This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft File: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json) Hash identifier: LOHHBY2WmKtabGt9yd59/DgpqtaPm5QBLryCbIe2u/A= Subject key identifier: 2A:3B:50:20:D3:5D:FA:AE:1F:2A:48:9E:BC:40:C9:D9:3C:FB:0F:58 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019BF53EFDA479C559976A39110E7008AFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft Manifest number: 03D0 Signing time: Sun 25 Jan 2026 13:01:44 +0000 Manifest this update: Sun 25 Jan 2026 13:01:44 +0000 Manifest next update: Mon 26 Jan 2026 13:01:44 +0000 Files and hashes: 1: 8MT0-FvjucBAJ5_4zNawUwPIbio.roa (hash: j8ctkVwf35gx11i815V7djergO6Xkd5DqwORKQjPYn4=) 2: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: qQQC1Q56NhFMQhUbJsXW16vKF12Ia3xU5POeXXjWUZw=) 3: IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa (hash: jSZDS2EJyCz5Bf4EPrnkXGN+FEAvnmOTf2xL+Wmg3zY=) 4: WL0tgHjXPonIgpA9aEym0R7QJaA.roa (hash: 9pBr0W2ydRSI4qFK7wS98rz+8aVtBJo8NKM5L8oOaEk=) 5: ugj21aD88s1RRp9wztrYsSAwiUE.roa (hash: WrSZz+UwR+wMXec4SQ0VJG4/1M5x7d6VE4FHoit+kYI=) 6: wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa (hash: XEU3YLncsndIejQxm0E7Frwok/sigMI7wKaH9HopGIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:fd:a4:79:c5:59:97:6a:39:11:0e:70:08:af:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Jan 25 13:01:44 2026 GMT Not After : Jan 26 13:01:44 2026 GMT Subject: CN=2a3b5020d35dfaae1f2a489ebc40c9d93cfb0f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:b2:9a:14:76:4e:f4:37:68:68:1d:96:c2: 02:15:60:83:29:0e:e6:d3:cf:77:15:d0:09:12:61: 8a:85:c1:d6:1a:11:87:62:92:57:54:ed:60:e9:a3: a3:ef:04:30:4a:7a:c5:a8:c8:be:ae:a9:50:02:53: 51:23:e8:f5:c9:52:71:cb:25:eb:24:ae:ec:d5:ca: 15:65:b6:01:55:92:0a:51:8c:58:ab:06:2f:12:a0: 27:81:c0:92:3a:33:9b:b7:2d:7c:c2:b1:9d:e2:b0: a6:9b:02:4a:09:c4:15:d4:1a:4a:0a:08:d9:02:ed: 88:f2:ea:ef:e6:65:d0:23:46:cb:e8:ae:21:f2:92: 95:bb:7c:c4:a4:11:cd:52:83:94:0a:04:3d:19:aa: e8:c7:8a:af:66:7e:9b:10:40:1c:5f:2a:8e:c5:3b: 4a:4e:77:23:e0:86:89:52:a5:4c:f1:5a:3b:fc:59: 64:41:c7:de:ee:f5:66:13:dc:dc:45:31:ac:ba:7f: fd:0f:de:e0:3d:96:33:17:85:fa:4f:db:b1:87:6d: 83:b8:b1:3e:7d:c3:a8:4e:3c:ab:e7:e6:2d:00:78: 14:86:a4:85:f4:0d:6e:ba:42:c2:49:49:2c:49:70: 57:de:31:24:ba:4b:1d:97:f6:66:0a:34:8e:b1:f7: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:50:20:D3:5D:FA:AE:1F:2A:48:9E:BC:40:C9:D9:3C:FB:0F:58 X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:92:50:21:07:14:9a:5c:1e:54:88:e7:3f:30:8c:3d:ef:85: 0d:4b:53:68:76:c7:55:d4:1b:24:19:9b:67:df:f1:33:c9:19: ac:d2:89:2c:41:ce:6c:06:80:c8:da:ea:6b:31:4e:97:6a:bc: ff:e5:9e:4f:1e:d5:36:cf:6f:95:90:07:71:43:5f:68:ea:0d: b8:73:1b:ca:2b:d9:2d:9c:90:30:83:0f:e0:db:94:d4:d6:df: f0:e7:d6:f9:85:6f:76:14:98:33:a6:39:2f:fd:b6:29:8c:58: 26:ea:5a:a7:52:78:66:22:49:a9:1f:6a:56:2e:f8:1d:a9:2b: 24:88:78:83:6c:a1:ed:c8:a7:07:bd:f7:0c:50:25:28:35:83: 48:9c:eb:e4:39:f2:4d:b7:de:06:e8:4f:9b:a6:c8:66:5f:04: 33:22:a2:7a:f7:a8:29:31:03:24:bf:39:f3:92:5d:bb:a6:33: 4b:91:a1:52:97:56:21:12:0b:d4:bb:5d:42:9d:64:9c:1b:89: bc:71:bf:5d:ec:ec:e8:6f:87:4d:24:40:08:df:96:53:27:5b: 1e:80:d2:17:88:4d:9e:21:45:54:79:c0:d9:8b:18:be:e1:e8: b6:5c:9b:73:07:5a:2a:7a:42:06:b3:40:a1:c2:25:10:e6:66: ae:ef:6e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pv2kecVZl2o5EQ5wCK/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjYwMTI1MTMwMTQ0WhcNMjYwMTI2MTMwMTQ0WjAzMTEwLwYDVQQD EygyYTNiNTAyMGQzNWRmYWFlMWYyYTQ4OWViYzQwYzlkOTNjZmIwZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5GymhR2TvQ3aGgdlsICFWCDKQ7m 0893FdAJEmGKhcHWGhGHYpJXVO1g6aOj7wQwSnrFqMi+rqlQAlNRI+j1yVJxyyXr JK7s1coVZbYBVZIKUYxYqwYvEqAngcCSOjObty18wrGd4rCmmwJKCcQV1BpKCgjZ Au2I8urv5mXQI0bL6K4h8pKVu3zEpBHNUoOUCgQ9Garox4qvZn6bEEAcXyqOxTtK Tncj4IaJUqVM8Vo7/FlkQcfe7vVmE9zcRTGsun/9D97gPZYzF4X6T9uxh22DuLE+ fcOoTjyr5+YtAHgUhqSF9A1uukLCSUksSXBX3jEkuksdl/ZmCjSOsfdV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo7UCDTXfquHypInrxAydk8+w9YMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJJQIQcU mlweVIjnPzCMPe+FDUtTaHbHVdQbJBmbZ9/xM8kZrNKJLEHObAaAyNrqazFOl2q8 /+WeTx7VNs9vlZAHcUNfaOoNuHMbyivZLZyQMIMP4NuU1Nbf8OfW+YVvdhSYM6Y5 L/22KYxYJupap1J4ZiJJqR9qVi74HakrJIh4g2yh7cinB733DFAlKDWDSJzr5Dny TbfeBuhPm6bIZl8EMyKieveoKTEDJL8585Jdu6YzS5GhUpdWIRIL1LtdQp1knBuJ vHG/Xezs6G+HTSRACN+WUydbHoDSF4hNniFFVHnA2YsYvuHotlybcwdaKnpCBrNA ocIlEOZmru9u5w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:54 2026 by rpki-client