This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json) Hash identifier: W2f0R8c6S5I5xigzRB/iSRCcacbZzPCzXDo3l29/SOA= Subject key identifier: 4D:89:44:15:D2:7F:8E:03:A8:83:01:D5:00:18:9E:46:19:FB:B9:6E Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Certificate serial: 019BF95233EBE79A265455496ACB76EFB408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft Manifest number: 14C7 Signing time: Mon 26 Jan 2026 08:01:12 +0000 Manifest this update: Mon 26 Jan 2026 08:01:12 +0000 Manifest next update: Tue 27 Jan 2026 08:01:12 +0000 Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=) 2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=) 3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: 5aZ5TOoMsKKP3raCLnMQ0ktR9uZS5cqKMrtv+y9w2Lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:33:eb:e7:9a:26:54:55:49:6a:cb:76:ef:b4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Validity Not Before: Jan 26 08:01:12 2026 GMT Not After : Jan 27 08:01:12 2026 GMT Subject: CN=4d894415d27f8e03a88301d500189e4619fbb96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:2a:f0:ba:e1:3f:b7:25:23:7a:cb:49:ad: f2:bb:39:25:fd:e4:55:1b:ba:48:c0:0b:48:38:75: ff:07:df:45:72:7e:15:32:86:5f:b8:be:39:4f:fd: 27:a1:cf:ad:7c:78:38:4b:ad:61:8e:89:fd:99:57: d0:6c:93:b2:0f:c8:60:c6:77:32:96:86:06:67:14: d6:df:5c:af:46:d1:72:48:5f:cd:07:2f:e0:27:f6: 47:40:38:a5:ed:d3:c4:1c:61:b8:e0:80:7c:66:1b: 77:aa:1f:7e:f0:16:9d:e9:67:d1:57:83:f9:91:7a: 14:39:14:fe:c2:2d:a5:49:aa:83:25:5c:34:14:da: b6:3d:7e:c9:81:03:d0:8c:a4:c1:35:8b:6e:20:5d: 4a:dc:33:ab:42:44:29:6e:63:80:0b:ba:ef:e5:d1: 2f:60:5e:1e:64:f4:be:37:41:39:76:bb:9a:c2:36: fc:5d:fc:c0:50:f3:67:0c:a7:7b:51:26:38:f7:60: 3c:69:55:2d:00:29:d5:4b:cc:25:af:04:b9:b0:65: 08:df:0d:96:b1:f7:d0:81:e1:f6:91:b5:81:54:a1: b7:87:c4:0f:4b:56:ef:98:f0:e5:07:ee:60:07:82: 57:e2:79:55:0f:e9:a2:36:78:0f:1b:62:b7:a8:d0: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:44:15:D2:7F:8E:03:A8:83:01:D5:00:18:9E:46:19:FB:B9:6E X509v3 Authority Key Identifier: keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:25:a8:a7:15:55:01:61:f8:9b:f5:3b:da:d7:6b:31:a2:26: 5f:de:57:8a:83:05:0a:c2:b9:62:29:2f:0a:38:0e:8d:41:59: 5c:8a:65:15:22:15:a0:35:9f:6f:30:b7:d9:cd:a2:36:c7:6b: e5:62:c9:da:b2:9b:1d:31:d8:e9:21:26:d2:b2:32:a7:89:d5: c8:af:84:ef:d8:c3:ba:10:2b:f6:4f:8e:7f:a4:9b:a5:e7:2a: a6:a8:fb:07:73:e8:22:18:d3:bc:1a:5a:1c:8c:d6:c5:3d:28: 37:18:8c:a2:08:7d:83:5e:c8:36:c2:3c:a4:28:62:95:3d:4b: 4b:fc:0b:97:e9:a8:9c:91:8a:4b:51:96:ff:d5:2f:ca:f5:a1: 29:f3:ba:3f:d9:1d:7e:61:27:8b:e3:57:74:f3:e3:83:d2:e0: 5a:b2:97:f1:4d:3c:03:b1:b3:32:39:9c:a1:53:41:20:e8:ae: ff:8a:9e:52:fb:0c:ab:3e:69:ac:95:a7:43:3b:50:90:a3:77: 22:7a:ec:bb:f2:8e:6e:24:c3:22:ec:70:33:8e:b5:4f:6c:30: 7d:64:3b:be:16:86:69:56:5e:92:52:22:21:b5:8d:45:11:5d: 50:16:a7:a4:2d:c3:dd:37:b3:be:99:a1:e8:3b:08:b4:ab:37: f7:bd:60:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UjPr55omVFVJast277QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi ZWRmOTcwHhcNMjYwMTI2MDgwMTEyWhcNMjYwMTI3MDgwMTEyWjAzMTEwLwYDVQQD Eyg0ZDg5NDQxNWQyN2Y4ZTAzYTg4MzAxZDUwMDE4OWU0NjE5ZmJiOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wcq8LrhP7clI3rLSa3yuzkl/eRV G7pIwAtIOHX/B99Fcn4VMoZfuL45T/0noc+tfHg4S61hjon9mVfQbJOyD8hgxncy loYGZxTW31yvRtFySF/NBy/gJ/ZHQDil7dPEHGG44IB8Zht3qh9+8Bad6WfRV4P5 kXoUORT+wi2lSaqDJVw0FNq2PX7JgQPQjKTBNYtuIF1K3DOrQkQpbmOAC7rv5dEv YF4eZPS+N0E5druawjb8XfzAUPNnDKd7USY492A8aVUtACnVS8wlrwS5sGUI3w2W sffQgeH2kbWBVKG3h8QPS1bvmPDlB+5gB4JX4nlVD+miNngPG2K3qNA8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2JRBXSf44DqIMB1QAYnkYZ+7luMB8GA1UdIwQY MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSWopxVV AWH4m/U72tdrMaImX95XioMFCsK5YikvCjgOjUFZXIplFSIVoDWfbzC32c2iNsdr 5WLJ2rKbHTHY6SEm0rIyp4nVyK+E79jDuhAr9k+Of6Sbpecqpqj7B3PoIhjTvBpa HIzWxT0oNxiMogh9g17INsI8pChilT1LS/wLl+monJGKS1GW/9UvyvWhKfO6P9kd fmEni+NXdPPjg9LgWrKX8U08A7GzMjmcoVNBIOiu/4qeUvsMqz5prJWnQztQkKN3 Inrsu/KObiTDIuxwM461T2wwfWQ7vhaGaVZeklIiIbWNRRFdUBanpC3D3Tezvpmh 6DsItKs3971guw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:58 2026 by rpki-client