This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json) Hash identifier: fobstnqkH7qEeos8PJs71eYeyl1M9eOFTGqOkqL43uU= Subject key identifier: 3F:5A:8C:D6:F5:70:46:F8:CC:09:ED:58:23:72:8D:3C:F6:88:BB:17 Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56 Certificate serial: 019BF91BEC04CE31ED8E6A6D538F15A7C021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft Manifest number: 0512 Signing time: Mon 26 Jan 2026 07:01:55 +0000 Manifest this update: Mon 26 Jan 2026 07:01:55 +0000 Manifest next update: Tue 27 Jan 2026 07:01:55 +0000 Files and hashes: 1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: gRfPN33Atl837wZ+7AMZ6J57UzI0jkSuLiIXoTwpxSk=) 2: jhr9C2D_e3iWNoFjB--AL3VASgA.roa (hash: 4kSTkkCfvACOtyQ14yyIf62Fl3l0x3gfwP4bkVhYB0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:ec:04:ce:31:ed:8e:6a:6d:53:8f:15:a7:c0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56 Validity Not Before: Jan 26 07:01:55 2026 GMT Not After : Jan 27 07:01:55 2026 GMT Subject: CN=3f5a8cd6f57046f8cc09ed5823728d3cf688bb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:20:b0:9f:85:85:41:4f:ed:83:b5:89:b4: c4:9a:78:39:bb:9a:6e:65:79:c5:17:d3:e0:0f:be: d5:b5:52:2c:c7:44:ad:4b:52:09:3d:44:53:d4:e4: 0e:d2:75:d5:ad:76:49:58:b4:bd:6b:80:8d:ff:f3: d1:4b:85:fa:c1:e0:46:d0:d0:37:50:27:ef:f0:d2: 5f:42:e2:64:f5:d7:70:a1:e7:90:52:8b:3b:5d:4a: bf:c1:cf:59:3d:a2:ac:ef:46:2c:48:bd:35:f0:e8: df:d1:46:ab:0b:90:93:be:44:d2:c4:5d:1e:2f:6c: c9:af:2f:b4:2e:59:bc:0d:24:92:9d:13:a1:70:82: 43:f3:11:fb:b3:21:59:54:be:9b:4c:dc:bd:72:83: a8:12:c6:a2:82:e1:8b:3f:de:66:22:e6:4a:56:32: f5:4b:09:39:68:c3:23:b8:27:f5:2d:39:4d:49:3c: 2f:16:1c:08:22:35:3d:78:3e:3d:c0:28:1b:11:6f: 79:9c:76:6d:c6:dc:67:99:79:89:23:df:b6:97:c0: 8d:f8:dd:46:97:84:ce:ec:31:36:c0:65:cc:ca:37: 90:e8:f4:b7:5d:47:0c:5a:d9:b1:34:14:e1:ce:ec: 78:6a:fa:de:df:f0:0e:3e:2c:aa:39:df:53:90:ff: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:8C:D6:F5:70:46:F8:CC:09:ED:58:23:72:8D:3C:F6:88:BB:17 X509v3 Authority Key Identifier: keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:40:bf:f2:0e:7f:de:c3:c9:e5:ac:73:7b:b3:3d:33:57:a0: 68:64:b5:8e:7b:b7:80:28:0f:1e:df:0b:e1:57:2f:f3:92:d6: d8:71:27:94:1d:45:8e:40:dd:86:d8:ee:4d:76:70:5e:15:59: f4:75:53:cf:8f:d6:b2:d0:e4:f9:32:bb:33:a1:3c:3f:dc:12: 4d:37:c2:08:40:f3:18:c1:6c:e9:c4:ff:f6:1b:09:6c:47:fb: e6:47:5c:30:13:17:8b:02:ba:6b:85:f9:79:18:a4:f6:7f:4f: 6f:b0:82:94:28:0c:39:86:68:81:0f:d5:33:23:03:70:30:4b: 7d:f0:f1:f7:48:48:28:02:4c:ef:9d:47:6a:bb:f7:54:80:ed: 6b:d7:d8:1f:f5:7d:18:16:98:13:e4:c8:da:92:89:ba:60:10: 3f:24:b4:fa:fa:34:0d:20:e9:da:81:6a:9b:3d:f6:e6:d9:b7: 56:f7:ca:30:11:e8:5b:71:86:9b:61:8c:68:fd:d2:3a:60:92: dd:2f:c0:59:5e:26:44:15:eb:f1:44:b0:f9:8b:2c:e6:2e:10: 64:68:37:78:56:c5:47:15:e9:f5:ca:3f:82:d5:66:d9:96:89: c4:2a:4f:fd:a6:03:dd:29:20:c9:ce:4b:c9:7d:34:5b:7a:a0: f8:42:c0:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G+wEzjHtjmptU48Vp8AhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwN2JlOWQxMTg5NzcxYjczMzdlZmMxY2VkMmM4MjVkYzI0 NzJhNTYwHhcNMjYwMTI2MDcwMTU1WhcNMjYwMTI3MDcwMTU1WjAzMTEwLwYDVQQD EygzZjVhOGNkNmY1NzA0NmY4Y2MwOWVkNTgyMzcyOGQzY2Y2ODhiYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/4gsJ+FhUFP7YO1ibTEmng5u5pu ZXnFF9PgD77VtVIsx0StS1IJPURT1OQO0nXVrXZJWLS9a4CN//PRS4X6weBG0NA3 UCfv8NJfQuJk9ddwoeeQUos7XUq/wc9ZPaKs70YsSL018Ojf0UarC5CTvkTSxF0e L2zJry+0Llm8DSSSnROhcIJD8xH7syFZVL6bTNy9coOoEsaiguGLP95mIuZKVjL1 Swk5aMMjuCf1LTlNSTwvFhwIIjU9eD49wCgbEW95nHZtxtxnmXmJI9+2l8CN+N1G l4TO7DE2wGXMyjeQ6PS3XUcMWtmxNBThzux4avre3/AOPiyqOd9TkP8IUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9ajNb1cEb4zAntWCNyjTz2iLsXMB8GA1UdIwQY MBaAFPB76dEYl3G3M378HO0sgl3CRypWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEt M2ZiMDg3MGVhMjU5LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEtM2ZiMDg3MGVhMjU5 LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0C/8g5/ 3sPJ5axze7M9M1egaGS1jnu3gCgPHt8L4Vcv85LW2HEnlB1FjkDdhtjuTXZwXhVZ 9HVTz4/WstDk+TK7M6E8P9wSTTfCCEDzGMFs6cT/9hsJbEf75kdcMBMXiwK6a4X5 eRik9n9Pb7CClCgMOYZogQ/VMyMDcDBLffDx90hIKAJM751Harv3VIDta9fYH/V9 GBaYE+TI2pKJumAQPyS0+vo0DSDp2oFqmz325tm3VvfKMBHoW3GGm2GMaP3SOmCS 3S/AWV4mRBXr8USw+Yss5i4QZGg3eFbFRxXp9co/gtVm2ZaJxCpP/aYD3Skgyc5L yX00W3qg+ELAAA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:45 2026 by rpki-client