This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json) Hash identifier: 4wBFh/GK0PGM4l+oVxMruQXufa5E/pYVwEIF/uYzFP4= Subject key identifier: 7F:90:D9:F6:13:5F:10:FC:62:6D:E4:2A:13:F5:8E:E6:3C:A6:04:4A Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BF79A83726304B895BDC61852C3011CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft Manifest number: 0F Signing time: Mon 26 Jan 2026 00:00:57 +0000 Manifest this update: Mon 26 Jan 2026 00:00:57 +0000 Manifest next update: Tue 27 Jan 2026 00:00:57 +0000 Files and hashes: 1: 1M8IbtHxxoLwK6YRo1D_vDNEZk4.roa (hash: 18hDzxZD6W/2Cgc6fR050YsgjzIhOA4O135SZaLSjNQ=) 2: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: L9rJnQcThvOLalJCaKkmnHwMa71CGUf89n0Ps+yWwt0=) 3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=) 4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=) 5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=) 6: W6axFsn-vbQYLWwnDT47_wx3Q3c.roa (hash: Rtry8Utgwi6S+gFf7iEFH1/gJHIzc/FxYDg1Nh4bbns=) 7: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=) 8: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=) 9: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=) 10: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=) 11: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=) 12: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:83:72:63:04:b8:95:bd:c6:18:52:c3:01:1c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 26 00:00:57 2026 GMT Not After : Jan 27 00:00:57 2026 GMT Subject: CN=7f90d9f6135f10fc626de42a13f58ee63ca6044a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:42:b6:28:a0:60:3a:b3:de:6f:d3:93:08: 30:b0:e4:9e:ba:5b:18:0d:cb:35:7b:91:bc:2d:c3: e3:f3:35:28:b9:3f:8a:a9:bf:f9:ed:a6:7e:09:6e: a7:42:e0:94:c2:d6:18:11:c9:1e:b7:4d:6f:3e:88: 79:35:ec:a6:ec:a4:00:6c:26:fe:c2:cf:e6:d1:8c: bf:5d:19:09:bb:1e:0c:24:e7:e3:5a:5d:9c:00:41: ac:39:8f:2c:eb:14:d1:8d:88:cf:6f:4f:4b:2d:55: 98:b7:7e:37:05:7f:3d:6a:20:2b:60:8d:1b:bc:dd: 2b:b8:63:b5:3d:74:96:74:5b:a6:75:92:95:af:be: 45:bc:c2:64:77:de:b3:5d:bf:24:a1:5d:b2:26:ae: 0f:8a:04:2a:43:12:ca:04:68:e7:c8:9a:41:8e:21: 08:b8:18:bd:1b:3a:56:7b:0a:ac:e0:e2:2c:bf:9f: 13:c9:40:ec:3b:31:a3:c3:27:30:8f:33:50:99:3f: 23:aa:2d:24:d8:59:32:90:59:07:cf:4c:95:57:bd: 13:fc:a8:29:50:e6:35:52:f3:2e:f9:f8:6a:61:fc: 39:82:94:c1:c4:af:b5:79:2d:b8:74:39:0f:71:23: 37:45:3b:20:82:21:15:cf:b8:3b:a6:50:ce:50:22: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:D9:F6:13:5F:10:FC:62:6D:E4:2A:13:F5:8E:E6:3C:A6:04:4A X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:81:96:6a:76:e5:4f:c8:9c:91:3c:7f:d7:f0:37:ae:75:09: 8f:3d:cf:9e:89:98:6e:67:53:f1:a0:82:c0:f2:24:ae:23:95: f0:68:de:06:05:71:4c:e7:79:e4:3e:06:06:0b:33:68:fd:80: 0b:2d:91:b2:cc:27:06:11:f1:7e:9e:c0:ab:9e:57:f5:65:e4: 8a:a3:74:6e:fe:46:eb:e2:e3:0c:67:36:e4:3c:f9:cc:9a:b9: a7:9c:f5:2e:f1:54:be:f8:5a:42:3f:55:3b:ee:06:53:94:55: db:d3:92:66:ad:6b:31:53:ba:89:92:dd:63:95:c2:d5:9c:c3: c1:55:ec:a7:e7:eb:85:fd:70:e4:5c:fd:85:5b:4f:88:28:fa: e7:de:a8:ab:8c:4b:0f:23:d5:a5:a8:8d:86:4a:47:52:89:62: 2e:74:ee:30:9f:de:4b:d9:7c:a6:16:53:3a:b7:b4:6e:e3:76: fe:36:50:dd:0e:7c:33:c5:7b:e9:72:cb:54:41:e8:a9:24:e7: 7a:e6:d2:42:91:3d:d6:e1:8f:56:12:5c:13:7e:7b:42:d5:2c: 0b:41:dc:46:88:b3:aa:3b:1d:ce:80:5a:f1:e9:97:f2:8a:3a: 18:bd:26:13:ec:96:25:ba:53:4a:78:eb:3a:da:14:e9:2f:99: aa:05:b7:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3moNyYwS4lb3GGFLDARzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTI2MDAwMDU3WhcNMjYwMTI3MDAwMDU3WjAzMTEwLwYDVQQD Eyg3ZjkwZDlmNjEzNWYxMGZjNjI2ZGU0MmExM2Y1OGVlNjNjYTYwNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTpCtiigYDqz3m/TkwgwsOSeulsY Dcs1e5G8LcPj8zUouT+Kqb/57aZ+CW6nQuCUwtYYEcket01vPoh5Neym7KQAbCb+ ws/m0Yy/XRkJux4MJOfjWl2cAEGsOY8s6xTRjYjPb09LLVWYt343BX89aiArYI0b vN0ruGO1PXSWdFumdZKVr75FvMJkd96zXb8koV2yJq4PigQqQxLKBGjnyJpBjiEI uBi9GzpWewqs4OIsv58TyUDsOzGjwycwjzNQmT8jqi0k2FkykFkHz0yVV70T/Kgp UOY1UvMu+fhqYfw5gpTBxK+1eS24dDkPcSM3RTsggiEVz7g7plDOUCI6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Q2fYTXxD8Ym3kKhP1juY8pgRKMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIGWanbl T8ickTx/1/A3rnUJjz3PnomYbmdT8aCCwPIkriOV8GjeBgVxTOd55D4GBgszaP2A Cy2RsswnBhHxfp7Aq55X9WXkiqN0bv5G6+LjDGc25Dz5zJq5p5z1LvFUvvhaQj9V O+4GU5RV29OSZq1rMVO6iZLdY5XC1ZzDwVXsp+frhf1w5Fz9hVtPiCj6596oq4xL DyPVpaiNhkpHUoliLnTuMJ/eS9l8phZTOre0buN2/jZQ3Q58M8V76XLLVEHoqSTn eubSQpE91uGPVhJcE357QtUsC0HcRoizqjsdzoBa8emX8oo6GL0mE+yWJbpTSnjr OtoU6S+ZqgW39A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:18 2026 by rpki-client