This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: IJhJYFQG4K5yXdUT+AgCqrV6UNUWrsZRIpWzKX0bb8c= Subject key identifier: 1F:75:7B:5D:69:2B:01:DE:1B:21:F9:B5:9F:9A:9D:3C:FF:64:25:86 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019BF4D0BEA37A2427F92A00C712FB54AA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 128D Signing time: Sun 25 Jan 2026 11:01:19 +0000 Manifest this update: Sun 25 Jan 2026 11:01:19 +0000 Manifest next update: Mon 26 Jan 2026 11:01:19 +0000 Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: MFYvqugC71q2hmaD+8p6HcIaMTFAPy4n71jZiRicfHY=) 3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=) 4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=) 5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=) 6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=) 7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=) 8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=) 9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=) 10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:be:a3:7a:24:27:f9:2a:00:c7:12:fb:54:aa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 25 11:01:19 2026 GMT Not After : Jan 26 11:01:19 2026 GMT Subject: CN=1f757b5d692b01de1b21f9b59f9a9d3cff642586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:eb:68:1a:96:71:c3:e9:2d:4f:c6:f2:dc: c2:1c:95:3d:8c:8e:d1:66:66:89:a1:d9:a3:2a:57: b7:f3:0a:60:f4:bd:b3:f8:bc:5c:b7:94:e0:f8:56: c9:24:69:41:70:ed:21:93:fa:16:f7:df:2c:9e:1c: 5f:d6:4a:45:12:34:d4:7e:23:4e:36:12:4a:15:b3: 07:f8:86:81:0a:e1:a7:fe:53:8f:66:5f:b6:19:b5: 3a:b9:4b:7f:35:51:71:c2:55:9f:7a:88:95:0d:39: d6:53:ca:90:82:c3:e1:a3:15:6e:50:05:39:46:8f: ba:18:58:03:4e:ed:67:7b:be:db:ce:5e:e0:4f:e7: 40:ef:96:92:b6:af:4d:66:82:9f:35:9f:39:7f:0a: a0:e6:42:3d:fe:b4:98:f1:ab:5b:e3:0f:8f:ca:a5: 50:3b:f6:20:4a:9f:3f:32:2b:25:33:d9:05:e5:9d: cd:98:16:3a:cc:1b:00:07:07:06:2a:f5:59:db:50: a6:55:cd:81:ce:01:ee:89:ea:d8:9e:df:60:7c:08: 82:8a:ab:98:b4:f1:62:cf:25:45:6d:fe:bf:12:8d: ab:a7:b7:da:08:98:a3:a9:5e:71:51:e7:5a:48:ef: 24:cb:0b:99:4f:91:33:ce:ba:ef:c0:d1:ea:80:90: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:75:7B:5D:69:2B:01:DE:1B:21:F9:B5:9F:9A:9D:3C:FF:64:25:86 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ad:0f:22:db:a9:8c:e9:59:3b:50:10:96:65:52:ea:40:f7: bd:69:c3:30:cd:a4:e5:ea:09:95:c8:b8:a0:81:7b:c3:5d:3b: 7b:c8:fd:fc:1d:f8:d0:6c:b7:46:01:99:e7:49:39:b9:7f:6b: f2:d8:a7:3e:11:71:80:a4:10:2d:1b:21:18:d1:80:a5:ae:b3: 23:09:8a:9c:44:fd:7a:be:b8:84:79:a3:25:ad:43:8c:fc:0c: 4e:78:83:a9:33:6d:43:66:a2:35:9c:53:90:53:84:f6:1a:3a: fa:c9:e1:fb:ab:7f:ef:6d:e0:a2:db:51:34:41:e4:fd:4b:d2: 6b:84:15:4b:6a:66:f4:d3:ae:bf:88:34:89:25:6a:58:44:77: 80:10:7e:24:4d:0b:bd:08:5d:aa:fe:e9:d2:41:69:25:32:1e: a9:e3:13:f3:56:8b:65:e4:ba:94:40:5d:e3:8b:e5:fa:a8:77: 51:47:d9:58:1a:4d:1b:c3:1e:a1:1b:9e:45:f9:0f:bb:26:75: 04:6c:4b:03:e7:42:4a:07:a3:ea:2f:8b:c2:5c:13:3e:ea:3f: 7d:ad:86:8b:e1:a7:76:1d:79:8f:5c:48:89:71:ed:a3:7f:a5: 34:fe:96:d5:06:1d:c9:1a:ef:c0:68:72:fc:f1:b8:3d:b3:99: 9d:21:42:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00L6jeiQn+SoAxxL7VKpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTI1MTEwMTE5WhcNMjYwMTI2MTEwMTE5WjAzMTEwLwYDVQQD EygxZjc1N2I1ZDY5MmIwMWRlMWIyMWY5YjU5ZjlhOWQzY2ZmNjQyNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37fraBqWccPpLU/G8tzCHJU9jI7R ZmaJodmjKle38wpg9L2z+Lxct5Tg+FbJJGlBcO0hk/oW998snhxf1kpFEjTUfiNO NhJKFbMH+IaBCuGn/lOPZl+2GbU6uUt/NVFxwlWfeoiVDTnWU8qQgsPhoxVuUAU5 Ro+6GFgDTu1ne77bzl7gT+dA75aStq9NZoKfNZ85fwqg5kI9/rSY8atb4w+PyqVQ O/YgSp8/MislM9kF5Z3NmBY6zBsABwcGKvVZ21CmVc2BzgHuierYnt9gfAiCiquY tPFizyVFbf6/Eo2rp7faCJijqV5xUedaSO8kywuZT5EzzrrvwNHqgJDfBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB91e11pKwHeGyH5tZ+anTz/ZCWGMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0a0PItup jOlZO1AQlmVS6kD3vWnDMM2k5eoJlci4oIF7w107e8j9/B340Gy3RgGZ50k5uX9r 8tinPhFxgKQQLRshGNGApa6zIwmKnET9er64hHmjJa1DjPwMTniDqTNtQ2aiNZxT kFOE9ho6+snh+6t/723gottRNEHk/UvSa4QVS2pm9NOuv4g0iSVqWER3gBB+JE0L vQhdqv7p0kFpJTIeqeMT81aLZeS6lEBd44vl+qh3UUfZWBpNG8MeoRueRfkPuyZ1 BGxLA+dCSgej6i+LwlwTPuo/fa2Gi+Gndh15j1xIiXHto3+lNP6W1QYdyRrvwGhy /PG4PbOZnSFCBA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:55 2026 by rpki-client