This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json) Hash identifier: EWjdsAZEBL4vJKi8GttV1waw4BZ4xZcdCuvSC6yUHcE= Subject key identifier: 4C:E5:E8:4E:E5:D5:C3:4B:E0:14:9B:D2:A6:C1:AC:DE:82:DE:35:CE Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Certificate serial: 019BF4D10B666792A187B4B4B1FB8E75F0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft Manifest number: 0ADA Signing time: Sun 25 Jan 2026 11:01:39 +0000 Manifest this update: Sun 25 Jan 2026 11:01:39 +0000 Manifest next update: Mon 26 Jan 2026 11:01:39 +0000 Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=) 2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: Qjd6Ht1Ot/N9H2jIT4gv9UAAhnU74tkrzEKuBVB80xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:0b:66:67:92:a1:87:b4:b4:b1:fb:8e:75:f0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Validity Not Before: Jan 25 11:01:39 2026 GMT Not After : Jan 26 11:01:39 2026 GMT Subject: CN=4ce5e84ee5d5c34be0149bd2a6c1acde82de35ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:02:4d:4d:dd:4d:1c:46:35:b0:9f:02:3b: b1:04:ef:ad:76:37:ac:d5:99:d2:34:05:ec:80:87: 49:3a:54:5d:2d:32:83:4b:42:06:d5:9d:e9:bb:f6: cc:f9:fc:ab:c2:b9:82:e2:78:2d:2e:87:ae:46:d1: 37:fe:9d:69:21:1d:b4:fb:ac:6c:9a:ec:ac:61:d9: 48:e4:f3:f2:97:0e:9d:13:6c:c0:c5:a2:f2:0e:cb: 68:a7:55:62:a1:a2:a3:2c:0d:d5:01:f3:f1:87:ac: 5f:61:3f:8c:32:55:ae:3b:db:3e:26:61:ca:59:d0: c4:6d:d5:27:7a:d9:ee:a4:49:b0:67:91:1f:51:67: 59:8d:e1:b4:06:06:5a:4d:3a:ee:22:a9:57:61:9b: 58:4d:6a:ea:81:72:47:14:0e:96:2f:0a:35:01:6e: 62:70:b0:de:de:ae:03:42:b2:43:fb:49:41:1f:69: 54:be:23:98:a7:13:a1:0c:f7:9e:7b:0c:7b:9a:d4: 4e:c6:11:fa:23:a4:87:50:c7:00:31:6f:ae:94:4f: 40:cd:e0:9e:04:4c:de:32:e2:94:5d:2c:0c:bd:2e: 1a:7f:31:e3:ee:91:bc:57:cd:de:62:8a:de:fd:6c: 5c:ee:29:21:40:84:42:1a:ef:67:47:41:ba:7c:ba: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E5:E8:4E:E5:D5:C3:4B:E0:14:9B:D2:A6:C1:AC:DE:82:DE:35:CE X509v3 Authority Key Identifier: keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1e:e2:7f:9d:bb:0e:9f:7e:d3:40:b6:c8:bc:a0:93:82:b7: 90:1e:bd:ef:da:c3:69:d5:d5:64:4d:9d:99:bd:1d:ad:84:a8: 0f:07:6b:ff:78:cb:1f:b8:9a:e7:69:ad:e7:a1:1f:2f:48:f3: 72:89:58:71:40:d5:ba:64:ac:c5:7e:85:c7:bb:3e:b3:19:2f: 51:38:cf:bd:e1:24:50:12:87:f7:65:c7:4d:5e:15:2b:57:f4: ad:82:66:53:1f:d3:78:2f:9a:ee:34:fd:01:26:44:f2:6d:1c: db:6e:dc:ef:57:b8:fb:55:c7:bd:5e:49:24:cd:8a:0c:48:96: ef:9d:67:e3:c1:d4:9d:d3:9f:5d:c3:39:4d:14:96:17:88:25: 81:5a:1d:ab:b1:b3:4c:56:b4:86:74:2c:62:24:9f:b4:c2:8a: 52:61:7e:7c:7f:e0:6a:b9:a0:f1:0d:2a:f9:27:42:81:1e:80: f9:25:5e:9f:9b:da:af:80:4e:02:25:ba:52:08:fd:d0:86:08: 08:07:c8:e6:b0:a0:6e:6b:33:f8:47:85:10:14:4b:29:63:7c: 1e:d4:ed:93:73:ff:00:9a:b6:03:54:91:ab:fb:1c:5c:fa:e8: 46:4f:4d:ad:15:be:6d:77:68:4c:33:07:07:33:68:32:04:1c: 63:c1:9c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00QtmZ5Khh7S0sfuOdfCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx MWE3MDcwHhcNMjYwMTI1MTEwMTM5WhcNMjYwMTI2MTEwMTM5WjAzMTEwLwYDVQQD Eyg0Y2U1ZTg0ZWU1ZDVjMzRiZTAxNDliZDJhNmMxYWNkZTgyZGUzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk8CTU3dTRxGNbCfAjuxBO+tdjes 1ZnSNAXsgIdJOlRdLTKDS0IG1Z3pu/bM+fyrwrmC4ngtLoeuRtE3/p1pIR20+6xs muysYdlI5PPylw6dE2zAxaLyDstop1VioaKjLA3VAfPxh6xfYT+MMlWuO9s+JmHK WdDEbdUnetnupEmwZ5EfUWdZjeG0BgZaTTruIqlXYZtYTWrqgXJHFA6WLwo1AW5i cLDe3q4DQrJD+0lBH2lUviOYpxOhDPeeewx7mtROxhH6I6SHUMcAMW+ulE9AzeCe BEzeMuKUXSwMvS4afzHj7pG8V83eYore/Wxc7ikhQIRCGu9nR0G6fLqoswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzl6E7l1cNL4BSb0qbBrN6C3jXOMB8GA1UdIwQY MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR7if527 Dp9+00C2yLygk4K3kB6979rDadXVZE2dmb0drYSoDwdr/3jLH7ia52mt56EfL0jz colYcUDVumSsxX6Fx7s+sxkvUTjPveEkUBKH92XHTV4VK1f0rYJmUx/TeC+a7jT9 ASZE8m0c227c71e4+1XHvV5JJM2KDEiW751n48HUndOfXcM5TRSWF4glgVodq7Gz TFa0hnQsYiSftMKKUmF+fH/garmg8Q0q+SdCgR6A+SVen5var4BOAiW6Ugj90IYI CAfI5rCgbmsz+EeFEBRLKWN8HtTtk3P/AJq2A1SRq/scXProRk9NrRW+bXdoTDMH BzNoMgQcY8GcYg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:31 2026 by rpki-client