This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json) Hash identifier: AFGJsvI2ZyTP+Zt+OSq74hRbpGVnp/z4Z+58cZRG8j4= Subject key identifier: 8B:0F:5C:C3:46:4F:D0:78:F8:2E:C1:62:81:B4:26:96:D1:4D:47:93 Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d Certificate serial: 019BFB09198608B4B3A6D3767C75EC6AEC5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft Manifest number: 0AA9 Signing time: Mon 26 Jan 2026 16:00:36 +0000 Manifest this update: Mon 26 Jan 2026 16:00:36 +0000 Manifest next update: Tue 27 Jan 2026 16:00:36 +0000 Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: IIcyiW5+xE9N1JmRZj8hQjf65w3G16+GNUwYwmjEHn8=) 2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:19:86:08:b4:b3:a6:d3:76:7c:75:ec:6a:ec:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d Validity Not Before: Jan 26 16:00:36 2026 GMT Not After : Jan 27 16:00:36 2026 GMT Subject: CN=8b0f5cc3464fd078f82ec16281b42696d14d4793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:7a:24:db:f6:6f:03:c0:39:9e:2a:e2:8a: d5:3d:ee:10:b3:bb:da:98:87:d7:98:75:44:d8:fb: 4d:57:3d:cc:5d:7a:35:22:a9:6e:69:0d:57:e7:91: 5c:ed:da:80:42:84:0a:a3:55:66:50:e3:99:41:6c: e5:86:38:43:f2:a2:ca:81:70:86:e3:f7:13:ad:b5: 1e:c7:aa:6c:42:5b:9d:a6:c9:9c:14:59:04:1e:9b: 8c:95:89:77:d3:8f:dd:75:88:9e:36:63:eb:a1:f6: 08:65:82:a8:29:a0:9f:06:80:9a:2a:18:f3:34:c3: ce:4d:ef:09:6a:79:69:02:de:2a:0a:10:1b:df:3f: e2:3d:27:b6:5a:31:b8:07:9d:6b:84:61:09:1f:6b: e8:b9:ec:1a:90:ae:23:da:1c:95:86:14:91:c3:3d: 08:f1:13:04:ba:94:69:7f:50:0e:20:a3:6a:35:37: 36:aa:28:f5:56:38:93:2b:8e:63:cf:45:fe:ba:fb: 48:30:a5:c2:ef:ac:59:e4:14:aa:9f:e8:ba:6b:d7: 44:c7:7e:c5:40:c7:9d:14:24:52:a5:37:b5:26:7d: 15:17:0b:80:0d:ef:85:1a:c4:f3:7a:5e:15:50:b8: dc:44:56:23:b3:b5:86:f2:c9:6b:42:b8:77:c9:c7: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:5C:C3:46:4F:D0:78:F8:2E:C1:62:81:B4:26:96:D1:4D:47:93 X509v3 Authority Key Identifier: keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3b:40:3a:91:6e:2e:4d:c6:ac:39:d7:80:e1:5b:d5:90:f3: 59:c8:a1:49:a2:f2:a9:4d:5a:77:88:91:1c:86:f6:b3:67:dc: 99:84:3d:85:75:b9:4f:99:ba:0e:0d:b8:57:2d:e6:e9:e3:55: 64:a6:81:6b:2a:d8:ee:93:49:89:d2:50:58:2e:17:89:8c:60: 44:c1:3f:74:6c:1c:e1:aa:da:5d:91:89:bf:3d:76:4c:1d:f8: 73:4a:01:71:2a:fa:ef:f3:e2:74:5e:77:06:dc:a6:73:34:82: 50:fe:04:41:28:36:ea:b7:a9:18:21:e7:f1:cb:4d:41:0d:11: 81:cc:18:7d:c4:af:a7:d2:28:20:7b:e7:d7:35:62:9b:92:ee: 3e:19:ea:1f:bb:64:53:45:0c:ca:ef:7e:ff:15:85:d4:5b:42: 4b:33:89:7b:99:85:e1:98:d2:eb:0c:7c:f3:df:84:df:25:18: fb:f5:95:a7:ad:ac:bf:d0:74:31:05:24:4a:d8:f5:f8:3f:3a: 02:30:90:ef:8e:ba:2f:9e:3f:c5:15:46:9c:60:47:c3:02:bb: f4:0d:92:01:fb:8a:b6:be:50:d4:49:13:24:d5:74:86:c5:99: f7:9a:f0:25:5f:ac:29:5d:11:4f:31:a6:3a:03:be:59:49:b7: 7d:fb:6c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CRmGCLSzptN2fHXsauxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw ZDU0OGQwHhcNMjYwMTI2MTYwMDM2WhcNMjYwMTI3MTYwMDM2WjAzMTEwLwYDVQQD Eyg4YjBmNWNjMzQ2NGZkMDc4ZjgyZWMxNjI4MWI0MjY5NmQxNGQ0NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy796JNv2bwPAOZ4q4orVPe4Qs7va mIfXmHVE2PtNVz3MXXo1IqluaQ1X55Fc7dqAQoQKo1VmUOOZQWzlhjhD8qLKgXCG 4/cTrbUex6psQludpsmcFFkEHpuMlYl304/ddYieNmProfYIZYKoKaCfBoCaKhjz NMPOTe8JanlpAt4qChAb3z/iPSe2WjG4B51rhGEJH2vouewakK4j2hyVhhSRwz0I 8RMEupRpf1AOIKNqNTc2qij1VjiTK45jz0X+uvtIMKXC76xZ5BSqn+i6a9dEx37F QMedFCRSpTe1Jn0VFwuADe+FGsTzel4VULjcRFYjs7WG8slrQrh3ycdL5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsPXMNGT9B4+C7BYoG0JpbRTUeTMB8GA1UdIwQY MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjtAOpFu Lk3GrDnXgOFb1ZDzWcihSaLyqU1ad4iRHIb2s2fcmYQ9hXW5T5m6Dg24Vy3m6eNV ZKaBayrY7pNJidJQWC4XiYxgRME/dGwc4araXZGJvz12TB34c0oBcSr67/PidF53 BtymczSCUP4EQSg26repGCHn8ctNQQ0RgcwYfcSvp9IoIHvn1zVim5LuPhnqH7tk U0UMyu9+/xWF1FtCSzOJe5mF4ZjS6wx889+E3yUY+/WVp62sv9B0MQUkStj1+D86 AjCQ7466L54/xRVGnGBHwwK79A2SAfuKtr5Q1EkTJNV0hsWZ95rwJV+sKV0RTzGm OgO+WUm3fftsVw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:56 2026 by rpki-client