This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: BSoe8Y88zs7V80n7f5ejUPqKPeqRBULE2boKfesIJss= Subject key identifier: 4C:FC:5E:F8:7C:DD:8F:2C:48:E0:67:0F:C4:A8:C8:F0:7C:09:21:1A Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019BADCB46B5FDA644B191C543343507888F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17E5 Signing time: Sun 11 Jan 2026 16:02:18 +0000 Manifest this update: Sun 11 Jan 2026 16:02:18 +0000 Manifest next update: Mon 12 Jan 2026 16:02:18 +0000 Files and hashes: 1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: khgyeVvCedw4bxlUtV0NVnTnJLDuDwn/K+AiEEvfWD4=) 2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=) 3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=) 4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:46:b5:fd:a6:44:b1:91:c5:43:34:35:07:88:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 11 16:02:18 2026 GMT Not After : Jan 12 16:02:18 2026 GMT Subject: CN=4cfc5ef87cdd8f2c48e0670fc4a8c8f07c09211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:2d:12:f3:22:31:38:6d:96:ec:64:a7:6a: 72:6a:55:31:88:b5:61:aa:d3:d1:1b:9e:74:02:d6: b5:19:3b:59:10:f1:ef:48:a8:69:81:2b:c6:08:91: e6:7d:91:57:81:11:43:92:a4:dd:0c:24:15:b7:3c: 40:a9:f9:89:a5:0b:1e:0c:25:a4:f1:a9:c5:38:d4: 25:58:08:af:d4:95:f3:8b:76:68:62:1a:b9:1d:1f: f4:35:c4:6e:be:2a:9f:40:f8:23:8b:6c:33:1a:c5: 77:71:2f:e7:d8:91:bd:6d:26:67:3f:a8:6f:4d:67: a6:3c:03:45:06:34:7f:d4:16:9e:a1:5f:5f:34:f1: 6b:d1:01:9b:52:e9:da:0f:4a:fa:32:4f:d9:20:aa: dc:6d:e7:9e:bb:75:27:5c:e4:7c:76:a6:1f:45:01: 3f:9f:9b:a8:e9:73:8a:a4:63:e5:fe:d7:de:32:cf: 7e:c8:9f:b9:e0:7a:0f:00:0e:fd:14:fd:5c:ab:ff: 27:f4:42:92:96:e1:6c:8f:9c:8c:6f:6a:57:8a:08: c5:2b:18:ee:08:d6:f5:48:00:a2:bb:20:6c:98:0d: b4:85:b7:b3:f3:bc:fc:2c:e3:53:14:65:bf:19:d1: 0b:63:ea:c2:40:eb:c6:8c:3a:df:51:05:9a:8d:4f: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FC:5E:F8:7C:DD:8F:2C:48:E0:67:0F:C4:A8:C8:F0:7C:09:21:1A X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:27:ea:60:29:70:31:a2:c5:ca:3f:20:4d:62:85:23:21:6d: 3b:11:88:fc:98:a2:54:42:93:10:16:46:40:5d:fc:98:87:23: 75:71:5c:3f:9f:e0:ae:74:aa:13:59:9e:1b:8c:9b:73:68:01: 81:2c:7b:26:69:a0:2e:d9:e8:f0:9b:bd:78:34:b8:48:4f:1a: ad:ac:3d:5f:5c:61:f5:25:db:c2:84:c2:53:18:6d:06:2d:66: 82:2d:04:02:1b:76:d2:a6:0e:fe:c9:c6:c1:d5:2e:16:68:8f: 90:5d:02:32:9a:ef:81:67:85:b3:ba:6a:2f:48:b9:b8:0e:3a: 14:7f:db:7b:dd:5c:fe:4a:66:dc:70:1a:48:67:67:a7:8f:e9: c9:ca:cc:2d:19:6f:a7:13:0d:1d:17:2c:7e:b0:41:5b:ee:2e: a8:61:60:bc:8d:18:09:1c:9b:45:9c:fb:5b:22:54:aa:05:b6: f7:8f:a3:96:92:fe:74:7e:73:08:41:66:e5:6a:58:06:fb:9c: 17:3f:e6:8e:b1:55:d0:08:5f:e8:d3:1a:9b:52:5e:48:2e:36: e7:84:20:53:94:0d:f4:ee:76:8a:c0:03:d9:be:0d:0a:cf:41: c8:a0:16:a6:32:30:58:4d:cb:23:b7:ed:28:ec:62:c8:7b:c0: 38:e8:37:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuty0a1/aZEsZHFQzQ1B4iPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTExMTYwMjE4WhcNMjYwMTEyMTYwMjE4WjAzMTEwLwYDVQQD Eyg0Y2ZjNWVmODdjZGQ4ZjJjNDhlMDY3MGZjNGE4YzhmMDdjMDkyMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthwtEvMiMThtluxkp2pyalUxiLVh qtPRG550Ata1GTtZEPHvSKhpgSvGCJHmfZFXgRFDkqTdDCQVtzxAqfmJpQseDCWk 8anFONQlWAiv1JXzi3ZoYhq5HR/0NcRuviqfQPgji2wzGsV3cS/n2JG9bSZnP6hv TWemPANFBjR/1BaeoV9fNPFr0QGbUunaD0r6Mk/ZIKrcbeeeu3UnXOR8dqYfRQE/ n5uo6XOKpGPl/tfeMs9+yJ+54HoPAA79FP1cq/8n9EKSluFsj5yMb2pXigjFKxju CNb1SACiuyBsmA20hbez87z8LONTFGW/GdELY+rCQOvGjDrfUQWajU/jvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz8Xvh83Y8sSOBnD8SoyPB8CSEaMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiifqYClw MaLFyj8gTWKFIyFtOxGI/JiiVEKTEBZGQF38mIcjdXFcP5/grnSqE1meG4ybc2gB gSx7JmmgLtno8Ju9eDS4SE8araw9X1xh9SXbwoTCUxhtBi1mgi0EAht20qYO/snG wdUuFmiPkF0CMprvgWeFs7pqL0i5uA46FH/be91c/kpm3HAaSGdnp4/pycrMLRlv pxMNHRcsfrBBW+4uqGFgvI0YCRybRZz7WyJUqgW294+jlpL+dH5zCEFm5WpYBvuc Fz/mjrFV0Ahf6NMam1JeSC4254QgU5QN9O52isAD2b4NCs9ByKAWpjIwWE3LI7ft KOxiyHvAOOg3Lw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:59:35 2026 by rpki-client