This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json) Hash identifier: v0AIHjfZmKWFyL7XX1UaF/sRysVpQWDCqZet0hJg/kY= Subject key identifier: 92:F2:B5:FF:AF:12:04:78:3B:B6:0F:9A:E4:73:D0:53:5B:D3:BA:DD Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Certificate serial: 019BF4D01C15DEBE50D3A2132C29D27263A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft Manifest number: 04FB Signing time: Sun 25 Jan 2026 11:00:37 +0000 Manifest this update: Sun 25 Jan 2026 11:00:37 +0000 Manifest next update: Mon 26 Jan 2026 11:00:37 +0000 Files and hashes: 1: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: hLcFZalHJD+UbzwEBUKhxXBa7LePFafNrc9Y/3AahUA=) 2: mhQF4f0__P51DebimYZU_QVT_0w.roa (hash: cJI4Av5bydgJH0qgwcwT6kGmqoTQvZg1s0ClaW/gppY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:1c:15:de:be:50:d3:a2:13:2c:29:d2:72:63:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Validity Not Before: Jan 25 11:00:37 2026 GMT Not After : Jan 26 11:00:37 2026 GMT Subject: CN=92f2b5ffaf1204783bb60f9ae473d0535bd3badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:65:7d:2d:2a:35:a5:72:bb:5b:a8:a8:c3: 37:01:3e:19:50:20:34:cd:ba:f5:13:1c:38:66:4f: ee:91:97:dc:8c:ef:84:f1:a1:73:0b:b7:6b:65:3f: 70:da:f6:97:39:53:1c:48:8f:87:6d:79:f8:b7:54: 82:84:6f:12:61:6e:a8:0c:cf:e5:09:ef:6c:29:95: 37:31:6a:c4:cd:bd:70:70:e2:30:23:5c:77:92:4d: 14:9d:50:92:fe:96:06:db:de:40:56:1e:a2:a2:be: 88:e3:bb:64:b4:76:96:aa:3c:de:17:03:b4:55:54: ef:cb:55:ad:f6:0f:bf:f1:f3:23:a7:88:98:26:5e: cc:be:6c:73:b5:f4:da:04:05:96:ce:2e:ce:e3:f4: 09:a6:bb:05:0b:0b:09:c1:b5:1e:76:10:54:3e:4e: 60:b4:56:fa:bc:b7:4f:31:c6:d8:e6:9d:6d:18:e0: 5b:31:66:83:03:ee:60:69:ba:7d:5e:ca:01:60:36: a6:85:e2:97:b0:f1:8b:b9:7e:27:99:67:36:74:67: 0e:6a:ec:05:f9:1e:b9:d7:f0:72:f0:83:06:50:c8: d1:07:14:c0:30:d4:85:c3:10:b5:b7:7b:19:0a:9f: 99:94:cb:7a:c2:56:58:a7:ec:e7:54:ef:4d:ef:9c: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F2:B5:FF:AF:12:04:78:3B:B6:0F:9A:E4:73:D0:53:5B:D3:BA:DD X509v3 Authority Key Identifier: keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:74:29:fa:23:8d:3d:87:a9:f4:f4:d9:9c:7f:af:27:75:79: 97:79:11:40:dd:c6:47:08:39:13:49:9d:11:60:bc:50:b5:35: 43:70:bd:89:03:81:0e:e7:e2:45:1e:0c:47:01:e7:c8:86:e0: 28:d5:ed:39:02:bb:ac:58:48:3e:df:9f:89:c2:58:5b:9b:f6: bf:f7:86:cf:b2:ea:db:c7:1a:0c:1b:73:39:a5:6e:f0:68:8e: 97:7e:4d:64:90:e7:a3:f4:8c:a6:94:98:dd:8d:9f:7f:da:58: 2e:02:ff:db:c3:0f:ee:06:eb:c5:77:7e:a8:6c:45:a5:3e:b7: 13:4e:5d:a8:6c:e4:f7:bb:1f:fa:27:3c:b6:7e:ce:bd:83:8a: 0f:87:a4:a5:ef:c3:2d:4e:0d:ed:47:b9:20:3a:98:a6:95:45: 93:78:0b:ff:9b:7d:b1:f0:48:c2:46:73:d2:17:4f:4c:7e:fa: ee:be:22:4f:70:b1:f9:bc:18:11:96:54:b7:34:a9:40:3a:f8: 7a:03:ca:1f:61:8d:a6:10:6e:24:40:a5:46:d1:54:e0:2e:82: 81:96:56:3d:16:e7:b7:fd:de:cd:87:c4:2d:d2:7d:81:8d:d6: bf:64:bc:c3:d4:b9:f8:7c:c1:32:84:26:1c:f0:e6:74:66:ac: 14:b9:1c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00BwV3r5Q06ITLCnScmOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy YWE1MTYwHhcNMjYwMTI1MTEwMDM3WhcNMjYwMTI2MTEwMDM3WjAzMTEwLwYDVQQD Eyg5MmYyYjVmZmFmMTIwNDc4M2JiNjBmOWFlNDczZDA1MzViZDNiYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrFlfS0qNaVyu1uoqMM3AT4ZUCA0 zbr1Exw4Zk/ukZfcjO+E8aFzC7drZT9w2vaXOVMcSI+HbXn4t1SChG8SYW6oDM/l Ce9sKZU3MWrEzb1wcOIwI1x3kk0UnVCS/pYG295AVh6ior6I47tktHaWqjzeFwO0 VVTvy1Wt9g+/8fMjp4iYJl7MvmxztfTaBAWWzi7O4/QJprsFCwsJwbUedhBUPk5g tFb6vLdPMcbY5p1tGOBbMWaDA+5gabp9XsoBYDamheKXsPGLuX4nmWc2dGcOauwF +R651/By8IMGUMjRBxTAMNSFwxC1t3sZCp+ZlMt6wlZYp+znVO9N75zECQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLytf+vEgR4O7YPmuRz0FNb07rdMB8GA1UdIwQY MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4 LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXQp+iON PYep9PTZnH+vJ3V5l3kRQN3GRwg5E0mdEWC8ULU1Q3C9iQOBDufiRR4MRwHnyIbg KNXtOQK7rFhIPt+ficJYW5v2v/eGz7Lq28caDBtzOaVu8GiOl35NZJDno/SMppSY 3Y2ff9pYLgL/28MP7gbrxXd+qGxFpT63E05dqGzk97sf+ic8tn7OvYOKD4ekpe/D LU4N7Ue5IDqYppVFk3gL/5t9sfBIwkZz0hdPTH767r4iT3Cx+bwYEZZUtzSpQDr4 egPKH2GNphBuJEClRtFU4C6CgZZWPRbnt/3ezYfELdJ9gY3Wv2S8w9S5+HzBMoQm HPDmdGasFLkcew== -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:03 2026 by rpki-client