This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json) Hash identifier: zJGkkrBTiOuoxo+XlQFivjhTl0pXD7mZHYRfj7vS0l4= Subject key identifier: 3B:46:F2:4F:09:89:A3:45:E3:DA:BC:01:08:AE:E8:62:FD:A4:CD:1A Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Certificate serial: 019B815FCE0C7FC37961D5717287D09EACF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft Manifest number: 12C1 Signing time: Sat 03 Jan 2026 01:01:38 +0000 Manifest this update: Sat 03 Jan 2026 01:01:38 +0000 Manifest next update: Sun 04 Jan 2026 01:01:38 +0000 Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=) 2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=) 3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=) 4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=) 5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=) 6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=) 7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=) 8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: k07c9OQArmG7QAZ4rLYrTobIs9artyF9KVyOzQMqMtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:5f:ce:0c:7f:c3:79:61:d5:71:72:87:d0:9e:ac:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Validity Not Before: Jan 3 01:01:38 2026 GMT Not After : Jan 4 01:01:38 2026 GMT Subject: CN=3b46f24f0989a345e3dabc0108aee862fda4cd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:87:73:81:1c:29:ed:cf:3b:cd:8d:bf:b7: ce:7b:3c:e3:5d:b4:84:82:e2:95:4a:ed:86:b4:fa: 2c:2d:e5:f0:f7:08:5b:95:b4:0e:16:67:26:d4:05: e2:85:eb:e0:bc:54:4d:85:18:b7:b4:45:21:ae:51: 8e:3b:f1:e9:af:f1:f2:06:9e:7b:09:c0:cf:79:1d: 9e:45:c3:1f:54:c1:2d:30:1d:4d:4f:71:48:17:93: d4:6b:4d:bf:2c:9e:8e:91:5a:65:9a:a2:e9:af:5e: 48:f0:6f:01:b9:49:3c:e4:ef:34:cd:89:72:bc:a2: a4:46:ad:dc:84:1d:72:8d:cb:f1:ca:7e:6c:de:25: a7:99:74:24:07:5f:e7:ba:e0:06:e2:99:99:e1:62: 74:90:20:b6:fc:eb:43:3d:a3:9d:b0:b8:5e:da:e6: dd:27:d6:d5:c2:83:60:95:fc:d5:06:17:f1:68:33: 6f:44:a4:28:87:e2:5e:3a:f1:4d:4c:fa:d5:27:f4: e3:21:39:06:93:0d:f3:f2:3d:34:c2:ff:b5:8c:24: 0a:96:de:f1:1b:2f:69:79:82:b7:40:41:70:1f:a7: 2b:f2:14:8c:b9:b0:93:2b:85:c7:84:57:5b:f8:ee: 4f:b4:19:64:d5:72:5c:2f:91:0f:1c:2b:d5:e8:5f: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:46:F2:4F:09:89:A3:45:E3:DA:BC:01:08:AE:E8:62:FD:A4:CD:1A X509v3 Authority Key Identifier: keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1a:0e:e8:86:b3:70:b2:55:d1:13:91:13:bb:23:bd:40:28: 0a:72:91:65:40:f1:80:02:f2:1a:a4:b9:c3:c4:0d:01:19:42: 1d:99:8a:75:7a:6e:79:50:1a:cb:29:34:6d:6e:6e:e6:62:3e: 99:6c:22:5e:a7:66:91:83:af:00:69:7e:b9:a7:e8:2d:72:0e: b8:b1:65:cd:db:ed:ac:85:a7:3a:8a:28:96:27:14:b3:fc:df: 8d:9b:aa:a9:0f:7b:ae:41:69:a9:a6:90:69:fb:7c:09:97:60: 0a:17:0a:82:cc:e9:63:0e:5a:e8:ea:50:2a:93:3f:6a:6b:5a: c6:18:ac:3b:0d:46:da:ee:29:c0:ab:38:aa:78:b6:3b:ae:c8: 23:9e:88:47:a7:f5:7b:64:4e:ce:09:93:98:1b:dc:23:63:e3: d1:69:02:b7:a7:a5:36:86:f1:0e:b0:f6:5a:2e:4a:fd:e8:f9: 2f:a7:cb:5b:23:6b:ab:0c:f6:fc:09:18:00:6f:7b:75:2f:a1: 2d:39:c1:c9:28:0e:0a:20:ff:54:0e:fe:75:ba:ce:16:34:0b: 4d:d7:05:7b:c3:ca:40:6a:b4:ae:5e:e7:e2:0d:8b:54:be:b5: 00:16:7a:e8:bc:b5:b1:f9:2f:0b:fd:62:ff:94:ab:c6:36:d4: 42:c6:9a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBX84Mf8N5YdVxcofQnqz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk NTBhNjMwHhcNMjYwMTAzMDEwMTM4WhcNMjYwMTA0MDEwMTM4WjAzMTEwLwYDVQQD EygzYjQ2ZjI0ZjA5ODlhMzQ1ZTNkYWJjMDEwOGFlZTg2MmZkYTRjZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BqHc4EcKe3PO82Nv7fOezzjXbSE guKVSu2GtPosLeXw9whblbQOFmcm1AXihevgvFRNhRi3tEUhrlGOO/Hpr/HyBp57 CcDPeR2eRcMfVMEtMB1NT3FIF5PUa02/LJ6OkVplmqLpr15I8G8BuUk85O80zYly vKKkRq3chB1yjcvxyn5s3iWnmXQkB1/nuuAG4pmZ4WJ0kCC2/OtDPaOdsLhe2ubd J9bVwoNglfzVBhfxaDNvRKQoh+JeOvFNTPrVJ/TjITkGkw3z8j00wv+1jCQKlt7x Gy9peYK3QEFwH6cr8hSMubCTK4XHhFdb+O5PtBlk1XJcL5EPHCvV6F/AzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtG8k8JiaNF49q8AQiu6GL9pM0aMB8GA1UdIwQY MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4 LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBoO6Iaz cLJV0RORE7sjvUAoCnKRZUDxgALyGqS5w8QNARlCHZmKdXpueVAayyk0bW5u5mI+ mWwiXqdmkYOvAGl+uafoLXIOuLFlzdvtrIWnOooolicUs/zfjZuqqQ97rkFpqaaQ aft8CZdgChcKgszpYw5a6OpQKpM/amtaxhisOw1G2u4pwKs4qni2O67II56IR6f1 e2ROzgmTmBvcI2Pj0WkCt6elNobxDrD2Wi5K/ej5L6fLWyNrqwz2/AkYAG97dS+h LTnBySgOCiD/VA7+dbrOFjQLTdcFe8PKQGq0rl7n4g2LVL61ABZ66Ly1sfkvC/1i /5SrxjbUQsaa8w== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:04 2026 by rpki-client