This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: h/OSCEiJRgpeEcPfSkbwFHCWyYuRhbz7reFaYP9zLq0= Subject key identifier: A2:58:FE:DF:64:13:EE:65:1F:42:98:CD:1F:A8:8E:9C:8B:8B:D5:10 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019BF9894CB923FC5A81E1A90A2DEC4F3EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 17FE Signing time: Mon 26 Jan 2026 09:01:23 +0000 Manifest this update: Mon 26 Jan 2026 09:01:23 +0000 Manifest next update: Tue 27 Jan 2026 09:01:23 +0000 Files and hashes: 1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: cezl46bJsG12lm6b61vvozOpH+2TmibIuYFULyl+C8E=) 3: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=) 4: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=) 5: u9ivcp0Mnia0HnQ0D4IzKd6ABQI.roa (hash: 7vFIT7RVuGNWtyZo6py9uIoAR5B/gd1YarQbs2RvWTM=) 6: ue1ofATco1WyASgglUMXvaTcbAA.roa (hash: 7NG4eNgD3uRpxbInL8ONmLKALYMO6RfhX+P8iMxG0cg=) 7: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:4c:b9:23:fc:5a:81:e1:a9:0a:2d:ec:4f:3e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jan 26 09:01:23 2026 GMT Not After : Jan 27 09:01:23 2026 GMT Subject: CN=a258fedf6413ee651f4298cd1fa88e9c8b8bd510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:8e:1f:41:9a:ae:07:93:d2:42:9d:56:99: 38:a2:2c:dc:c6:14:a2:cd:8e:4a:9c:de:3f:e0:54: ee:5f:2e:6b:0c:1d:38:09:49:0b:00:60:49:0e:4e: de:7e:a3:b0:c0:9f:00:37:3d:e0:0d:08:2d:cc:00: 41:fe:1f:e6:58:ba:e0:1d:88:42:16:67:8d:4a:32: d9:91:dc:57:c7:4d:54:7f:f2:57:66:8e:05:38:0b: 41:9e:73:3f:29:fc:3a:73:59:a8:30:ef:d3:83:00: 40:13:41:b8:a3:7e:54:68:c8:f0:92:21:85:92:65: 87:71:ce:1b:2d:e3:21:2b:65:e9:8a:db:5b:b5:14: 41:aa:fe:ad:11:78:75:8a:d9:cd:0a:27:58:90:c6: 34:88:29:62:52:de:86:1f:c5:52:0c:dc:77:99:14: 31:bf:b0:fc:56:9a:47:c2:1c:84:9d:d3:18:b1:55: 40:76:b1:72:5a:bb:7d:85:24:e2:ec:d0:41:91:3b: 89:35:f9:ce:8f:0e:39:8f:59:8c:f4:89:d1:2a:48: 59:82:00:93:05:2e:fd:72:f8:7c:c6:c7:4b:26:28: fc:33:d8:a6:54:1e:c5:b3:bb:54:2a:ba:e2:eb:c9: 05:42:e5:e9:c7:4e:b6:f3:14:b7:b5:e3:dc:a9:ba: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:FE:DF:64:13:EE:65:1F:42:98:CD:1F:A8:8E:9C:8B:8B:D5:10 X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9e:0f:d4:e9:a4:f6:1f:19:7e:73:c6:7f:06:06:81:05:5a: 7f:9b:9b:fd:3f:5d:07:b4:5b:28:a9:ee:ca:f9:22:df:54:4e: a9:73:f3:b2:94:30:2f:60:5f:07:f9:58:ff:6c:b3:37:b6:2e: c6:d6:b2:23:43:e6:d4:ca:c8:ee:58:78:75:48:08:45:ad:b6: 0c:e6:12:b5:1c:e1:fc:7f:23:69:0d:3a:16:dc:c6:cf:36:c9: d6:47:96:f9:57:7d:10:13:c5:b3:15:3d:e9:12:a3:55:f3:7e: b1:fd:52:15:8f:58:be:af:7b:90:00:05:3c:c7:f3:95:db:da: fd:b6:1f:0e:dd:9d:ad:96:a6:f5:bc:db:08:78:57:b4:16:9a: 04:17:df:84:4c:34:6f:a3:58:26:b0:c6:d1:35:c9:57:e1:d7: 76:48:9e:25:60:d2:0e:9c:f3:de:fc:bc:96:62:ec:06:38:16: 7a:0a:f3:94:b0:d2:38:8c:84:ad:e5:52:eb:80:c8:a9:6d:63: a3:54:31:eb:d4:19:eb:22:39:c8:81:32:07:88:0f:60:21:e8: 37:58:7d:10:04:41:54:5c:37:36:07:ad:46:4e:4c:f7:db:5e: aa:ce:d5:9f:ff:3d:fe:fc:50:78:23:1a:bc:66:66:e8:95:24: db:ae:9a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iUy5I/xageGpCi3sTz7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjYwMTI2MDkwMTIzWhcNMjYwMTI3MDkwMTIzWjAzMTEwLwYDVQQD EyhhMjU4ZmVkZjY0MTNlZTY1MWY0Mjk4Y2QxZmE4OGU5YzhiOGJkNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JuOH0GargeT0kKdVpk4oizcxhSi zY5KnN4/4FTuXy5rDB04CUkLAGBJDk7efqOwwJ8ANz3gDQgtzABB/h/mWLrgHYhC FmeNSjLZkdxXx01Uf/JXZo4FOAtBnnM/Kfw6c1moMO/TgwBAE0G4o35UaMjwkiGF kmWHcc4bLeMhK2XpittbtRRBqv6tEXh1itnNCidYkMY0iCliUt6GH8VSDNx3mRQx v7D8VppHwhyEndMYsVVAdrFyWrt9hSTi7NBBkTuJNfnOjw45j1mM9InRKkhZggCT BS79cvh8xsdLJij8M9imVB7Fs7tUKrri68kFQuXpx0628xS3tePcqbo4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJY/t9kE+5lH0KYzR+ojpyLi9UQMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM54P1Omk 9h8ZfnPGfwYGgQVaf5ub/T9dB7RbKKnuyvki31ROqXPzspQwL2BfB/lY/2yzN7Yu xtayI0Pm1MrI7lh4dUgIRa22DOYStRzh/H8jaQ06FtzGzzbJ1keW+Vd9EBPFsxU9 6RKjVfN+sf1SFY9Yvq97kAAFPMfzldva/bYfDt2drZam9bzbCHhXtBaaBBffhEw0 b6NYJrDG0TXJV+HXdkieJWDSDpzz3vy8lmLsBjgWegrzlLDSOIyEreVS64DIqW1j o1Qx69QZ6yI5yIEyB4gPYCHoN1h9EARBVFw3NgetRk5M99teqs7Vn/89/vxQeCMa vGZm6JUk266aVg== -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:54 2026 by rpki-client