This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json) Hash identifier: POAXR3Mr7GQYViL/pe8SiM2W/hdBZLn9OVah/vfibxM= Subject key identifier: 8A:1A:C8:2C:2F:21:DD:77:65:FB:36:B3:A9:3E:8F:A4:3B:DD:1E:06 Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019BF9C0CC4A4DFC5C50D054783897D1D725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 10:02:00 +0000 Manifest this update: Mon 26 Jan 2026 10:02:00 +0000 Manifest next update: Tue 27 Jan 2026 10:02:00 +0000 Files and hashes: 1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=) 2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: t5Y3KbL99eOga0M7FtJNP+8oYa2uJG84rNBuWNmDwyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:cc:4a:4d:fc:5c:50:d0:54:78:38:97:d1:d7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Jan 26 10:02:00 2026 GMT Not After : Jan 27 10:02:00 2026 GMT Subject: CN=8a1ac82c2f21dd7765fb36b3a93e8fa43bdd1e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:d9:bc:67:32:84:7b:e8:2c:44:ad:a8:2f: 7d:d3:fc:10:49:8d:e3:c5:6d:e1:b3:15:de:19:7b: 1b:79:32:06:c0:e0:08:c8:42:94:55:50:f7:ca:d2: b8:4a:30:4c:c1:70:da:e5:7d:54:64:c8:ef:d6:f9: 4e:d9:99:da:3f:fb:4c:07:70:21:71:4a:1f:b6:5a: 69:29:1c:d9:bd:5c:90:c8:eb:5f:78:9a:73:73:72: 22:bd:ce:a2:20:25:b8:93:d1:79:1f:47:8b:f6:7f: d8:d8:36:46:6e:56:49:72:c4:d9:b7:c0:72:e8:12: 86:55:1a:d3:1a:86:df:af:50:97:3c:c7:bc:f2:66: 66:b0:84:01:0b:67:87:b5:69:b3:8b:a3:05:c1:92: 37:ad:96:ed:c5:9a:7c:ef:bf:55:20:b5:e0:65:a6: 9a:e1:03:c6:83:ef:65:aa:dc:10:7d:b9:3c:08:da: 8f:33:73:e8:5b:65:36:19:c4:75:ca:e3:ec:a5:ec: 0e:d2:1f:95:16:e5:bd:6c:78:60:71:06:85:b5:85: 9f:85:4f:9b:07:19:b5:53:a2:f4:ef:2a:c3:b0:b0: fa:6b:b4:c5:95:45:20:b7:16:f3:b5:16:b2:84:59: 24:eb:f5:cb:fe:bb:29:a2:f8:e3:b5:d0:ea:e4:8e: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1A:C8:2C:2F:21:DD:77:65:FB:36:B3:A9:3E:8F:A4:3B:DD:1E:06 X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:11:59:22:4e:8e:53:f5:83:ee:1a:ab:57:ac:2a:3b:43:73: 1b:53:64:5b:39:fa:f7:2b:e2:f3:6f:f8:72:4f:72:42:a2:c3: 13:85:80:2d:24:bf:39:c2:55:f8:4a:e3:f0:d3:aa:63:6f:ac: 72:f7:17:e2:1f:c0:0c:a5:8a:e7:63:56:54:73:58:85:0e:5a: a6:4e:79:cd:b7:78:47:b2:51:84:8f:e8:55:92:d6:c3:e0:b4: de:2b:04:c7:a3:b8:24:00:8e:95:8e:4d:61:1f:b9:d1:99:1a: f2:17:c5:a6:42:63:c8:f9:d7:d6:ff:42:f6:8f:52:55:92:65: fa:41:a8:06:83:68:50:bc:5e:1e:4e:d6:e3:2c:3b:a4:98:e7: 6d:0d:8c:bf:02:ce:4f:22:e0:48:6c:7a:2b:54:8a:66:e9:f6: 28:f9:02:d7:ef:75:b6:67:63:0b:fb:01:e1:30:29:c4:33:ce: f8:a3:95:95:03:f5:79:18:f2:70:54:85:98:33:0c:af:6e:ce: 64:3d:3d:1c:be:64:54:27:30:a1:c8:88:a8:17:c5:41:12:60: d5:ba:4b:a6:06:dd:83:71:e8:d4:06:bc:59:19:0b:e2:39:87: c3:0a:d1:ec:8c:92:99:5f:ca:73:2f:7f:ac:14:d4:1c:92:91: de:05:61:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wMxKTfxcUNBUeDiX0dclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjYwMTI2MTAwMjAwWhcNMjYwMTI3MTAwMjAwWjAzMTEwLwYDVQQD Eyg4YTFhYzgyYzJmMjFkZDc3NjVmYjM2YjNhOTNlOGZhNDNiZGQxZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMPZvGcyhHvoLEStqC990/wQSY3j xW3hsxXeGXsbeTIGwOAIyEKUVVD3ytK4SjBMwXDa5X1UZMjv1vlO2ZnaP/tMB3Ah cUoftlppKRzZvVyQyOtfeJpzc3Iivc6iICW4k9F5H0eL9n/Y2DZGblZJcsTZt8By 6BKGVRrTGobfr1CXPMe88mZmsIQBC2eHtWmzi6MFwZI3rZbtxZp8779VILXgZaaa 4QPGg+9lqtwQfbk8CNqPM3PoW2U2GcR1yuPspewO0h+VFuW9bHhgcQaFtYWfhU+b Bxm1U6L07yrDsLD6a7TFlUUgtxbztRayhFkk6/XL/rspovjjtdDq5I6C6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoayCwvId13Zfs2s6k+j6Q73R4GMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBFZIk6O U/WD7hqrV6wqO0NzG1NkWzn69yvi82/4ck9yQqLDE4WALSS/OcJV+Erj8NOqY2+s cvcX4h/ADKWK52NWVHNYhQ5apk55zbd4R7JRhI/oVZLWw+C03isEx6O4JACOlY5N YR+50Zka8hfFpkJjyPnX1v9C9o9SVZJl+kGoBoNoULxeHk7W4yw7pJjnbQ2MvwLO TyLgSGx6K1SKZun2KPkC1+91tmdjC/sB4TApxDPO+KOVlQP1eRjycFSFmDMMr27O ZD09HL5kVCcwociIqBfFQRJg1bpLpgbdg3Ho1Aa8WRkL4jmHwwrR7IySmV/Kcy9/ rBTUHJKR3gVh+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:14 2026 by rpki-client