This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json) Hash identifier: lj4AhBHKpbRSxKBIn2MaCmKZFDDi6PSltjxIsjZlBAA= Subject key identifier: C8:BA:CD:E6:2F:F3:87:7E:A3:C0:6C:19:37:93:FD:37:F3:6E:89:CC Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384 Certificate serial: 019BFD9C606092954A308A11C9DECCDBEDD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft Manifest number: 177F Signing time: Tue 27 Jan 2026 04:00:42 +0000 Manifest this update: Tue 27 Jan 2026 04:00:42 +0000 Manifest next update: Wed 28 Jan 2026 04:00:42 +0000 Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: TMNGakPEXLOsAP9DlBKDOnfEU++Pu5XNk8m3n+jQDmU=) 2: QKTIYLK1WrJ4lEHTpt0XBIkbbcY.roa (hash: Aq9b63DbV2PHKSgFXgnbBX80EJsS6u4ad6/+U2GDTlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:60:60:92:95:4a:30:8a:11:c9:de:cc:db:ed:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384 Validity Not Before: Jan 27 04:00:42 2026 GMT Not After : Jan 28 04:00:42 2026 GMT Subject: CN=c8bacde62ff3877ea3c06c193793fd37f36e89cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:ff:b5:ee:d4:be:e8:9c:03:b9:32:9f:cb: 7f:a0:10:fc:d5:cb:a2:4a:0c:36:6f:90:90:0e:84: d3:19:cd:69:85:ca:d3:81:90:db:48:47:8e:5e:8e: 3e:b6:05:c6:5a:99:50:15:7a:ae:47:cd:17:61:cd: b6:a7:97:7a:b9:21:b6:54:f6:ca:49:23:19:eb:4e: d2:0b:6d:90:6e:87:52:a3:80:89:f9:fc:75:d1:c7: 49:27:07:a9:5f:d7:0f:30:ca:48:82:97:ac:9c:8c: b5:56:97:6e:69:b3:98:81:2d:81:aa:2a:3f:ce:68: cf:0d:0a:eb:f2:8f:e1:a9:bc:2d:c9:a2:80:dc:48: bc:a9:46:e4:f8:9c:17:33:75:c3:b7:e7:fa:bb:82: 70:4e:8e:0c:63:cc:4e:2e:77:5b:0e:33:60:33:cb: 35:64:01:99:5f:14:5c:d3:3c:e1:71:ab:c5:79:be: 66:96:b6:54:da:8a:59:b4:d1:8d:0c:ec:7c:01:d6: 31:6e:95:7f:4a:dd:0e:a0:05:0b:f2:5a:eb:70:da: 43:61:ee:2d:b5:6c:1a:01:9b:b1:ae:72:13:b3:26: c9:a2:23:49:47:03:47:81:33:9a:1f:11:f2:38:f2: ea:c8:b0:97:f3:3d:46:d0:cc:af:4e:21:be:d6:1a: 29:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BA:CD:E6:2F:F3:87:7E:A3:C0:6C:19:37:93:FD:37:F3:6E:89:CC X509v3 Authority Key Identifier: keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:1c:16:cc:b7:d7:d4:eb:82:27:87:89:50:93:85:79:eb: 22:38:b4:b8:85:56:08:6e:87:8b:bd:bb:b6:c0:9f:b4:ef:1a: b1:db:c5:09:be:79:f0:dc:ef:ec:b6:16:5b:85:e9:db:80:31: a7:17:f8:2c:5c:d5:79:cb:77:d0:00:0e:ce:46:40:4f:fb:9e: 2d:e0:f2:52:e6:5d:3a:bb:2b:30:99:10:51:c4:67:80:1d:cf: 3c:24:02:d0:bd:df:bf:47:19:3b:84:f7:45:c5:92:11:fe:e0: ab:0a:47:29:53:f7:7e:2a:49:a9:59:6c:bf:50:95:e9:32:a9: a5:f9:2c:b4:ea:f3:06:32:c3:3d:3f:73:66:76:9c:f7:b3:78: 77:ec:88:61:5a:11:13:f8:59:59:e6:d8:03:2b:83:91:03:a8: 55:58:76:a5:6c:f0:d4:15:2a:de:47:50:70:a6:61:c7:75:b4: 80:4f:6a:99:e5:65:9e:28:0f:27:5b:26:e0:98:a1:93:ec:ed: db:12:6d:04:86:5f:8e:5d:cf:d1:d5:ac:5e:fd:bd:33:38:01: 98:4a:f0:42:9d:41:1a:2b:16:dd:7f:38:00:61:8a:fc:9c:22: d7:07:a3:26:31:47:30:bc:d6:02:51:ef:53:f2:5e:11:24:ce: 15:0f:b3:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nGBgkpVKMIoRyd7M2+3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3 NmEzODQwHhcNMjYwMTI3MDQwMDQyWhcNMjYwMTI4MDQwMDQyWjAzMTEwLwYDVQQD EyhjOGJhY2RlNjJmZjM4NzdlYTNjMDZjMTkzNzkzZmQzN2YzNmU4OWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaH/te7UvuicA7kyn8t/oBD81cui Sgw2b5CQDoTTGc1phcrTgZDbSEeOXo4+tgXGWplQFXquR80XYc22p5d6uSG2VPbK SSMZ607SC22QbodSo4CJ+fx10cdJJwepX9cPMMpIgpesnIy1VpduabOYgS2Bqio/ zmjPDQrr8o/hqbwtyaKA3Ei8qUbk+JwXM3XDt+f6u4JwTo4MY8xOLndbDjNgM8s1 ZAGZXxRc0zzhcavFeb5mlrZU2opZtNGNDOx8AdYxbpV/St0OoAUL8lrrcNpDYe4t tWwaAZuxrnITsybJoiNJRwNHgTOaHxHyOPLqyLCX8z1G0MyvTiG+1hopOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi6zeYv84d+o8BsGTeT/TfzbonMMB8GA1UdIwQY MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5 LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMIcFsy3 19TrgieHiVCThXnrIji0uIVWCG6Hi727tsCftO8asdvFCb558Nzv7LYWW4Xp24Ax pxf4LFzVect30AAOzkZAT/ueLeDyUuZdOrsrMJkQUcRngB3PPCQC0L3fv0cZO4T3 RcWSEf7gqwpHKVP3fipJqVlsv1CV6TKppfkstOrzBjLDPT9zZnac97N4d+yIYVoR E/hZWebYAyuDkQOoVVh2pWzw1BUq3kdQcKZhx3W0gE9qmeVlnigPJ1sm4Jihk+zt 2xJtBIZfjl3P0dWsXv29MzgBmErwQp1BGisW3X84AGGK/Jwi1wejJjFHMLzWAlHv U/JeESTOFQ+zEQ== -----END CERTIFICATE-----Generated at Tue Jan 27 13:04:35 2026 by rpki-client