This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json) Hash identifier: +73t+yCNpLMqDrbd1LtQp1ykWmca67jevqL8uTo4HM4= Subject key identifier: 09:B9:E5:47:DB:0E:03:97:21:BD:38:AB:59:64:74:CE:73:21:37:49 Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019BF6508E84090BB7D1C1A7CB43EF053F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft Manifest number: 1272 Signing time: Sun 25 Jan 2026 18:00:33 +0000 Manifest this update: Sun 25 Jan 2026 18:00:33 +0000 Manifest next update: Mon 26 Jan 2026 18:00:33 +0000 Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=) 2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=) 3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: YpRh4+lZ4m+RGZon08WafwCCvemVUoRNutcC/2nEwas=) 4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=) 5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=) 6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=) 7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=) 8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:8e:84:09:0b:b7:d1:c1:a7:cb:43:ef:05:3f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Jan 25 18:00:33 2026 GMT Not After : Jan 26 18:00:33 2026 GMT Subject: CN=09b9e547db0e039721bd38ab596474ce73213749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:c4:65:1f:c7:93:0e:55:d7:c2:cf:df:6a: c6:2d:bc:d8:fc:26:82:25:86:f8:c6:ea:15:c2:a4: de:39:91:48:fc:8c:c3:7f:80:df:56:6b:9a:35:df: b6:30:98:1d:84:31:16:84:f3:08:da:cf:9a:c8:80: 1c:a6:ec:9c:dd:86:b6:d7:1f:89:71:82:7e:bc:e6: bd:57:b5:6e:72:29:67:06:9c:8a:ca:b0:0c:ff:76: b0:bb:64:8b:ec:a8:e5:55:df:e6:07:92:07:57:ee: d1:ea:bf:d2:9e:6b:3d:26:0f:9c:a3:ef:1b:35:bc: 3f:d1:bc:49:a3:57:53:87:14:f5:5f:fa:b2:9f:32: e0:3f:77:e3:27:e1:70:77:1b:4e:17:60:e3:a1:20: 7f:6b:47:14:ef:90:00:f2:5b:a1:75:e1:70:c4:40: 4a:62:fa:00:a9:81:21:bb:af:1f:74:b5:f4:4d:dd: 0a:a5:a6:3d:85:81:c0:ee:b4:90:8a:c6:0e:0b:fb: 84:f9:ef:2a:41:d0:55:ed:7e:a4:88:48:c3:80:da: 23:86:ed:ab:a9:de:23:27:d6:4c:c3:8a:25:e4:9f: 23:1f:73:53:de:be:f4:d0:71:0c:52:eb:85:96:05: 7d:33:46:11:8c:4b:13:a9:f2:f2:ee:81:1f:41:e9: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B9:E5:47:DB:0E:03:97:21:BD:38:AB:59:64:74:CE:73:21:37:49 X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:90:e9:f0:65:86:6f:1e:ca:db:ba:94:ab:16:bd:6d:1d:0d: cb:83:35:4d:ac:59:52:d2:93:7d:f2:8e:d7:a5:96:8e:10:0c: 98:d6:23:87:dd:04:77:ed:3e:e1:a5:98:3d:1e:75:5e:aa:41: d2:76:6d:93:01:c0:3e:b1:e3:a3:b3:71:9e:e5:bc:9f:96:0f: f1:41:8d:c5:90:4b:ac:f1:56:0a:e6:d1:a4:12:e3:00:b0:1d: 0a:41:9b:03:3e:bd:09:4b:75:3c:a6:be:d8:da:8b:80:aa:e0: 68:b3:ee:d4:f3:af:ba:7c:d0:c9:94:5c:3f:93:65:43:0e:dd: 64:8c:c1:cd:7f:85:94:95:bd:b6:74:df:57:5c:0d:fe:3d:f3: aa:7d:ab:88:c9:70:40:27:3a:f4:ed:01:ab:ee:77:ba:eb:b1: e1:5d:46:a2:af:53:59:c4:56:d7:1e:de:97:56:42:f8:6b:29: 08:39:be:c3:b2:a6:02:1a:36:c4:a8:ba:b1:fd:83:ae:47:03: a4:c8:0e:c7:d7:a8:ff:78:87:46:d9:65:42:29:08:70:fc:da: a6:1b:25:e1:98:f8:2c:17:0d:18:95:88:cf:b5:81:34:18:cb: 6e:e0:60:4a:1b:3b:8f:5f:aa:7b:9e:e8:77:1c:26:e7:c4:6e: 53:3d:34:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UI6ECQu30cGny0PvBT8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjYwMTI1MTgwMDMzWhcNMjYwMTI2MTgwMDMzWjAzMTEwLwYDVQQD EygwOWI5ZTU0N2RiMGUwMzk3MjFiZDM4YWI1OTY0NzRjZTczMjEzNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvPEZR/Hkw5V18LP32rGLbzY/CaC JYb4xuoVwqTeOZFI/IzDf4DfVmuaNd+2MJgdhDEWhPMI2s+ayIAcpuyc3Ya21x+J cYJ+vOa9V7VucilnBpyKyrAM/3awu2SL7KjlVd/mB5IHV+7R6r/Snms9Jg+co+8b Nbw/0bxJo1dThxT1X/qynzLgP3fjJ+FwdxtOF2DjoSB/a0cU75AA8luhdeFwxEBK YvoAqYEhu68fdLX0Td0KpaY9hYHA7rSQisYOC/uE+e8qQdBV7X6kiEjDgNojhu2r qd4jJ9ZMw4ol5J8jH3NT3r700HEMUuuFlgV9M0YRjEsTqfLy7oEfQen0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm55UfbDgOXIb04q1lkdM5zITdJMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZDp8GWG bx7K27qUqxa9bR0Ny4M1TaxZUtKTffKO16WWjhAMmNYjh90Ed+0+4aWYPR51XqpB 0nZtkwHAPrHjo7NxnuW8n5YP8UGNxZBLrPFWCubRpBLjALAdCkGbAz69CUt1PKa+ 2NqLgKrgaLPu1POvunzQyZRcP5NlQw7dZIzBzX+FlJW9tnTfV1wN/j3zqn2riMlw QCc69O0Bq+53uuux4V1Goq9TWcRW1x7el1ZC+GspCDm+w7KmAho2xKi6sf2DrkcD pMgOx9eo/3iHRtllQikIcPzaphsl4Zj4LBcNGJWIz7WBNBjLbuBgShs7j1+qe57o dxwm58RuUz00vg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:50 2026 by rpki-client