This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: 3Ws0o1x8E9u9w9OyYQbaViexczJTPfaYAZfXaKOivI4= Subject key identifier: B3:E7:68:D2:A4:DD:DD:80:AA:A5:85:C4:14:E9:9C:72:2C:15:18:1E Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019BF989483CD57ED673F034B70E77E26698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0D4A Signing time: Mon 26 Jan 2026 09:01:22 +0000 Manifest this update: Mon 26 Jan 2026 09:01:22 +0000 Manifest next update: Tue 27 Jan 2026 09:01:22 +0000 Files and hashes: 1: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=) 2: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: qHpxBBGFA+uZOpyaOgJP5w+6b1iYUjcEJw8KU00Agr0=) 3: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=) 4: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=) 5: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (hash: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg=) 6: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=) 7: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=) 8: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=) 9: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=) 10: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:48:3c:d5:7e:d6:73:f0:34:b7:0e:77:e2:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 26 09:01:22 2026 GMT Not After : Jan 27 09:01:22 2026 GMT Subject: CN=b3e768d2a4dddd80aaa585c414e99c722c15181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:21:fd:43:f4:e2:02:92:eb:61:99:79:b1: 64:e3:27:7b:af:e1:84:34:1e:0d:54:36:02:f8:49: 5b:8f:be:6c:2b:d6:e1:31:34:81:86:89:e4:2f:72: b8:57:82:bf:28:b5:e0:ab:9b:31:e0:09:6f:4c:25: e3:81:01:cf:11:5b:f3:fb:c2:64:02:52:61:ae:29: 9f:12:a6:47:5c:aa:00:c2:81:3a:e5:9e:24:8c:e8: ca:63:d5:85:59:e3:d9:09:42:4a:3e:3a:31:06:5c: 82:d0:d3:67:18:97:fa:eb:56:38:c9:90:d4:63:cf: 8f:2f:21:7b:5a:b4:a9:cb:56:a8:3a:61:3f:7b:53: b1:66:36:2b:f8:ef:39:3c:b3:73:f7:39:5d:c6:df: 94:ca:47:f1:a2:63:a0:dc:47:62:4e:9b:1a:1a:c7: 38:47:73:f1:82:aa:0a:10:63:29:e6:af:56:92:93: c7:81:b4:cb:0b:f7:30:e8:d2:6b:56:e6:1a:20:5e: 29:84:56:14:a1:89:f9:a7:58:11:d4:db:28:ab:f6: b1:42:f6:b7:20:f2:17:ab:c9:93:a6:a0:9e:58:0f: 4c:e6:7a:1e:7d:23:fa:d7:3b:92:42:31:9a:db:81: 30:66:86:19:5c:c5:eb:55:71:39:6b:56:28:f1:e7: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:68:D2:A4:DD:DD:80:AA:A5:85:C4:14:E9:9C:72:2C:15:18:1E X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d9:06:c4:9b:1b:e2:42:1d:c0:8d:5d:c8:54:2d:e6:bf:13: ff:15:55:28:2c:b9:49:bd:c6:3a:e2:e8:71:92:74:d9:0f:10: 8a:dc:c1:a2:12:ff:df:c9:f8:38:01:5c:45:54:1c:25:76:1f: 28:8f:99:c5:eb:6b:7e:42:fc:e0:77:34:c0:a2:48:e1:3b:12: ac:32:90:c3:e1:99:93:ad:92:1f:ff:6a:9d:61:64:57:ec:b3: 1f:75:bb:a9:87:ae:6b:30:68:71:d6:73:56:ab:98:c0:4c:46: 0d:c6:82:9c:a2:c4:85:9e:75:d1:87:f5:ea:4f:a4:c3:8f:c0: 0a:0e:ea:39:7a:08:5e:42:55:bb:69:24:74:58:de:ae:ce:62: de:70:82:5b:0e:d8:12:1b:0f:bf:fd:86:1d:56:bf:f2:47:54: ea:a3:6c:75:7d:96:31:d3:40:8b:04:9e:66:54:30:ed:71:f8: 29:b7:cf:23:28:a3:99:45:8c:8e:25:b5:dc:a0:14:cc:4d:c8: 87:04:16:d2:5a:b7:8b:d0:d3:a7:02:e1:1b:70:a6:b8:6a:3e: 0e:14:bb:98:93:02:c8:2a:2c:98:d5:d4:7a:a3:fc:87:96:b1: 6b:a2:18:fb:31:e5:41:f1:5b:03:17:22:d8:fd:0b:7b:ec:46: 27:94:74:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iUg81X7Wc/A0tw534maYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTI2MDkwMTIyWhcNMjYwMTI3MDkwMTIyWjAzMTEwLwYDVQQD EyhiM2U3NjhkMmE0ZGRkZDgwYWFhNTg1YzQxNGU5OWM3MjJjMTUxODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Soh/UP04gKS62GZebFk4yd7r+GE NB4NVDYC+Elbj75sK9bhMTSBhonkL3K4V4K/KLXgq5sx4AlvTCXjgQHPEVvz+8Jk AlJhrimfEqZHXKoAwoE65Z4kjOjKY9WFWePZCUJKPjoxBlyC0NNnGJf661Y4yZDU Y8+PLyF7WrSpy1aoOmE/e1OxZjYr+O85PLNz9zldxt+UykfxomOg3EdiTpsaGsc4 R3PxgqoKEGMp5q9WkpPHgbTLC/cw6NJrVuYaIF4phFYUoYn5p1gR1Nsoq/axQva3 IPIXq8mTpqCeWA9M5noefSP61zuSQjGa24EwZoYZXMXrVXE5a1Yo8ed2uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPnaNKk3d2AqqWFxBTpnHIsFRgeMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdkGxJsb 4kIdwI1dyFQt5r8T/xVVKCy5Sb3GOuLocZJ02Q8QitzBohL/38n4OAFcRVQcJXYf KI+ZxetrfkL84Hc0wKJI4TsSrDKQw+GZk62SH/9qnWFkV+yzH3W7qYeuazBocdZz VquYwExGDcaCnKLEhZ510Yf16k+kw4/ACg7qOXoIXkJVu2kkdFjers5i3nCCWw7Y EhsPv/2GHVa/8kdU6qNsdX2WMdNAiwSeZlQw7XH4KbfPIyijmUWMjiW13KAUzE3I hwQW0lq3i9DTpwLhG3CmuGo+DhS7mJMCyCosmNXUeqP8h5axa6IY+zHlQfFbAxci 2P0Le+xGJ5R0/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:15 2026 by rpki-client