This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json) Hash identifier: CdjSeOCwJ5AE2niWtkANxgJal3T20i2pAUvwPfx/Nss= Subject key identifier: 2F:9D:F9:26:D4:C3:10:DD:B2:4F:3E:30:D3:49:99:74:B0:18:3F:40 Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Certificate serial: 019BADCAF5C414DCB0CC10AD82AD4496C4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft Manifest number: 0433 Signing time: Sun 11 Jan 2026 16:01:58 +0000 Manifest this update: Sun 11 Jan 2026 16:01:58 +0000 Manifest next update: Mon 12 Jan 2026 16:01:58 +0000 Files and hashes: 1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: mMoCfDRMSKwX4+PnGyUb1b84FdqecWKcL+4j2T9KXyk=) 2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:ca:f5:c4:14:dc:b0:cc:10:ad:82:ad:44:96:c4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Validity Not Before: Jan 11 16:01:58 2026 GMT Not After : Jan 12 16:01:58 2026 GMT Subject: CN=2f9df926d4c310ddb24f3e30d3499974b0183f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:e3:6b:c5:3f:66:d0:fa:69:03:ef:ac:3d: 10:76:38:73:9f:d1:2e:32:89:95:bc:1e:3a:d9:b2: 4d:d7:4a:2a:5c:ad:d9:99:0a:03:d7:91:5c:55:24: 4c:8a:af:78:46:04:71:fa:7b:8c:c2:8c:60:50:7f: 03:31:18:42:40:c2:a4:b8:31:a6:3f:22:82:9a:c7: 5b:ea:76:00:6e:2d:94:15:33:39:70:c3:ef:83:e5: 28:9a:5c:06:34:62:1c:25:00:ed:1b:8c:72:fe:1f: a8:00:52:68:ae:46:53:05:b6:86:aa:d4:ee:de:6e: c9:23:0b:8c:94:91:60:4d:71:f1:d7:5c:15:aa:6d: f5:cc:24:a5:b5:20:35:70:92:7e:62:f4:f4:72:72: ba:95:95:d7:d1:4b:a7:de:90:a8:40:31:97:e3:e1: 34:fd:57:8f:dc:cc:da:dc:05:79:05:cf:0f:10:5f: 1b:b6:5f:68:46:d3:35:b3:a3:5a:c0:af:1a:6b:3c: 2f:f4:f1:2a:a7:06:70:e1:5b:6f:29:54:49:09:fe: 4c:48:03:c3:51:8e:06:ca:ce:a6:a6:9d:7b:4f:39: cd:28:58:19:ad:12:3d:05:8c:92:a5:66:c2:c1:5d: 0e:6c:c2:b6:4c:b0:df:c1:fe:61:5d:a8:a7:ec:76: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9D:F9:26:D4:C3:10:DD:B2:4F:3E:30:D3:49:99:74:B0:18:3F:40 X509v3 Authority Key Identifier: keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e0:38:64:d9:2d:20:7b:fb:de:d2:93:da:8e:64:20:aa:ce: d4:73:eb:b1:c3:b3:74:18:99:35:29:ee:a5:cf:99:61:21:af: e0:9a:03:b6:b7:c1:f7:50:ec:a7:2a:ac:1c:c2:19:2b:9f:13: f2:31:3a:8a:4c:ba:94:c2:b5:80:3f:a9:97:4d:32:8c:01:21: 24:60:42:47:b7:af:fa:8e:f6:9d:cb:a1:f1:30:b4:ac:ac:89: 0c:03:56:5d:76:28:57:20:d4:ba:05:83:21:97:39:54:d9:4b: 10:3e:a9:bb:de:16:de:54:65:d1:7f:49:f1:c2:95:1c:0a:c4: 23:da:84:81:49:e8:63:a1:97:41:cf:3e:75:d1:47:d8:82:15: 0a:a7:8f:d2:50:e1:00:6b:09:8e:ff:57:35:70:c5:90:8f:71: 9c:a6:20:7e:27:eb:c3:ad:21:db:3a:54:64:75:fc:72:2e:da: ee:3d:91:ae:5b:43:17:54:70:4a:bf:9e:aa:b0:a1:d7:16:69: 89:bc:90:c9:e9:2f:e1:3a:d5:6f:23:28:9c:32:e1:39:81:15: 1c:5c:57:dd:bd:aa:d0:71:14:a6:39:34:9a:4b:42:10:b8:31: 99:94:fe:f5:5a:12:03:c5:5e:c5:3e:98:ae:a6:2f:7e:08:d7: 20:62:ef:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutyvXEFNywzBCtgq1ElsSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2 YmYxZmMwHhcNMjYwMTExMTYwMTU4WhcNMjYwMTEyMTYwMTU4WjAzMTEwLwYDVQQD EygyZjlkZjkyNmQ0YzMxMGRkYjI0ZjNlMzBkMzQ5OTk3NGIwMTgzZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bHja8U/ZtD6aQPvrD0Qdjhzn9Eu MomVvB462bJN10oqXK3ZmQoD15FcVSRMiq94RgRx+nuMwoxgUH8DMRhCQMKkuDGm PyKCmsdb6nYAbi2UFTM5cMPvg+UomlwGNGIcJQDtG4xy/h+oAFJorkZTBbaGqtTu 3m7JIwuMlJFgTXHx11wVqm31zCSltSA1cJJ+YvT0cnK6lZXX0Uun3pCoQDGX4+E0 /VeP3Mza3AV5Bc8PEF8btl9oRtM1s6NawK8aazwv9PEqpwZw4VtvKVRJCf5MSAPD UY4Gys6mpp17TznNKFgZrRI9BYySpWbCwV0ObMK2TLDfwf5hXain7HYorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+d+SbUwxDdsk8+MNNJmXSwGD9AMB8GA1UdIwQY MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3 LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOA4ZNkt IHv73tKT2o5kIKrO1HPrscOzdBiZNSnupc+ZYSGv4JoDtrfB91DspyqsHMIZK58T 8jE6iky6lMK1gD+pl00yjAEhJGBCR7ev+o72ncuh8TC0rKyJDANWXXYoVyDUugWD IZc5VNlLED6pu94W3lRl0X9J8cKVHArEI9qEgUnoY6GXQc8+ddFH2IIVCqeP0lDh AGsJjv9XNXDFkI9xnKYgfifrw60h2zpUZHX8ci7a7j2RrltDF1RwSr+eqrCh1xZp ibyQyekv4TrVbyMonDLhOYEVHFxX3b2q0HEUpjk0mktCELgxmZT+9VoSA8VexT6Y rqYvfgjXIGLv2Q== -----END CERTIFICATE-----Generated at Sun Jan 11 23:56:55 2026 by rpki-client