This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json) Hash identifier: ek1B0s5m3TMB+NcUzJIlEjyCCEcV7sKD9FpUBHvNso8= Subject key identifier: 45:8E:E3:45:59:C2:5F:28:D1:A6:4A:9D:AA:16:00:15:48:E0:2F:4C Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424 Certificate serial: 019BF9896273115E9AB60F43E439757EF082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft Manifest number: 0140 Signing time: Mon 26 Jan 2026 09:01:28 +0000 Manifest this update: Mon 26 Jan 2026 09:01:28 +0000 Manifest next update: Tue 27 Jan 2026 09:01:28 +0000 Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: 0DNgmSLD4GI3lV5+By3I2zwxH9e83p7IJDDt6dRfDsA=) 2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:62:73:11:5e:9a:b6:0f:43:e4:39:75:7e:f0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424 Validity Not Before: Jan 26 09:01:28 2026 GMT Not After : Jan 27 09:01:28 2026 GMT Subject: CN=458ee34559c25f28d1a64a9daa16001548e02f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:2f:56:92:5d:56:48:80:2a:ca:8d:89:46: f2:32:16:a3:1f:15:11:0c:07:ca:2a:52:36:c9:bf: b7:33:61:aa:07:a4:84:81:07:d2:ee:b5:4f:70:5c: 40:ae:1c:b2:91:80:13:8a:b7:8d:f5:2a:8b:95:9c: d5:e8:6f:5a:65:1b:b0:9a:a6:8c:03:c3:77:6c:35: be:ec:82:31:6b:1a:23:2d:c1:38:5b:93:0d:25:63: cf:bc:1e:e3:a0:ce:6e:9e:de:33:32:03:04:dc:71: 88:4a:7d:0b:7b:76:c7:6a:36:8b:40:21:fc:c7:4f: 7f:4b:9c:cc:56:1e:a2:09:a1:e3:ec:38:2a:65:2d: fa:32:e8:47:7b:d2:a5:5f:79:52:54:d0:f2:c3:6b: 5d:a2:33:64:d6:7e:78:7a:fc:85:06:d6:27:d3:35: 73:50:11:dd:73:25:30:50:c2:84:a4:e7:94:7d:85: 65:c4:84:05:13:49:48:56:68:57:a9:14:3b:f3:83: f7:d9:78:24:c7:96:d4:7f:e9:57:07:32:58:0e:88: 75:5d:92:ea:0d:0e:cf:ef:62:77:75:ae:8b:3e:0e: 31:c0:7a:06:22:4b:f0:a8:e3:80:60:ac:c7:a9:89: 85:33:f1:ee:38:46:0a:64:2e:05:9e:2f:ad:aa:30: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:E3:45:59:C2:5F:28:D1:A6:4A:9D:AA:16:00:15:48:E0:2F:4C X509v3 Authority Key Identifier: keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ea:70:d5:50:2b:c7:68:65:38:c4:bf:a8:5d:9e:3c:b0:4b: 0c:65:45:49:09:87:1f:76:e9:03:cd:88:0c:5f:8e:cb:3b:ee: 41:41:25:15:fd:ac:06:2c:c0:19:d4:80:18:74:3e:34:74:52: 9a:fb:38:8f:f3:08:2b:1f:e4:4e:e0:77:17:6a:22:3e:f4:bb: 00:bc:60:68:39:81:21:e8:01:df:de:9c:09:f0:5c:ec:3a:4a: ce:99:56:99:0d:c2:30:16:e3:19:af:35:cb:ea:d4:4c:35:b4: 59:1f:70:fe:e0:de:61:31:f1:e8:1e:1a:f7:37:e1:fd:80:02: b0:63:cf:d9:1c:89:09:f6:1f:4b:49:c1:a7:4f:7f:a3:dd:90: 52:86:35:db:51:7f:20:97:6c:40:96:7b:cb:44:dd:a1:56:68: 81:d3:e4:ab:c6:35:3f:86:05:33:8f:b2:60:fb:a9:1f:69:4e: a1:3d:b7:1b:9d:23:99:a8:16:01:bc:a6:3c:9c:74:67:37:4a: 63:5b:73:16:aa:b5:ce:13:63:ad:00:00:11:09:d5:cc:54:54: 42:9b:8a:73:66:7e:d8:04:54:a6:5c:54:2b:e1:2e:df:39:31: b4:d5:7b:a1:86:11:88:61:21:bd:03:94:f8:73:ec:ec:15:1d: 67:47:87:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iWJzEV6atg9D5Dl1fvCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3 M2U0MjQwHhcNMjYwMTI2MDkwMTI4WhcNMjYwMTI3MDkwMTI4WjAzMTEwLwYDVQQD Eyg0NThlZTM0NTU5YzI1ZjI4ZDFhNjRhOWRhYTE2MDAxNTQ4ZTAyZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL0vVpJdVkiAKsqNiUbyMhajHxUR DAfKKlI2yb+3M2GqB6SEgQfS7rVPcFxArhyykYATireN9SqLlZzV6G9aZRuwmqaM A8N3bDW+7IIxaxojLcE4W5MNJWPPvB7joM5unt4zMgME3HGISn0Le3bHajaLQCH8 x09/S5zMVh6iCaHj7DgqZS36MuhHe9KlX3lSVNDyw2tdojNk1n54evyFBtYn0zVz UBHdcyUwUMKEpOeUfYVlxIQFE0lIVmhXqRQ784P32Xgkx5bUf+lXBzJYDoh1XZLq DQ7P72J3da6LPg4xwHoGIkvwqOOAYKzHqYmFM/HuOEYKZC4Fni+tqjD4jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWO40VZwl8o0aZKnaoWABVI4C9MMB8GA1UdIwQY MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+pw1VAr x2hlOMS/qF2ePLBLDGVFSQmHH3bpA82IDF+OyzvuQUElFf2sBizAGdSAGHQ+NHRS mvs4j/MIKx/kTuB3F2oiPvS7ALxgaDmBIegB396cCfBc7DpKzplWmQ3CMBbjGa81 y+rUTDW0WR9w/uDeYTHx6B4a9zfh/YACsGPP2RyJCfYfS0nBp09/o92QUoY121F/ IJdsQJZ7y0TdoVZogdPkq8Y1P4YFM4+yYPupH2lOoT23G50jmagWAbymPJx0ZzdK Y1tzFqq1zhNjrQAAEQnVzFRUQpuKc2Z+2ARUplxUK+Eu3zkxtNV7oYYRiGEhvQOU +HPs7BUdZ0eHsw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:31 2026 by rpki-client