This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json) Hash identifier: Z7KzzZLvlrUfUVX1lfM+EzfchneIkIJ4A8wRjcCGim4= Subject key identifier: 40:3B:F2:E5:82:66:8B:3A:A9:A4:FA:DF:3B:83:36:00:A3:68:BE:2D Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Certificate serial: 019BFC8A794D61B7EF08445FCE9F09E951FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 23:01:31 +0000 Manifest this update: Mon 26 Jan 2026 23:01:31 +0000 Manifest next update: Tue 27 Jan 2026 23:01:31 +0000 Files and hashes: 1: TBovewG4XNfT-AXXW_cdOvWTQ_s.roa (hash: YA6Ko3u2RNnOBu+b0YRR5au4lqdCjuXBaHqeZND+6cM=) 2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: /zhHsg3t5jwbPztoCNnUkEu1cbBTdoP2B6ybvgXi3gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:79:4d:61:b7:ef:08:44:5f:ce:9f:09:e9:51:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Validity Not Before: Jan 26 23:01:31 2026 GMT Not After : Jan 27 23:01:31 2026 GMT Subject: CN=403bf2e582668b3aa9a4fadf3b833600a368be2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:71:12:1c:53:5c:7e:8b:dd:58:7a:9e:4f: bc:e9:25:d4:eb:a4:8d:c7:cf:57:a8:cd:a4:d9:3e: 7a:f4:bd:e8:05:d8:1e:00:d1:32:48:fc:a3:01:70: a6:8b:cd:07:c9:b9:1c:70:ef:95:d5:d9:40:82:5b: a6:82:98:06:80:53:f2:7a:30:f6:e9:a8:34:f6:66: f2:05:e4:bd:ab:1f:43:ec:e7:57:43:53:31:6e:48: 25:4d:3c:e3:31:22:30:bc:9d:ae:bf:95:a3:d3:2e: 9f:ad:e8:a0:b7:26:6e:a1:a1:c8:ec:71:b9:c5:13: 6d:a3:1f:d7:01:ab:33:fb:eb:68:a5:3d:81:8c:fa: 8b:4c:74:fb:93:94:fd:d9:09:01:2f:fa:b5:36:2a: 9c:85:e3:cb:76:6b:d2:09:d4:94:0a:d3:3b:19:ec: 60:b0:7d:a5:91:d7:5a:af:79:e9:b2:77:eb:3e:a3: 0a:70:90:68:8c:98:03:9d:80:b2:f0:59:fa:1d:e6: 60:31:c0:4a:3e:5a:6b:3d:00:51:71:95:77:59:a6: cd:ef:99:52:d1:53:8c:7c:54:a5:0d:26:49:e1:1c: fe:39:2e:15:34:a4:df:9b:2f:9c:c5:a0:80:32:07: 5c:a5:81:46:48:d7:60:d1:9d:f1:63:ce:2c:8c:66: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:F2:E5:82:66:8B:3A:A9:A4:FA:DF:3B:83:36:00:A3:68:BE:2D X509v3 Authority Key Identifier: keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c5:da:15:6f:2d:94:b5:c6:fd:a6:a5:3f:ff:94:67:c9:5f: e3:c6:c3:f4:cc:79:39:89:00:2d:36:86:28:6f:36:34:da:87: 4c:7e:8f:4a:0c:9b:f9:d6:42:0e:cc:82:5b:7d:f3:26:76:ae: 53:29:f7:b0:15:0f:e1:5d:5e:b8:34:7b:12:1f:75:bb:28:2c: 0a:7d:8a:7c:5f:81:5e:74:89:96:bb:79:65:27:08:2e:0d:56: 91:e2:ea:82:2a:ea:1d:fd:c1:a7:7f:18:5f:13:3b:14:b3:2e: 9e:10:4d:fb:b9:12:63:1a:82:51:be:11:d9:13:eb:5d:d3:e6: 78:2d:6e:6f:53:ef:3e:26:d4:99:ee:36:2d:bd:a8:ca:6b:45: fc:8d:a3:cf:0d:be:3d:1d:10:2c:8d:27:2e:34:0c:30:bc:6c: 14:74:c7:59:98:20:bb:82:e5:d1:17:8f:e2:4b:2e:f9:9e:fb: bd:9f:51:bd:44:bd:0a:7e:b6:b6:e4:36:5c:6e:2b:76:c2:34: 23:f6:7c:08:66:fe:95:ad:7d:57:a7:64:41:b6:f3:55:4e:ff: 29:ae:de:e9:17:23:16:86:0a:d3:ed:80:b6:c5:ba:7a:69:3f: b2:94:6b:9a:60:60:d0:e1:55:f5:de:d0:ac:ab:ea:c0:7e:c2: 42:34:d6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8inlNYbfvCERfzp8J6VH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzFhZDE2NzZhMmEzMmE0NWEwY2YzOTJmN2Y5YzVlYTY4 ZTJkZWEwHhcNMjYwMTI2MjMwMTMxWhcNMjYwMTI3MjMwMTMxWjAzMTEwLwYDVQQD Eyg0MDNiZjJlNTgyNjY4YjNhYTlhNGZhZGYzYjgzMzYwMGEzNjhiZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0INxEhxTXH6L3Vh6nk+86SXU66SN x89XqM2k2T569L3oBdgeANEySPyjAXCmi80HybkccO+V1dlAglumgpgGgFPyejD2 6ag09mbyBeS9qx9D7OdXQ1MxbkglTTzjMSIwvJ2uv5Wj0y6freigtyZuoaHI7HG5 xRNtox/XAasz++topT2BjPqLTHT7k5T92QkBL/q1NiqchePLdmvSCdSUCtM7Gexg sH2lkddar3npsnfrPqMKcJBojJgDnYCy8Fn6HeZgMcBKPlprPQBRcZV3WabN75lS 0VOMfFSlDSZJ4Rz+OS4VNKTfmy+cxaCAMgdcpYFGSNdg0Z3xY84sjGYmRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA78uWCZos6qaT63zuDNgCjaL4tMB8GA1UdIwQY MBaAFGvBrRZ2oqMqRaDPOS9/nF6mji3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDkt ZWYxYWFhYWJmZTJiLzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDktZWYxYWFhYWJmZTJi LzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasXaFW8t lLXG/aalP/+UZ8lf48bD9Mx5OYkALTaGKG82NNqHTH6PSgyb+dZCDsyCW33zJnau Uyn3sBUP4V1euDR7Eh91uygsCn2KfF+BXnSJlrt5ZScILg1WkeLqgirqHf3Bp38Y XxM7FLMunhBN+7kSYxqCUb4R2RPrXdPmeC1ub1PvPibUme42Lb2oymtF/I2jzw2+ PR0QLI0nLjQMMLxsFHTHWZggu4Ll0ReP4ksu+Z77vZ9RvUS9Cn62tuQ2XG4rdsI0 I/Z8CGb+la19V6dkQbbzVU7/Ka7e6RcjFoYK0+2AtsW6emk/spRrmmBg0OFV9d7Q rKvqwH7CQjTWhg== -----END CERTIFICATE-----Generated at Tue Jan 27 04:16:06 2026 by rpki-client