This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json) Hash identifier: wIkDv41tM14uyE9kzBlJHY3nlVLDXFETUKEzC7tSnJI= Subject key identifier: 41:52:E7:CC:97:CF:8E:22:22:B6:06:58:6B:EA:DE:9A:71:D9:07:E2 Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4 Certificate serial: 019BFBAEE411EAD175381412C914FD60760A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 19:01:41 +0000 Manifest this update: Mon 26 Jan 2026 19:01:41 +0000 Manifest next update: Tue 27 Jan 2026 19:01:41 +0000 Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=) 2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: ALkT1/efJ99kBkPlLMEbFHiLWvzSPzjs0GHsswxk/jY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e4:11:ea:d1:75:38:14:12:c9:14:fd:60:76:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4 Validity Not Before: Jan 26 19:01:41 2026 GMT Not After : Jan 27 19:01:41 2026 GMT Subject: CN=4152e7cc97cf8e2222b606586beade9a71d907e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:56:d8:f8:66:92:bb:66:42:ca:b6:69:0a: 87:35:37:a5:91:28:e7:92:35:77:99:ff:c4:a0:61: 74:a9:5e:05:b7:5d:e0:63:1b:c5:b5:91:24:55:d6: f4:21:82:fd:65:1c:fb:fc:b2:c5:be:a8:7a:82:ed: 09:90:39:aa:bb:e2:14:2d:00:68:64:95:98:7f:e5: f9:ea:5f:cb:46:00:a1:10:9f:97:ad:58:a9:61:4f: 62:70:b1:4e:99:54:50:2a:28:5e:a1:e1:c8:54:d3: 55:7b:9c:5f:e2:04:81:c4:94:e1:05:a3:0c:6b:56: e8:fa:02:a5:c2:85:57:d3:8d:0d:5c:f8:96:0b:08: ed:c8:f4:78:a3:a1:03:5a:58:46:38:e3:e6:b7:e4: 7a:2e:4e:94:7d:74:04:19:77:c0:97:a4:b1:32:2a: aa:b8:d3:54:17:cf:db:fb:95:2c:f5:f8:06:ba:99: 35:94:48:ab:64:d1:d8:39:9b:59:76:a0:d5:3f:01: a5:9e:b1:a5:05:41:db:82:02:06:f2:5f:83:0a:ac: bf:26:9f:54:f2:d4:68:52:0e:7f:48:70:0e:b1:05: e7:27:56:a1:8d:e5:8a:7f:7e:3c:71:05:d3:6f:d5: 41:d7:3d:93:30:27:d2:f8:bf:3b:e7:c6:3d:98:df: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:E7:CC:97:CF:8E:22:22:B6:06:58:6B:EA:DE:9A:71:D9:07:E2 X509v3 Authority Key Identifier: keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b7:d9:af:14:b8:83:01:8a:09:d5:df:5c:bd:75:e9:d5:66: 7f:96:54:fd:a7:40:42:3a:7c:18:55:e9:0c:02:dd:44:e4:fc: 33:73:97:68:d0:62:2c:f9:ce:d7:ef:31:80:ed:6f:74:e0:4c: a4:c8:b5:2a:6e:a6:7a:0b:12:fa:5c:4a:31:3f:d4:5d:e5:b1: ee:3f:e4:c4:61:5c:65:43:17:34:23:69:71:fa:dc:69:b5:c7: e6:1a:0d:e8:ec:03:49:3e:b9:79:80:79:85:4d:ae:61:6b:48: c1:a9:1b:3d:8a:0c:5c:b4:92:94:2f:e6:3c:8c:62:ad:18:71: b6:20:6b:7e:c1:ab:fb:19:26:21:85:1f:e1:6a:c5:eb:56:0a: da:53:01:3a:df:45:4d:8b:e3:cf:9c:da:58:a7:10:38:0f:fa: 20:22:e6:86:69:a2:a0:2b:16:91:52:b1:f0:20:ae:40:6f:aa: ac:59:71:2c:94:d0:d5:ef:1c:a9:a6:5a:91:0b:4b:f0:28:7c: 77:fa:b4:7c:12:d3:f1:3d:ee:5d:bb:c8:8c:50:13:c9:14:e1: 0a:fb:15:fa:31:b6:1e:f8:8c:07:f4:80:05:ad:f6:35:54:43: f5:a8:8f:d0:e3:f5:62:67:19:e4:88:ec:4a:08:82:2c:b6:31: 2c:1e:26:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ruQR6tF1OBQSyRT9YHYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4 NTVmYzQwHhcNMjYwMTI2MTkwMTQxWhcNMjYwMTI3MTkwMTQxWjAzMTEwLwYDVQQD Eyg0MTUyZTdjYzk3Y2Y4ZTIyMjJiNjA2NTg2YmVhZGU5YTcxZDkwN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriRW2PhmkrtmQsq2aQqHNTelkSjn kjV3mf/EoGF0qV4Ft13gYxvFtZEkVdb0IYL9ZRz7/LLFvqh6gu0JkDmqu+IULQBo ZJWYf+X56l/LRgChEJ+XrVipYU9icLFOmVRQKiheoeHIVNNVe5xf4gSBxJThBaMM a1bo+gKlwoVX040NXPiWCwjtyPR4o6EDWlhGOOPmt+R6Lk6UfXQEGXfAl6SxMiqq uNNUF8/b+5Us9fgGupk1lEirZNHYOZtZdqDVPwGlnrGlBUHbggIG8l+DCqy/Jp9U 8tRoUg5/SHAOsQXnJ1ahjeWKf348cQXTb9VB1z2TMCfS+L8758Y9mN8fAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFS58yXz44iIrYGWGvq3ppx2QfiMB8GA1UdIwQY MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLfZrxS4 gwGKCdXfXL116dVmf5ZU/adAQjp8GFXpDALdROT8M3OXaNBiLPnO1+8xgO1vdOBM pMi1Km6megsS+lxKMT/UXeWx7j/kxGFcZUMXNCNpcfrcabXH5hoN6OwDST65eYB5 hU2uYWtIwakbPYoMXLSSlC/mPIxirRhxtiBrfsGr+xkmIYUf4WrF61YK2lMBOt9F TYvjz5zaWKcQOA/6ICLmhmmioCsWkVKx8CCuQG+qrFlxLJTQ1e8cqaZakQtL8Ch8 d/q0fBLT8T3uXbvIjFATyRThCvsV+jG2HviMB/SABa32NVRD9aiP0OP1YmcZ5Ijs SgiCLLYxLB4mlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:59 2026 by rpki-client