This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json) Hash identifier: WQDjJyreXRDLQNAW3VORoeXkUHfH8v2k7Fj8872Jy2c= Subject key identifier: 9B:DF:16:F2:F7:46:71:24:74:20:C6:F7:13:E5:32:5B:B8:5B:54:31 Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada Certificate serial: 019BF575605CA7165C9EA3F574543AE25EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 14:01:08 +0000 Manifest this update: Sun 25 Jan 2026 14:01:08 +0000 Manifest next update: Mon 26 Jan 2026 14:01:08 +0000 Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: Hb54/9mD0AOiQPjmIvfVyUeKlKHuDcpxUso4YDQn1jE=) 2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:60:5c:a7:16:5c:9e:a3:f5:74:54:3a:e2:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Validity Not Before: Jan 25 14:01:08 2026 GMT Not After : Jan 26 14:01:08 2026 GMT Subject: CN=9bdf16f2f74671247420c6f713e5325bb85b5431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:a4:4b:e4:50:53:80:d5:b9:8a:7c:90:89: fa:12:18:ab:87:6e:db:a3:d8:b7:f4:dd:86:bc:99: 9f:7c:70:07:99:f1:f2:24:7a:4b:7e:1d:74:83:e4: 66:67:3d:0a:3c:62:43:e7:12:b5:b1:21:21:1f:d1: 3b:da:0f:31:9e:10:7b:ee:54:0d:29:f5:66:1e:b1: f8:7c:11:d3:ce:31:8b:fd:cd:ec:71:ea:a6:52:f6: 49:71:53:64:c3:65:83:5a:06:b1:85:ff:3c:ae:53: 96:f0:8b:06:d7:2a:3e:96:c4:27:39:a7:5b:98:61: 1e:be:55:67:fe:99:7d:bf:91:00:bf:f5:57:3e:41: bf:80:5a:a2:b8:95:36:d4:e9:8e:e4:88:79:70:70: 02:6e:70:e0:f4:ee:93:df:2e:dc:50:53:38:77:db: a6:d4:d2:87:fc:17:40:d1:d0:b0:ce:95:5e:88:20: 02:f2:d8:b0:49:38:e2:83:da:42:20:2d:33:91:1b: f4:8c:eb:4d:e2:60:ff:e0:a5:ad:96:fb:7b:88:b1: 1c:af:f2:42:c9:77:60:56:48:b6:54:05:e3:f6:f5: 7c:d3:36:ac:75:0e:70:0d:66:1d:df:d5:6b:d5:8c: 42:1b:bc:10:4a:1a:c9:fa:9c:cd:cd:fa:c2:af:60: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:16:F2:F7:46:71:24:74:20:C6:F7:13:E5:32:5B:B8:5B:54:31 X509v3 Authority Key Identifier: keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:56:f3:de:1e:63:60:d5:39:fe:03:30:3e:a1:69:0a:ad:2a: ec:4f:77:22:d3:d4:df:bf:95:f6:32:35:8e:4d:42:d1:39:fb: ab:0e:9e:bc:2d:64:5b:aa:c3:cb:0e:02:75:67:9f:b1:1c:3c: 6d:7f:d4:4c:33:f2:98:96:f0:f5:d8:85:51:a1:49:4f:68:43: 27:e2:9d:45:2b:1a:7e:dc:0c:02:b4:1a:22:de:e8:04:9a:37: 95:0a:cd:6b:d7:65:8b:26:d1:82:75:e0:21:75:1f:5e:41:c0: e3:e2:1c:1d:46:b3:64:54:be:45:63:b2:ab:03:0d:22:cc:24: 70:4e:63:e5:4a:fa:40:72:93:a1:b5:64:4d:d6:4b:c7:80:4f: 9a:c5:32:d2:45:c2:c3:ed:4d:96:81:19:73:cc:6b:61:e2:db: 00:ac:68:9b:af:4f:11:93:52:d5:6b:4c:66:bc:f5:6a:12:98: f3:18:f4:cf:7f:61:57:75:fa:9b:c3:5c:3b:a4:a9:26:15:52: 3b:6e:eb:c9:dd:ed:31:07:76:0a:fc:20:f6:85:dc:21:4b:27: e7:31:fc:78:5f:a1:17:c9:a2:7f:44:ee:ba:30:67:72:b7:df: f6:e3:1c:ed:ce:d4:c4:ee:4a:2b:00:28:86:14:e2:cf:67:a5: 6b:55:e6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWBcpxZcnqP1dFQ64l7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm ZTJhZGEwHhcNMjYwMTI1MTQwMTA4WhcNMjYwMTI2MTQwMTA4WjAzMTEwLwYDVQQD Eyg5YmRmMTZmMmY3NDY3MTI0NzQyMGM2ZjcxM2U1MzI1YmI4NWI1NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroGkS+RQU4DVuYp8kIn6Ehirh27b o9i39N2GvJmffHAHmfHyJHpLfh10g+RmZz0KPGJD5xK1sSEhH9E72g8xnhB77lQN KfVmHrH4fBHTzjGL/c3sceqmUvZJcVNkw2WDWgaxhf88rlOW8IsG1yo+lsQnOadb mGEevlVn/pl9v5EAv/VXPkG/gFqiuJU21OmO5Ih5cHACbnDg9O6T3y7cUFM4d9um 1NKH/BdA0dCwzpVeiCAC8tiwSTjig9pCIC0zkRv0jOtN4mD/4KWtlvt7iLEcr/JC yXdgVki2VAXj9vV80zasdQ5wDWYd39Vr1YxCG7wQShrJ+pzNzfrCr2ChkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvfFvL3RnEkdCDG9xPlMlu4W1QxMB8GA1UdIwQY MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1bz3h5j YNU5/gMwPqFpCq0q7E93ItPU37+V9jI1jk1C0Tn7qw6evC1kW6rDyw4CdWefsRw8 bX/UTDPymJbw9diFUaFJT2hDJ+KdRSsaftwMArQaIt7oBJo3lQrNa9dliybRgnXg IXUfXkHA4+IcHUazZFS+RWOyqwMNIswkcE5j5Ur6QHKTobVkTdZLx4BPmsUy0kXC w+1NloEZc8xrYeLbAKxom69PEZNS1WtMZrz1ahKY8xj0z39hV3X6m8NcO6SpJhVS O27ryd3tMQd2Cvwg9oXcIUsn5zH8eF+hF8mif0TuujBncrff9uMc7c7UxO5KKwAo hhTiz2ela1XmkA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:38:06 2026 by rpki-client