This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json) Hash identifier: pnOrtETdQG0mtn3CK0RAk0ckcS7Zc3ksjLSArd7wI4g= Subject key identifier: BA:81:22:B0:77:39:94:A1:C9:56:28:B3:BE:E5:C6:7F:DF:B1:DB:3F Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71 Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71 Certificate serial: 019BF3867576DAC44B0779E60CD8AFF1C64B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft Manifest number: 81 Signing time: Sun 25 Jan 2026 05:00:33 +0000 Manifest this update: Sun 25 Jan 2026 05:00:33 +0000 Manifest next update: Mon 26 Jan 2026 05:00:33 +0000 Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: wlA0/7Ct27x/PRYgFNp8kyUdK5Co1d2zVn0TZKqC5CM=) 2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:75:76:da:c4:4b:07:79:e6:0c:d8:af:f1:c6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71 Validity Not Before: Jan 25 05:00:33 2026 GMT Not After : Jan 26 05:00:33 2026 GMT Subject: CN=ba8122b0773994a1c95628b3bee5c67fdfb1db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:a5:10:1c:6c:c4:7b:8c:47:f4:3f:70:68: ce:ad:73:37:4f:42:25:c8:72:10:60:6d:b3:7a:d6: 8c:da:d0:38:a5:06:fb:b8:0b:32:ac:49:24:8e:64: a1:b1:79:1b:38:e0:2e:26:2a:62:da:ac:e5:0c:58: 1b:df:f7:af:ef:ec:3c:3e:cc:2d:b6:49:6d:8c:de: ea:65:4d:d7:b9:b3:fd:72:5d:dc:ae:78:03:fa:84: d7:78:bc:23:9f:3e:09:52:ac:e7:2d:6c:e6:c3:d4: d0:d1:81:c3:c1:4f:3a:16:cc:5a:27:ee:f4:29:9a: 96:df:62:1a:75:a9:db:88:d1:73:6d:e7:98:1c:95: 37:e5:39:12:20:b9:78:a0:3f:2b:d5:8d:05:c6:78: 22:0e:e5:da:75:e5:ed:62:55:05:6b:77:cd:f1:64: 8b:fb:73:82:3c:fe:0e:10:ee:87:6b:a7:37:3f:d9: 6e:9d:ed:a4:1a:90:af:b3:81:ec:3d:d1:6f:dd:64: 22:45:7c:9d:1a:9b:f6:7e:36:e8:b2:10:51:c9:08: c9:40:eb:95:26:2f:3d:7d:95:22:4f:f1:75:73:22: f5:51:45:1a:66:a3:08:37:02:44:58:43:02:cd:1d: 98:a3:83:5b:c8:3e:7c:22:7f:72:a3:a0:f2:0d:c2: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:81:22:B0:77:39:94:A1:C9:56:28:B3:BE:E5:C6:7F:DF:B1:DB:3F X509v3 Authority Key Identifier: keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:77:ec:c7:bd:15:74:00:10:6e:74:4d:89:b5:a3:dd:47:38: f9:16:49:bc:bc:a1:92:a8:5d:3c:77:df:99:42:67:cc:d5:1e: f6:ef:86:b2:8a:35:4d:bb:46:c3:a2:5e:af:55:c3:1b:cf:ee: 4d:d0:c4:55:e6:40:df:97:e0:89:5b:b5:5b:9d:73:f5:d7:6e: de:a0:e1:da:be:84:ee:5e:16:f8:e7:7d:eb:9f:65:7b:27:82: 18:22:4d:10:59:51:01:24:8f:0d:2c:45:fd:a5:75:54:40:75: fb:e1:79:32:32:93:16:1a:0f:12:89:ab:da:cf:6d:91:5a:d6: 73:e3:15:92:cf:83:db:d3:f1:ca:ff:da:e6:b3:67:c6:96:3f: 0c:9e:b9:33:27:42:0f:16:4f:a1:97:99:c9:f7:b3:3b:1d:2b: e1:80:6b:ef:96:fa:7c:10:fb:3d:c9:e6:48:dd:08:cc:df:15: c4:5f:e1:05:6a:7d:d2:c9:e2:98:1e:de:43:49:95:25:c1:d8: 53:74:ac:02:d0:b7:1c:7c:dc:16:93:5e:b0:1b:ff:36:54:4b: cf:6d:21:d0:7f:80:52:3d:cc:0c:d3:0a:7b:87:e2:b3:fb:13: b6:f7:96:0f:d1:09:37:55:1f:c7:62:76:78:af:82:76:91:3c: 3d:e7:b0:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhnV22sRLB3nmDNiv8cZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzQ4ZmM1YzJlYjJjNzRhMjQyYTQ3YmQzMjE1NzdlOGYx ZTZhNzEwHhcNMjYwMTI1MDUwMDMzWhcNMjYwMTI2MDUwMDMzWjAzMTEwLwYDVQQD EyhiYTgxMjJiMDc3Mzk5NGExYzk1NjI4YjNiZWU1YzY3ZmRmYjFkYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysGlEBxsxHuMR/Q/cGjOrXM3T0Il yHIQYG2zetaM2tA4pQb7uAsyrEkkjmShsXkbOOAuJipi2qzlDFgb3/ev7+w8Pswt tkltjN7qZU3XubP9cl3crngD+oTXeLwjnz4JUqznLWzmw9TQ0YHDwU86FsxaJ+70 KZqW32IadanbiNFzbeeYHJU35TkSILl4oD8r1Y0FxngiDuXadeXtYlUFa3fN8WSL +3OCPP4OEO6Ha6c3P9lune2kGpCvs4HsPdFv3WQiRXydGpv2fjboshBRyQjJQOuV Ji89fZUiT/F1cyL1UUUaZqMINwJEWEMCzR2Yo4NbyD58In9yo6DyDcLOvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqBIrB3OZShyVYos77lxn/fsds/MB8GA1UdIwQY MBaAFIfEj8XC6yx0okKke9MhV36PHmpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYt NTVlNGM5MmE1ZDUwLzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYtNTVlNGM5MmE1ZDUw LzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnfsx70V dAAQbnRNibWj3Uc4+RZJvLyhkqhdPHffmUJnzNUe9u+Gsoo1TbtGw6Jer1XDG8/u TdDEVeZA35fgiVu1W51z9ddu3qDh2r6E7l4W+Od9659leyeCGCJNEFlRASSPDSxF /aV1VEB1++F5MjKTFhoPEomr2s9tkVrWc+MVks+D29Pxyv/a5rNnxpY/DJ65MydC DxZPoZeZyfezOx0r4YBr75b6fBD7PcnmSN0IzN8VxF/hBWp90snimB7eQ0mVJcHY U3SsAtC3HHzcFpNesBv/NlRLz20h0H+AUj3MDNMKe4fis/sTtveWD9EJN1Ufx2J2 eK+CdpE8Peewiw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:34 2026 by rpki-client