This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json) Hash identifier: KGPV9+8yWqWMIRuCGVtd8IEMnMjFoePf07WLys5KsnE= Subject key identifier: 0B:DF:0B:E4:E9:6C:B1:FF:90:49:05:C8:FD:20:65:7B:54:A3:6E:FD Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019BF34FFB8F332A85CB272023C56773B145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft Manifest number: 1149 Signing time: Sun 25 Jan 2026 04:01:03 +0000 Manifest this update: Sun 25 Jan 2026 04:01:03 +0000 Manifest next update: Mon 26 Jan 2026 04:01:03 +0000 Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=) 2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: vrQfYEsv57COBGae09cI6IDyrfnn+e5Qax1jELV6Osc=) 3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:fb:8f:33:2a:85:cb:27:20:23:c5:67:73:b1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Jan 25 04:01:03 2026 GMT Not After : Jan 26 04:01:03 2026 GMT Subject: CN=0bdf0be4e96cb1ff904905c8fd20657b54a36efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:fb:af:30:72:05:4e:ed:4e:73:ac:bc:ba: 3e:04:97:2a:3b:45:0b:5b:3a:2b:d9:cb:27:b8:d5: b1:65:5f:14:5e:79:94:0d:d1:ac:e9:e5:32:46:d6: fb:09:fb:5e:00:fa:a5:51:9e:80:10:ff:f7:d0:f9: b5:08:0e:1f:0d:34:80:04:43:bf:1e:e2:03:ac:93: 6d:69:13:dd:79:89:ce:f5:9d:40:9f:67:2b:d3:c3: c5:db:14:8e:57:dd:aa:f6:20:71:38:7f:76:d4:d2: 7b:5b:68:d1:d4:2c:cd:7e:d5:8e:29:d1:fa:b8:f3: 0f:54:77:ef:75:e4:91:40:9a:4a:65:ed:45:e5:05: 8c:e7:9c:54:40:3d:ab:be:bd:5b:18:ad:37:da:24: e6:da:ef:b7:c5:ee:04:ee:bc:f6:1d:17:e2:a7:f0: f4:4e:19:3f:f5:0c:e8:0e:7d:db:11:8c:47:41:73: f5:58:60:83:65:dd:f9:9d:c1:f5:6d:c5:42:5e:81: 84:64:73:ea:35:af:90:c9:af:0e:a0:21:86:ee:01: 3c:98:26:fe:25:ac:b5:ab:44:dd:41:6c:4b:92:04: 3a:d7:1b:02:f6:51:4a:54:48:d4:85:64:d7:1f:b2: bc:2d:83:e9:80:07:49:cf:df:1b:60:30:48:23:24: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DF:0B:E4:E9:6C:B1:FF:90:49:05:C8:FD:20:65:7B:54:A3:6E:FD X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:80:e2:d7:d9:ba:52:94:ba:a8:db:2f:ec:43:62:ac:f7: 70:3a:e0:05:15:a2:6d:7e:65:e7:2a:93:e0:ff:f3:29:1a:46: 3d:89:82:5b:d5:dd:15:6e:3c:26:45:cd:78:de:96:b0:64:cd: fe:ea:71:21:19:91:6a:71:60:e6:89:fe:1d:fc:8a:cb:2d:54: 90:96:b6:bc:cc:73:91:73:9e:7f:58:87:7e:6b:e7:26:98:89: d1:b0:b5:a3:1b:72:a7:49:4e:5f:2c:95:f0:fc:56:06:69:4f: 25:72:c6:a4:d7:b5:c1:53:af:d2:76:74:84:f9:fd:c7:96:21: fb:43:0a:ab:9f:7f:f6:f6:77:9d:ed:27:c6:5d:8e:67:0f:60: 95:cf:48:db:a0:70:9f:93:4a:57:38:be:74:ee:83:c2:c4:d5: 3c:aa:d4:42:58:95:36:9c:c8:9d:40:2d:0c:88:f5:60:2b:19: d8:4c:75:fa:9f:51:8b:95:14:ce:de:8d:64:00:80:32:42:52: ea:57:1c:6f:0e:d1:8d:66:26:4a:4b:63:ca:95:d3:72:db:3d: 77:bd:77:97:bb:4b:05:a7:33:ad:fc:01:97:4a:b6:5e:83:56: f9:01:6d:0c:51:d9:8b:7e:50:00:3d:eb:30:78:35:0a:75:f7: 90:a5:93:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/uPMyqFyycgI8Vnc7FFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjYwMTI1MDQwMTAzWhcNMjYwMTI2MDQwMTAzWjAzMTEwLwYDVQQD EygwYmRmMGJlNGU5NmNiMWZmOTA0OTA1YzhmZDIwNjU3YjU0YTM2ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAH7rzByBU7tTnOsvLo+BJcqO0UL Wzor2csnuNWxZV8UXnmUDdGs6eUyRtb7CfteAPqlUZ6AEP/30Pm1CA4fDTSABEO/ HuIDrJNtaRPdeYnO9Z1An2cr08PF2xSOV92q9iBxOH921NJ7W2jR1CzNftWOKdH6 uPMPVHfvdeSRQJpKZe1F5QWM55xUQD2rvr1bGK032iTm2u+3xe4E7rz2HRfip/D0 Thk/9QzoDn3bEYxHQXP1WGCDZd35ncH1bcVCXoGEZHPqNa+Qya8OoCGG7gE8mCb+ Jay1q0TdQWxLkgQ61xsC9lFKVEjUhWTXH7K8LYPpgAdJz98bYDBIIyRLAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvfC+TpbLH/kEkFyP0gZXtUo279MB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCaA4tfZ ulKUuqjbL+xDYqz3cDrgBRWibX5l5yqT4P/zKRpGPYmCW9XdFW48JkXNeN6WsGTN /upxIRmRanFg5on+HfyKyy1UkJa2vMxzkXOef1iHfmvnJpiJ0bC1oxtyp0lOXyyV 8PxWBmlPJXLGpNe1wVOv0nZ0hPn9x5Yh+0MKq59/9vZ3ne0nxl2OZw9glc9I26Bw n5NKVzi+dO6DwsTVPKrUQliVNpzInUAtDIj1YCsZ2Ex1+p9Ri5UUzt6NZACAMkJS 6lccbw7RjWYmSktjypXTcts9d713l7tLBaczrfwBl0q2XoNW+QFtDFHZi35QAD3r MHg1CnX3kKWTeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:23 2026 by rpki-client