This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json) Hash identifier: 2hbQY/r40v+Y0lZVgJIGOPlzP84nMGUU0BsDDGgmBZc= Subject key identifier: 84:50:D4:16:BC:D7:4E:75:9F:AE:14:64:AB:26:6F:B7:9E:A0:52:45 Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b Certificate serial: 019BFB091D5E7461E3DEE1F9F165FA928FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft Manifest number: 0229 Signing time: Mon 26 Jan 2026 16:00:37 +0000 Manifest this update: Mon 26 Jan 2026 16:00:37 +0000 Manifest next update: Tue 27 Jan 2026 16:00:37 +0000 Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: eFdPhLh2nwBIhntTLqNebarTLBG6IqnJ2y85neyH6so=) 2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:1d:5e:74:61:e3:de:e1:f9:f1:65:fa:92:8f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b Validity Not Before: Jan 26 16:00:37 2026 GMT Not After : Jan 27 16:00:37 2026 GMT Subject: CN=8450d416bcd74e759fae1464ab266fb79ea05245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:6f:03:13:35:cb:db:a2:c8:3b:1c:9f:97: a7:9c:95:69:37:c4:72:5c:8e:b3:91:21:ca:86:a0: c3:d5:28:a6:b9:0f:8e:d0:c8:52:69:88:b1:48:77: b3:8c:f9:43:1e:ff:bb:97:16:08:4e:76:50:c1:ca: 15:4b:e7:8f:db:0b:fe:87:02:e3:5d:3b:7e:ca:1d: 1b:a6:52:d9:8b:5d:46:ea:1c:7f:56:ea:ed:42:b0: 68:e7:a9:2d:4b:06:e3:9e:99:c4:8f:1d:8d:dc:23: fa:a8:b8:f4:c0:b5:7e:3f:bf:88:b5:6c:b2:9a:ed: c4:86:82:03:11:aa:e6:f7:f3:c6:25:78:d8:1d:ac: 45:95:33:83:ac:52:49:c5:98:3d:20:5e:c8:78:34: bd:8b:3c:00:09:fc:89:19:74:d7:e8:14:e7:7d:1b: 16:bb:e4:dc:71:6c:3b:8f:1c:fe:87:f2:01:1e:12: 0e:08:4f:95:4d:35:06:e8:80:91:9b:45:e1:98:3e: 76:67:62:3d:46:43:41:f1:00:f3:b8:b5:f3:89:bd: 3f:75:0e:28:47:c3:a0:7b:82:a5:ba:9b:ca:7f:6b: ae:4f:ed:54:23:03:0d:0d:7e:0e:6d:98:10:0c:79: f1:b4:64:1d:c8:a0:c2:c6:a6:7c:ab:0c:f0:8e:bf: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:D4:16:BC:D7:4E:75:9F:AE:14:64:AB:26:6F:B7:9E:A0:52:45 X509v3 Authority Key Identifier: keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:56:27:a1:4a:cc:47:53:bc:30:af:85:d0:99:5b:07:2f:72: 2f:8d:52:b3:45:c4:17:df:f3:99:86:9f:4f:d4:f6:1f:89:cf: 35:f2:6f:c5:8a:ea:21:c9:6b:c8:c3:63:09:38:93:7e:a3:53: 02:dc:5a:32:14:86:e8:06:09:b6:a6:b3:99:31:2e:f1:87:1b: c6:d0:16:a3:50:6d:2c:52:fd:9e:27:d4:a5:49:49:21:a7:7e: 7c:23:53:ad:cc:9f:e7:01:e0:99:05:95:ce:97:f6:05:12:57: d4:c5:53:5b:e3:63:22:81:de:6e:d4:b7:b6:67:07:fc:94:bf: 67:9f:0a:79:40:41:6f:af:26:45:8e:8b:b0:70:a4:a2:62:77: 02:65:de:14:2c:59:2d:b7:c1:ec:40:6e:95:5c:c7:3d:63:a9: cd:96:6f:da:a9:44:6e:e9:3b:c4:14:e9:e6:06:af:fc:d4:a2: 4a:6a:a9:4d:26:df:a1:e2:37:7e:b5:d3:2f:70:76:19:23:b0: d1:1c:22:05:fa:75:d7:86:0a:32:a2:8a:51:ab:a9:19:4d:1b: 59:cf:26:ac:56:73:c8:41:1a:35:7b:57:47:d1:d5:42:23:0c: ac:5f:00:85:5f:4a:c0:68:7d:8d:8e:0c:b9:7c:ec:f5:98:03: b6:c5:2c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CR1edGHj3uH58WX6ko+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3 NTgyNGIwHhcNMjYwMTI2MTYwMDM3WhcNMjYwMTI3MTYwMDM3WjAzMTEwLwYDVQQD Eyg4NDUwZDQxNmJjZDc0ZTc1OWZhZTE0NjRhYjI2NmZiNzllYTA1MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBvAxM1y9uiyDscn5ennJVpN8Ry XI6zkSHKhqDD1SimuQ+O0MhSaYixSHezjPlDHv+7lxYITnZQwcoVS+eP2wv+hwLj XTt+yh0bplLZi11G6hx/VurtQrBo56ktSwbjnpnEjx2N3CP6qLj0wLV+P7+ItWyy mu3EhoIDEarm9/PGJXjYHaxFlTODrFJJxZg9IF7IeDS9izwACfyJGXTX6BTnfRsW u+TccWw7jxz+h/IBHhIOCE+VTTUG6ICRm0XhmD52Z2I9RkNB8QDzuLXzib0/dQ4o R8Oge4KlupvKf2uuT+1UIwMNDX4ObZgQDHnxtGQdyKDCxqZ8qwzwjr+9TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRQ1Ba81051n64UZKsmb7eeoFJFMB8GA1UdIwQY MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVYnoUrM R1O8MK+F0JlbBy9yL41Ss0XEF9/zmYafT9T2H4nPNfJvxYrqIclryMNjCTiTfqNT AtxaMhSG6AYJtqazmTEu8YcbxtAWo1BtLFL9nifUpUlJIad+fCNTrcyf5wHgmQWV zpf2BRJX1MVTW+NjIoHebtS3tmcH/JS/Z58KeUBBb68mRY6LsHCkomJ3AmXeFCxZ LbfB7EBulVzHPWOpzZZv2qlEbuk7xBTp5gav/NSiSmqpTSbfoeI3frXTL3B2GSOw 0RwiBfp114YKMqKKUaupGU0bWc8mrFZzyEEaNXtXR9HVQiMMrF8AhV9KwGh9jY4M uXzs9ZgDtsUsqA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:38 2026 by rpki-client