This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json) Hash identifier: hpEhN8uDj4RRNA83iHYnK9WeIpyVH7GpK1S/eDV/Suc= Subject key identifier: 32:EA:29:00:52:A1:74:1B:F8:AF:4F:9F:55:91:31:47:47:B9:A7:28 Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Certificate serial: 019C1C15392E6A87E4DABA8C8D697C5DD8DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft Manifest number: 0DAE Signing time: Mon 02 Feb 2026 02:01:18 +0000 Manifest this update: Mon 02 Feb 2026 02:01:18 +0000 Manifest next update: Tue 03 Feb 2026 02:01:18 +0000 Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: QgCNKmhTlWWrRHPkZEtxHI1L6BKqXNM1mgnlGOrGQgA=) 2: epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa (hash: Aa6u3inS9dGYjD1jBcsF2Mf4ginAblBytDS0JIhmA9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:15:39:2e:6a:87:e4:da:ba:8c:8d:69:7c:5d:d8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Validity Not Before: Feb 2 02:01:18 2026 GMT Not After : Feb 3 02:01:18 2026 GMT Subject: CN=32ea290052a1741bf8af4f9f5591314747b9a728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:85:a4:5b:a9:46:04:06:20:90:4d:d4:aa: 7f:c9:dc:b4:29:f7:3b:9a:e2:71:c8:a5:3b:ee:e8: 3c:47:ac:5a:ac:41:96:57:d5:4b:77:1e:60:bc:a6: 99:ad:93:6a:40:ca:a9:62:c3:3d:a9:2a:9f:d5:ab: 5e:94:ca:59:f7:52:50:ae:14:35:d8:cb:22:59:58: f1:b9:b8:d9:63:f2:5d:43:30:69:27:13:42:42:82: 0a:e6:bc:80:ec:fb:db:90:3e:1a:dd:65:78:3e:56: 12:a2:a9:77:1c:1c:72:31:ee:66:14:e9:8b:ff:c6: 2b:e3:2b:79:13:80:81:78:51:67:14:f4:8e:27:0b: b3:25:47:bc:33:52:92:43:19:ac:26:27:58:d2:f1: 32:06:47:fa:35:0d:45:cb:b1:80:23:5c:10:94:70: 78:1c:a4:07:e5:aa:d5:bf:20:1e:0c:50:26:50:20: d0:1f:35:cf:a3:6a:6f:39:df:20:78:14:55:9c:32: 44:3a:66:40:54:37:8b:4d:80:33:3d:61:38:19:56: ba:e5:7b:d5:26:c3:72:c6:a4:34:cf:ed:ab:d6:eb: 03:ec:a5:ac:47:59:07:45:f2:cd:3a:e3:bd:85:ff: 8e:05:b4:b8:ef:05:14:e7:88:f1:17:18:3b:1f:01: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EA:29:00:52:A1:74:1B:F8:AF:4F:9F:55:91:31:47:47:B9:A7:28 X509v3 Authority Key Identifier: keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:43:a6:d4:a3:68:41:75:a9:b7:9a:6f:5a:f1:ea:10:85:f2: 16:7d:69:72:8c:39:fa:05:a5:b2:b3:3a:31:bf:25:2b:d7:36: be:53:91:a9:88:44:6b:55:87:61:c4:4b:1a:24:cf:fd:87:d9: 0e:db:fa:ce:d9:0f:3b:e9:6d:d3:6a:9b:87:59:c6:4b:7d:eb: 28:6f:06:d7:fc:7b:09:28:05:a9:13:05:53:af:d5:f7:aa:83: 0d:cd:ba:22:51:be:09:99:95:08:e9:b1:b5:48:c4:48:70:b3: 86:d5:9d:50:1d:16:37:d8:74:86:0a:d2:4d:1d:f4:cb:ed:a7: a8:57:66:68:63:08:28:a1:fb:43:5e:ff:58:53:3b:c8:02:7d: 90:e6:05:b1:7c:6f:c4:f4:b9:d4:70:e3:92:cd:31:78:1c:1e: d7:01:7c:c6:98:83:3f:69:1f:38:3c:be:3b:7e:7e:eb:ee:fe: 00:50:ae:43:55:2e:99:73:2b:f6:15:17:1f:5e:90:05:d5:f7: 87:8f:26:7a:50:93:7e:24:2d:4f:c5:10:e7:b8:a6:77:ba:e4: 21:8f:3c:a7:0f:76:a4:11:6c:68:9f:23:63:c6:a6:d6:3b:47: bb:ec:18:4a:9a:e0:c0:db:0b:d7:c7:24:08:a0:e7:66:e5:41: 01:93:02:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFTkuaofk2rqMjWl8XdjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk MWM2NzMwHhcNMjYwMjAyMDIwMTE4WhcNMjYwMjAzMDIwMTE4WjAzMTEwLwYDVQQD EygzMmVhMjkwMDUyYTE3NDFiZjhhZjRmOWY1NTkxMzE0NzQ3YjlhNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkWFpFupRgQGIJBN1Kp/ydy0Kfc7 muJxyKU77ug8R6xarEGWV9VLdx5gvKaZrZNqQMqpYsM9qSqf1atelMpZ91JQrhQ1 2MsiWVjxubjZY/JdQzBpJxNCQoIK5ryA7PvbkD4a3WV4PlYSoql3HBxyMe5mFOmL /8Yr4yt5E4CBeFFnFPSOJwuzJUe8M1KSQxmsJidY0vEyBkf6NQ1Fy7GAI1wQlHB4 HKQH5arVvyAeDFAmUCDQHzXPo2pvOd8geBRVnDJEOmZAVDeLTYAzPWE4GVa65XvV JsNyxqQ0z+2r1usD7KWsR1kHRfLNOuO9hf+OBbS47wUU54jxFxg7HwEh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLqKQBSoXQb+K9Pn1WRMUdHuacoMB8GA1UdIwQY MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5 LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykOm1KNo QXWpt5pvWvHqEIXyFn1pcow5+gWlsrM6Mb8lK9c2vlORqYhEa1WHYcRLGiTP/YfZ Dtv6ztkPO+lt02qbh1nGS33rKG8G1/x7CSgFqRMFU6/V96qDDc26IlG+CZmVCOmx tUjESHCzhtWdUB0WN9h0hgrSTR30y+2nqFdmaGMIKKH7Q17/WFM7yAJ9kOYFsXxv xPS51HDjks0xeBwe1wF8xpiDP2kfODy+O35+6+7+AFCuQ1UumXMr9hUXH16QBdX3 h48melCTfiQtT8UQ57imd7rkIY88pw92pBFsaJ8jY8am1jtHu+wYSprgwNsL18ck CKDnZuVBAZMCNA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:27:44 2026 by rpki-client