This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: cpYp5hHkpMEI/OWotfEvps7FWvdG2ZjicrDgy1Kl51o= Subject key identifier: A7:80:89:5B:B4:D6:A5:1F:36:45:D6:E8:5F:4B:C7:15:B3:B7:13:1A Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019BBF2B5367B2568E05DE2D96E99F165B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17EE Signing time: Thu 15 Jan 2026 01:00:45 +0000 Manifest this update: Thu 15 Jan 2026 01:00:45 +0000 Manifest next update: Fri 16 Jan 2026 01:00:45 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: fuP79paUoVOWAIAfOo7YbdwWmhCYT8LyfcMAHm/CToc=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 20:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bf:2b:53:67:b2:56:8e:05:de:2d:96:e9:9f:16:5b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 15 01:00:45 2026 GMT Not After : Jan 16 01:00:45 2026 GMT Subject: CN=a780895bb4d6a51f3645d6e85f4bc715b3b7131a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:66:df:28:7b:07:75:61:28:95:34:90:19: e6:fe:a9:a2:d3:9b:3b:24:0e:85:48:f9:fc:b6:3e: 6b:51:3f:36:d6:06:50:d9:4c:cb:7c:25:f4:80:11: 0a:b3:e2:29:b2:f3:32:7b:e3:b0:2d:59:b9:1a:2d: a6:3a:6c:cc:08:ab:ae:10:24:46:a5:34:39:61:4d: e0:82:b5:95:c6:17:ca:4e:63:21:ba:40:b8:0b:bc: a4:7d:93:64:da:68:d3:c2:e2:b6:6f:64:7c:82:de: bf:12:68:41:07:b5:6c:60:26:36:7d:b7:a9:90:9d: 03:db:06:8f:08:65:74:e7:3b:09:3e:11:b5:64:27: 09:b8:cf:bc:14:ff:bc:bd:14:1c:6b:a8:ab:92:04: 37:26:74:c4:69:2b:c7:4d:d4:9f:70:48:83:c7:69: 98:fa:b0:51:e9:3b:34:3d:ab:5f:24:12:15:be:cb: a8:9b:2b:0c:6d:94:f4:e7:1a:13:8f:c8:6b:c7:5f: a5:43:0a:f0:3f:79:86:25:fd:65:32:c4:e1:6b:1c: 15:d6:18:2f:a2:b9:5a:59:02:fd:db:ec:e5:b6:40: c5:ac:9f:81:45:32:b8:73:60:d7:d5:7f:e5:0e:87: 56:3e:b0:f4:8c:6e:7e:01:d5:12:aa:26:70:56:18: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:80:89:5B:B4:D6:A5:1F:36:45:D6:E8:5F:4B:C7:15:B3:B7:13:1A X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:bd:ea:32:29:4c:df:47:8a:74:b3:60:73:8a:e6:a2:88: e9:fd:ba:1d:34:e3:38:67:c1:60:52:62:3f:21:05:b6:70:a7: 2e:a3:42:43:10:e5:d8:41:f2:96:e7:b5:92:db:3c:cc:64:a0: 66:60:ad:e6:6b:d8:46:bf:88:a6:48:49:39:f1:f0:d7:2a:8f: 9f:68:e2:4c:8f:14:6b:62:a5:ea:57:03:f7:54:90:a8:99:87: 2c:de:3b:a4:9e:73:5d:33:8e:a2:2d:0c:a9:8c:20:f1:bc:74: 27:f9:62:78:c3:df:ce:ac:bd:21:5d:c8:94:5d:a7:4f:3f:c3: be:58:b8:23:4b:69:77:ef:db:f0:3c:65:65:c1:13:1a:a7:f2: ea:0a:eb:4b:9f:93:5d:cd:fb:ef:df:24:bc:7d:38:00:aa:8f: 6e:b8:97:47:61:15:ae:9e:88:f6:b8:fc:35:16:04:99:fd:2c: 1b:fd:02:8f:4e:46:0c:5e:89:24:a6:db:b9:eb:ee:4c:f6:a6: d4:0a:36:bd:29:18:e3:0c:82:79:0a:f0:cd:f9:ee:21:5c:fc: f4:86:80:0b:03:f7:1a:22:57:95:57:2f:51:1f:75:04:e4:2c: 3a:00:f3:17:59:d4:75:6d:59:c5:31:f5:82:8a:91:da:a1:9a: f7:b7:c0:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu/K1NnslaOBd4tlumfFluLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTE1MDEwMDQ1WhcNMjYwMTE2MDEwMDQ1WjAzMTEwLwYDVQQD EyhhNzgwODk1YmI0ZDZhNTFmMzY0NWQ2ZTg1ZjRiYzcxNWIzYjcxMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvtm3yh7B3VhKJU0kBnm/qmi05s7 JA6FSPn8tj5rUT821gZQ2UzLfCX0gBEKs+IpsvMye+OwLVm5Gi2mOmzMCKuuECRG pTQ5YU3ggrWVxhfKTmMhukC4C7ykfZNk2mjTwuK2b2R8gt6/EmhBB7VsYCY2fbep kJ0D2waPCGV05zsJPhG1ZCcJuM+8FP+8vRQca6irkgQ3JnTEaSvHTdSfcEiDx2mY +rBR6Ts0PatfJBIVvsuomysMbZT05xoTj8hrx1+lQwrwP3mGJf1lMsThaxwV1hgv orlaWQL92+zltkDFrJ+BRTK4c2DX1X/lDodWPrD0jG5+AdUSqiZwVhgrkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeAiVu01qUfNkXW6F9LxxWztxMaMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmK96jIp TN9HinSzYHOK5qKI6f26HTTjOGfBYFJiPyEFtnCnLqNCQxDl2EHylue1kts8zGSg ZmCt5mvYRr+IpkhJOfHw1yqPn2jiTI8Ua2Kl6lcD91SQqJmHLN47pJ5zXTOOoi0M qYwg8bx0J/lieMPfzqy9IV3IlF2nTz/Dvli4I0tpd+/b8DxlZcETGqfy6grrS5+T Xc37798kvH04AKqPbriXR2EVrp6I9rj8NRYEmf0sG/0Cj05GDF6JJKbbuevuTPam 1Ao2vSkY4wyCeQrwzfnuIVz89IaACwP3GiJXlVcvUR91BOQsOgDzF1nUdW1ZxTH1 goqR2qGa97fALg== -----END CERTIFICATE-----Generated at Thu Jan 15 03:47:33 2026 by rpki-client