This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json) Hash identifier: ZF4qEA2Tt8tY+BD+pLHrcFEb4lmDw8kgeZfRmoYTMas= Subject key identifier: 16:1B:AF:0E:47:6B:BB:CA:26:54:8B:D9:91:B5:11:75:A3:1F:A6:05 Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc Certificate serial: 019BF350BC3DFA046AEF043B013B1270A8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 04:01:52 +0000 Manifest this update: Sun 25 Jan 2026 04:01:52 +0000 Manifest next update: Mon 26 Jan 2026 04:01:52 +0000 Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: dNzokgeqQ9EAicftSu3FRYk5zWF6VPx0IqGXzBfdj5Y=) 2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=) 3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:bc:3d:fa:04:6a:ef:04:3b:01:3b:12:70:a8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc Validity Not Before: Jan 25 04:01:52 2026 GMT Not After : Jan 26 04:01:52 2026 GMT Subject: CN=161baf0e476bbbca26548bd991b51175a31fa605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:88:b9:8e:2c:bf:4e:30:56:a1:07:46:1d: 41:53:bd:d2:67:6a:6e:fa:f2:73:a0:fa:e8:e9:1e: 35:16:5a:ad:df:9f:5f:75:00:74:4a:08:e1:d6:a9: e5:9f:64:7b:dd:cb:41:cb:3f:b8:07:1c:1c:df:d7: ba:97:4d:5b:47:3f:92:0f:60:e1:d4:01:93:69:73: b9:fc:f4:23:54:7c:c9:97:02:79:d6:35:86:a5:e8: 3c:b7:76:5c:09:7d:df:49:ba:42:16:e8:ab:a3:66: eb:d9:c1:96:ee:d0:c7:1e:97:a5:fc:a3:49:f8:f6: 9c:89:8c:5a:9d:9d:39:99:55:73:5b:aa:fd:01:cf: a5:29:8c:5f:f9:65:c9:52:1a:0a:8d:f1:ef:92:23: 50:e4:fd:1a:30:75:7d:a1:ed:a0:42:9b:3b:15:84: f8:76:68:a7:ff:11:35:39:70:25:3f:cb:1b:11:11: f9:b8:62:7e:d6:8d:a1:9e:28:9d:f1:a4:e2:c8:c3: 3a:8c:86:f2:e7:36:f1:8e:c6:b8:e0:5c:35:d9:3a: 07:de:70:5c:9b:c4:bf:e3:fe:57:8e:00:55:0e:a7: 3c:22:dc:5e:47:ae:ee:c9:54:f3:65:f3:21:bb:0b: 7b:3e:3f:e5:76:a6:ec:94:1a:39:86:11:bd:f1:57: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1B:AF:0E:47:6B:BB:CA:26:54:8B:D9:91:B5:11:75:A3:1F:A6:05 X509v3 Authority Key Identifier: keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:53:83:29:50:08:de:6c:be:9e:65:ef:49:3a:51:40:4e: c1:21:2c:a8:a7:65:4e:a8:d3:31:f6:01:fd:86:1d:fc:57:0a: 01:76:6a:8c:71:7b:6a:f5:73:3a:e4:82:91:af:30:ed:c3:50: fe:f1:a0:fb:a0:46:0c:a1:e5:ce:6d:e1:93:8a:43:74:d8:0b: 0f:4a:4f:e5:dd:a8:60:0d:3b:48:b0:51:fa:17:97:c4:7d:bb: 7c:c9:3e:b3:0e:f9:fd:b2:ad:28:87:0e:ef:6e:0e:97:4f:e3: be:0d:7b:b1:33:37:26:b3:43:3b:14:57:17:2f:8f:dd:d3:31: cf:fe:e4:1e:fc:0e:b9:17:37:7d:7f:e3:c7:e1:3b:f1:40:f4: a7:dd:65:78:b7:9e:53:74:ea:82:db:63:62:6b:4f:ab:dd:43: 16:c6:2c:e3:3a:5e:73:d0:3d:47:b1:1e:3f:26:6f:09:b9:69: ca:32:56:2d:24:e5:88:25:f1:0d:9e:18:34:48:0a:a2:83:7d: 97:2c:ab:20:32:cb:75:8b:86:33:1a:88:d6:bc:b7:a5:68:0a: fc:bd:f8:34:10:dd:57:b8:cb:29:13:19:89:aa:ab:02:da:53: 93:9b:80:67:db:cf:60:db:a4:f0:ec:4b:ed:93:48:2b:4e:af: 49:61:c1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzULw9+gRq7wQ7ATsScKj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzU5NTU5NDBiYmQ3NTU1ZGYwYTJlNDE3Mzc5ZmM0NDdl ZjBjZGMwHhcNMjYwMTI1MDQwMTUyWhcNMjYwMTI2MDQwMTUyWjAzMTEwLwYDVQQD EygxNjFiYWYwZTQ3NmJiYmNhMjY1NDhiZDk5MWI1MTE3NWEzMWZhNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoluIuY4sv04wVqEHRh1BU73SZ2pu +vJzoPro6R41Flqt359fdQB0Sgjh1qnln2R73ctByz+4Bxwc39e6l01bRz+SD2Dh 1AGTaXO5/PQjVHzJlwJ51jWGpeg8t3ZcCX3fSbpCFuiro2br2cGW7tDHHpel/KNJ +PaciYxanZ05mVVzW6r9Ac+lKYxf+WXJUhoKjfHvkiNQ5P0aMHV9oe2gQps7FYT4 dmin/xE1OXAlP8sbERH5uGJ+1o2hniid8aTiyMM6jIby5zbxjsa44Fw12ToH3nBc m8S/4/5XjgBVDqc8ItxeR67uyVTzZfMhuwt7Pj/ldqbslBo5hhG98Vf6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYbrw5Ha7vKJlSL2ZG1EXWjH6YFMB8GA1UdIwQY MBaAFB/FlVlAu9dVXfCi5Bc3n8RH7wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYt MmZkYjdhYjY1ZDUyLzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYtMmZkYjdhYjY1ZDUy LzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJRTgylQ CN5svp5l70k6UUBOwSEsqKdlTqjTMfYB/YYd/FcKAXZqjHF7avVzOuSCka8w7cNQ /vGg+6BGDKHlzm3hk4pDdNgLD0pP5d2oYA07SLBR+heXxH27fMk+sw75/bKtKIcO 724Ol0/jvg17sTM3JrNDOxRXFy+P3dMxz/7kHvwOuRc3fX/jx+E78UD0p91leLee U3TqgttjYmtPq91DFsYs4zpec9A9R7EePyZvCblpyjJWLSTliCXxDZ4YNEgKooN9 lyyrIDLLdYuGMxqI1ry3pWgK/L34NBDdV7jLKRMZiaqrAtpTk5uAZ9vPYNuk8OxL 7ZNIK06vSWHBdQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:29:26 2026 by rpki-client