This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json) Hash identifier: /JFB7//PVza6fBBnx6mfgmC6dLvtEQQBAcBSxC+MjjU= Subject key identifier: C0:2B:9D:4B:F8:4F:2C:06:6E:F5:16:25:F3:E0:7F:C5:EB:43:F3:AC Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba Certificate serial: 019BAB37869D04059A687ED707E9F6017987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft Manifest number: 08F7 Signing time: Sun 11 Jan 2026 04:01:41 +0000 Manifest this update: Sun 11 Jan 2026 04:01:41 +0000 Manifest next update: Mon 12 Jan 2026 04:01:41 +0000 Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=) 2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: BrLUAPO7V8taCX8JZQ3kRF4TNWJF3KN/mZ9bjzdvR0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:37:86:9d:04:05:9a:68:7e:d7:07:e9:f6:01:79:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba Validity Not Before: Jan 11 04:01:41 2026 GMT Not After : Jan 12 04:01:41 2026 GMT Subject: CN=c02b9d4bf84f2c066ef51625f3e07fc5eb43f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:99:89:c0:c1:29:51:e4:8f:20:87:87:68: a7:e7:b0:1e:1e:7b:fc:79:23:c6:50:f3:6d:4e:a1: 0c:c4:54:69:e8:28:57:31:50:2d:7d:8b:ec:ea:31: a3:fd:69:e8:5d:f6:5e:38:a5:2f:6b:16:83:15:75: 88:79:6a:e2:af:e8:e8:e5:73:02:42:e4:31:9a:59: 4c:f5:b4:a0:8d:42:89:1e:19:fc:e2:3f:34:2f:07: 55:b5:8e:e4:d9:28:37:d2:4d:45:0f:84:f2:71:aa: 53:2a:93:a6:bf:6e:f9:06:09:ae:af:6f:d1:c2:fa: 01:b2:c3:eb:e0:ae:4a:34:5a:2f:f2:29:11:59:64: 2f:4e:19:d9:4b:93:4c:52:d6:18:bd:4a:98:6f:f1: 81:8d:43:d2:07:4d:46:98:cf:ca:62:af:35:aa:cc: 84:6d:5c:77:b8:06:4e:f7:74:14:22:d0:ae:c3:14: ab:1f:88:e3:1a:47:3f:34:d8:bd:d3:49:5a:00:87: de:76:aa:af:c8:2d:8a:a3:bc:bd:dd:47:5e:9a:61: 05:72:65:9b:d4:39:bc:52:9d:d4:91:a3:ca:50:90: 87:87:90:7b:d0:9a:b0:d9:ce:a4:8a:67:f9:a9:83: 6e:eb:37:d5:bd:98:60:2b:61:28:42:86:51:a3:23: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:9D:4B:F8:4F:2C:06:6E:F5:16:25:F3:E0:7F:C5:EB:43:F3:AC X509v3 Authority Key Identifier: keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c9:e0:d6:f4:2c:f0:eb:dd:4b:a5:54:02:8f:04:c8:94:43: 93:fb:5d:fa:ed:65:96:d6:43:c8:d6:f8:d0:e4:1f:16:b4:81: cd:2f:83:de:04:17:7b:f2:d1:97:1c:77:04:85:6b:60:c4:65: bf:a0:a9:d7:ea:d4:57:0f:e5:11:32:f5:6a:1d:8e:49:95:31: 7f:a7:27:ee:d4:5c:8e:98:4f:98:be:a3:1e:9c:7b:33:bb:9f: a8:5b:59:16:23:9a:35:22:df:40:82:1c:62:ad:ed:bf:82:c6: e9:54:1c:09:36:26:14:de:8b:0b:32:6f:77:2d:6b:60:f1:3e: 9a:d2:b1:f9:fc:a0:03:8e:d6:0a:2c:43:9a:52:6b:92:5a:ab: 97:45:02:b8:37:ab:0c:ad:9e:44:85:b5:28:17:43:71:40:79: 23:30:44:b4:5c:6d:7e:2b:91:ca:a9:7d:1d:e2:20:8a:f9:b5: bb:02:85:c2:97:ea:58:06:04:13:c6:71:fd:ba:79:1e:2e:a0: ff:4d:5b:1e:9d:77:f8:44:6d:3f:c9:3f:d6:d6:45:68:d5:ab: c1:2f:c3:dd:4e:e0:62:4c:5f:25:71:1f:34:61:fe:20:d4:84: 3a:c3:27:64:28:27:0a:ec:fb:01:3d:32:e4:fd:10:cc:d8:1d: bc:eb:84:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurN4adBAWaaH7XB+n2AXmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0 MTlkYmEwHhcNMjYwMTExMDQwMTQxWhcNMjYwMTEyMDQwMTQxWjAzMTEwLwYDVQQD EyhjMDJiOWQ0YmY4NGYyYzA2NmVmNTE2MjVmM2UwN2ZjNWViNDNmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyiZicDBKVHkjyCHh2in57AeHnv8 eSPGUPNtTqEMxFRp6ChXMVAtfYvs6jGj/WnoXfZeOKUvaxaDFXWIeWrir+jo5XMC QuQxmllM9bSgjUKJHhn84j80LwdVtY7k2Sg30k1FD4TycapTKpOmv275Bgmur2/R wvoBssPr4K5KNFov8ikRWWQvThnZS5NMUtYYvUqYb/GBjUPSB01GmM/KYq81qsyE bVx3uAZO93QUItCuwxSrH4jjGkc/NNi900laAIfedqqvyC2Ko7y93UdemmEFcmWb 1Dm8Up3UkaPKUJCHh5B70Jqw2c6kimf5qYNu6zfVvZhgK2EoQoZRoyO73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMArnUv4TywGbvUWJfPgf8XrQ/OsMB8GA1UdIwQY MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It MTA0OWM5OTdiYzdhLzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8ng1vQs 8OvdS6VUAo8EyJRDk/td+u1lltZDyNb40OQfFrSBzS+D3gQXe/LRlxx3BIVrYMRl v6Cp1+rUVw/lETL1ah2OSZUxf6cn7tRcjphPmL6jHpx7M7ufqFtZFiOaNSLfQIIc Yq3tv4LG6VQcCTYmFN6LCzJvdy1rYPE+mtKx+fygA47WCixDmlJrklqrl0UCuDer DK2eRIW1KBdDcUB5IzBEtFxtfiuRyql9HeIgivm1uwKFwpfqWAYEE8Zx/bp5Hi6g /01bHp13+ERtP8k/1tZFaNWrwS/D3U7gYkxfJXEfNGH+INSEOsMnZCgnCuz7AT0y 5P0QzNgdvOuEPg== -----END CERTIFICATE-----Generated at Sun Jan 11 11:31:11 2026 by rpki-client