This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft File: 80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json) Hash identifier: LLobG+tvu/VQFTwEYdssZSdY2QorB+aoCZbgYK/1Qe8= Subject key identifier: EB:4F:03:22:B0:99:96:AA:D6:C4:68:2F:F3:66:73:2C:FE:4F:21:9C Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B Certificate issuer: /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Certificate serial: 019BA26AB9D52DAF7C1671608F7E77617483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft Manifest number: 0BA6 Signing time: Fri 09 Jan 2026 11:01:01 +0000 Manifest this update: Fri 09 Jan 2026 11:01:01 +0000 Manifest next update: Sat 10 Jan 2026 11:01:01 +0000 Files and hashes: 1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: irKBDssgLWvdx+v2YBq3XHk8XPt/1Wyu/6U8CU3W+Ic=) 2: nyuDVVWpDgRFf-6djBvIh8G6IaQ.roa (hash: V73akF511kFqlwWUk+buaBhxPXu4PPDC0iD4dONZGKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6a:b9:d5:2d:af:7c:16:71:60:8f:7e:77:61:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Validity Not Before: Jan 9 11:01:01 2026 GMT Not After : Jan 10 11:01:01 2026 GMT Subject: CN=eb4f0322b09996aad6c4682ff366732cfe4f219c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:99:ed:58:0a:81:16:97:b0:60:ae:4e:af: 4a:2d:02:03:77:34:4e:ff:1f:fd:e2:e7:97:04:47: 3d:4c:1d:c3:ea:0b:05:08:7b:0c:f6:dd:99:8d:58: 90:2c:f1:87:39:d9:0f:1d:1e:03:71:4d:5d:bc:a3: 15:db:94:36:e3:9e:2b:16:72:ea:c5:d0:98:7e:cd: bd:13:e7:0b:01:a9:d6:63:da:85:b8:7e:03:d8:9f: cb:9c:26:ca:bd:20:84:16:b7:dc:e2:49:cb:94:f4: 18:90:5d:21:5c:f8:da:b8:99:e5:73:3c:4b:12:04: 90:bc:b9:e7:ba:72:81:b0:1b:5e:66:74:a9:0f:f1: d2:01:aa:7a:f6:91:e5:29:c1:20:8a:47:30:d0:94: ea:94:e6:b0:99:10:42:82:f4:a0:1a:08:22:07:6f: 7e:1c:b5:b9:3c:cf:43:5f:82:14:ae:70:c1:d2:ca: bd:c9:63:47:70:1c:7c:53:67:4d:07:cf:54:26:3e: 88:ac:e3:bf:ce:68:30:c1:d3:a7:34:99:de:28:64: c0:fb:a9:5b:28:7e:56:5b:01:66:b2:75:dc:6d:d8: 76:05:db:5b:97:22:d9:b3:d9:74:02:7c:e0:af:43: 81:86:7c:b9:bd:e4:a3:c7:e6:50:3b:9d:d8:ad:1c: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4F:03:22:B0:99:96:AA:D6:C4:68:2F:F3:66:73:2C:FE:4F:21:9C X509v3 Authority Key Identifier: keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:70:c4:b0:2c:27:9f:17:a1:ff:f0:13:79:6a:6b:d6:ef:8a: c3:65:a3:1e:f6:da:af:29:43:3a:14:dd:75:5f:8f:1f:5f:52: 8b:bc:02:47:b7:a3:91:af:84:d8:60:b3:66:6f:39:f9:2c:78: 5b:7d:25:b5:ea:50:db:a5:f9:69:4b:5e:a6:e0:bb:8c:82:cb: 57:e0:75:cf:58:e9:1d:24:03:5f:e2:1b:81:e3:5b:de:e8:12: 2e:9b:21:5b:26:62:98:7f:de:21:c9:2e:a4:60:79:fe:d8:dd: 29:be:0c:af:81:86:17:8c:0f:d1:17:1d:ef:e8:29:b4:e7:68: 12:30:10:51:78:54:f0:02:08:d4:e6:39:20:f8:0c:b7:e2:6b: b0:ea:bc:ae:12:66:33:a1:09:b3:20:a4:7d:bd:9e:a8:43:fc: 85:ae:4f:ec:e4:b4:56:b7:03:19:4b:90:11:33:77:ef:ee:92: ab:94:f4:41:ea:fc:ae:4b:e5:64:9f:5d:62:3d:24:13:20:93: 27:d6:81:43:65:a4:9b:fc:8a:5d:29:d7:b4:c2:5a:5f:56:6f: 20:45:5c:f9:9e:a6:1b:f5:b3:e3:ec:2f:8e:3f:c2:d1:fa:40: 7c:d5:ee:93:b7:3c:65:67:b7:e6:84:0d:49:0e:3d:6b:2b:76: 9d:a9:6f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiarnVLa98FnFgj353YXSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDQzZjViNWM3OGQ2OGU3MzlkNGZhNmZlYWZkZDI0M2Iw NTJhNGIwHhcNMjYwMTA5MTEwMTAxWhcNMjYwMTEwMTEwMTAxWjAzMTEwLwYDVQQD EyhlYjRmMDMyMmIwOTk5NmFhZDZjNDY4MmZmMzY2NzMyY2ZlNGYyMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+Z7VgKgRaXsGCuTq9KLQIDdzRO /x/94ueXBEc9TB3D6gsFCHsM9t2ZjViQLPGHOdkPHR4DcU1dvKMV25Q2454rFnLq xdCYfs29E+cLAanWY9qFuH4D2J/LnCbKvSCEFrfc4knLlPQYkF0hXPjauJnlczxL EgSQvLnnunKBsBteZnSpD/HSAap69pHlKcEgikcw0JTqlOawmRBCgvSgGggiB29+ HLW5PM9DX4IUrnDB0sq9yWNHcBx8U2dNB89UJj6IrOO/zmgwwdOnNJneKGTA+6lb KH5WWwFmsnXcbdh2BdtblyLZs9l0Anzgr0OBhny5veSjx+ZQO53YrRzmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtPAyKwmZaq1sRoL/Nmcyz+TyGcMB8GA1UdIwQY MBaAFPNEP1tceNaOc51Ppv6v3SQ7BSpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTct YjE2NTFhNjRmMzVlLzEvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTctYjE2NTFhNjRmMzVl LzEvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnDEsCwn nxeh//ATeWpr1u+Kw2WjHvbarylDOhTddV+PH19Si7wCR7ejka+E2GCzZm85+Sx4 W30ltepQ26X5aUtepuC7jILLV+B1z1jpHSQDX+IbgeNb3ugSLpshWyZimH/eIcku pGB5/tjdKb4Mr4GGF4wP0Rcd7+gptOdoEjAQUXhU8AII1OY5IPgMt+JrsOq8rhJm M6EJsyCkfb2eqEP8ha5P7OS0VrcDGUuQETN37+6Sq5T0Qer8rkvlZJ9dYj0kEyCT J9aBQ2Wkm/yKXSnXtMJaX1ZvIEVc+Z6mG/Wz4+wvjj/C0fpAfNXuk7c8ZWe35oQN SQ49ayt2nalvsA== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:13 2026 by rpki-client