This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json) Hash identifier: E/5z8ZKImb9bnmSMom0Kp1/zqskGycOL3pRpp5pcg64= Subject key identifier: 8D:1F:1C:50:12:01:5F:7D:B5:AE:78:7D:88:D5:D6:0B:06:32:AA:E4 Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019BF3BE09B806D856D21B669B586F8064CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft Manifest number: 16A8 Signing time: Sun 25 Jan 2026 06:01:16 +0000 Manifest this update: Sun 25 Jan 2026 06:01:16 +0000 Manifest next update: Mon 26 Jan 2026 06:01:16 +0000 Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: 2etc7jxWxu+r0WEn+Nb0dcvXREMrUva88vIlxaQtZVk=) 2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=) 3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=) 4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:09:b8:06:d8:56:d2:1b:66:9b:58:6f:80:64:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Jan 25 06:01:16 2026 GMT Not After : Jan 26 06:01:16 2026 GMT Subject: CN=8d1f1c5012015f7db5ae787d88d5d60b0632aae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:8c:53:0a:c2:34:36:bb:5b:f2:32:ec:d0: 81:35:34:49:95:69:19:5f:13:3d:ff:3b:1a:ca:ca: 3b:d5:f6:5b:88:8e:99:9e:37:81:be:3a:3b:15:9d: 12:60:cd:aa:36:99:3d:f1:55:f6:16:61:fa:ad:fe: f9:a7:9a:4b:b6:dc:c9:22:ac:2e:7b:45:7e:02:aa: f0:65:25:0f:62:f3:19:f4:4e:26:e1:48:69:a0:db: a7:c7:c0:58:47:13:91:db:b9:10:c2:ea:0a:cf:98: 4b:9b:3e:74:b3:68:42:73:e2:53:c9:b2:6d:60:d7: 1e:93:f3:1b:09:db:63:2d:a8:01:83:16:0e:ec:ed: 87:0b:5a:0d:d7:6f:a4:26:8d:b4:d3:85:aa:01:20: 67:b8:d3:03:04:b5:f2:59:1a:82:04:ef:fa:bf:54: 46:77:88:f4:a1:a4:8a:af:6a:0c:50:f2:3a:5a:05: f1:a4:42:24:09:5d:41:b2:b7:e0:1d:ec:f1:f1:20: de:b6:bc:2f:67:dd:26:c4:cb:4a:70:c4:12:ae:47: bd:af:23:a5:9e:5d:23:43:cf:9d:d1:5a:9f:ae:b6: 64:fe:8f:55:b0:79:3e:31:ae:8c:00:3a:39:4c:43: e0:3d:54:ed:a5:1c:5b:48:3f:45:e8:e7:db:0d:9e: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1F:1C:50:12:01:5F:7D:B5:AE:78:7D:88:D5:D6:0B:06:32:AA:E4 X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1a:f4:d8:54:68:bb:ab:25:22:1d:5b:44:2e:1f:b6:e8:22: de:d8:50:6e:0d:21:d3:41:d4:d6:c5:af:a5:40:03:6d:5e:c6: d6:52:ff:20:18:cf:e0:c1:df:d2:fb:33:23:cd:da:78:93:3a: 6c:79:fb:3a:dc:46:d0:6b:95:d5:95:46:af:7b:49:74:48:bb: 8d:09:30:80:00:80:ab:8d:95:1b:13:50:3e:a2:58:83:e9:69: 10:bc:8f:0b:36:de:d6:0a:ea:46:9f:d3:2d:14:63:82:73:0f: c3:09:9d:6b:2e:d6:03:a3:43:ce:50:b4:6b:53:bf:88:70:43: bd:ee:fb:b5:5b:cb:91:33:e9:94:22:fb:66:df:c6:c6:50:9b: 32:2b:ca:d2:9e:57:bb:7f:74:57:cd:5b:78:aa:2c:a1:2d:57: 97:2d:67:98:0c:21:3f:0a:e3:a3:13:ca:6d:5d:43:eb:53:a2: f5:e1:fb:ef:0f:9a:34:3e:46:87:24:86:ca:da:6a:8b:7e:d6: b6:f2:86:a7:9a:41:27:c8:39:df:62:4d:48:17:7e:f2:04:19: 8c:95:59:6f:da:d0:57:ec:8f:fe:a7:26:08:6c:39:92:96:4b: 2b:d0:44:66:a6:86:a3:58:c9:cb:a9:ab:60:59:e3:da:c2:41: 89:c6:cd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvgm4BthW0htmm1hvgGTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjYwMTI1MDYwMTE2WhcNMjYwMTI2MDYwMTE2WjAzMTEwLwYDVQQD Eyg4ZDFmMWM1MDEyMDE1ZjdkYjVhZTc4N2Q4OGQ1ZDYwYjA2MzJhYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW+MUwrCNDa7W/Iy7NCBNTRJlWkZ XxM9/zsayso71fZbiI6ZnjeBvjo7FZ0SYM2qNpk98VX2FmH6rf75p5pLttzJIqwu e0V+AqrwZSUPYvMZ9E4m4UhpoNunx8BYRxOR27kQwuoKz5hLmz50s2hCc+JTybJt YNcek/MbCdtjLagBgxYO7O2HC1oN12+kJo2004WqASBnuNMDBLXyWRqCBO/6v1RG d4j0oaSKr2oMUPI6WgXxpEIkCV1BsrfgHezx8SDetrwvZ90mxMtKcMQSrke9ryOl nl0jQ8+d0VqfrrZk/o9VsHk+Ma6MADo5TEPgPVTtpRxbSD9F6OfbDZ4kywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0fHFASAV99ta54fYjV1gsGMqrkMB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhr02FRo u6slIh1bRC4ftugi3thQbg0h00HU1sWvpUADbV7G1lL/IBjP4MHf0vszI83aeJM6 bHn7OtxG0GuV1ZVGr3tJdEi7jQkwgACAq42VGxNQPqJYg+lpELyPCzbe1grqRp/T LRRjgnMPwwmday7WA6NDzlC0a1O/iHBDve77tVvLkTPplCL7Zt/GxlCbMivK0p5X u390V81beKosoS1Xly1nmAwhPwrjoxPKbV1D61Oi9eH77w+aND5GhySGytpqi37W tvKGp5pBJ8g532JNSBd+8gQZjJVZb9rQV+yP/qcmCGw5kpZLK9BEZqaGo1jJy6mr YFnj2sJBicbNrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:05:30 2026 by rpki-client