This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json) Hash identifier: kpNclQYORy1Y/zkacJr1e3bWAm8F7YoYES+bh1F+hPA= Subject key identifier: 24:AE:66:0A:02:83:41:3D:56:77:B7:7C:1B:4A:0F:D4:84:A7:94:5B Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Certificate serial: 019BF687F300BB546585670F9A6C8430982E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 19:01:03 +0000 Manifest this update: Sun 25 Jan 2026 19:01:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: OfB7rCyWmGw+DTB2QLSV0OKkwgxrDbUGzVNDhnOibdc=) 2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f3:00:bb:54:65:85:67:0f:9a:6c:84:30:98:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Validity Not Before: Jan 25 19:01:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=24ae660a0283413d5677b77c1b4a0fd484a7945b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:4d:7d:a5:ee:c0:35:41:7e:51:01:48:3f: 20:8e:7a:92:7c:f8:27:a6:35:b6:40:de:7e:7e:eb: b3:a3:da:aa:dd:5a:a0:9f:3b:a6:06:c5:0e:2b:e4: 60:18:49:5f:09:03:3b:7c:ff:c0:3a:f4:59:96:2f: ba:b6:9c:93:4b:55:f5:79:cb:69:59:ce:a9:53:25: e2:95:28:ba:db:53:35:b3:a7:6f:f4:f9:b3:36:f5: dd:b8:04:49:14:44:7d:6d:19:72:b5:dd:a8:47:19: ac:a6:ff:6b:e4:86:80:af:72:37:70:fe:24:fe:75: 45:19:fa:d0:cb:80:01:e2:a2:b5:6f:74:3c:c6:f9: 8a:b4:f5:99:38:1e:d0:c1:9b:93:6d:68:c4:5b:cc: 83:d2:65:a4:66:ad:6a:d6:b9:e6:4c:ae:9e:a0:08: b0:c6:bc:5d:bc:00:dd:df:ad:2f:79:41:d3:b2:ad: 20:94:98:7d:11:5c:33:e0:d6:33:8c:d6:39:50:a4: 4e:ca:f6:8f:31:e3:4d:5f:07:5f:54:67:9c:d0:c6: da:ce:2e:82:6e:c8:20:57:9d:7e:4b:0f:8d:a1:2b: 3e:07:04:ae:f6:92:2d:74:1e:bb:b9:bb:c6:28:80: ea:41:db:1b:dc:05:cd:99:13:91:15:62:cf:c7:1b: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AE:66:0A:02:83:41:3D:56:77:B7:7C:1B:4A:0F:D4:84:A7:94:5B X509v3 Authority Key Identifier: keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:0e:c7:46:3e:03:a3:59:b4:48:7e:d8:36:b8:61:aa:0b: 47:56:dc:7a:c4:a9:98:b3:ac:86:7f:34:c2:e5:d4:38:32:13: 60:b1:7b:03:13:97:ff:ed:3b:44:05:25:eb:47:7a:b5:ff:74: df:8e:d3:24:6c:0e:af:0b:5c:09:e0:8a:df:cb:f6:d8:96:55: 76:5a:fe:2d:47:ea:94:b4:14:36:2f:b1:be:9a:3f:80:01:6c: 7f:96:c0:98:d0:36:63:3e:3e:9c:35:ad:fc:8c:3c:dd:41:fc: cb:27:6e:54:61:35:80:9a:d5:83:0f:01:7d:c9:f7:d6:2e:16: 06:ed:75:aa:55:d6:dc:29:3d:ec:76:0f:92:4e:f3:bb:2e:c3: 2e:a8:d4:ef:b4:3e:6e:4a:a0:3c:db:ec:5a:3c:58:f8:c4:36: 20:ad:2c:de:03:c3:ee:2d:35:75:ed:25:20:46:ed:4a:fe:64: 5d:9f:53:9a:7e:0e:fe:64:bb:7e:a1:50:5a:ab:a2:7f:18:d1: 51:a4:57:c9:2c:08:b2:a8:63:86:63:c5:8f:2e:ba:ea:34:51: e5:2e:bc:03:ab:8c:e4:16:9b:38:71:ee:46:88:8b:4d:4d:58: 3b:d8:be:56:03:ab:fc:6c:69:9e:9b:fc:82:18:3f:25:b1:f4: 5b:2e:38:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/MAu1RlhWcPmmyEMJguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw OGUyZTIwHhcNMjYwMTI1MTkwMTAzWhcNMjYwMTI2MTkwMTAzWjAzMTEwLwYDVQQD EygyNGFlNjYwYTAyODM0MTNkNTY3N2I3N2MxYjRhMGZkNDg0YTc5NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl1NfaXuwDVBflEBSD8gjnqSfPgn pjW2QN5+fuuzo9qq3VqgnzumBsUOK+RgGElfCQM7fP/AOvRZli+6tpyTS1X1ectp Wc6pUyXilSi621M1s6dv9PmzNvXduARJFER9bRlytd2oRxmspv9r5IaAr3I3cP4k /nVFGfrQy4AB4qK1b3Q8xvmKtPWZOB7QwZuTbWjEW8yD0mWkZq1q1rnmTK6eoAiw xrxdvADd360veUHTsq0glJh9EVwz4NYzjNY5UKROyvaPMeNNXwdfVGec0Mbazi6C bsggV51+Sw+NoSs+BwSu9pItdB67ubvGKIDqQdsb3AXNmRORFWLPxxsmMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSuZgoCg0E9Vne3fBtKD9SEp5RbMB8GA1UdIwQY MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4 LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp8Ox0Y+ A6NZtEh+2Da4YaoLR1bcesSpmLOshn80wuXUODITYLF7AxOX/+07RAUl60d6tf90 347TJGwOrwtcCeCK38v22JZVdlr+LUfqlLQUNi+xvpo/gAFsf5bAmNA2Yz4+nDWt /Iw83UH8yyduVGE1gJrVgw8Bfcn31i4WBu11qlXW3Ck97HYPkk7zuy7DLqjU77Q+ bkqgPNvsWjxY+MQ2IK0s3gPD7i01de0lIEbtSv5kXZ9Tmn4O/mS7fqFQWquifxjR UaRXySwIsqhjhmPFjy666jRR5S68A6uM5BabOHHuRoiLTU1YO9i+VgOr/Gxpnpv8 ghg/JbH0Wy44qg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:36 2026 by rpki-client