This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json) Hash identifier: 09t5MB9HwIljmGW0d5h4IukBFmMCx3y7gtxMTx8Bz6g= Subject key identifier: 11:7A:F3:DD:ED:E3:D3:E7:24:9A:E8:0D:71:B5:A8:5F:8B:70:8E:B8 Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Certificate serial: 019BFB09E2F991DBEC109B599C67F08BF1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft Manifest number: 0ECB Signing time: Mon 26 Jan 2026 16:01:27 +0000 Manifest this update: Mon 26 Jan 2026 16:01:27 +0000 Manifest next update: Tue 27 Jan 2026 16:01:27 +0000 Files and hashes: 1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=) 2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: 3EfaVMP9+t4yaEcKCnwMS2Pd9CWgXOl0BMNwllQLMcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:e2:f9:91:db:ec:10:9b:59:9c:67:f0:8b:f1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Validity Not Before: Jan 26 16:01:27 2026 GMT Not After : Jan 27 16:01:27 2026 GMT Subject: CN=117af3ddede3d3e7249ae80d71b5a85f8b708eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:5b:12:3a:5b:f5:f3:8d:07:9e:80:7f:5b: fe:cd:37:0e:51:e3:07:47:df:88:e5:b0:1c:af:f3: ad:61:2d:0d:4a:6d:82:7d:48:81:68:bf:40:4f:ad: 11:11:f5:cd:df:c0:09:c5:15:ed:12:ce:6c:38:61: a3:7e:0d:37:83:8f:bf:81:93:7a:82:a5:51:1d:8f: f0:b2:5d:0f:69:8e:21:2b:4d:81:18:0c:52:3b:a6: 87:b3:18:a4:9b:87:5e:1f:67:9b:b9:c9:fe:69:ec: 16:19:22:6a:58:a4:4d:47:a6:ff:b4:3d:49:7d:5b: fb:a1:84:79:f1:32:9e:f3:a3:c8:e5:3a:fe:db:82: a1:2f:cb:0b:b0:d2:ae:7b:f5:69:ca:ba:e4:c5:d0: ef:9f:1a:91:20:3a:75:5b:e7:f8:88:47:d7:aa:c9: c1:13:8e:be:19:b6:11:8e:ac:d0:82:39:32:59:31: 74:89:95:0d:d0:97:2e:c1:ba:7d:8b:cc:ce:90:6d: fa:12:24:09:6f:36:c8:f1:ec:04:28:f4:06:e2:7b: 61:e2:96:ec:0c:f4:a9:2e:3b:90:5c:2a:19:d6:87: 64:d7:85:04:13:d7:f1:ed:75:71:7d:7a:de:42:e7: c2:38:7a:56:cb:bf:6b:ce:1c:6c:48:28:40:36:bf: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7A:F3:DD:ED:E3:D3:E7:24:9A:E8:0D:71:B5:A8:5F:8B:70:8E:B8 X509v3 Authority Key Identifier: keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:43:12:3c:63:f4:0e:b7:48:c9:5e:45:ad:41:d7:1f:88:dc: 55:66:64:a2:41:bc:28:4e:f0:c2:bf:7e:e1:81:60:88:52:e0: c3:fc:b6:c9:f5:43:0e:f8:36:fe:26:45:13:ac:33:d1:6a:6b: 70:5b:ea:df:97:67:c1:80:f8:0f:3f:ec:75:73:4e:93:1e:99: 52:55:66:d4:14:39:02:1c:ba:2b:81:16:e8:7d:54:4f:fc:ef: 4b:ce:1f:84:12:66:7d:31:70:92:f3:f3:c3:d1:e7:9b:d9:11: 4f:17:28:ad:4b:1b:8f:c1:cd:46:6f:af:1a:7a:5e:76:72:dc: fc:3d:c6:c3:83:7b:58:33:3e:28:66:68:8d:08:8e:dc:5f:6f: 39:ff:db:b9:23:c7:3c:dc:1a:e6:93:30:65:74:b3:01:de:9f: 9f:7d:33:92:c9:2e:51:0f:73:3c:68:11:8c:ce:5c:8c:d5:94: f2:43:11:fa:db:d1:de:73:2f:9b:b5:32:73:c7:7c:1f:bb:b9: e6:1b:c3:21:fc:5b:44:57:b3:d3:f3:3d:59:b9:dc:e2:e3:64: c0:ac:36:89:5d:c3:d6:de:9e:c2:7e:6a:5a:99:cd:fb:c7:dd: b3:df:d6:bc:d9:01:66:8b:4b:16:e6:2c:1a:13:dc:1c:8a:48: 2b:16:6d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CeL5kdvsEJtZnGfwi/HsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw ODYyZDkwHhcNMjYwMTI2MTYwMTI3WhcNMjYwMTI3MTYwMTI3WjAzMTEwLwYDVQQD EygxMTdhZjNkZGVkZTNkM2U3MjQ5YWU4MGQ3MWI1YTg1ZjhiNzA4ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWtbEjpb9fONB56Af1v+zTcOUeMH R9+I5bAcr/OtYS0NSm2CfUiBaL9AT60REfXN38AJxRXtEs5sOGGjfg03g4+/gZN6 gqVRHY/wsl0PaY4hK02BGAxSO6aHsxikm4deH2ebucn+aewWGSJqWKRNR6b/tD1J fVv7oYR58TKe86PI5Tr+24KhL8sLsNKue/VpyrrkxdDvnxqRIDp1W+f4iEfXqsnB E46+GbYRjqzQgjkyWTF0iZUN0Jcuwbp9i8zOkG36EiQJbzbI8ewEKPQG4nth4pbs DPSpLjuQXCoZ1odk14UEE9fx7XVxfXreQufCOHpWy79rzhxsSChANr8R6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF6893t49PnJJroDXG1qF+LcI64MB8GA1UdIwQY MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt YmEwZDNiMmQzNmUwLzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkMSPGP0 DrdIyV5FrUHXH4jcVWZkokG8KE7wwr9+4YFgiFLgw/y2yfVDDvg2/iZFE6wz0Wpr cFvq35dnwYD4Dz/sdXNOkx6ZUlVm1BQ5Ahy6K4EW6H1UT/zvS84fhBJmfTFwkvPz w9Hnm9kRTxcorUsbj8HNRm+vGnpednLc/D3Gw4N7WDM+KGZojQiO3F9vOf/buSPH PNwa5pMwZXSzAd6fn30zkskuUQ9zPGgRjM5cjNWU8kMR+tvR3nMvm7Uyc8d8H7u5 5hvDIfxbRFez0/M9Wbnc4uNkwKw2iV3D1t6ewn5qWpnN+8fds9/WvNkBZotLFuYs GhPcHIpIKxZtvQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:15:26 2026 by rpki-client