This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json) Hash identifier: 9LOMQRN83f8z2Nvezuz4v98hisPiNzSRtV5iSwG/d4A= Subject key identifier: 97:B7:09:EA:46:6E:EB:31:80:CD:7E:95:48:8F:E8:BB:37:43:B5:5D Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Certificate serial: 019B82042751AE6452D55AA81956FA942272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft Manifest number: 046B Signing time: Sat 03 Jan 2026 04:01:08 +0000 Manifest this update: Sat 03 Jan 2026 04:01:08 +0000 Manifest next update: Sun 04 Jan 2026 04:01:08 +0000 Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=) 2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: LezJbFWcME5aZWoBGR06nk0Y5KM+CXC7KWEAnzYYBl8=) 3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:04:27:51:ae:64:52:d5:5a:a8:19:56:fa:94:22:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Validity Not Before: Jan 3 04:01:08 2026 GMT Not After : Jan 4 04:01:08 2026 GMT Subject: CN=97b709ea466eeb3180cd7e95488fe8bb3743b55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:a0:a1:41:0c:3a:19:65:fb:ef:ce:f8:54: 42:45:65:b7:51:de:b0:ea:e2:9f:19:93:da:78:26: 58:83:97:3a:22:61:d5:4b:2f:7f:b6:d3:2c:2b:e8: a9:c3:79:23:49:e5:a0:c0:df:bb:29:17:30:e2:16: 0f:6b:f2:cc:ec:cb:93:a2:1a:2a:21:28:b6:8e:4e: cf:ac:90:38:6d:0c:32:7c:9c:db:58:d2:1b:96:65: 35:e0:eb:19:26:52:c3:9d:27:de:50:aa:02:71:1b: f2:51:ab:b8:6b:74:1e:69:f2:e8:b1:0c:d8:3e:c4: a7:b9:3e:eb:2b:28:ae:e8:03:e1:1c:77:3b:d8:74: 94:62:2e:20:23:a1:44:f0:b3:0f:fa:29:6f:71:d3: d1:2c:38:22:aa:db:59:e8:ea:aa:6b:e4:88:33:dd: 40:17:75:74:06:46:10:d8:66:c1:00:9b:9b:36:4d: c3:a0:3f:65:af:e3:04:33:92:a1:ec:60:71:aa:d0: bc:00:c0:83:05:e9:b1:ae:a7:ab:76:16:6f:e4:2b: 9f:a9:a4:13:21:e8:7e:b1:c4:25:95:ae:0c:ca:c1: 5d:aa:21:95:c9:4d:d5:0d:09:5b:c9:0a:5e:04:e5: 4f:a4:95:16:d0:ed:0d:3a:17:57:b1:12:38:73:26: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B7:09:EA:46:6E:EB:31:80:CD:7E:95:48:8F:E8:BB:37:43:B5:5D X509v3 Authority Key Identifier: keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:14:51:24:58:3c:5b:00:38:3a:b4:57:17:04:26:b4:1b:45: a6:f5:5f:26:6a:03:c3:62:27:85:b3:ac:e2:6b:92:88:81:fb: 79:4c:a3:d2:6d:e6:04:f9:41:ec:32:ec:3c:c6:99:75:ef:f1: 62:12:68:b1:b7:ba:53:9d:50:38:03:87:11:e1:50:c5:39:3e: 33:27:ff:d1:75:3c:2c:1c:39:2e:f4:3f:80:10:43:d3:c6:88: 12:4b:a6:72:ae:7f:6d:25:33:f7:09:92:1f:1d:f1:c0:2a:de: d7:17:cc:f6:d9:a8:64:a0:7e:19:ef:ed:e5:07:f9:3b:a7:cf: 63:15:6c:7c:b5:23:7d:1d:ba:b1:14:f1:8b:80:44:f0:b0:ed: 3e:e1:5b:a3:f3:0c:91:29:80:ed:a3:c4:df:eb:5e:a9:74:b7: 04:5c:85:15:df:db:48:7e:79:73:82:b2:ba:f4:83:6b:23:49: c6:c4:26:c3:7e:ba:b4:d3:d0:73:53:bc:01:7e:95:57:7a:20: bc:a9:70:e1:75:db:ef:63:b3:f4:6d:91:ca:d6:92:0b:73:bf: 4c:7d:6e:9f:ad:6a:60:fa:24:8e:4c:a9:5e:1d:cf:10:40:f4: 17:e4:5e:a5:f8:47:14:e6:e4:91:57:e3:cd:eb:06:ad:30:54: 4e:3a:c5:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCBCdRrmRS1VqoGVb6lCJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj ZTJmZTUwHhcNMjYwMTAzMDQwMTA4WhcNMjYwMTA0MDQwMTA4WjAzMTEwLwYDVQQD Eyg5N2I3MDllYTQ2NmVlYjMxODBjZDdlOTU0ODhmZThiYjM3NDNiNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxCgoUEMOhll++/O+FRCRWW3Ud6w 6uKfGZPaeCZYg5c6ImHVSy9/ttMsK+ipw3kjSeWgwN+7KRcw4hYPa/LM7MuTohoq ISi2jk7PrJA4bQwyfJzbWNIblmU14OsZJlLDnSfeUKoCcRvyUau4a3QeafLosQzY PsSnuT7rKyiu6APhHHc72HSUYi4gI6FE8LMP+ilvcdPRLDgiqttZ6Oqqa+SIM91A F3V0BkYQ2GbBAJubNk3DoD9lr+MEM5Kh7GBxqtC8AMCDBemxrqerdhZv5CufqaQT Ieh+scQlla4MysFdqiGVyU3VDQlbyQpeBOVPpJUW0O0NOhdXsRI4cybaJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe3CepGbusxgM1+lUiP6Ls3Q7VdMB8GA1UdIwQY MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRRRJFg8 WwA4OrRXFwQmtBtFpvVfJmoDw2InhbOs4muSiIH7eUyj0m3mBPlB7DLsPMaZde/x YhJosbe6U51QOAOHEeFQxTk+Myf/0XU8LBw5LvQ/gBBD08aIEkumcq5/bSUz9wmS Hx3xwCre1xfM9tmoZKB+Ge/t5Qf5O6fPYxVsfLUjfR26sRTxi4BE8LDtPuFbo/MM kSmA7aPE3+teqXS3BFyFFd/bSH55c4KyuvSDayNJxsQmw366tNPQc1O8AX6VV3og vKlw4XXb72Oz9G2RytaSC3O/TH1un61qYPokjkypXh3PEED0F+RepfhHFObkkVfj zesGrTBUTjrFIA== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:13 2026 by rpki-client