This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json) Hash identifier: ikSDFQxblsznDPhR75yCVjAbjB+K5IAv4n5KUUQPlT0= Subject key identifier: 21:5D:6D:3B:5F:B6:B4:8A:9B:17:6A:D7:F1:0C:56:31:D2:2E:2A:59 Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Certificate serial: 019BF4628C62C3426DE5B4E1A0092F0AE24D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft Manifest number: 0643 Signing time: Sun 25 Jan 2026 09:00:57 +0000 Manifest this update: Sun 25 Jan 2026 09:00:57 +0000 Manifest next update: Mon 26 Jan 2026 09:00:57 +0000 Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: sGyd1LUrHlyzF9mnLw9Ejo3qX8iFWYjJDyFBxgjlF8c=) 2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:8c:62:c3:42:6d:e5:b4:e1:a0:09:2f:0a:e2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Validity Not Before: Jan 25 09:00:57 2026 GMT Not After : Jan 26 09:00:57 2026 GMT Subject: CN=215d6d3b5fb6b48a9b176ad7f10c5631d22e2a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:e1:1d:95:0e:6e:72:91:50:4d:8a:35:4d: c6:31:f2:6f:d6:59:df:34:19:3b:87:9a:4d:97:40: 9d:50:56:d1:b8:06:35:a2:91:ec:fe:1a:64:bc:8d: 33:42:6f:a1:55:b7:ae:97:2c:e9:65:4d:7b:e3:55: c9:bb:ce:d7:37:f0:53:02:af:0b:c1:e8:05:3a:e2: e0:12:43:94:0a:ac:52:93:dc:23:a1:11:ea:a3:b3: d3:c1:48:33:27:0c:a8:c3:76:ba:5f:d6:0a:88:c1: a4:5a:5e:7a:1f:3b:78:94:bd:30:bf:54:3f:c1:2c: a7:da:b2:b9:5e:35:bb:c3:6a:be:01:88:d5:25:e3: a2:72:31:3e:ba:69:bc:30:d9:0c:7d:29:2b:b0:04: 1c:61:a1:ac:74:fb:8f:1b:d3:64:28:c0:7c:20:63: 18:b4:b9:b8:be:d2:3b:ef:37:40:a2:7d:09:2a:db: d7:ef:f0:3e:18:c3:f7:04:56:93:61:c4:e8:ba:cd: fb:c9:f8:39:ed:4b:9b:60:10:77:06:62:bb:5a:cb: 35:96:68:65:98:57:2f:d3:86:4c:02:d2:43:11:cc: e6:4f:de:0f:5e:2b:05:c5:91:39:50:c6:6c:06:f9: 9e:25:de:53:23:1d:85:9c:d9:c7:e2:99:0b:55:d3: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5D:6D:3B:5F:B6:B4:8A:9B:17:6A:D7:F1:0C:56:31:D2:2E:2A:59 X509v3 Authority Key Identifier: keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8b:b5:1c:5c:cf:5a:7a:96:ea:20:86:09:5b:b6:89:ec:8b: 51:6b:a8:e4:d1:25:8e:c4:7c:01:be:91:79:16:f7:99:aa:28: 70:65:30:c2:bf:e9:4f:80:7e:ae:d5:d3:a6:c4:3f:0d:c8:7b: 8d:21:50:62:2d:b1:fd:22:c9:ec:10:02:94:57:5b:dd:f2:36: 19:ea:74:a9:8d:90:49:97:a2:70:74:3a:73:ea:ab:e8:db:ac: 75:ac:e7:11:2e:49:bd:2f:84:0c:30:50:37:08:4f:88:80:28: 08:c9:6a:8a:85:ce:18:2d:a9:d4:3c:5a:71:3f:19:83:32:d2: f2:65:f8:01:cc:8f:cc:15:2f:cd:89:83:c0:44:24:b9:87:52: d2:5c:5b:69:17:93:1c:78:c8:67:ff:9c:a6:b0:4c:e3:50:21: c4:97:7b:08:c6:dd:a2:8f:59:85:96:d2:06:8f:31:d8:25:6a: fa:ae:eb:02:e2:cf:39:96:e8:fd:5d:79:dd:9f:0f:04:e8:5d: 6d:12:15:a9:88:06:5f:40:b0:af:0c:a6:c1:6e:a6:9d:d6:f5: 93:e5:67:db:86:c2:6f:04:41:e4:b1:99:4f:c7:14:27:31:26: 92:20:67:ac:d9:e1:a7:4a:35:fd:b3:96:3f:4c:c8:c1:22:59: 8d:6b:0d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yoxiw0Jt5bThoAkvCuJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj ZDMxNzQwHhcNMjYwMTI1MDkwMDU3WhcNMjYwMTI2MDkwMDU3WjAzMTEwLwYDVQQD EygyMTVkNmQzYjVmYjZiNDhhOWIxNzZhZDdmMTBjNTYzMWQyMmUyYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXHhHZUObnKRUE2KNU3GMfJv1lnf NBk7h5pNl0CdUFbRuAY1opHs/hpkvI0zQm+hVbeulyzpZU1741XJu87XN/BTAq8L wegFOuLgEkOUCqxSk9wjoRHqo7PTwUgzJwyow3a6X9YKiMGkWl56Hzt4lL0wv1Q/ wSyn2rK5XjW7w2q+AYjVJeOicjE+umm8MNkMfSkrsAQcYaGsdPuPG9NkKMB8IGMY tLm4vtI77zdAon0JKtvX7/A+GMP3BFaTYcTous37yfg57UubYBB3BmK7Wss1lmhl mFcv04ZMAtJDEczmT94PXisFxZE5UMZsBvmeJd5TIx2FnNnH4pkLVdNq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFdbTtftrSKmxdq1/EMVjHSLipZMB8GA1UdIwQY MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4u1HFzP WnqW6iCGCVu2ieyLUWuo5NEljsR8Ab6ReRb3maoocGUwwr/pT4B+rtXTpsQ/Dch7 jSFQYi2x/SLJ7BAClFdb3fI2Gep0qY2QSZeicHQ6c+qr6NusdaznES5JvS+EDDBQ NwhPiIAoCMlqioXOGC2p1DxacT8ZgzLS8mX4AcyPzBUvzYmDwEQkuYdS0lxbaReT HHjIZ/+cprBM41AhxJd7CMbdoo9ZhZbSBo8x2CVq+q7rAuLPOZbo/V153Z8PBOhd bRIVqYgGX0CwrwymwW6mndb1k+Vn24bCbwRB5LGZT8cUJzEmkiBnrNnhp0o1/bOW P0zIwSJZjWsN4g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:01 2026 by rpki-client