This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json) Hash identifier: 2A9iOVx0fvy9q5C9NtIbhEVpK6xH5ZsuYXKVWT5moHM= Subject key identifier: 7F:59:68:AD:94:AF:26:E3:0D:63:D8:C6:77:CC:E5:4B:BF:47:E4:03 Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6 Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6 Certificate serial: 019BB3CC1B58736DBF877E160290D06D8E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft Manifest number: 130B Signing time: Mon 12 Jan 2026 20:00:56 +0000 Manifest this update: Mon 12 Jan 2026 20:00:56 +0000 Manifest next update: Tue 13 Jan 2026 20:00:56 +0000 Files and hashes: 1: g2p638fZZwCrnvRFqg9eTRpbiw4.roa (hash: qSK6pl1sLuO5L8q2M8N4Ull7ELILSQAIXlEcO8nJrKo=) 2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: DDmaqEmYmHbJtdwaEqPnhcF/pkwCmmUxXKAzTFU8EPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:cc:1b:58:73:6d:bf:87:7e:16:02:90:d0:6d:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6 Validity Not Before: Jan 12 20:00:56 2026 GMT Not After : Jan 13 20:00:56 2026 GMT Subject: CN=7f5968ad94af26e30d63d8c677cce54bbf47e403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:a0:17:b4:2e:dd:3c:9c:b2:f3:47:75:03: 77:cf:0d:23:f9:45:ed:a9:0c:0b:39:a5:ba:d8:5c: 02:d7:2b:41:f0:63:40:8c:76:f9:8d:ff:23:a8:8f: 55:45:b6:87:ad:87:bc:de:e6:d0:0e:e5:c0:de:1b: 7a:a8:ae:ef:98:22:71:c7:fe:e9:2b:bc:3f:df:ab: f3:66:1c:b2:aa:76:fa:59:9d:a7:c5:23:cd:07:d1: 89:58:5f:33:32:22:e0:5e:71:25:20:61:7c:89:13: 53:9e:2d:58:cc:d5:05:6d:93:15:2d:e8:12:17:7b: 4d:72:f0:bc:73:c6:ba:3c:e1:f5:c0:8b:10:a2:63: da:c4:ae:3d:4b:49:b7:30:3a:2c:72:90:67:84:9c: 0d:6c:f8:30:6c:42:34:47:c0:3c:c6:fe:d4:23:51: 1c:61:3b:2e:ca:88:8a:9d:24:23:e8:43:93:08:9a: b4:ea:89:8c:b4:01:c2:68:9a:c3:0d:45:d6:4d:a7: 9b:fb:e2:ea:4b:ed:11:8d:d1:83:12:d3:63:16:09: 24:62:9b:8b:b9:36:d4:ff:b7:31:82:aa:31:09:1a: 4e:ce:79:53:cb:6c:30:56:cf:08:7d:82:bc:47:89: c6:e9:8c:f0:bd:84:1e:96:7a:79:41:d3:b5:3b:e6: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:59:68:AD:94:AF:26:E3:0D:63:D8:C6:77:CC:E5:4B:BF:47:E4:03 X509v3 Authority Key Identifier: keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:34:1d:06:dc:60:76:6c:a6:e6:39:77:c2:b8:e4:ed:03:d0: f6:27:48:82:02:ee:ab:f8:4e:d9:c9:71:0c:f1:e2:f4:ea:7e: fb:b4:e4:4b:24:21:7f:23:f0:59:51:db:7e:85:b8:e9:f0:bb: 76:ee:a3:3d:2b:05:ca:71:0b:c4:ca:30:55:d0:c7:70:b6:f4: ee:92:cb:32:2b:bc:4b:ac:d7:fb:95:7a:ef:36:d0:d5:1b:1c: c5:25:6e:d2:93:d1:cb:68:d4:91:d2:c1:c5:32:f1:7e:b9:37: ff:c4:ae:0b:73:85:4c:08:07:cf:6b:cc:87:33:63:88:78:65: a9:8b:f2:66:92:37:eb:15:85:a9:55:15:ad:97:90:9e:00:7a: 58:71:56:29:66:73:33:50:1a:8d:02:b4:a9:ac:ef:70:fe:45: 74:bd:f6:7a:98:86:45:b8:0a:96:7e:2c:f6:dd:d7:92:52:57: 79:47:ac:37:24:ff:17:c0:77:a1:7e:89:b9:f0:4a:00:b2:43: 71:64:b8:2e:5f:f8:19:ba:e9:c9:d9:a3:da:e6:47:ca:41:7c: 8e:75:3e:22:33:18:66:43:d4:28:fe:1f:6d:b3:34:5c:39:e0: f1:73:10:93:a7:74:13:07:5b:83:e1:7a:1e:66:fb:80:24:d5: 33:0a:61:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzzBtYc22/h34WApDQbY5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzhkMDFjYWYyYjA3NTFkMDM1YzUzNzU2NmY0NTYyNzky NWU0ZjYwHhcNMjYwMTEyMjAwMDU2WhcNMjYwMTEzMjAwMDU2WjAzMTEwLwYDVQQD Eyg3ZjU5NjhhZDk0YWYyNmUzMGQ2M2Q4YzY3N2NjZTU0YmJmNDdlNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7mgF7Qu3TycsvNHdQN3zw0j+UXt qQwLOaW62FwC1ytB8GNAjHb5jf8jqI9VRbaHrYe83ubQDuXA3ht6qK7vmCJxx/7p K7w/36vzZhyyqnb6WZ2nxSPNB9GJWF8zMiLgXnElIGF8iRNTni1YzNUFbZMVLegS F3tNcvC8c8a6POH1wIsQomPaxK49S0m3MDoscpBnhJwNbPgwbEI0R8A8xv7UI1Ec YTsuyoiKnSQj6EOTCJq06omMtAHCaJrDDUXWTaeb++LqS+0RjdGDEtNjFgkkYpuL uTbU/7cxgqoxCRpOznlTy2wwVs8IfYK8R4nG6YzwvYQelnp5QdO1O+aF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9ZaK2UrybjDWPYxnfM5Uu/R+QDMB8GA1UdIwQY MBaAFIPI0ByvKwdR0DXFN1ZvRWJ5JeT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDct OWFiMjZiMjY2YWE3LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDctOWFiMjZiMjY2YWE3 LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTQdBtxg dmym5jl3wrjk7QPQ9idIggLuq/hO2clxDPHi9Op++7TkSyQhfyPwWVHbfoW46fC7 du6jPSsFynELxMowVdDHcLb07pLLMiu8S6zX+5V67zbQ1RscxSVu0pPRy2jUkdLB xTLxfrk3/8SuC3OFTAgHz2vMhzNjiHhlqYvyZpI36xWFqVUVrZeQngB6WHFWKWZz M1AajQK0qazvcP5FdL32epiGRbgKln4s9t3XklJXeUesNyT/F8B3oX6JufBKALJD cWS4Ll/4Gbrpydmj2uZHykF8jnU+IjMYZkPUKP4fbbM0XDng8XMQk6d0Ewdbg+F6 Hmb7gCTVMwphpg== -----END CERTIFICATE-----Generated at Tue Jan 13 06:12:45 2026 by rpki-client