This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: su/NuRKC+CR9ZsEEvjtdJJpvjL6TbYffxCMKxugVUJg= Subject key identifier: 66:5B:72:3B:91:EB:92:E2:D1:E3:00:6E:75:91:BA:BD:2F:2D:42:71 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B8CF53FA541E9009D123447C30D12555E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17D4 Signing time: Mon 05 Jan 2026 07:00:41 +0000 Manifest this update: Mon 05 Jan 2026 07:00:41 +0000 Manifest next update: Tue 06 Jan 2026 07:00:41 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: esqH3YhWfICJ3J6XuhFuNwtWK83bIHtdnefE4sM9jks=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:f5:3f:a5:41:e9:00:9d:12:34:47:c3:0d:12:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 5 07:00:41 2026 GMT Not After : Jan 6 07:00:41 2026 GMT Subject: CN=665b723b91eb92e2d1e3006e7591babd2f2d4271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:7e:87:df:2f:9e:7c:c6:eb:a2:f6:7a:6f: 96:d6:f6:58:66:ea:3e:75:ca:1d:04:63:e0:56:03: f5:68:55:d5:46:aa:e1:02:f7:ba:0c:11:93:ca:17: ed:71:46:a3:99:58:d6:56:41:c8:6b:1f:8b:b2:2f: 9f:52:82:fd:c0:45:71:c1:0e:d9:d7:08:76:2c:d2: 02:22:8c:62:77:82:8a:5d:3a:3b:81:1e:d8:b0:c7: 04:52:e6:d7:1f:49:b8:72:64:e6:70:4a:86:5c:6d: 4c:f4:36:bd:73:66:dd:01:7b:9f:af:16:e8:64:a9: 92:21:7e:04:20:a6:ed:e0:3b:e4:98:36:9a:6c:a1: 1c:ea:2e:5a:a4:c0:6b:0f:d2:08:28:a4:b6:e5:b4: c6:51:91:d4:16:72:72:9c:14:ec:8f:be:9f:d5:dd: 4e:fb:79:15:49:95:f0:9d:f1:89:d7:b7:17:24:fb: 06:a5:00:b4:1c:7c:e9:49:82:7e:a8:c2:23:85:be: 59:5a:d9:cd:69:87:bd:15:1a:8d:31:97:49:2b:3f: fb:58:b1:7a:53:57:12:12:ad:92:9a:dd:06:1f:2f: a2:9d:70:d9:88:bd:c3:22:5d:04:09:2a:1e:67:ea: 1f:a1:1e:1c:cd:62:5e:24:8f:82:d4:1b:52:fd:a3: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:72:3B:91:EB:92:E2:D1:E3:00:6E:75:91:BA:BD:2F:2D:42:71 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:df:5e:d2:6c:de:bc:e7:48:00:bd:28:fd:e7:a9:47:d1:43: 68:99:1d:ae:a3:91:1e:ff:53:f8:a8:d7:f9:1f:f4:de:ca:94: 67:bf:53:57:97:9d:b5:95:6f:ec:83:57:df:41:85:69:63:3d: 1e:aa:81:4a:a2:c9:82:b4:00:fc:62:21:48:65:63:79:44:e1: 48:ef:9f:69:52:8f:ea:27:92:66:82:a6:ae:3d:f6:33:39:c4: 84:f9:14:29:a1:34:6c:cd:e9:8b:b4:da:e7:ee:bc:c6:33:ff: da:74:ad:4e:29:33:e3:f9:3d:a6:ba:f0:8a:94:3c:8b:91:43: 4d:d0:8c:f7:20:c2:1f:02:e9:2b:97:b1:fd:cc:64:55:96:36: 2c:7d:20:d6:fe:02:d3:44:f5:6f:f6:f4:91:eb:d5:8b:43:a0: 90:91:a5:2b:a8:50:93:b1:3f:19:40:e7:db:1b:92:4d:22:40: 6c:4f:e8:9a:80:08:a1:53:35:5f:a1:9a:b3:98:21:20:c3:b9: 62:6b:08:c8:2c:37:e9:d5:05:bf:e0:51:78:b2:89:ce:5d:d7: 7e:ed:26:00:fa:53:28:c6:00:13:c9:8f:48:a2:e1:44:de:10: 92:03:ef:63:8d:d8:93:db:12:2d:38:80:7c:26:4f:6f:1a:3c: 01:94:72:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuM9T+lQekAnRI0R8MNElVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTA1MDcwMDQxWhcNMjYwMTA2MDcwMDQxWjAzMTEwLwYDVQQD Eyg2NjViNzIzYjkxZWI5MmUyZDFlMzAwNmU3NTkxYmFiZDJmMmQ0MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXd+h98vnnzG66L2em+W1vZYZuo+ dcodBGPgVgP1aFXVRqrhAve6DBGTyhftcUajmVjWVkHIax+Lsi+fUoL9wEVxwQ7Z 1wh2LNICIoxid4KKXTo7gR7YsMcEUubXH0m4cmTmcEqGXG1M9Da9c2bdAXufrxbo ZKmSIX4EIKbt4DvkmDaabKEc6i5apMBrD9IIKKS25bTGUZHUFnJynBTsj76f1d1O +3kVSZXwnfGJ17cXJPsGpQC0HHzpSYJ+qMIjhb5ZWtnNaYe9FRqNMZdJKz/7WLF6 U1cSEq2Smt0GHy+inXDZiL3DIl0ECSoeZ+ofoR4czWJeJI+C1BtS/aPnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZbcjuR65Li0eMAbnWRur0vLUJxMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb99e0mze vOdIAL0o/eepR9FDaJkdrqORHv9T+KjX+R/03sqUZ79TV5edtZVv7INX30GFaWM9 HqqBSqLJgrQA/GIhSGVjeUThSO+faVKP6ieSZoKmrj32MznEhPkUKaE0bM3pi7Ta 5+68xjP/2nStTikz4/k9prrwipQ8i5FDTdCM9yDCHwLpK5ex/cxkVZY2LH0g1v4C 00T1b/b0kevVi0OgkJGlK6hQk7E/GUDn2xuSTSJAbE/omoAIoVM1X6Gas5ghIMO5 YmsIyCw36dUFv+BReLKJzl3Xfu0mAPpTKMYAE8mPSKLhRN4QkgPvY43Yk9sSLTiA fCZPbxo8AZRyxQ== -----END CERTIFICATE-----Generated at Mon Jan 5 09:32:25 2026 by rpki-client