This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json) Hash identifier: wGDp8msCVpv+UC3xuJhLLjFJDf5xN/lVTAsGbCPeXjo= Subject key identifier: B0:E3:09:DD:F2:9D:A1:F9:AD:53:F0:81:99:8A:BE:B2:70:90:F6:20 Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Certificate serial: 019BF7638E9F7C3511306EC4AD6DFA558F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft Manifest number: 084B Signing time: Sun 25 Jan 2026 23:00:55 +0000 Manifest this update: Sun 25 Jan 2026 23:00:55 +0000 Manifest next update: Mon 26 Jan 2026 23:00:55 +0000 Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: YF66dVfnPIC9iJnCiCpfj0EeDeY9wx6V4GF7EmpWWqg=) 2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8e:9f:7c:35:11:30:6e:c4:ad:6d:fa:55:8f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Validity Not Before: Jan 25 23:00:55 2026 GMT Not After : Jan 26 23:00:55 2026 GMT Subject: CN=b0e309ddf29da1f9ad53f081998abeb27090f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:a4:cf:fe:03:6b:cc:e0:3c:75:3e:9e:1f: c1:6d:f5:9b:49:26:bf:77:2b:f8:a6:c4:86:48:e4: da:3d:6b:3f:4f:6b:73:4b:09:ad:f7:9d:71:5a:92: bb:6a:ba:62:fd:45:f6:32:32:4e:ef:45:64:58:51: 62:df:91:8d:48:bb:56:87:19:07:23:c2:2d:4c:ca: bc:1b:a0:8e:b7:e8:b8:64:aa:08:23:80:95:3a:fe: a1:c0:97:8f:b7:f3:bf:05:a7:08:a9:74:fa:a4:77: af:1d:77:a4:32:94:82:b0:4c:ba:07:c1:bf:68:0b: 94:8f:f5:87:68:78:5d:65:e0:7e:70:14:3d:8d:14: b3:80:29:20:f3:83:eb:7c:5d:db:94:dc:49:ff:cc: 9a:c0:0b:c2:2f:29:c1:6e:8a:02:ba:51:e8:4f:eb: 3f:f5:c6:fd:71:9a:b0:27:8a:41:5c:89:44:15:6f: f3:f2:0c:be:67:a8:87:44:cb:d4:9d:94:55:aa:a3: 12:78:2d:25:cf:6a:5c:88:32:93:6b:4d:70:7b:e8: 8b:fc:b2:c3:13:13:6a:2f:5f:34:42:66:90:c5:72: 57:76:82:d7:e6:96:02:39:b3:1d:26:b4:96:5f:57: 76:7d:ef:76:dc:69:2a:5e:02:5d:cc:9e:05:51:a8: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:09:DD:F2:9D:A1:F9:AD:53:F0:81:99:8A:BE:B2:70:90:F6:20 X509v3 Authority Key Identifier: keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7e:12:ca:2b:92:15:b3:ea:e0:69:6f:7b:b8:58:08:1f:38: b6:0b:ff:47:f2:24:14:31:3c:78:2e:a1:36:b6:da:fc:60:66: 98:ab:f8:2a:9d:67:12:96:68:14:9c:f0:ea:7b:a5:1d:6c:7a: dd:96:f5:f9:1a:2f:90:51:ae:10:70:27:32:09:3a:73:25:2a: 3b:79:71:19:9f:cc:26:4d:5f:32:6f:5e:74:9b:f2:44:14:a8: 1f:64:23:5c:e9:a1:36:5b:7d:7a:f6:7d:b2:78:4c:e7:ef:c4: 85:8b:4b:fe:08:54:8c:f0:ce:c1:d9:c2:e1:ba:1e:de:9e:5f: ad:23:28:c1:9b:ab:5e:74:56:10:60:61:c4:ff:30:f1:1c:4c: 60:72:04:9b:6c:82:ae:19:f8:63:42:0b:06:c2:9e:82:4e:7c: 52:e1:85:68:a4:c7:69:db:c9:32:f4:d2:51:a9:d0:5c:39:b2: 3d:98:eb:be:8f:cf:b1:66:19:45:2b:8d:fd:39:9e:ec:cb:9b: 1a:e4:15:d3:c1:cd:b4:71:0c:81:a7:68:93:83:ac:e5:64:4d: cb:74:38:1a:96:5c:dc:db:98:b5:d0:4e:b4:6e:f9:55:0a:b6: 4d:ad:dc:e5:e3:0e:51:82:f2:a5:a3:2c:4b:ce:db:00:04:9b: 73:63:52:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y46ffDURMG7ErW36VY8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOTg1OWI3MGVhNDUwZTEzYWRhODcyNGMwZWI2YmVlY2M4 ZGFhOTEwHhcNMjYwMTI1MjMwMDU1WhcNMjYwMTI2MjMwMDU1WjAzMTEwLwYDVQQD EyhiMGUzMDlkZGYyOWRhMWY5YWQ1M2YwODE5OThhYmViMjcwOTBmNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk2kz/4Da8zgPHU+nh/BbfWbSSa/ dyv4psSGSOTaPWs/T2tzSwmt951xWpK7arpi/UX2MjJO70VkWFFi35GNSLtWhxkH I8ItTMq8G6COt+i4ZKoII4CVOv6hwJePt/O/BacIqXT6pHevHXekMpSCsEy6B8G/ aAuUj/WHaHhdZeB+cBQ9jRSzgCkg84PrfF3blNxJ/8yawAvCLynBbooCulHoT+s/ 9cb9cZqwJ4pBXIlEFW/z8gy+Z6iHRMvUnZRVqqMSeC0lz2pciDKTa01we+iL/LLD ExNqL180QmaQxXJXdoLX5pYCObMdJrSWX1d2fe923GkqXgJdzJ4FUag0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDjCd3ynaH5rVPwgZmKvrJwkPYgMB8GA1UdIwQY MBaAFPKYWbcOpFDhOtqHJMDra+7MjaqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUt M2RmNDdiNjIwZDYwLzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUtM2RmNDdiNjIwZDYw LzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn4SyiuS FbPq4Glve7hYCB84tgv/R/IkFDE8eC6hNrba/GBmmKv4Kp1nEpZoFJzw6nulHWx6 3Zb1+RovkFGuEHAnMgk6cyUqO3lxGZ/MJk1fMm9edJvyRBSoH2QjXOmhNlt9evZ9 snhM5+/EhYtL/ghUjPDOwdnC4boe3p5frSMowZurXnRWEGBhxP8w8RxMYHIEm2yC rhn4Y0ILBsKegk58UuGFaKTHadvJMvTSUanQXDmyPZjrvo/PsWYZRSuN/Tme7Mub GuQV08HNtHEMgadok4Os5WRNy3Q4GpZc3NuYtdBOtG75VQq2Ta3c5eMOUYLypaMs S87bAASbc2NSdA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:44 2026 by rpki-client