:38:c1:ea:10:ff:25:be:a5:3e:7a:1b:25:97:a6: 36:46:73:2d:f5:1b:5b:09:01:cc:3f:9f:6f:04:e8:85:5a:48: 4e:83:10:8c:93:18:49:67:f3:6a:f8:7c:37:ab:8d:02:e2:30: 09:d1:c2:c6:af:da:55:0e:a6:eb:f0:b5:16:67:55:95:01:6e: ad:af:ad:aa:2b:14:75:ab:fb:b6:fa:f8:c9:53:55:8b:7c:36: 82:47:71:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Ldxnn/tYT3/R63rstmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5 MjU4NjQwHhcNMjYwMTI1MTEwMTE3WhcNMjYwMTI2MTEwMTE3WjAzMTEwLwYDVQQD EyhlNzgzYWQ4Mzc4ZjI1NWYwYjUwNGM3MTE3MjJmZTNkYzRkMWQ1NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+FFTKRhv2H8ScwSGwBHkCCkrRsx Id4j5dQyHNZMGsmvmsxcETotJjpOnkXDGmQlXZ5hvK/OLsj+K1LAstY4erGNAwxC 0DS1BfdKoa/Lhp0sVuzX+fNmZDX1jhGQgAqUGjfEfsOSWMjoKQFN6Rn5Z6+zLGxo iLyAnXW3f7kP6q0fYRSHAm+N+6ctt9BXA7QpqUi9e3Vg+Z4NMGdq+U9WQoUzsQ2k 2/LkGquOhC1ZA0lVLGTB08JQQN+wWvpUM6AI2UypnkAN+JJGX3QGdqkPkYoxBbf7 rvMJVOjfdulM9/NN/7xS1lTjSDfqcxHg+qJoxTDcpzA/mT/ujwAkLOdv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeDrYN48lXwtQTHEXIv49xNHVZqMB8GA1UdIwQY MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr59vLk2e /fkImS3ShTi6ObTcAT4LOZr1yo869B5MOobjpri9DiagJlRRD8KHCG7qunyZD8X2 c/t+KXeeWqJluW0UUPypBWlKBqvY93bD82tvAe69mmt/HXKML/EevhaRRLPNTe+9 Ul9ojaoepkwl5jAUkhPU2ZRlr3dUhfYQozuVfDvma3YE/IDpuVipd92lJNGXORyc ktTLJH7+bAej4OldY4fSITjB6hD/Jb6lPnobJZemNkZzLfUbWwkBzD+fbwTohVpI ToMQjJMYSWfzavh8N6uNAuIwCdHCxq/aVQ6m6/C1FmdVlQFura+tqisUdav7tvr4 yVNVi3w2gkdxcA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:04 2026 by rpki-client