This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json) Hash identifier: FFWY9x+N36h9SX2wW9ichS2ZHJ1FtM3XRZ8wbCEEiEo= Subject key identifier: 5A:64:A8:1E:D3:99:30:B6:F6:F7:CF:EF:69:6B:4B:C9:2B:B6:19:84 Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c Certificate serial: 019BF72CB086D685CFD07700D33AC70ABDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft Manifest number: 083B Signing time: Sun 25 Jan 2026 22:00:59 +0000 Manifest this update: Sun 25 Jan 2026 22:00:59 +0000 Manifest next update: Mon 26 Jan 2026 22:00:59 +0000 Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: ipBcSgtgU8vH1sJQ9vki1T0+yZM2IAtxB3V4ifViGss=) 2: WaED3SoIx0pc71pBr-UbfEWpe4A.roa (hash: fqPX1btBnDCtajfDjm6TTas+rikJHiohkz70SBZRDMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:b0:86:d6:85:cf:d0:77:00:d3:3a:c7:0a:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c Validity Not Before: Jan 25 22:00:59 2026 GMT Not After : Jan 26 22:00:59 2026 GMT Subject: CN=5a64a81ed39930b6f6f7cfef696b4bc92bb61984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:7c:02:5d:99:d9:7f:f8:17:47:38:51:8a: dc:c7:10:d5:cb:0e:a8:9e:3e:8d:9c:04:05:33:35: 8b:fd:e8:2a:29:c6:df:e5:42:1c:36:97:70:c4:d3: ec:3e:7b:06:5a:ea:e6:91:06:e5:24:16:a8:17:c8: 83:f8:e1:f7:6b:85:6b:c6:48:9f:f3:3b:fc:e2:32: e2:bf:e1:fc:7a:64:27:5c:c8:9d:df:9b:07:5c:8a: 33:8e:a9:0a:d0:60:88:57:52:74:d7:26:ab:cb:4e: 0a:8f:67:c0:c3:56:bf:44:48:ac:ad:4e:72:49:96: 86:cb:d1:31:fc:51:ee:fa:0e:a5:f3:1c:63:68:7f: 8f:23:20:f5:95:fe:f0:02:d2:c2:1a:30:0d:7d:a4: f6:e7:d7:0c:4d:c5:bb:66:bc:7e:47:e5:76:71:1d: 29:c1:5a:c5:a9:08:11:a3:2a:67:8b:c6:3e:75:68: 5a:fa:bd:6a:f5:30:65:16:f2:94:5a:b3:d9:8b:e7: 4d:35:3b:39:b6:ff:d4:bb:6a:48:d6:b6:16:7b:c1: 90:84:87:10:7e:dd:eb:a9:5e:86:9c:52:53:60:da: f7:b5:56:2c:79:eb:dc:e0:fa:1d:a2:1b:6f:1b:45: 1b:cc:0e:3c:dc:f7:14:c4:b5:0e:d2:12:a4:3c:61: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:A8:1E:D3:99:30:B6:F6:F7:CF:EF:69:6B:4B:C9:2B:B6:19:84 X509v3 Authority Key Identifier: keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cf:4e:eb:b9:0f:49:d0:e7:57:76:25:7a:cc:4c:45:42:f4: c8:2a:1b:08:3a:7d:c8:26:6b:ad:a4:90:e9:30:b4:ba:ef:0a: 27:a2:be:35:cd:ca:55:38:a2:88:79:79:cb:ab:75:1f:ed:45: 3b:21:d7:c8:b4:ee:9f:82:e1:76:d9:87:d7:53:0d:9e:09:f8: 09:0a:b1:ba:bb:f9:fb:7b:de:db:41:e0:b9:ab:ae:9b:88:e6: 72:2a:ae:54:59:75:00:db:e0:93:8b:62:04:b4:9c:15:01:eb: c2:84:af:cd:c1:ea:70:83:a8:71:ed:ed:3a:15:99:1b:ff:f6: 2f:a9:6c:34:1d:3b:62:9e:02:25:d4:94:34:1d:d3:04:de:c0: 09:f1:d6:13:a5:6f:f3:91:54:99:39:b0:69:ca:0f:de:38:f9: 62:31:c9:13:0d:64:32:cd:eb:92:b9:36:e0:fc:07:b3:ed:fa: b6:e2:5e:b1:08:e1:79:25:7c:00:ea:1d:54:77:f5:c0:0c:1c: f3:18:a1:bf:76:44:64:2a:73:61:ed:87:be:9a:c3:41:dc:b5: 73:7c:82:5e:9c:44:f0:47:04:f7:e0:fc:ab:b6:e3:4d:33:b4: 48:0c:de:c3:e1:62:60:1b:7f:4e:f5:9a:e4:fa:41:75:41:c9: 53:6b:64:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LLCG1oXP0HcA0zrHCr3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4 NzlmMmMwHhcNMjYwMTI1MjIwMDU5WhcNMjYwMTI2MjIwMDU5WjAzMTEwLwYDVQQD Eyg1YTY0YTgxZWQzOTkzMGI2ZjZmN2NmZWY2OTZiNGJjOTJiYjYxOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujp8Al2Z2X/4F0c4UYrcxxDVyw6o nj6NnAQFMzWL/egqKcbf5UIcNpdwxNPsPnsGWurmkQblJBaoF8iD+OH3a4Vrxkif 8zv84jLiv+H8emQnXMid35sHXIozjqkK0GCIV1J01yary04Kj2fAw1a/REisrU5y SZaGy9Ex/FHu+g6l8xxjaH+PIyD1lf7wAtLCGjANfaT259cMTcW7Zrx+R+V2cR0p wVrFqQgRoypni8Y+dWha+r1q9TBlFvKUWrPZi+dNNTs5tv/Uu2pI1rYWe8GQhIcQ ft3rqV6GnFJTYNr3tVYseevc4PodohtvG0UbzA483PcUxLUO0hKkPGFgwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpkqB7TmTC29vfP72lrS8krthmEMB8GA1UdIwQY MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt YTE0NmExYjAxZjhmLzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqM9O67kP SdDnV3YlesxMRUL0yCobCDp9yCZrraSQ6TC0uu8KJ6K+Nc3KVTiiiHl5y6t1H+1F OyHXyLTun4LhdtmH11MNngn4CQqxurv5+3ve20Hguauum4jmciquVFl1ANvgk4ti BLScFQHrwoSvzcHqcIOoce3tOhWZG//2L6lsNB07Yp4CJdSUNB3TBN7ACfHWE6Vv 85FUmTmwacoP3jj5YjHJEw1kMs3rkrk24PwHs+36tuJesQjheSV8AOodVHf1wAwc 8xihv3ZEZCpzYe2HvprDQdy1c3yCXpxE8EcE9+D8q7bjTTO0SAzew+FiYBt/TvWa 5PpBdUHJU2tkPA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:59 2026 by rpki-client