This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json) Hash identifier: ryD3ENht1BA4OnVJVtZTxVFL/SNkDRE6wEF+g2vbSL8= Subject key identifier: FE:C6:4C:83:55:88:B0:7B:FA:6F:66:AE:A6:5E:71:E9:5A:50:80:B4 Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Certificate serial: 019BF5079E43964224215F51E1C1303F21C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft Manifest number: 11D8 Signing time: Sun 25 Jan 2026 12:01:15 +0000 Manifest this update: Sun 25 Jan 2026 12:01:15 +0000 Manifest next update: Mon 26 Jan 2026 12:01:15 +0000 Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: YCFdNDORJ+zpjWy6+yWwDpdwho37uQIkMwtU3B47PMU=) 2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:9e:43:96:42:24:21:5f:51:e1:c1:30:3f:21:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Validity Not Before: Jan 25 12:01:15 2026 GMT Not After : Jan 26 12:01:15 2026 GMT Subject: CN=fec64c835588b07bfa6f66aea65e71e95a5080b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:83:6e:0d:76:2a:5f:26:55:94:2a:c1:ac: 7b:7b:ea:28:42:fc:06:af:64:c0:13:ca:9e:b0:4e: 49:fd:98:d3:c7:ed:05:f0:e1:d6:18:82:86:82:9e: bb:2d:1f:d7:81:95:d7:08:fc:2b:2a:c4:21:31:88: 43:a2:ef:2f:17:3c:85:ba:05:f4:50:bf:be:3f:e0: 28:c0:fa:2c:03:2d:f5:ee:e8:ce:34:07:6a:95:87: 84:b0:14:b4:61:41:3b:d2:ea:27:40:86:a2:c1:13: 43:83:5d:0f:c0:94:c8:33:27:ec:ec:2e:3b:9d:9d: e3:b4:61:b1:cd:7c:20:8f:71:78:9e:a6:de:71:61: c6:b6:d4:ee:cc:7b:2c:19:77:45:9a:1e:57:22:5c: a2:03:95:bb:ff:61:13:09:42:bf:fc:91:00:b5:f1: ff:45:4b:c3:b5:c1:49:a4:a5:0e:61:33:41:ae:0f: b7:61:9d:e5:c7:96:16:0c:c2:7f:ce:09:25:a0:ae: a3:dd:13:20:59:83:74:3c:b7:94:b3:dd:29:53:6e: ed:2c:c8:e2:25:9f:44:f9:0c:a5:39:a8:10:21:f7: 8d:01:7a:cd:8d:3d:9a:32:ef:42:31:0b:9c:e1:48: d7:88:aa:47:34:e3:47:5a:2e:f4:17:30:32:fa:6e: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:4C:83:55:88:B0:7B:FA:6F:66:AE:A6:5E:71:E9:5A:50:80:B4 X509v3 Authority Key Identifier: keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:88:bd:bd:a2:98:3c:17:0f:cb:b1:3c:bf:77:c7:53:9f:84: d5:f2:5e:4e:ad:33:24:ea:9f:1c:b9:7c:e2:b8:e2:b5:4b:b6: e6:a6:42:90:87:91:aa:3a:ac:16:c8:0f:ca:c9:1d:90:42:29: 18:7d:44:80:10:b1:ee:e7:9f:66:cf:7f:22:b1:60:d8:f7:b7: 49:2a:e4:86:c7:cd:00:df:26:97:36:58:1d:30:88:91:eb:83: d4:68:61:7a:3c:5a:e7:12:2e:43:3c:8d:42:a2:05:84:59:71: 9f:4f:94:f4:03:ed:d4:81:13:9d:2f:a9:ea:b6:10:1d:e8:d7: 16:f6:1e:3c:ad:c1:35:97:b5:3c:1a:47:92:48:3f:9a:01:67: 6f:a7:b0:39:70:39:3c:c9:31:6f:34:bd:79:4a:d1:ee:89:4a: ac:ac:e9:92:8f:c2:e5:de:9d:ec:54:14:b7:f0:25:f5:41:da: a0:46:11:fc:8f:37:dd:0c:5f:da:7a:86:90:03:9e:02:01:f3: b8:59:33:6d:32:fc:5d:11:e4:a6:3e:ec:57:d2:2a:e0:32:c3: 7e:00:ca:c0:cb:88:42:c8:d8:0a:d8:08:07:27:c7:1a:68:65: 1a:18:7b:1a:3c:82:2d:a5:47:b7:6d:69:3e:43:3d:f7:7d:de: 96:3a:47:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B55DlkIkIV9R4cEwPyHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi NzJiZTUwHhcNMjYwMTI1MTIwMTE1WhcNMjYwMTI2MTIwMTE1WjAzMTEwLwYDVQQD EyhmZWM2NGM4MzU1ODhiMDdiZmE2ZjY2YWVhNjVlNzFlOTVhNTA4MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6Dbg12Kl8mVZQqwax7e+ooQvwG r2TAE8qesE5J/ZjTx+0F8OHWGIKGgp67LR/XgZXXCPwrKsQhMYhDou8vFzyFugX0 UL++P+AowPosAy317ujONAdqlYeEsBS0YUE70uonQIaiwRNDg10PwJTIMyfs7C47 nZ3jtGGxzXwgj3F4nqbecWHGttTuzHssGXdFmh5XIlyiA5W7/2ETCUK//JEAtfH/ RUvDtcFJpKUOYTNBrg+3YZ3lx5YWDMJ/zgkloK6j3RMgWYN0PLeUs90pU27tLMji JZ9E+QylOagQIfeNAXrNjT2aMu9CMQuc4UjXiKpHNONHWi70FzAy+m50KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7GTINViLB7+m9mrqZecelaUIC0MB8GA1UdIwQY MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYi9vaKY PBcPy7E8v3fHU5+E1fJeTq0zJOqfHLl84rjitUu25qZCkIeRqjqsFsgPyskdkEIp GH1EgBCx7uefZs9/IrFg2Pe3SSrkhsfNAN8mlzZYHTCIkeuD1Ghhejxa5xIuQzyN QqIFhFlxn0+U9APt1IETnS+p6rYQHejXFvYePK3BNZe1PBpHkkg/mgFnb6ewOXA5 PMkxbzS9eUrR7olKrKzpko/C5d6d7FQUt/Al9UHaoEYR/I833Qxf2nqGkAOeAgHz uFkzbTL8XRHkpj7sV9Iq4DLDfgDKwMuIQsjYCtgIByfHGmhlGhh7GjyCLaVHt21p PkM9933eljpHYw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:14 2026 by rpki-client