This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: 8sshXbyc0XlDFv/Z6OfJwPVeLIwJ9GtaPp7QyWclwiY= Subject key identifier: 59:BD:2D:57:2F:0E:CC:95:D8:59:91:9A:5F:6B:61:BB:67:E3:9D:E6 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019BB583EDF62111A73BC9E41F6271AED7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17E9 Signing time: Tue 13 Jan 2026 04:01:20 +0000 Manifest this update: Tue 13 Jan 2026 04:01:20 +0000 Manifest next update: Wed 14 Jan 2026 04:01:20 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 10PTU1t9++HdBF1dXo1ppJfvWbDXxmohwNvflBpkUls=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:83:ed:f6:21:11:a7:3b:c9:e4:1f:62:71:ae:d7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 13 04:01:20 2026 GMT Not After : Jan 14 04:01:20 2026 GMT Subject: CN=59bd2d572f0ecc95d859919a5f6b61bb67e39de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:20:4b:c4:10:bb:c7:d5:c0:8b:c2:b9:76:d9: 4a:7c:24:7c:d0:32:bd:8b:83:fd:94:f2:44:11:a0: 28:5d:a8:54:cb:36:f7:b3:8b:0a:f4:26:e2:be:17: a7:c4:4e:14:05:b1:e2:e6:2b:33:27:68:e4:18:24: 0d:f2:43:44:60:b6:91:4a:4e:8c:ea:2d:d0:3a:34: d2:6c:fa:2a:c2:03:b0:d6:ad:f5:a7:24:07:6a:ef: 25:11:b2:42:77:a0:7a:80:d4:2d:97:78:cf:89:23: 8d:ae:47:41:35:6d:0b:43:e2:44:12:64:67:2f:87: 69:38:63:49:bb:ab:29:11:1c:23:ee:62:66:b9:a4: 9f:bf:35:8a:5b:b3:65:f6:ab:e1:90:6b:45:28:c7: 4d:5e:7e:11:75:d9:30:63:72:e2:32:03:0a:d9:d9: 4d:bb:ca:2e:79:de:ac:db:bd:7e:8a:57:21:52:d8: df:b7:81:a8:ee:94:65:c4:85:fa:54:33:3b:04:08: 0b:0a:26:31:c7:4c:91:e9:48:4e:4c:ff:3d:8d:fa: 21:cb:3c:f4:1b:b0:79:c7:74:fa:07:7d:93:81:cd: 16:0f:60:a9:c4:c4:32:3e:e7:db:b1:78:3d:33:23: 43:ab:1a:ff:fa:c5:bf:49:fb:be:60:14:cb:bb:51: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BD:2D:57:2F:0E:CC:95:D8:59:91:9A:5F:6B:61:BB:67:E3:9D:E6 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ac:82:37:7c:53:3a:74:91:61:11:7f:0a:f6:3b:9c:be:7a: 03:f3:09:27:e1:71:cf:2d:d4:e7:6e:af:90:45:6f:fd:f8:27: eb:45:c4:47:85:ae:1a:6a:49:c5:b4:21:39:a9:72:b5:8c:8e: 8f:86:54:1e:2d:22:9c:38:30:8c:f2:c9:57:14:23:17:ca:06: b6:79:81:46:24:d4:7f:c7:8a:98:e9:41:a8:08:e6:8c:84:e4: 8d:d1:02:08:19:21:ab:1a:ff:0b:9b:21:33:cc:25:ec:c4:18: 32:8d:83:4e:e4:98:41:c3:71:2f:37:41:86:e7:e4:34:e4:19: 42:81:25:1a:b8:df:2c:55:0b:cf:28:ae:58:f3:2b:0e:6e:38: f1:68:72:1c:ee:83:6e:94:c4:be:c5:fd:68:d4:32:3b:68:fb: 04:bf:a4:2b:0c:7d:b3:1b:6f:0b:ab:ce:f3:0a:81:f2:21:91: 18:de:7b:43:14:7b:81:62:a6:be:08:21:58:c8:67:b5:ae:6d: 41:c7:10:3a:ac:7f:e3:c0:a5:ab:4f:fc:1b:ca:21:31:b6:2e: be:36:97:e8:ec:b2:1a:6a:09:f0:cc:77:f3:68:8c:34:77:73: f6:46:84:22:b7:29:d7:69:3d:38:5f:87:1d:da:97:82:60:e0: 76:6d:00:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1g+32IRGnO8nkH2JxrtevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTEzMDQwMTIwWhcNMjYwMTE0MDQwMTIwWjAzMTEwLwYDVQQD Eyg1OWJkMmQ1NzJmMGVjYzk1ZDg1OTkxOWE1ZjZiNjFiYjY3ZTM5ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SBLxBC7x9XAi8K5dtlKfCR80DK9 i4P9lPJEEaAoXahUyzb3s4sK9CbivhenxE4UBbHi5iszJ2jkGCQN8kNEYLaRSk6M 6i3QOjTSbPoqwgOw1q31pyQHau8lEbJCd6B6gNQtl3jPiSONrkdBNW0LQ+JEEmRn L4dpOGNJu6spERwj7mJmuaSfvzWKW7Nl9qvhkGtFKMdNXn4RddkwY3LiMgMK2dlN u8oued6s271+ilchUtjft4Go7pRlxIX6VDM7BAgLCiYxx0yR6UhOTP89jfohyzz0 G7B5x3T6B32Tgc0WD2CpxMQyPufbsXg9MyNDqxr/+sW/Sfu+YBTLu1E93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm9LVcvDsyV2FmRml9rYbtn453mMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnayCN3xT OnSRYRF/CvY7nL56A/MJJ+Fxzy3U526vkEVv/fgn60XER4WuGmpJxbQhOalytYyO j4ZUHi0inDgwjPLJVxQjF8oGtnmBRiTUf8eKmOlBqAjmjITkjdECCBkhqxr/C5sh M8wl7MQYMo2DTuSYQcNxLzdBhufkNOQZQoElGrjfLFULzyiuWPMrDm448WhyHO6D bpTEvsX9aNQyO2j7BL+kKwx9sxtvC6vO8wqB8iGRGN57QxR7gWKmvgghWMhnta5t QccQOqx/48Clq0/8G8ohMbYuvjaX6OyyGmoJ8Mx382iMNHdz9kaEIrcp12k9OF+H HdqXgmDgdm0AlQ== -----END CERTIFICATE-----Generated at Tue Jan 13 11:33:58 2026 by rpki-client