This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json) Hash identifier: uU+uPyVLgfNXNA4GuYy5XL+9lFGdLKqirf3OxEKPuX0= Subject key identifier: 27:45:3C:DC:57:76:26:79:68:3D:29:E3:2B:16:62:8D:88:83:D4:A1 Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Certificate serial: 019BFC534AF88CB43E5AC40CF08818FA3755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft Manifest number: 1152 Signing time: Mon 26 Jan 2026 22:01:15 +0000 Manifest this update: Mon 26 Jan 2026 22:01:15 +0000 Manifest next update: Tue 27 Jan 2026 22:01:15 +0000 Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: tM5iuHmnHqKqjpnufyP/ckzP0O690oa5ZYgpvJMNPrU=) 2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:4a:f8:8c:b4:3e:5a:c4:0c:f0:88:18:fa:37:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Validity Not Before: Jan 26 22:01:15 2026 GMT Not After : Jan 27 22:01:15 2026 GMT Subject: CN=27453cdc57762679683d29e32b16628d8883d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:72:01:53:da:c2:ea:ae:de:63:15:7e:cf: 34:3d:e4:c3:a5:a9:3e:c3:bf:2a:e0:d5:f0:b2:17: 6d:30:11:db:f8:f1:10:1a:24:1e:ff:40:b8:78:0f: a1:4c:f8:7d:e7:08:9d:da:9c:39:d3:23:f3:cf:4f: a1:4b:5c:35:2b:9f:13:7b:7f:9a:3d:3d:1d:6e:f5: cc:49:3b:5a:b4:9a:75:16:a7:21:c8:e6:03:56:bb: da:19:aa:c7:9e:f9:69:93:d7:b8:17:76:e0:af:db: 64:a8:17:b4:a8:cb:8f:b4:c2:93:70:28:4a:5b:a0: f3:5f:45:96:85:89:f9:a8:93:7f:c2:e4:cc:57:42: 00:a9:15:2d:11:85:a1:ea:e8:fb:98:b7:d6:51:1f: 46:ed:d2:63:6f:57:e3:79:1b:61:e3:11:b4:d6:f3: 2e:4a:e9:d9:f5:31:c5:ca:54:6e:c5:84:9d:a1:ab: af:72:ee:4e:a0:79:81:6e:6f:f1:65:a7:4a:cd:8c: c8:ee:3f:0d:a3:f8:f5:25:d5:f3:a0:db:0c:12:a2: 6b:2c:87:da:24:47:10:90:79:6a:f6:a3:c4:22:0d: d6:53:6e:6f:6c:c3:b1:cd:c9:f3:75:1e:75:8f:ac: 92:42:ba:a5:c6:ae:df:51:f4:8e:09:7c:6f:ac:28: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:45:3C:DC:57:76:26:79:68:3D:29:E3:2B:16:62:8D:88:83:D4:A1 X509v3 Authority Key Identifier: keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:05:15:f0:04:66:28:a4:54:ad:ea:6b:fb:c5:01:17:cb:36: fa:67:4a:02:66:9d:1a:11:29:ab:cb:ed:c5:db:52:a9:96:4a: 06:f3:2e:8a:04:a3:46:b4:2f:c8:42:71:5e:29:f8:2b:c9:74: 81:eb:54:ab:14:1b:b8:f8:c5:2f:b0:2f:21:ce:06:70:f0:3c: 33:cb:67:a9:60:9d:fa:17:d6:03:5a:6e:e7:19:4e:17:a6:61: f8:df:61:29:16:fe:f6:2d:75:70:b6:71:78:fa:08:f2:65:15: df:01:04:e9:bf:cd:4c:75:30:ea:31:1e:7a:2c:bd:7e:5b:5f: 99:85:d9:94:35:fc:a5:c9:7b:63:f8:69:63:13:58:16:09:5f: 2f:47:f1:e7:17:91:08:c4:82:3a:76:53:fe:1f:3d:3a:63:88: 32:af:e6:b9:e5:9b:0d:8c:0b:1a:4b:bb:96:aa:08:70:58:ac: a8:29:c9:c7:e2:ce:07:77:95:7d:0c:4f:44:da:ea:2e:bb:32: b9:78:2a:7e:ec:96:20:88:d0:4f:9f:e4:a3:eb:16:29:54:e6: 5b:f9:29:59:a0:50:55:3c:bb:37:c4:94:04:cb:d5:b0:d3:8d: 18:2c:43:a5:4d:b0:1e:05:b5:2a:a8:77:34:04:cd:a7:ea:56: 0c:02:66:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U0r4jLQ+WsQM8IgY+jdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm ODJlOTQwHhcNMjYwMTI2MjIwMTE1WhcNMjYwMTI3MjIwMTE1WjAzMTEwLwYDVQQD EygyNzQ1M2NkYzU3NzYyNjc5NjgzZDI5ZTMyYjE2NjI4ZDg4ODNkNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l5yAVPawuqu3mMVfs80PeTDpak+ w78q4NXwshdtMBHb+PEQGiQe/0C4eA+hTPh95wid2pw50yPzz0+hS1w1K58Te3+a PT0dbvXMSTtatJp1FqchyOYDVrvaGarHnvlpk9e4F3bgr9tkqBe0qMuPtMKTcChK W6DzX0WWhYn5qJN/wuTMV0IAqRUtEYWh6uj7mLfWUR9G7dJjb1fjeRth4xG01vMu SunZ9THFylRuxYSdoauvcu5OoHmBbm/xZadKzYzI7j8No/j1JdXzoNsMEqJrLIfa JEcQkHlq9qPEIg3WU25vbMOxzcnzdR51j6ySQrqlxq7fUfSOCXxvrCgUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdFPNxXdiZ5aD0p4ysWYo2Ig9ShMB8GA1UdIwQY MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5 LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgUV8ARm KKRUrepr+8UBF8s2+mdKAmadGhEpq8vtxdtSqZZKBvMuigSjRrQvyEJxXin4K8l0 getUqxQbuPjFL7AvIc4GcPA8M8tnqWCd+hfWA1pu5xlOF6Zh+N9hKRb+9i11cLZx ePoI8mUV3wEE6b/NTHUw6jEeeiy9fltfmYXZlDX8pcl7Y/hpYxNYFglfL0fx5xeR CMSCOnZT/h89OmOIMq/mueWbDYwLGku7lqoIcFisqCnJx+LOB3eVfQxPRNrqLrsy uXgqfuyWIIjQT5/ko+sWKVTmW/kpWaBQVTy7N8SUBMvVsNONGCxDpU2wHgW1Kqh3 NATNp+pWDAJmZA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:21 2026 by rpki-client