This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json) Hash identifier: BCSLWZ6G0jgfjsCkss3/9Rjj+BtX67Z0krQ3nmXcfXY= Subject key identifier: 6F:A0:F7:EA:00:CE:3B:15:E9:00:67:83:55:55:77:33:45:65:31:56 Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b Certificate serial: 019BF506F3A02F18FCBCCDF7879FFB394781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft Manifest number: 063F Signing time: Sun 25 Jan 2026 12:00:32 +0000 Manifest this update: Sun 25 Jan 2026 12:00:32 +0000 Manifest next update: Mon 26 Jan 2026 12:00:32 +0000 Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: tclylWnceF0C8gVHTFmXyoCP1DaNFPex1kJHS5jPVmE=) 2: C9oMe1YGJS29C9D0RZNPa4l9ZGs.asa (hash: m/CMHyBpsoSrORDL0dlkFqewhiO241S8p6mdES9DKBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:f3:a0:2f:18:fc:bc:cd:f7:87:9f:fb:39:47:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b Validity Not Before: Jan 25 12:00:32 2026 GMT Not After : Jan 26 12:00:32 2026 GMT Subject: CN=6fa0f7ea00ce3b15e90067835555773345653156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:85:e2:42:eb:ef:fa:c7:e7:52:79:cd:e1: b6:32:0b:db:5b:a4:b3:96:ae:84:e3:e4:d2:e1:da: b4:29:e2:b9:67:8f:68:69:d0:77:5e:dc:98:15:49: 37:a7:c5:ac:f1:d7:60:76:01:14:17:4f:42:28:85: 66:83:20:f9:f2:db:4d:65:11:d9:ef:12:39:24:09: a6:9a:5d:7e:7d:d3:69:a5:fa:b9:40:1c:e5:ca:2e: d6:2a:04:ae:f4:98:13:af:1f:48:60:df:93:1e:6d: ce:50:c1:6f:bc:4b:a5:38:47:8f:c9:76:4b:af:1f: d8:93:71:d7:5a:c4:41:f1:e9:dd:2d:53:61:61:d0: dc:c5:89:57:6c:55:9c:27:a1:5a:10:a3:fc:ea:c8: a5:dc:f9:cf:2d:25:5c:92:fd:42:c8:25:83:4e:5c: 7d:5e:f5:5e:ad:b9:81:56:4c:d8:16:68:a2:17:43: 58:26:31:30:2e:7e:ca:e6:10:67:63:29:39:e7:ef: 6a:d0:94:f8:47:cb:a6:ac:f8:25:04:6b:90:5c:78: 8c:6b:14:a1:dc:4a:2c:68:4c:fe:17:ab:cc:ad:10: 6c:4b:d1:60:0c:cb:25:3d:34:7d:16:b0:8f:49:0c: 77:04:0a:e5:95:4b:08:f7:ae:9a:85:36:16:4c:ea: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A0:F7:EA:00:CE:3B:15:E9:00:67:83:55:55:77:33:45:65:31:56 X509v3 Authority Key Identifier: keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:34:da:03:33:7d:7a:2f:2e:12:55:b9:81:52:44:97:8c:48: 14:7a:b7:9f:97:25:88:d6:b1:13:26:08:5e:9f:03:bf:0d:ea: 12:07:95:fe:d7:6b:69:b5:05:98:47:cc:2a:91:a3:ce:be:58: e3:c7:c0:f4:20:54:fc:2a:6c:e8:ec:4d:1b:03:f0:c9:2e:07: 91:43:c3:f7:57:dc:94:f5:db:07:21:f2:86:4c:98:21:76:b1: 99:2b:a7:e8:63:d9:55:7c:63:dc:cd:13:2a:51:74:40:fb:6b: 5b:37:8f:44:96:b1:22:15:2a:51:3b:9e:eb:2d:86:a8:67:3b: 73:ab:b7:59:b8:ac:1c:09:61:a3:a8:c5:6d:e4:63:19:75:e2: a8:ed:2e:61:92:5e:c9:c5:21:0e:15:52:c5:0f:b7:24:0b:d3: b5:56:68:48:e8:80:ac:72:2f:0d:cf:2c:ee:36:06:31:39:5a: 54:24:95:59:b2:84:d8:6c:4e:24:66:70:ce:a8:4d:c2:7b:9d: 19:9f:a2:92:17:32:63:ec:09:24:b6:23:67:cb:ab:ca:ba:29: ca:ac:90:93:b3:e3:fe:9b:ad:5b:0b:b1:19:88:ec:0d:69:7e: 3d:d6:d0:68:06:9e:35:57:75:e9:3c:f8:a9:70:e4:57:5a:da: 06:ea:96:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvOgLxj8vM33h5/7OUeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl ZmQ2MWIwHhcNMjYwMTI1MTIwMDMyWhcNMjYwMTI2MTIwMDMyWjAzMTEwLwYDVQQD Eyg2ZmEwZjdlYTAwY2UzYjE1ZTkwMDY3ODM1NTU1NzczMzQ1NjUzMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMyF4kLr7/rH51J5zeG2MgvbW6Sz lq6E4+TS4dq0KeK5Z49oadB3XtyYFUk3p8Ws8ddgdgEUF09CKIVmgyD58ttNZRHZ 7xI5JAmmml1+fdNppfq5QBzlyi7WKgSu9JgTrx9IYN+THm3OUMFvvEulOEePyXZL rx/Yk3HXWsRB8endLVNhYdDcxYlXbFWcJ6FaEKP86sil3PnPLSVckv1CyCWDTlx9 XvVerbmBVkzYFmiiF0NYJjEwLn7K5hBnYyk55+9q0JT4R8umrPglBGuQXHiMaxSh 3EosaEz+F6vMrRBsS9FgDMslPTR9FrCPSQx3BArllUsI966ahTYWTOqR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+g9+oAzjsV6QBng1VVdzNFZTFWMB8GA1UdIwQY MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzTaAzN9 ei8uElW5gVJEl4xIFHq3n5cliNaxEyYIXp8Dvw3qEgeV/tdrabUFmEfMKpGjzr5Y 48fA9CBU/Cps6OxNGwPwyS4HkUPD91fclPXbByHyhkyYIXaxmSun6GPZVXxj3M0T KlF0QPtrWzePRJaxIhUqUTue6y2GqGc7c6u3WbisHAlho6jFbeRjGXXiqO0uYZJe ycUhDhVSxQ+3JAvTtVZoSOiArHIvDc8s7jYGMTlaVCSVWbKE2GxOJGZwzqhNwnud GZ+ikhcyY+wJJLYjZ8uryropyqyQk7Pj/putWwuxGYjsDWl+PdbQaAaeNVd16Tz4 qXDkV1raBuqWtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:21 2026 by rpki-client