This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json) Hash identifier: M6lLxGnd6EJ6Way4A6wHYWh75loMChTlp7wxxEcHUNY= Subject key identifier: 84:D9:90:D2:40:5D:2A:37:1D:CB:DE:C4:88:A0:4C:0B:53:95:9C:99 Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Certificate serial: 019BFC1CCD98ADBAF8E047D9D2CA013CD716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft Manifest number: 0299 Signing time: Mon 26 Jan 2026 21:01:44 +0000 Manifest this update: Mon 26 Jan 2026 21:01:44 +0000 Manifest next update: Tue 27 Jan 2026 21:01:44 +0000 Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=) 2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: MBQ3cbcDPuXyYWf8N/ogOzPPa1xTmmSUCJRsnxmYhX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:cd:98:ad:ba:f8:e0:47:d9:d2:ca:01:3c:d7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55 Validity Not Before: Jan 26 21:01:44 2026 GMT Not After : Jan 27 21:01:44 2026 GMT Subject: CN=84d990d2405d2a371dcbdec488a04c0b53959c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:d8:b7:ac:75:9c:e3:a6:33:7f:83:26:00: 10:d9:93:45:28:5e:ef:ec:3a:ae:0d:2f:f2:b3:5a: ef:1e:e1:b5:3f:9f:80:c5:7e:4d:0a:46:1f:07:d1: 53:76:85:95:db:7d:ef:bd:01:ec:09:0d:b4:ca:8d: 4e:d6:74:af:eb:a2:b8:e6:c3:63:bf:92:f7:03:92: 84:0e:f0:bb:b1:d8:9a:63:30:7a:6e:20:26:dd:16: 87:8b:4b:09:27:e1:76:5e:88:14:8c:69:6f:bb:c4: 71:38:3a:c2:b6:53:85:3b:93:16:8d:24:42:61:e1: 13:e9:78:de:34:ab:f0:59:9e:7a:39:18:49:f1:ec: ba:73:20:72:02:a3:4c:35:96:a3:a1:21:b6:55:ab: ab:04:33:bf:4f:c6:64:0d:d6:c1:4a:5a:42:13:8a: dd:82:7f:38:99:f2:0f:fd:f2:2f:11:ac:39:81:d4: e6:f3:67:b6:18:4c:0d:cd:fe:81:c0:2f:fa:f1:66: 24:2c:96:73:e3:2b:c0:bb:d6:72:ec:91:a4:88:73: 3c:d0:01:55:ea:06:a5:39:61:c9:fb:a4:e6:ad:a5: fd:9d:d8:cf:6e:be:29:50:79:22:e1:83:c2:ac:e0: bf:f9:99:fd:8a:9c:5e:14:6f:d7:ee:e1:fb:3c:88: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:90:D2:40:5D:2A:37:1D:CB:DE:C4:88:A0:4C:0B:53:95:9C:99 X509v3 Authority Key Identifier: keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8c:de:66:51:d2:b2:d5:f7:e3:6f:fb:3c:52:9a:7e:8f:82: 0d:47:56:85:db:97:c9:fe:bc:fd:88:04:19:b5:ae:bd:f0:04: 16:e2:30:1f:c2:9c:8c:b2:d2:36:21:29:0c:a8:1b:ad:e5:e0: 70:c1:a9:3a:e1:a5:4a:24:26:e4:00:e6:e9:53:4d:f0:49:be: bb:fb:bb:c4:a1:e9:c4:11:97:63:50:6c:8f:7e:2b:12:bb:23: 72:9d:f9:6b:a9:1f:fd:8c:82:3e:59:f9:d4:20:a5:62:6f:4a: 6f:4b:7f:d9:f8:42:d5:06:21:e9:c9:ea:34:7a:4e:24:35:7d: 39:df:09:64:8f:cc:dc:62:5f:c1:0f:86:23:93:23:d0:4f:0b: 74:51:a2:ef:c3:18:07:af:42:78:f3:45:f5:d2:7a:ba:b9:18: 83:00:b3:cd:f9:4a:56:7a:56:ce:43:e4:b7:5a:3e:8c:ae:db: 82:23:54:28:80:a0:67:72:57:42:6a:3d:a9:e1:6f:42:80:02: 1a:68:c0:c1:7f:af:1e:ab:f7:05:ee:89:c0:da:62:5d:89:43: a9:d2:e2:57:90:9f:9f:74:e7:3e:10:60:55:80:c8:7d:13:62: 8d:23:f9:77:6a:7a:56:1b:58:b8:22:33:57:4b:5b:d7:5c:c1: 9d:c7:20:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HM2Yrbr44EfZ0soBPNcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5 ZDFiNTUwHhcNMjYwMTI2MjEwMTQ0WhcNMjYwMTI3MjEwMTQ0WjAzMTEwLwYDVQQD Eyg4NGQ5OTBkMjQwNWQyYTM3MWRjYmRlYzQ4OGEwNGMwYjUzOTU5Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmXYt6x1nOOmM3+DJgAQ2ZNFKF7v 7DquDS/ys1rvHuG1P5+AxX5NCkYfB9FTdoWV233vvQHsCQ20yo1O1nSv66K45sNj v5L3A5KEDvC7sdiaYzB6biAm3RaHi0sJJ+F2XogUjGlvu8RxODrCtlOFO5MWjSRC YeET6XjeNKvwWZ56ORhJ8ey6cyByAqNMNZajoSG2VaurBDO/T8ZkDdbBSlpCE4rd gn84mfIP/fIvEaw5gdTm82e2GEwNzf6BwC/68WYkLJZz4yvAu9Zy7JGkiHM80AFV 6galOWHJ+6TmraX9ndjPbr4pUHki4YPCrOC/+Zn9ipxeFG/X7uH7PIiOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITZkNJAXSo3HcvexIigTAtTlZyZMB8GA1UdIwQY MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeozeZlHS stX342/7PFKafo+CDUdWhduXyf68/YgEGbWuvfAEFuIwH8KcjLLSNiEpDKgbreXg cMGpOuGlSiQm5ADm6VNN8Em+u/u7xKHpxBGXY1Bsj34rErsjcp35a6kf/YyCPln5 1CClYm9Kb0t/2fhC1QYh6cnqNHpOJDV9Od8JZI/M3GJfwQ+GI5Mj0E8LdFGi78MY B69CePNF9dJ6urkYgwCzzflKVnpWzkPkt1o+jK7bgiNUKICgZ3JXQmo9qeFvQoAC GmjAwX+vHqv3Be6JwNpiXYlDqdLiV5Cfn3TnPhBgVYDIfRNijSP5d2p6VhtYuCIz V0tb11zBnccg4g== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:30 2026 by rpki-client