This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json) Hash identifier: Z2n1A37gkrucEOV85UrFcd8FingqWW/EI7hkv9veUAs= Subject key identifier: AE:03:FD:24:81:ED:A2:5B:EE:82:F5:06:11:02:F5:80:67:A5:91:08 Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76 Certificate serial: 019BFC5322A4DD7BDDFA1899D371B442C554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft Manifest number: 07CF Signing time: Mon 26 Jan 2026 22:01:05 +0000 Manifest this update: Mon 26 Jan 2026 22:01:05 +0000 Manifest next update: Tue 27 Jan 2026 22:01:05 +0000 Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: I5NSXvB/CbY4JJLBRkCmObE4T7krNRixQML5w/Chtu4=) 2: MOE6KwN-epUQMdljICsn17Njfbg.roa (hash: iNc+kg2dbOxkcfPRJ+ToFioDzAzKbLX2bomVYrhE+a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:22:a4:dd:7b:dd:fa:18:99:d3:71:b4:42:c5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76 Validity Not Before: Jan 26 22:01:05 2026 GMT Not After : Jan 27 22:01:05 2026 GMT Subject: CN=ae03fd2481eda25bee82f5061102f58067a59108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:f9:c1:9d:6b:a2:83:c8:ef:ad:41:1b:56: 9b:07:f0:de:61:30:66:b7:51:77:38:87:ea:fe:64: ca:91:43:3b:f7:db:a4:45:2f:fb:dd:4f:7a:dd:ff: 26:2a:4f:e4:cd:31:f5:ba:9c:07:d3:f4:d9:c1:9c: d0:2e:7c:af:8a:a4:07:9a:38:9a:e6:d0:e9:de:be: 3e:c5:53:d8:c8:e9:b2:e8:39:3c:3a:1b:71:2c:20: 3c:65:1a:e3:56:72:51:58:51:25:61:90:d0:00:71: a1:d2:1b:54:27:a4:8c:0b:f1:b8:a9:7c:0f:f6:2e: 16:27:76:6d:a1:fa:11:a3:14:35:96:aa:cc:fc:81: 1b:eb:e9:1d:3d:c9:2f:ad:c6:92:7f:4a:3e:ff:fe: 37:7f:61:24:e5:35:8e:64:ab:a7:32:c0:cd:00:a1: a9:bb:b4:a2:d0:d7:77:90:78:fe:80:a1:ae:9f:af: 96:24:27:08:e1:d1:b2:e5:95:66:8a:65:a2:63:53: 7a:3c:bc:71:15:0e:f0:b5:b4:fe:e0:65:00:ff:3a: df:4b:f9:0c:fc:ce:98:3b:7b:0f:00:65:a0:60:44: cf:b9:15:1b:8b:e1:49:98:7a:99:bd:12:f7:0a:ae: 00:0a:67:e9:ac:fe:80:62:02:ff:ab:32:bf:78:79: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:FD:24:81:ED:A2:5B:EE:82:F5:06:11:02:F5:80:67:A5:91:08 X509v3 Authority Key Identifier: keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4a:fc:b1:40:f3:a0:cb:f1:5b:01:6f:01:31:9f:ff:e2:c4: 8b:3d:40:84:5c:99:2d:15:2a:27:dc:71:04:3c:9e:a5:f1:52: 36:90:c2:de:0d:23:5c:ae:71:3e:37:b9:d0:ca:b1:3a:ef:79: 88:32:81:a4:f4:56:ff:e2:04:5d:c1:1e:63:d4:b8:1e:fa:f9: 76:19:a4:03:d3:89:2b:17:a4:2e:8e:48:94:91:f7:49:8b:bd: cf:d8:a3:13:02:98:2d:2a:6d:6c:15:19:63:ae:1b:2c:f7:99: 91:6c:44:ee:2d:17:10:99:31:10:77:2e:8a:20:54:e7:c9:31: 68:68:1f:83:a8:9b:45:1d:24:e3:4f:31:df:1e:52:7b:65:d4: 39:33:5b:4c:47:f3:2e:f2:0c:4a:3b:93:95:63:12:c6:c7:73: ad:f6:67:0e:f4:64:63:05:f2:77:b2:2a:c5:77:82:b4:58:a8: ae:d6:6d:03:c4:80:2b:6a:48:94:df:cd:6e:d1:16:29:95:f5: 57:a3:2f:f0:0c:ad:f8:23:46:1d:d1:e8:ac:bd:d5:8d:46:62: ec:e5:8d:a0:54:c2:97:a5:0e:93:fa:0f:87:a6:12:b6:77:9f: b9:08:76:6d:0a:14:3f:9f:78:06:09:8a:58:91:5f:a2:a9:bc: 99:f9:31:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UyKk3Xvd+hiZ03G0QsVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm YjVjNzYwHhcNMjYwMTI2MjIwMTA1WhcNMjYwMTI3MjIwMTA1WjAzMTEwLwYDVQQD EyhhZTAzZmQyNDgxZWRhMjViZWU4MmY1MDYxMTAyZjU4MDY3YTU5MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6b5wZ1rooPI761BG1abB/DeYTBm t1F3OIfq/mTKkUM799ukRS/73U963f8mKk/kzTH1upwH0/TZwZzQLnyviqQHmjia 5tDp3r4+xVPYyOmy6Dk8OhtxLCA8ZRrjVnJRWFElYZDQAHGh0htUJ6SMC/G4qXwP 9i4WJ3ZtofoRoxQ1lqrM/IEb6+kdPckvrcaSf0o+//43f2Ek5TWOZKunMsDNAKGp u7Si0Nd3kHj+gKGun6+WJCcI4dGy5ZVmimWiY1N6PLxxFQ7wtbT+4GUA/zrfS/kM /M6YO3sPAGWgYETPuRUbi+FJmHqZvRL3Cq4ACmfprP6AYgL/qzK/eHmaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4D/SSB7aJb7oL1BhEC9YBnpZEIMB8GA1UdIwQY MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt MWZiNjY4NWE4ZDk3LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3 LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0r8sUDz oMvxWwFvATGf/+LEiz1AhFyZLRUqJ9xxBDyepfFSNpDC3g0jXK5xPje50MqxOu95 iDKBpPRW/+IEXcEeY9S4Hvr5dhmkA9OJKxekLo5IlJH3SYu9z9ijEwKYLSptbBUZ Y64bLPeZkWxE7i0XEJkxEHcuiiBU58kxaGgfg6ibRR0k408x3x5Se2XUOTNbTEfz LvIMSjuTlWMSxsdzrfZnDvRkYwXyd7IqxXeCtFiortZtA8SAK2pIlN/NbtEWKZX1 V6Mv8Ayt+CNGHdHorL3VjUZi7OWNoFTCl6UOk/oPh6YStnefuQh2bQoUP594BgmK WJFfoqm8mfkxnw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:47:20 2026 by rpki-client