This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json) Hash identifier: m8LH4apwWboW2GlnGZ5ILsIse6txl6N8eDpf4xRbrMQ= Subject key identifier: DC:16:E3:A9:5C:1A:AA:A0:1D:5D:DE:B8:9A:53:72:69:FC:66:61:A1 Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Certificate serial: 019BAE6F90D8612ED3FD89E4551BC16CE506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft Manifest number: 0849 Signing time: Sun 11 Jan 2026 19:01:45 +0000 Manifest this update: Sun 11 Jan 2026 19:01:45 +0000 Manifest next update: Mon 12 Jan 2026 19:01:45 +0000 Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: 90AozsUNgKP0nZrMT290iNNKBMrsganMlnzSc+f0wqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:90:d8:61:2e:d3:fd:89:e4:55:1b:c1:6c:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Validity Not Before: Jan 11 19:01:45 2026 GMT Not After : Jan 12 19:01:45 2026 GMT Subject: CN=dc16e3a95c1aaaa01d5ddeb89a537269fc6661a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:6f:81:58:38:bb:78:5a:4c:91:b3:2e:f0: 32:5c:88:88:fe:f3:9c:7e:01:10:9f:1c:f4:8a:cd: 96:90:7b:7a:1b:97:d9:8d:b6:26:e5:f8:59:2c:af: 3d:17:d6:7a:cd:81:8b:31:e6:93:e0:84:27:9e:01: fa:ff:ce:46:7c:91:78:39:5d:c1:37:48:4d:a5:30: 4a:1f:45:2f:a5:af:f1:bb:cb:9d:da:09:d5:b4:d9: a5:d7:3a:f0:6b:89:a4:e1:67:5e:04:31:8b:da:de: a9:0d:da:bf:a5:66:1a:37:46:29:af:11:72:01:20: 1c:dd:d3:78:5a:5e:8c:d3:09:22:bf:eb:80:ab:41: 9e:a7:e1:00:6d:b4:b1:31:d7:6b:a0:e4:5f:cd:79: a0:cf:03:85:df:5e:4e:ec:a9:5b:29:85:24:52:56: ca:7f:54:92:42:8d:0e:4f:65:53:cc:b5:0d:89:cb: f9:b1:29:df:10:9c:cf:d2:f4:f7:ea:f7:1b:cd:0b: 02:cc:b8:55:b8:54:f2:93:b9:1f:d9:68:c3:14:17: 4e:7c:fa:f7:26:d7:75:cf:1f:cb:60:e8:75:33:70: ab:5d:ee:64:bf:90:bc:65:93:f4:80:ad:2a:93:1b: 18:4b:a8:3f:2b:96:ff:b7:fd:c8:19:f0:f3:24:29: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:E3:A9:5C:1A:AA:A0:1D:5D:DE:B8:9A:53:72:69:FC:66:61:A1 X509v3 Authority Key Identifier: keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:cb:3d:a9:72:52:68:45:1d:04:32:5e:e5:88:9f:06:54:a0: c4:71:1d:23:03:07:da:f0:45:b6:c9:27:0a:4d:51:a0:f0:ea: d6:ab:61:05:34:ec:71:a8:31:28:d2:6d:f6:88:89:ec:34:4f: b3:4d:d7:42:e0:65:35:64:15:b6:53:45:37:18:b8:82:b5:09: 4e:0e:2a:df:a9:6a:35:c7:82:b6:77:85:f4:44:4a:f6:97:b8: 45:7e:10:92:cc:3f:61:ee:bf:a0:0f:dd:15:96:4d:c0:62:a3: 90:8a:05:63:88:86:af:bf:d0:ff:5f:ba:4d:24:9e:47:1e:78: 68:b7:7b:c1:7f:64:87:9e:35:35:ca:5a:bd:4c:09:0f:c9:d3: 25:65:7f:f4:7b:1a:a4:c0:72:76:93:5c:a5:c2:54:5e:5b:21: 40:c6:3c:5a:57:29:95:f1:d8:48:58:58:4d:2c:3b:16:69:40: 2d:3d:f8:11:3a:7d:4b:f8:6e:b1:a8:17:76:78:84:90:06:62: 07:37:18:41:3a:13:15:04:95:0d:77:f6:b6:5d:59:7a:c2:ab: 6b:ab:85:4d:68:67:9e:6c:0d:e2:12:70:cf:09:e9:5c:da:19: 53:af:7b:1a:b7:46:d5:6b:0b:60:f7:73:cd:de:06:21:0c:22: b5:d5:cb:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub5DYYS7T/YnkVRvBbOUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2 YTdmNTQwHhcNMjYwMTExMTkwMTQ1WhcNMjYwMTEyMTkwMTQ1WjAzMTEwLwYDVQQD EyhkYzE2ZTNhOTVjMWFhYWEwMWQ1ZGRlYjg5YTUzNzI2OWZjNjY2MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhpvgVg4u3haTJGzLvAyXIiI/vOc fgEQnxz0is2WkHt6G5fZjbYm5fhZLK89F9Z6zYGLMeaT4IQnngH6/85GfJF4OV3B N0hNpTBKH0Uvpa/xu8ud2gnVtNml1zrwa4mk4WdeBDGL2t6pDdq/pWYaN0YprxFy ASAc3dN4Wl6M0wkiv+uAq0Gep+EAbbSxMddroORfzXmgzwOF315O7KlbKYUkUlbK f1SSQo0OT2VTzLUNicv5sSnfEJzP0vT36vcbzQsCzLhVuFTyk7kf2WjDFBdOfPr3 Jtd1zx/LYOh1M3CrXe5kv5C8ZZP0gK0qkxsYS6g/K5b/t/3IGfDzJCkP6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwW46lcGqqgHV3euJpTcmn8ZmGhMB8GA1UdIwQY MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2 LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFss9qXJS aEUdBDJe5YifBlSgxHEdIwMH2vBFtsknCk1RoPDq1qthBTTscagxKNJt9oiJ7DRP s03XQuBlNWQVtlNFNxi4grUJTg4q36lqNceCtneF9ERK9pe4RX4Qksw/Ye6/oA/d FZZNwGKjkIoFY4iGr7/Q/1+6TSSeRx54aLd7wX9kh541NcpavUwJD8nTJWV/9Hsa pMBydpNcpcJUXlshQMY8WlcplfHYSFhYTSw7FmlALT34ETp9S/husagXdniEkAZi BzcYQToTFQSVDXf2tl1ZesKra6uFTWhnnmwN4hJwzwnpXNoZU697GrdG1WsLYPdz zd4GIQwitdXLpA== -----END CERTIFICATE-----Generated at Mon Jan 12 01:31:58 2026 by rpki-client