This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: K3nGO4MJ6wBkKxUfkk15WCPIIdgnikUjL5La5IzRdZg= Subject key identifier: A6:02:B5:B5:E7:21:87:68:6F:59:E5:44:C0:F0:33:28:15:6E:E8:DE Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B8918A63A52ECCB02AE85091E93305260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17D2 Signing time: Sun 04 Jan 2026 13:00:52 +0000 Manifest this update: Sun 04 Jan 2026 13:00:52 +0000 Manifest next update: Mon 05 Jan 2026 13:00:52 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: IN8MVbFkxUd4GLEENqJzUTzEUSxumweUpd0/rQ90aZ0=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:18:a6:3a:52:ec:cb:02:ae:85:09:1e:93:30:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 4 13:00:52 2026 GMT Not After : Jan 5 13:00:52 2026 GMT Subject: CN=a602b5b5e72187686f59e544c0f03328156ee8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:72:46:00:2c:12:82:ca:24:a3:b7:dc:c2:a6: a8:20:5d:b3:94:f1:6f:dd:4e:c4:aa:21:ff:90:28: 52:19:42:b5:45:ce:2a:66:36:77:d6:99:c6:79:f3: 58:ac:04:73:d6:9b:d9:56:40:cc:19:10:16:71:1c: 77:0c:a7:0f:40:29:f9:38:c3:3c:de:f3:dc:ef:77: 3d:5b:7b:22:aa:4c:19:f5:3f:ab:10:b7:22:43:e8: 09:88:17:b6:ad:41:63:22:ed:ed:c1:4e:ed:62:1e: de:03:21:34:7f:8e:90:e9:2b:13:fe:b0:40:ea:9a: 5f:d3:96:80:f6:cb:7d:01:d3:20:67:88:83:73:c4: 2a:db:10:84:ef:48:f0:28:fe:74:cf:90:c4:d9:7b: 4e:1e:c8:b4:92:10:97:14:18:f3:de:58:ce:ad:36: e5:78:67:49:d4:84:7b:5c:dd:61:eb:c5:52:8d:26: 3a:64:6e:ac:08:cc:67:ac:02:48:e0:0e:9e:7e:37: d7:7f:cc:47:98:c8:a0:b6:14:3b:a1:92:0e:1b:3e: 77:98:da:6e:ef:cb:d4:de:e9:a0:c4:1f:9e:ad:e9: ff:fc:a3:be:31:65:84:45:e2:fb:0e:2a:5a:b4:c7: 26:4f:1d:03:06:04:45:70:1e:99:35:bf:d5:aa:3a: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:B5:B5:E7:21:87:68:6F:59:E5:44:C0:F0:33:28:15:6E:E8:DE X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9d:b8:eb:07:3f:96:4d:2f:20:7b:c4:5b:11:34:a6:8d:dd: 1d:e5:ce:54:d1:32:d4:0a:c8:fa:20:3e:90:e2:f9:14:40:b2: 7d:32:cd:ac:ef:31:4d:89:74:2a:8b:11:01:7d:8e:b0:3e:0e: 07:ba:cf:ae:3d:8a:90:3e:a6:36:3d:0b:aa:02:db:47:7f:ca: 9c:96:5d:bb:18:3d:e2:63:5f:9e:84:fc:32:2f:2a:46:58:3d: c7:85:87:b3:0e:54:45:e3:a9:4c:2a:c2:28:a2:31:46:28:22: 1f:49:b1:b8:29:d4:ec:4c:7c:6c:f4:c1:56:34:7a:79:98:1a: 9f:bc:44:26:02:d3:70:a5:f1:38:a9:02:ce:ae:fa:4d:2d:38: c0:c8:bc:e7:5b:ca:27:6f:e0:8f:75:2c:11:fa:80:49:5a:d0: 06:49:23:a9:a1:e9:49:bb:39:8a:c4:1e:59:dc:da:6c:fb:28: c2:f0:6e:b9:19:95:4d:c5:5a:d5:8e:ed:ff:6c:62:fa:e9:fd: 55:72:20:5c:2d:e8:eb:e4:e5:5d:8a:d7:91:1d:12:c6:79:60: af:63:b9:f3:8b:87:77:03:a1:0b:20:7a:dc:55:0a:a1:f2:7e: 4c:d6:60:0a:24:8b:23:5e:26:3a:ca:70:8b:09:04:d2:89:f0: 0f:bd:e1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuJGKY6UuzLAq6FCR6TMFJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTA0MTMwMDUyWhcNMjYwMTA1MTMwMDUyWjAzMTEwLwYDVQQD EyhhNjAyYjViNWU3MjE4NzY4NmY1OWU1NDRjMGYwMzMyODE1NmVlOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HJGACwSgsoko7fcwqaoIF2zlPFv 3U7EqiH/kChSGUK1Rc4qZjZ31pnGefNYrARz1pvZVkDMGRAWcRx3DKcPQCn5OMM8 3vPc73c9W3siqkwZ9T+rELciQ+gJiBe2rUFjIu3twU7tYh7eAyE0f46Q6SsT/rBA 6ppf05aA9st9AdMgZ4iDc8Qq2xCE70jwKP50z5DE2XtOHsi0khCXFBjz3ljOrTbl eGdJ1IR7XN1h68VSjSY6ZG6sCMxnrAJI4A6efjfXf8xHmMigthQ7oZIOGz53mNpu 78vU3umgxB+eren//KO+MWWEReL7DipatMcmTx0DBgRFcB6ZNb/VqjoBzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYCtbXnIYdob1nlRMDwMygVbujeMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ246wc/ lk0vIHvEWxE0po3dHeXOVNEy1ArI+iA+kOL5FECyfTLNrO8xTYl0KosRAX2OsD4O B7rPrj2KkD6mNj0LqgLbR3/KnJZduxg94mNfnoT8Mi8qRlg9x4WHsw5UReOpTCrC KKIxRigiH0mxuCnU7Ex8bPTBVjR6eZgan7xEJgLTcKXxOKkCzq76TS04wMi851vK J2/gj3UsEfqASVrQBkkjqaHpSbs5isQeWdzabPsowvBuuRmVTcVa1Y7t/2xi+un9 VXIgXC3o6+TlXYrXkR0Sxnlgr2O584uHdwOhCyB63FUKofJ+TNZgCiSLI14mOspw iwkE0onwD73h3g== -----END CERTIFICATE-----Generated at Sun Jan 4 16:36:33 2026 by rpki-client