This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json) Hash identifier: RSeghY7T3OYzhgNHNud524LyW1F2kYDjdfecdV1mv4I= Subject key identifier: EB:67:0C:FA:F3:14:19:FA:1B:20:F0:83:6A:19:D3:0D:88:65:C4:E2 Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba Certificate serial: 019B97E75C7E09947CDBA2221FFB58929354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft Manifest number: 08ED Signing time: Wed 07 Jan 2026 10:01:20 +0000 Manifest this update: Wed 07 Jan 2026 10:01:20 +0000 Manifest next update: Thu 08 Jan 2026 10:01:20 +0000 Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=) 2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: otmBKYBj7Gg0ebqL8/dJEAdJgVh2K5uRAcWhr+pRS1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:e7:5c:7e:09:94:7c:db:a2:22:1f:fb:58:92:93:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba Validity Not Before: Jan 7 10:01:20 2026 GMT Not After : Jan 8 10:01:20 2026 GMT Subject: CN=eb670cfaf31419fa1b20f0836a19d30d8865c4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:23:de:91:df:b0:80:61:79:23:dd:28:00: 97:33:35:11:7f:cb:b3:08:de:09:15:10:a2:38:4b: 43:59:da:89:0b:e0:80:fb:fe:58:f1:9a:d3:26:6b: 04:43:d6:a5:6c:f2:d6:12:84:f5:1a:af:1c:d7:6e: 66:79:91:1a:f8:5d:e7:de:a3:c7:89:ae:10:9c:d5: 2b:a3:5f:dc:21:42:3f:dd:1b:3b:f7:44:29:b1:9b: cd:30:0b:89:06:c7:3f:0f:47:32:11:b3:50:29:b5: d9:9a:52:ba:f3:17:43:fd:bb:89:cc:78:d5:69:59: 0a:22:fa:00:ce:ff:01:63:aa:a8:65:50:c1:25:d3: 08:8e:9a:51:90:01:ef:0f:5b:b0:35:e0:1c:ce:cc: c1:ed:1a:c3:f5:80:34:04:b1:7e:68:18:5d:c5:ba: 20:88:7f:27:39:0e:df:94:71:aa:7e:2a:c5:ef:39: b0:61:57:53:a5:05:9f:a8:0a:67:f7:5f:90:9d:27: df:25:bb:6b:fa:8f:b0:62:a6:6b:28:24:95:81:ca: ee:26:a5:11:ee:25:bf:86:84:2a:29:c1:8f:69:77: 2b:c7:92:30:7f:20:47:43:cd:ad:a4:b4:7d:8d:ef: ea:7a:4f:80:71:98:6c:60:90:f3:59:d7:04:d8:08: 88:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:0C:FA:F3:14:19:FA:1B:20:F0:83:6A:19:D3:0D:88:65:C4:E2 X509v3 Authority Key Identifier: keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:f3:9e:74:2e:81:05:62:50:bf:f4:c0:f1:6d:a5:2e:33: e9:05:17:95:46:04:99:96:d3:1b:5f:1b:80:bf:16:c2:6d:94: a6:ec:6a:25:93:07:de:d0:44:1b:1a:c8:34:be:54:d6:ec:6d: 93:3e:90:b6:ad:9d:20:64:75:46:b9:04:dd:d7:d3:5f:aa:37: 0b:b6:0c:95:f8:5d:ff:ff:a4:1f:4a:2d:ab:f6:b8:8f:64:79: 1b:e7:de:ab:a1:c9:d2:a8:a9:b5:3f:cf:17:eb:c1:a1:56:87: db:94:8e:cf:28:60:a5:8d:12:cb:5d:62:74:b9:4a:14:92:0a: 41:50:27:1b:65:98:37:c4:0c:21:7c:84:5e:bc:c5:60:63:40: 68:5c:73:8d:c4:44:ef:08:4e:61:41:0f:39:47:12:af:64:2a: 36:db:a5:86:53:b9:1c:46:97:f7:02:d6:b6:7c:6b:4e:eb:06: 2a:7d:8f:c4:61:b4:1f:e5:93:8b:c7:56:4c:aa:9e:a5:10:3f: a6:c9:78:62:b9:01:3c:da:fb:99:8a:12:e8:dc:48:60:c1:49: f7:6e:6d:a9:7f:ee:38:57:5b:d1:91:be:95:d9:b0:d0:1c:00: ea:80:62:52:0e:6d:a9:33:13:10:f7:42:85:be:1b:08:56:46: 67:0f:89:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuX51x+CZR826IiH/tYkpNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0 MTlkYmEwHhcNMjYwMTA3MTAwMTIwWhcNMjYwMTA4MTAwMTIwWjAzMTEwLwYDVQQD EyhlYjY3MGNmYWYzMTQxOWZhMWIyMGYwODM2YTE5ZDMwZDg4NjVjNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Ij3pHfsIBheSPdKACXMzURf8uz CN4JFRCiOEtDWdqJC+CA+/5Y8ZrTJmsEQ9albPLWEoT1Gq8c125meZEa+F3n3qPH ia4QnNUro1/cIUI/3Rs790QpsZvNMAuJBsc/D0cyEbNQKbXZmlK68xdD/buJzHjV aVkKIvoAzv8BY6qoZVDBJdMIjppRkAHvD1uwNeAczszB7RrD9YA0BLF+aBhdxbog iH8nOQ7flHGqfirF7zmwYVdTpQWfqApn91+QnSffJbtr+o+wYqZrKCSVgcruJqUR 7iW/hoQqKcGPaXcrx5IwfyBHQ82tpLR9je/qek+AcZhsYJDzWdcE2AiIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtnDPrzFBn6GyDwg2oZ0w2IZcTiMB8GA1UdIwQY MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It MTA0OWM5OTdiYzdhLzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWPznnQu gQViUL/0wPFtpS4z6QUXlUYEmZbTG18bgL8Wwm2UpuxqJZMH3tBEGxrINL5U1uxt kz6Qtq2dIGR1RrkE3dfTX6o3C7YMlfhd//+kH0otq/a4j2R5G+feq6HJ0qiptT/P F+vBoVaH25SOzyhgpY0Sy11idLlKFJIKQVAnG2WYN8QMIXyEXrzFYGNAaFxzjcRE 7whOYUEPOUcSr2QqNtulhlO5HEaX9wLWtnxrTusGKn2PxGG0H+WTi8dWTKqepRA/ psl4YrkBPNr7mYoS6NxIYMFJ925tqX/uOFdb0ZG+ldmw0BwA6oBiUg5tqTMTEPdC hb4bCFZGZw+JWQ== -----END CERTIFICATE-----Generated at Wed Jan 7 14:42:44 2026 by rpki-client