This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json) Hash identifier: La2ixxJRkWrYUYNTZRW0L6sZ1A7F+u3FsdB+my0y0s8= Subject key identifier: BE:67:67:FF:4C:FF:7C:8E:13:3F:CF:E3:87:15:E4:DC:6E:65:35:44 Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Certificate serial: 019BFA64565DA9E51A1016E962A9AEB3FAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 13:00:38 +0000 Manifest this update: Mon 26 Jan 2026 13:00:38 +0000 Manifest next update: Tue 27 Jan 2026 13:00:38 +0000 Files and hashes: 1: bMXs2Uc_SNydl62v5CGCdjcm6tg.roa (hash: zUUcFFf97uYy+2qHl1qiR6sdmelTLPBlKzCb0fxEBwQ=) 2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: P+R08gvB2YHkowxHT/Igh0iCBlw+xrV9dr085hYmBNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:56:5d:a9:e5:1a:10:16:e9:62:a9:ae:b3:fa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Validity Not Before: Jan 26 13:00:38 2026 GMT Not After : Jan 27 13:00:38 2026 GMT Subject: CN=be6767ff4cff7c8e133fcfe38715e4dc6e653544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:45:1d:29:9f:dc:0b:55:b6:78:df:58:19: aa:3b:1e:03:a5:7f:fe:a7:ce:c2:ed:3a:3d:ec:48: 42:8f:9f:57:ca:1b:80:04:26:e4:61:b9:bf:2c:35: 2f:56:93:7d:54:0d:7a:44:64:a5:31:43:b1:1c:de: 84:84:64:88:96:70:85:c3:3a:75:87:48:7c:59:e2: d6:5c:6f:ed:e4:67:d5:c0:ca:11:1d:55:27:fb:e9: 47:79:4f:24:9e:01:d7:ba:bd:36:54:f2:50:cc:10: f2:a5:36:09:1b:4a:58:0e:42:67:0a:7e:8e:ff:ac: 56:ac:72:e2:3c:4f:fc:c4:03:04:c6:ee:21:83:c3: 95:99:70:50:83:e5:2f:b1:53:83:cf:51:25:de:43: be:4e:86:09:7d:57:df:32:0e:ef:77:9d:32:c2:ac: 7a:0a:15:c9:09:d7:d9:e9:97:34:f6:78:9b:53:e3: c5:45:13:1f:38:fb:2d:67:1b:1f:22:0c:53:83:da: 3a:47:88:2b:65:a0:50:5a:e8:62:b0:51:bd:a3:e9: 71:e8:9b:71:67:5b:d4:b9:23:4b:7e:69:b8:9f:63: 92:2f:f3:37:d0:33:f6:b9:f1:20:0d:2f:53:18:97: 74:c3:84:b3:b5:b0:35:43:4d:a8:6b:07:89:45:84: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:67:67:FF:4C:FF:7C:8E:13:3F:CF:E3:87:15:E4:DC:6E:65:35:44 X509v3 Authority Key Identifier: keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0f:b7:46:af:54:93:f3:9c:b1:b8:d2:90:cd:69:a8:8d:c5: d1:86:57:6d:4c:58:dc:2c:49:b2:89:04:69:5e:ac:07:20:0b: f4:0f:17:2a:bc:1a:88:8c:1d:c5:a4:80:2e:3b:67:9c:fc:15: f1:13:15:49:1e:96:8b:94:41:2a:33:c4:ee:a6:f8:86:d7:ea: d1:d6:10:b7:27:40:4e:5a:e8:fc:c4:0a:22:9d:36:1c:c5:bb: 79:7b:a0:ad:d4:a6:f5:27:2a:b8:04:17:c3:72:8b:da:2a:ae: c2:b0:55:54:40:79:94:34:f9:29:08:13:65:d0:5b:fa:1a:2c: e7:5c:54:a1:7d:07:55:08:04:ec:7e:59:cd:4f:c4:3a:0a:cc: 5f:5d:23:93:91:7d:b1:0b:62:fe:f0:fc:8c:43:03:7f:7b:d7: 7e:35:e0:52:a4:d6:fc:e6:90:30:30:0e:74:10:01:40:fc:84: 2d:17:a8:6c:23:7d:c3:0f:cc:9f:f2:25:a1:a8:69:5d:c7:62: 68:f7:63:12:4a:c7:6f:77:7b:b9:8c:49:ee:bd:c8:26:16:ad: b5:38:2a:c8:70:f1:29:b7:17:8c:a9:3a:e4:70:76:03:a9:e7: b2:db:96:50:4d:b9:ca:56:2b:ab:9a:35:a4:d3:45:2b:fb:c1: 74:61:e6:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZFZdqeUaEBbpYqmus/rtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx ZTkyZGMwHhcNMjYwMTI2MTMwMDM4WhcNMjYwMTI3MTMwMDM4WjAzMTEwLwYDVQQD EyhiZTY3NjdmZjRjZmY3YzhlMTMzZmNmZTM4NzE1ZTRkYzZlNjUzNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K5FHSmf3AtVtnjfWBmqOx4DpX/+ p87C7To97EhCj59XyhuABCbkYbm/LDUvVpN9VA16RGSlMUOxHN6EhGSIlnCFwzp1 h0h8WeLWXG/t5GfVwMoRHVUn++lHeU8kngHXur02VPJQzBDypTYJG0pYDkJnCn6O /6xWrHLiPE/8xAMExu4hg8OVmXBQg+UvsVODz1El3kO+ToYJfVffMg7vd50ywqx6 ChXJCdfZ6Zc09nibU+PFRRMfOPstZxsfIgxTg9o6R4grZaBQWuhisFG9o+lx6Jtx Z1vUuSNLfmm4n2OSL/M30DP2ufEgDS9TGJd0w4SztbA1Q02oaweJRYR/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5nZ/9M/3yOEz/P44cV5NxuZTVEMB8GA1UdIwQY MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA+3Rq9U k/OcsbjSkM1pqI3F0YZXbUxY3CxJsokEaV6sByAL9A8XKrwaiIwdxaSALjtnnPwV 8RMVSR6Wi5RBKjPE7qb4htfq0dYQtydATlro/MQKIp02HMW7eXugrdSm9ScquAQX w3KL2iquwrBVVEB5lDT5KQgTZdBb+hos51xUoX0HVQgE7H5ZzU/EOgrMX10jk5F9 sQti/vD8jEMDf3vXfjXgUqTW/OaQMDAOdBABQPyELReobCN9ww/Mn/IloahpXcdi aPdjEkrHb3d7uYxJ7r3IJhattTgqyHDxKbcXjKk65HB2A6nnstuWUE25ylYrq5o1 pNNFK/vBdGHm+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:56 2026 by rpki-client