This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json) Hash identifier: lDNjlHweR7n8qzHa7Rf90uRO+6xLlDwUcr7vDD6TTeo= Subject key identifier: 37:43:8C:65:65:66:30:68:01:AA:A0:48:1A:BB:5A:00:DD:7A:68:E1 Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9 Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9 Certificate serial: 019BFC8A50C605BCBD368D6B20928A59908A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 23:01:21 +0000 Manifest this update: Mon 26 Jan 2026 23:01:21 +0000 Manifest next update: Tue 27 Jan 2026 23:01:21 +0000 Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: xQ9bGwnZ/Jaf1WsFdyKYFQF6PDf23AB7TdeQV+GSE/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:50:c6:05:bc:bd:36:8d:6b:20:92:8a:59:90:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9 Validity Not Before: Jan 26 23:01:21 2026 GMT Not After : Jan 27 23:01:21 2026 GMT Subject: CN=37438c656566306801aaa0481abb5a00dd7a68e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:de:ab:20:b8:ac:cf:0b:ab:89:fc:c1:9c: fc:83:c6:28:92:b1:20:03:63:4c:c2:29:1b:88:be: aa:be:b4:dd:e1:50:d8:44:fa:94:4b:d1:55:cb:ed: 69:dc:f7:77:c0:8a:4d:af:d9:d7:90:51:36:f1:f8: a2:1d:10:05:fa:49:bc:1b:a6:99:ad:3f:8f:46:ec: 2b:fc:af:75:f3:c9:bd:42:77:26:6b:b4:b4:fc:2c: 70:f5:fb:c6:a7:8e:0d:28:e3:c1:f0:15:3a:77:11: f7:72:9a:9f:66:4c:cc:fc:33:df:7f:32:51:2e:5e: ec:cb:cc:eb:21:5d:2f:bb:57:43:8e:d7:07:1d:78: 0d:fc:55:97:e0:74:65:51:1e:74:b4:18:62:dc:38: b8:fc:55:9f:70:a1:80:0d:c2:d0:89:10:81:e5:cc: f3:d5:ab:a5:8e:3f:c1:ee:39:9b:53:aa:70:1b:67: 94:11:48:a1:c1:ee:01:fc:f0:39:f9:7b:c4:fd:2e: a9:9a:f6:3d:0c:40:8b:39:b7:1e:ca:f6:f8:a8:da: 6b:ab:70:c8:2f:89:67:82:e5:e1:23:c4:b1:73:c6: 25:2c:fc:4b:90:8d:15:b8:3b:20:ee:84:4e:73:28: 26:03:27:77:f4:f9:6f:41:b7:67:fb:02:8b:00:78: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:8C:65:65:66:30:68:01:AA:A0:48:1A:BB:5A:00:DD:7A:68:E1 X509v3 Authority Key Identifier: keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:05:da:7e:ba:a7:93:87:f7:4a:27:e9:ad:39:ba:e8:dc:60: 81:4e:0d:c4:25:a1:3e:15:17:e7:ed:2c:76:c6:b4:aa:aa:3d: 46:36:5e:86:a5:38:71:f2:44:36:b1:8b:fd:a5:81:ef:c9:39: 77:13:6b:74:c9:a7:e0:d5:c5:5b:38:69:09:26:bd:a7:26:5a: ba:f5:54:75:72:76:fb:77:39:8c:47:15:f1:7c:4d:22:48:14: ee:2c:fc:52:1e:a3:17:53:ff:54:40:d2:76:92:10:2d:8f:be: 51:15:66:6e:2f:53:87:db:15:f8:2a:cc:eb:0d:6e:76:13:9a: 12:aa:10:4a:d5:91:df:30:a2:14:50:02:c0:77:dc:db:ed:2c: be:7b:2c:62:76:7e:a2:9e:41:f1:c2:f0:51:11:78:d7:90:e8: 52:e6:00:b7:0b:c9:d4:cb:34:63:f0:7b:33:fd:cb:11:5b:42: 68:6b:29:82:e1:f0:29:dc:38:64:e9:d2:87:df:c0:28:d5:2e: 64:d4:e5:ce:f2:b7:81:a0:8a:78:e0:9d:4f:a9:b1:d6:16:c3: 14:e2:d5:d6:b3:29:7e:65:83:ac:35:da:70:71:1f:da:9f:ca: 2a:43:f0:14:99:e2:85:35:81:81:b6:ec:9c:6d:7e:7d:3d:0f: be:74:c2:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ilDGBby9No1rIJKKWZCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGYwYmUxNmVjY2QzZWI3MDZlNjQxNzk0YmM5MGQ0Zjdk Njc4YzkwHhcNMjYwMTI2MjMwMTIxWhcNMjYwMTI3MjMwMTIxWjAzMTEwLwYDVQQD EygzNzQzOGM2NTY1NjYzMDY4MDFhYWEwNDgxYWJiNWEwMGRkN2E2OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthzeqyC4rM8Lq4n8wZz8g8YokrEg A2NMwikbiL6qvrTd4VDYRPqUS9FVy+1p3Pd3wIpNr9nXkFE28fiiHRAF+km8G6aZ rT+PRuwr/K9188m9Qncma7S0/Cxw9fvGp44NKOPB8BU6dxH3cpqfZkzM/DPffzJR Ll7sy8zrIV0vu1dDjtcHHXgN/FWX4HRlUR50tBhi3Di4/FWfcKGADcLQiRCB5czz 1auljj/B7jmbU6pwG2eUEUihwe4B/PA5+XvE/S6pmvY9DECLObceyvb4qNprq3DI L4lnguXhI8Sxc8YlLPxLkI0VuDsg7oROcygmAyd39PlvQbdn+wKLAHictwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdDjGVlZjBoAaqgSBq7WgDdemjhMB8GA1UdIwQY MBaAFInfC+FuzNPrcG5kF5S8kNT31njJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYt MzA4MzllYzBlZWQ5LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYtMzA4MzllYzBlZWQ5 LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAXafrqn k4f3SifprTm66NxggU4NxCWhPhUX5+0sdsa0qqo9RjZehqU4cfJENrGL/aWB78k5 dxNrdMmn4NXFWzhpCSa9pyZauvVUdXJ2+3c5jEcV8XxNIkgU7iz8Uh6jF1P/VEDS dpIQLY++URVmbi9Th9sV+CrM6w1udhOaEqoQStWR3zCiFFACwHfc2+0svnssYnZ+ op5B8cLwURF415DoUuYAtwvJ1Ms0Y/B7M/3LEVtCaGspguHwKdw4ZOnSh9/AKNUu ZNTlzvK3gaCKeOCdT6mx1hbDFOLV1rMpfmWDrDXacHEf2p/KKkPwFJnihTWBgbbs nG1+fT0PvnTCsg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:55:13 2026 by rpki-client