This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json) Hash identifier: Zuj2G2AK92VpMt1pDKf6Dje5aa/CMbC4eOD5vrmrk/A= Subject key identifier: 44:8C:50:EF:F5:58:B4:11:7E:18:61:7C:55:AA:08:EC:6A:60:76:57 Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Certificate serial: 019BF79ABC0AE2618DF243D3C819B3968883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft Manifest number: 0C0C Signing time: Mon 26 Jan 2026 00:01:11 +0000 Manifest this update: Mon 26 Jan 2026 00:01:11 +0000 Manifest next update: Tue 27 Jan 2026 00:01:11 +0000 Files and hashes: 1: HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa (hash: cKsTdXMzCKVpvlljEBVOuNNhrA+YItiJ4O+zqqSok5Q=) 2: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: zt6HFs74tOpCs9jwsrhZeexmqTQx3d0Gpmid3NZd3Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:bc:0a:e2:61:8d:f2:43:d3:c8:19:b3:96:88:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Validity Not Before: Jan 26 00:01:11 2026 GMT Not After : Jan 27 00:01:11 2026 GMT Subject: CN=448c50eff558b4117e18617c55aa08ec6a607657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:46:c4:fe:d6:d5:ec:d9:e0:b7:2d:01:cf: 92:84:be:0f:7a:3f:84:ac:3c:b0:ab:b5:e7:aa:9f: 39:9a:d4:9c:55:77:df:36:1e:03:80:59:b3:24:9b: 05:e4:a3:df:c1:be:1a:94:a5:d8:40:4c:3a:48:fb: 5e:09:6d:78:12:46:ae:08:c7:64:9c:2e:f8:28:57: 3f:2f:53:94:86:8a:ad:f2:f0:96:5b:cb:54:6c:a3: c1:d1:94:77:45:e5:0a:19:5b:0c:dd:b7:53:c5:45: 5a:f0:d5:18:e6:98:91:8b:4f:c4:fe:08:56:a5:0f: c7:96:10:57:bd:f4:09:90:01:dc:3b:89:f8:20:39: b6:c2:f9:79:af:a7:f7:c2:e5:71:21:f6:54:96:8c: 6e:ba:af:b7:9c:43:ff:f7:26:c7:22:db:2f:d5:d7: b8:d8:7d:b3:5b:30:a6:21:15:86:9a:b2:06:85:38: 80:b2:6e:0f:98:ac:d6:8a:3e:17:da:d3:6b:d4:e3: e7:24:74:4f:f7:e2:01:78:85:06:b3:45:7c:a4:25: f8:ed:ec:20:70:81:65:63:22:6d:c5:37:9f:55:52: 9d:e4:8e:71:c9:c7:6d:18:a2:5a:e8:a7:bd:13:0e: c9:d4:24:70:cb:c6:f2:55:26:96:f0:bd:28:63:0e: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:50:EF:F5:58:B4:11:7E:18:61:7C:55:AA:08:EC:6A:60:76:57 X509v3 Authority Key Identifier: keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:29:ce:ca:43:1f:22:84:43:3e:08:54:98:dc:87:e4:df:8e: ad:0d:32:0e:5e:34:ab:a9:ca:a7:5c:06:65:24:fb:be:bd:1f: 3f:2f:f9:53:13:94:d1:40:bd:1a:e5:67:9f:20:41:5b:21:1f: 51:4e:e1:8e:3b:0d:8d:dc:26:b4:37:83:07:05:7a:17:ac:41: a0:fb:ff:53:27:85:98:bd:7f:9b:8e:7d:a9:8a:8c:f1:d8:96: ee:1c:c0:f2:54:22:02:74:e2:d9:7f:cf:6c:7b:e5:7a:e5:49: fc:92:4d:d3:23:10:16:f6:73:3d:b1:fa:ff:94:9c:60:8b:2e: ae:a3:1e:dc:45:b9:20:23:68:07:ae:8d:f2:90:24:f3:3a:94: 1a:86:f6:9e:19:42:1b:b5:2b:9d:10:20:a5:f0:58:e9:e8:46: a2:6f:76:9b:f0:cd:e4:d5:71:97:92:43:10:34:6a:68:67:e6: d9:de:75:91:fe:b0:77:c2:64:00:d6:aa:d6:d9:06:27:02:5d: 49:ec:d5:90:92:00:ad:43:01:af:89:22:1d:71:02:f2:93:4d: f4:8b:e9:7f:3a:bb:60:ff:23:a3:0d:e1:39:9f:7f:d8:dd:8d: 51:51:1c:32:a7:56:ea:05:09:ef:83:b2:6d:23:67:61:19:b7: 9a:fc:7a:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrwK4mGN8kPTyBmzloiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw MmQ5MDIwHhcNMjYwMTI2MDAwMTExWhcNMjYwMTI3MDAwMTExWjAzMTEwLwYDVQQD Eyg0NDhjNTBlZmY1NThiNDExN2UxODYxN2M1NWFhMDhlYzZhNjA3NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRGxP7W1ezZ4LctAc+ShL4Pej+E rDywq7Xnqp85mtScVXffNh4DgFmzJJsF5KPfwb4alKXYQEw6SPteCW14EkauCMdk nC74KFc/L1OUhoqt8vCWW8tUbKPB0ZR3ReUKGVsM3bdTxUVa8NUY5piRi0/E/ghW pQ/HlhBXvfQJkAHcO4n4IDm2wvl5r6f3wuVxIfZUloxuuq+3nEP/9ybHItsv1de4 2H2zWzCmIRWGmrIGhTiAsm4PmKzWij4X2tNr1OPnJHRP9+IBeIUGs0V8pCX47ewg cIFlYyJtxTefVVKd5I5xycdtGKJa6Ke9Ew7J1CRwy8byVSaW8L0oYw7BTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESMUO/1WLQRfhhhfFWqCOxqYHZXMB8GA1UdIwQY MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3 LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSnOykMf IoRDPghUmNyH5N+OrQ0yDl40q6nKp1wGZST7vr0fPy/5UxOU0UC9GuVnnyBBWyEf UU7hjjsNjdwmtDeDBwV6F6xBoPv/UyeFmL1/m459qYqM8diW7hzA8lQiAnTi2X/P bHvleuVJ/JJN0yMQFvZzPbH6/5ScYIsurqMe3EW5ICNoB66N8pAk8zqUGob2nhlC G7UrnRAgpfBY6ehGom92m/DN5NVxl5JDEDRqaGfm2d51kf6wd8JkANaq1tkGJwJd SezVkJIArUMBr4kiHXEC8pNN9Ivpfzq7YP8jow3hOZ9/2N2NUVEcMqdW6gUJ74Oy bSNnYRm3mvx6/A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:57:33 2026 by rpki-client