This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: Kmu9AHr6qJvkPmZkHrdkxsc5Ux44m+JR27AwPQjvwyQ= Subject key identifier: BA:15:DF:50:B0:43:B5:A1:3B:5B:3A:A0:0C:D1:8D:FF:94:F2:99:64 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019BD847325A1C15D96BDCE21CA2B5216206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17FB Signing time: Mon 19 Jan 2026 22:01:43 +0000 Manifest this update: Mon 19 Jan 2026 22:01:43 +0000 Manifest next update: Tue 20 Jan 2026 22:01:43 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: F+X9XBKbPcL78tn67gLnW+4k8Ja8FqOpt4HIN3D6bUo=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:47:32:5a:1c:15:d9:6b:dc:e2:1c:a2:b5:21:62:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 19 22:01:43 2026 GMT Not After : Jan 20 22:01:43 2026 GMT Subject: CN=ba15df50b043b5a13b5b3aa00cd18dff94f29964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:6d:91:8d:d5:fa:be:24:99:54:4e:64:54: 32:94:1e:15:50:29:23:2f:b1:8e:d3:a5:95:b7:34: f4:dc:c2:4b:fe:da:23:c1:a0:54:57:6d:6b:fd:cb: 47:f7:bb:df:8f:5a:62:91:67:ce:73:33:1b:92:ea: 5a:54:5d:2c:fb:e3:9b:f9:65:c8:4b:b4:e4:9b:7d: 20:d9:9e:08:16:48:a3:67:67:24:b4:61:64:23:a1: 4f:62:35:27:16:5b:67:de:44:4c:f1:32:c5:76:44: b6:fa:28:fb:c0:c9:6c:7e:4d:41:b5:44:c0:71:6d: a5:f6:01:6a:62:7a:5a:75:56:8d:0f:03:22:bc:55: 31:3c:9f:90:e2:f4:27:10:7e:2c:c9:1c:cd:55:60: 48:a5:7d:07:36:b4:d0:03:62:df:0c:8b:6f:f5:16: c6:e6:fb:59:b0:97:91:33:fa:cd:53:f2:e4:46:ba: 02:ad:da:1d:49:97:68:df:fc:43:da:cc:99:20:08: 1f:cd:01:71:da:63:d7:f8:4b:da:86:7b:e6:22:d3: 75:13:08:4f:e4:6f:f5:93:f1:8e:dd:42:c4:29:9c: 34:7a:c5:78:fa:9c:50:95:48:69:e6:af:76:38:3a: e2:90:d8:fb:a1:cf:26:0b:4f:fa:e1:52:be:8f:ef: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:15:DF:50:B0:43:B5:A1:3B:5B:3A:A0:0C:D1:8D:FF:94:F2:99:64 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6d:ed:f1:b7:ca:e9:34:67:38:91:97:c2:46:ea:86:c9:57: 7a:c3:6c:4b:37:1f:c2:f6:12:5f:2f:75:58:d8:06:4b:48:f3: 02:a0:fa:0c:50:14:e2:c4:2a:80:39:ad:df:23:02:43:e0:29: 4f:05:b6:73:f9:3a:c5:6c:42:00:4b:e8:38:0a:19:31:d4:dc: 3e:25:2d:80:a5:49:7f:a5:50:8c:9e:db:10:69:b2:c4:38:36: 86:45:0d:e9:94:d2:22:49:1a:0d:cd:63:82:23:bc:54:a2:22: 61:d0:47:5a:66:3d:39:63:54:c0:6a:2a:c2:92:d6:eb:cc:60: 84:4b:2d:44:95:c1:7d:93:d1:ea:9e:09:92:e0:63:1e:9f:fc: a8:ab:8c:29:dd:73:e2:da:33:f9:e2:38:98:a0:51:9c:a5:c9: f4:55:c7:f8:71:b6:aa:7f:76:b9:af:fd:92:93:fb:e3:a2:0b: b6:da:76:3f:a6:fb:6c:cf:9d:7e:df:a8:73:84:17:df:92:41: f5:56:2a:61:3f:3b:2e:71:e1:1a:3c:f3:4d:f9:13:c6:eb:ac: 96:26:b7:cd:57:6e:b7:ec:a8:93:26:28:c7:4b:50:39:90:a4: 15:fe:d9:65:98:b6:31:07:d9:9b:61:43:bc:b5:65:ac:5d:1d: a4:87:09:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRzJaHBXZa9ziHKK1IWIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTE5MjIwMTQzWhcNMjYwMTIwMjIwMTQzWjAzMTEwLwYDVQQD EyhiYTE1ZGY1MGIwNDNiNWExM2I1YjNhYTAwY2QxOGRmZjk0ZjI5OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPhtkY3V+r4kmVROZFQylB4VUCkj L7GO06WVtzT03MJL/tojwaBUV21r/ctH97vfj1pikWfOczMbkupaVF0s++Ob+WXI S7Tkm30g2Z4IFkijZ2cktGFkI6FPYjUnFltn3kRM8TLFdkS2+ij7wMlsfk1BtUTA cW2l9gFqYnpadVaNDwMivFUxPJ+Q4vQnEH4syRzNVWBIpX0HNrTQA2LfDItv9RbG 5vtZsJeRM/rNU/LkRroCrdodSZdo3/xD2syZIAgfzQFx2mPX+EvahnvmItN1EwhP 5G/1k/GO3ULEKZw0esV4+pxQlUhp5q92ODrikNj7oc8mC0/64VK+j+9qaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoV31CwQ7WhO1s6oAzRjf+U8plkMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJm3t8bfK 6TRnOJGXwkbqhslXesNsSzcfwvYSXy91WNgGS0jzAqD6DFAU4sQqgDmt3yMCQ+Ap TwW2c/k6xWxCAEvoOAoZMdTcPiUtgKVJf6VQjJ7bEGmyxDg2hkUN6ZTSIkkaDc1j giO8VKIiYdBHWmY9OWNUwGoqwpLW68xghEstRJXBfZPR6p4JkuBjHp/8qKuMKd1z 4toz+eI4mKBRnKXJ9FXH+HG2qn92ua/9kpP746ILttp2P6b7bM+dft+oc4QX35JB 9VYqYT87LnHhGjzzTfkTxuuslia3zVdut+yokyYox0tQOZCkFf7ZZZi2MQfZm2FD vLVlrF0dpIcJfQ== -----END CERTIFICATE-----Generated at Tue Jan 20 04:34:38 2026 by rpki-client