This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json) Hash identifier: 10ZlRobqa29O7mdKsXENQJgaFdr0sV5IHvrm+nmxj00= Subject key identifier: F9:58:6C:09:37:A3:66:34:09:59:EF:77:97:23:85:9C:A2:39:8F:99 Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8 Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8 Certificate serial: 019BF91C066EDCB4249190AEE417AF6B3F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft Manifest number: 0C14 Signing time: Mon 26 Jan 2026 07:02:01 +0000 Manifest this update: Mon 26 Jan 2026 07:02:01 +0000 Manifest next update: Tue 27 Jan 2026 07:02:01 +0000 Files and hashes: 1: Kr3YNIOZuTADRy89OqB1M7GiF_A.roa (hash: KV4JFAX9LmQEN4ylvhyFAZOy/rrjX27pdPNOLsJgnUs=) 2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: +duqN1eE5+nFtegsD2wc+q8eNO/61uNwodgt0v6TH84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1c:06:6e:dc:b4:24:91:90:ae:e4:17:af:6b:3f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8 Validity Not Before: Jan 26 07:02:01 2026 GMT Not After : Jan 27 07:02:01 2026 GMT Subject: CN=f9586c0937a366340959ef779723859ca2398f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:33:d3:6e:8d:40:8b:7c:d3:3a:bc:1a:8b: 5d:aa:47:68:c1:ef:f1:4f:ff:61:d8:70:74:f2:0c: a3:c9:46:0a:51:2b:68:e0:2c:65:64:f6:bc:4b:d0: 4b:fe:cd:fa:1a:7a:fd:58:d6:be:db:b6:33:df:91: ec:42:d8:71:71:04:fa:ea:6f:8f:a5:44:46:1f:2e: 84:d1:84:96:db:42:27:64:86:1b:e7:59:d7:ea:c9: 9d:01:a1:01:bd:53:cb:2d:02:36:52:0b:b4:74:c3: 97:0e:f9:22:cd:a9:d6:e0:46:ea:8e:bc:f9:66:24: 73:c2:df:d1:68:6e:a2:51:34:f1:6b:cf:09:75:2b: 2d:d3:00:ae:02:74:65:a0:72:64:3a:97:6e:f3:41: 92:3f:b7:35:2d:3c:97:61:aa:b0:d5:68:f3:51:bb: ee:22:83:7f:48:5f:a7:b0:dd:85:cf:74:58:2b:80: e2:9b:20:8a:4b:7b:6e:86:2a:0e:6a:21:46:19:d0: 44:66:ff:9c:3f:7f:b5:ee:fb:ee:79:1a:4c:19:ea: fd:15:af:d6:f6:a7:98:85:aa:f2:f0:68:2f:e2:23: aa:8d:27:80:7b:b8:34:e9:aa:e9:35:85:80:40:e1: bd:22:2b:35:7d:63:52:5d:6d:43:49:09:b0:d5:84: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:58:6C:09:37:A3:66:34:09:59:EF:77:97:23:85:9C:A2:39:8F:99 X509v3 Authority Key Identifier: keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:47:c2:0f:04:49:50:cb:eb:9e:54:66:31:01:38:06:88: 87:d8:35:7f:8c:d3:b7:9c:24:8b:fd:65:1b:78:4b:d4:10:cb: 2b:6e:69:62:ff:1f:b3:72:a8:ab:f5:59:ca:c9:18:01:d0:88: b5:31:9a:94:cd:39:48:fb:c3:41:80:96:e9:01:d0:e4:80:bd: 52:aa:fe:38:93:e1:7b:4c:cc:52:51:2f:f7:97:3c:37:15:65: 6a:d0:24:9a:e6:0a:0a:2b:11:68:04:3a:bd:dd:b6:7f:1d:b0: 6e:5d:67:10:6a:35:9f:b1:ba:35:19:bb:39:3f:86:f2:a8:fb: 71:d6:18:ca:65:92:a9:54:e5:61:00:e9:18:73:52:bf:dc:a6: 3c:84:f4:b4:59:d8:f0:32:89:09:4f:dc:1b:9e:68:c8:75:88: e2:71:c2:22:2b:5b:38:c5:a0:b9:e8:45:32:1f:d3:90:1b:5d: e0:7c:19:04:60:aa:92:3b:33:5a:c9:c1:ea:6c:95:c0:64:31: 85:c5:93:d2:9a:c2:a6:0e:76:5a:0c:0f:1e:bf:7f:72:46:d2: a8:fd:86:71:3e:cb:08:9d:40:d4:a2:d9:03:2c:5b:10:0a:e8: 8b:a8:6e:31:a7:f3:03:86:de:4f:0f:ad:d0:ae:9b:cd:08:f5: d5:b2:37:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5HAZu3LQkkZCu5Bevaz8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2E1M2E4YTVhMDNiMDU1Y2IzZjM0MGZjYmViODVkN2Fk NDg3YTgwHhcNMjYwMTI2MDcwMjAxWhcNMjYwMTI3MDcwMjAxWjAzMTEwLwYDVQQD EyhmOTU4NmMwOTM3YTM2NjM0MDk1OWVmNzc5NzIzODU5Y2EyMzk4Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ccz026NQIt80zq8Gotdqkdowe/x T/9h2HB08gyjyUYKUSto4CxlZPa8S9BL/s36Gnr9WNa+27Yz35HsQthxcQT66m+P pURGHy6E0YSW20InZIYb51nX6smdAaEBvVPLLQI2Ugu0dMOXDvkizanW4Ebqjrz5 ZiRzwt/RaG6iUTTxa88JdSst0wCuAnRloHJkOpdu80GSP7c1LTyXYaqw1WjzUbvu IoN/SF+nsN2Fz3RYK4DimyCKS3tuhioOaiFGGdBEZv+cP3+17vvueRpMGer9Fa/W 9qeYhary8Ggv4iOqjSeAe7g06arpNYWAQOG9Iis1fWNSXW1DSQmw1YR9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlYbAk3o2Y0CVnvd5cjhZyiOY+ZMB8GA1UdIwQY MBaAFHfKU6iloDsFXLPzQPy+uF161IeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZDc5YTQtODhhZS00MmU0LTkyOGMt Y2MzZTc4ZjYyZGMyLzEvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wZDc5YTQtODhhZS00MmU0LTkyOGMtY2MzZTc4ZjYyZGMy LzEvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWNHwg8E SVDL655UZjEBOAaIh9g1f4zTt5wki/1lG3hL1BDLK25pYv8fs3Koq/VZyskYAdCI tTGalM05SPvDQYCW6QHQ5IC9Uqr+OJPhe0zMUlEv95c8NxVlatAkmuYKCisRaAQ6 vd22fx2wbl1nEGo1n7G6NRm7OT+G8qj7cdYYymWSqVTlYQDpGHNSv9ymPIT0tFnY 8DKJCU/cG55oyHWI4nHCIitbOMWguehFMh/TkBtd4HwZBGCqkjszWsnB6myVwGQx hcWT0prCpg52WgwPHr9/ckbSqP2GcT7LCJ1A1KLZAyxbEAroi6huMafzA4beTw+t 0K6bzQj11bI3IA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:47 2026 by rpki-client