This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json) Hash identifier: q7op2DTZA/jmZ7DiW+KJZ6BQBMY9pR8doDEjpk8yQXc= Subject key identifier: 2E:73:0C:BB:7B:0A:F1:41:96:1C:5D:FC:1E:47:A3:53:DB:3C:8F:E5 Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019BFA2DB1B17CD5DDBE3E90CD612DFAEDAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft Manifest number: 0960 Signing time: Mon 26 Jan 2026 12:00:57 +0000 Manifest this update: Mon 26 Jan 2026 12:00:57 +0000 Manifest next update: Tue 27 Jan 2026 12:00:57 +0000 Files and hashes: 1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: 9GgH6t1KE7eJFRoBVCK0Oy58TmZsObVfFgkDFsE2TVc=) 2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=) 3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=) 4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:b1:b1:7c:d5:dd:be:3e:90:cd:61:2d:fa:ed:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Jan 26 12:00:57 2026 GMT Not After : Jan 27 12:00:57 2026 GMT Subject: CN=2e730cbb7b0af141961c5dfc1e47a353db3c8fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:73:03:47:a9:2e:28:52:4b:03:ab:86:1c: 86:0c:18:45:18:84:a8:39:ae:28:b4:b0:9f:b0:94: c2:21:9d:ce:89:39:58:32:d1:e0:a6:ab:9d:ae:ae: 0c:25:71:a2:4d:af:8a:1e:0e:76:05:d1:3e:37:51: 07:65:c6:c3:13:07:4b:9c:80:6f:38:71:a5:31:b1: 55:18:aa:07:04:0a:2b:45:dc:a8:8a:45:af:4c:dd: c2:5c:05:ac:34:f6:24:d5:1c:5c:22:64:93:9a:57: 8b:05:2f:61:b4:7c:d0:4d:2b:1d:db:8e:79:35:c1: 46:ee:d4:ad:8c:e3:c1:c0:03:b6:9f:2a:1c:11:fb: 2f:27:85:69:5f:53:9c:fe:98:37:1f:f1:26:2c:27: 8b:36:32:1f:f5:f0:0d:df:2f:72:fd:92:c0:b5:86: 01:d7:06:51:a7:46:6b:67:45:50:0c:20:37:98:81: 86:a4:50:76:9a:2c:f7:f9:2d:cc:09:13:ea:0b:c6: cf:39:dc:ec:da:b9:ba:31:6d:b8:f4:6b:5f:60:06: 65:98:77:0e:98:96:b3:80:1a:8c:f6:6f:76:2c:29: a0:62:0d:d2:e3:3b:fe:f7:eb:d2:89:25:63:44:6d: 63:7c:7f:54:70:58:f5:c8:c9:5c:12:a0:66:0f:ff: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:73:0C:BB:7B:0A:F1:41:96:1C:5D:FC:1E:47:A3:53:DB:3C:8F:E5 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3e:35:8f:3d:e2:09:20:b9:15:e3:e7:1a:39:28:a3:40:14: 38:d1:88:d0:c8:63:2e:34:d3:d9:64:8d:20:f4:23:40:f6:d7: 02:63:b0:62:54:1d:f3:5f:63:92:87:34:d9:38:de:08:e4:b4: 21:8a:ed:6c:be:69:c0:fa:f7:e9:2a:a7:ae:a4:e8:c7:ee:f8: b0:50:8c:5c:9c:1b:af:a1:de:57:af:13:03:d0:b6:62:44:06: e9:6b:f5:94:03:66:a1:ab:65:85:4e:a3:e7:b8:6a:2e:ce:f7: bf:dd:78:e8:e5:d4:50:15:4d:24:ad:96:13:8f:28:11:eb:c6: 8f:b3:72:d1:be:51:69:cd:97:ee:ff:95:89:cb:37:79:bf:24: 68:df:53:64:db:ed:bc:65:98:fa:3f:f5:da:dc:14:f6:5d:5a: df:2a:63:5f:a5:8b:29:7a:b2:c5:ff:d1:a2:fb:6d:61:c4:f5: 60:a4:af:f1:27:2a:53:88:79:c5:6c:fa:c4:57:d5:14:af:dc: fc:7a:b6:4e:76:9c:c2:c6:4c:78:b8:6f:33:41:f7:57:13:b5: b4:16:cc:dd:9e:86:a7:9f:29:7a:2d:de:95:65:43:3b:51:6d: 08:16:f9:b3:af:55:64:1e:7a:8e:b5:5b:4b:26:25:96:71:9a: 0d:13:57:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LbGxfNXdvj6QzWEt+u2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjYwMTI2MTIwMDU3WhcNMjYwMTI3MTIwMDU3WjAzMTEwLwYDVQQD EygyZTczMGNiYjdiMGFmMTQxOTYxYzVkZmMxZTQ3YTM1M2RiM2M4ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jhzA0epLihSSwOrhhyGDBhFGISo Oa4otLCfsJTCIZ3OiTlYMtHgpqudrq4MJXGiTa+KHg52BdE+N1EHZcbDEwdLnIBv OHGlMbFVGKoHBAorRdyoikWvTN3CXAWsNPYk1RxcImSTmleLBS9htHzQTSsd2455 NcFG7tStjOPBwAO2nyocEfsvJ4VpX1Oc/pg3H/EmLCeLNjIf9fAN3y9y/ZLAtYYB 1wZRp0ZrZ0VQDCA3mIGGpFB2miz3+S3MCRPqC8bPOdzs2rm6MW249GtfYAZlmHcO mJazgBqM9m92LCmgYg3S4zv+9+vSiSVjRG1jfH9UcFj1yMlcEqBmD/82rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5zDLt7CvFBlhxd/B5Ho1PbPI/lMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT41jz3i CSC5FePnGjkoo0AUONGI0MhjLjTT2WSNIPQjQPbXAmOwYlQd819jkoc02TjeCOS0 IYrtbL5pwPr36SqnrqTox+74sFCMXJwbr6HeV68TA9C2YkQG6Wv1lANmoatlhU6j 57hqLs73v9146OXUUBVNJK2WE48oEevGj7Ny0b5Rac2X7v+Vics3eb8kaN9TZNvt vGWY+j/12twU9l1a3ypjX6WLKXqyxf/RovttYcT1YKSv8ScqU4h5xWz6xFfVFK/c /Hq2TnacwsZMeLhvM0H3VxO1tBbM3Z6Gp58pei3elWVDO1FtCBb5s69VZB56jrVb SyYllnGaDRNXDw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:00 2026 by rpki-client