This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json) Hash identifier: uVHz8c7cKPPbFEnVpVP8U7kWdL0nqAlcDv49/tVpHlI= Subject key identifier: 9F:6F:A6:A7:19:F0:48:9E:30:EA:B5:53:3E:76:0C:8B:CD:F2:E9:F8 Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195 Certificate serial: 019B9D7BD653F2F2D642A279247947DC71CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft Manifest number: 1220 Signing time: Thu 08 Jan 2026 12:01:37 +0000 Manifest this update: Thu 08 Jan 2026 12:01:37 +0000 Manifest next update: Fri 09 Jan 2026 12:01:37 +0000 Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=) 2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: VnxlQjGpMSn3URKB0VuhMUjdRiPGPXWIfDPlyL9SZZI=) 3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:7b:d6:53:f2:f2:d6:42:a2:79:24:79:47:dc:71:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195 Validity Not Before: Jan 8 12:01:37 2026 GMT Not After : Jan 9 12:01:37 2026 GMT Subject: CN=9f6fa6a719f0489e30eab5533e760c8bcdf2e9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:42:93:e8:e1:9d:af:62:3d:1b:0c:72:ed: 57:ea:a7:11:91:ae:f6:d9:3a:d1:13:84:dc:78:a2: e0:da:6d:e3:11:ae:4a:ec:5a:f5:08:a2:0c:55:d6: 79:c2:55:d6:09:7c:ac:6f:8a:d0:03:02:09:8b:90: 0b:b0:3a:fc:a5:12:8f:05:b7:44:46:40:38:77:29: 53:a4:eb:93:b6:af:ae:f7:67:de:5c:1f:98:7a:a5: 6b:95:3c:cd:98:92:f6:bf:53:8e:c5:b9:93:41:fe: 47:cd:19:d8:45:68:5a:77:67:bf:59:16:90:85:da: 6f:48:f2:ed:76:30:72:9f:50:2d:99:84:48:23:34: 51:dc:b5:bb:65:5d:1f:c9:0f:ac:43:1c:9c:78:eb: a4:6d:c1:d8:10:3a:f0:74:45:a2:e1:ec:1e:65:1c: 1d:db:b6:54:69:e7:65:e2:8e:f2:f3:aa:bd:3f:01: a3:20:e3:bc:ff:6d:07:32:47:7e:7d:b8:19:d5:17: ca:30:6b:a1:fe:56:ef:06:37:b2:7c:6f:4d:50:b1: d7:ad:04:24:41:6b:cc:61:d4:7b:0e:2b:01:33:cd: 22:6c:62:5d:ef:0f:6d:57:88:c5:47:18:27:ae:86: 60:37:4e:9d:1d:0e:e5:32:3b:f3:56:84:24:41:9c: 25:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6F:A6:A7:19:F0:48:9E:30:EA:B5:53:3E:76:0C:8B:CD:F2:E9:F8 X509v3 Authority Key Identifier: keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:e1:e1:9e:8a:d1:42:0e:59:fa:d5:62:d9:c5:e0:b5:1c: 82:57:96:4f:ae:15:c0:8f:d4:ae:05:b5:3c:c8:2c:83:20:3b: 4b:5b:ed:10:06:de:59:78:1e:5a:04:8e:2d:c7:9c:7b:09:22: 89:ec:02:02:00:d5:b7:62:24:5a:68:14:10:9c:d1:af:7b:c2: ea:1b:41:1b:7a:54:04:8b:d9:66:73:b1:ce:92:fb:56:8f:dd: e0:e6:05:ee:5b:48:7c:09:ea:97:e3:a1:8a:02:97:99:35:a5: d6:1d:2b:15:8e:a3:d3:f1:c8:78:dc:fd:f9:4f:82:ed:6a:1c: cb:83:0d:8f:42:71:11:74:a2:09:bc:04:aa:a8:92:1c:66:cd: 2f:40:02:d6:7f:19:6b:07:56:e1:fd:3c:38:4c:10:92:0e:c4: 48:10:a1:4b:44:db:4b:55:ae:be:9e:70:db:44:4c:be:7c:bd: 08:9a:3d:9d:66:c5:d9:12:13:43:8d:69:59:9a:5f:b3:21:35: f1:eb:b5:9d:67:0d:75:7e:d2:7c:bc:be:15:cf:79:b9:ef:f4: c2:2c:ea:b0:af:f1:3f:d4:c7:a5:77:d2:c5:ae:47:8d:50:b2: 49:1e:10:20:92:00:6f:28:42:d8:b9:b0:fa:35:58:3a:f4:a8: 77:bf:5d:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZude9ZT8vLWQqJ5JHlH3HHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi MjMxOTUwHhcNMjYwMTA4MTIwMTM3WhcNMjYwMTA5MTIwMTM3WjAzMTEwLwYDVQQD Eyg5ZjZmYTZhNzE5ZjA0ODllMzBlYWI1NTMzZTc2MGM4YmNkZjJlOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz9Ck+jhna9iPRsMcu1X6qcRka72 2TrRE4TceKLg2m3jEa5K7Fr1CKIMVdZ5wlXWCXysb4rQAwIJi5ALsDr8pRKPBbdE RkA4dylTpOuTtq+u92feXB+YeqVrlTzNmJL2v1OOxbmTQf5HzRnYRWhad2e/WRaQ hdpvSPLtdjByn1AtmYRIIzRR3LW7ZV0fyQ+sQxyceOukbcHYEDrwdEWi4eweZRwd 27ZUaedl4o7y86q9PwGjIOO8/20HMkd+fbgZ1RfKMGuh/lbvBjeyfG9NULHXrQQk QWvMYdR7DisBM80ibGJd7w9tV4jFRxgnroZgN06dHQ7lMjvzVoQkQZwlpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9vpqcZ8EieMOq1Uz52DIvN8un4MB8GA1UdIwQY MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDDh4Z6K 0UIOWfrVYtnF4LUcgleWT64VwI/UrgW1PMgsgyA7S1vtEAbeWXgeWgSOLcecewki iewCAgDVt2IkWmgUEJzRr3vC6htBG3pUBIvZZnOxzpL7Vo/d4OYF7ltIfAnql+Oh igKXmTWl1h0rFY6j0/HIeNz9+U+C7Wocy4MNj0JxEXSiCbwEqqiSHGbNL0AC1n8Z awdW4f08OEwQkg7ESBChS0TbS1Wuvp5w20RMvny9CJo9nWbF2RITQ41pWZpfsyE1 8eu1nWcNdX7SfLy+Fc95ue/0wizqsK/xP9THpXfSxa5HjVCySR4QIJIAbyhC2Lmw +jVYOvSod79dBQ== -----END CERTIFICATE-----Generated at Thu Jan 8 19:04:45 2026 by rpki-client