This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: zIiFQqmqpcfuTe8kZzxmJ7tco1jYBq4wmWLiD+wFJZA= Subject key identifier: 9E:EA:19:C0:C0:25:9B:DE:05:D4:C6:6D:19:97:26:3E:2E:8E:76:F8 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019BF53EB0DF64DAAA602BEAF7DD8E866DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1808 Signing time: Sun 25 Jan 2026 13:01:24 +0000 Manifest this update: Sun 25 Jan 2026 13:01:24 +0000 Manifest next update: Mon 26 Jan 2026 13:01:24 +0000 Files and hashes: 1: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (hash: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI=) 2: 1DvNK1UEfocldcVoSCDz4-rQCu0.roa (hash: W9AE3etelZntnhp0Syb26y14LnYuyubNeRnjY+KTeic=) 3: 2osfvL67DJoldSiDF4PR7UDb-Fk.asa (hash: pYfpBcJ4cmAcBPsCiYsmdDQ6g93wwl6UaITv0MdLIHE=) 4: 5rkPYXEpgRvzPTucyjqYBpgUeYk.roa (hash: 7MvWTFZsobYNkMfS9BsnC/97q/D5gvNOhf8R5zgBI1E=) 5: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (hash: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA=) 6: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (hash: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw=) 7: FqNQkwV2PkUHvMVmXxQ_4Xh4Z4A.asa (hash: hkpJ0WmcrDsxGzzWcZrOMxEr2e+VC3Rb+eENHFvnu7o=) 8: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (hash: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E=) 9: PzoJn7JmNA7HLgDJj3qABg4rdIg.roa (hash: Pu8elV3ASkAhzzlLq5cnqoeSEZGr98s46wDdEgSzMVE=) 10: Rs1lwHsOhORTbpOYC0DdvHoRuG4.roa (hash: 2ldj5+OjHEBz42EYRxs+dDbaX+fxjP+Yz7ZHeTr6lGA=) 11: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (hash: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4=) 12: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (hash: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y=) 13: eLLgkJY0LUjDQzm5GuuyzsHUdO8.roa (hash: 5HseyNnROV3cBPGdpH59V7rf9Io+o9Vye7FV9A2XVfo=) 14: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: 8wDTR8BHbhOm7Ex7CBt8nWJMCMHV+2YLKyph3FvrA3w=) 15: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (hash: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k=) 16: qJ3niIVK-kPpD_FGpR52CMp181s.roa (hash: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:b0:df:64:da:aa:60:2b:ea:f7:dd:8e:86:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 25 13:01:24 2026 GMT Not After : Jan 26 13:01:24 2026 GMT Subject: CN=9eea19c0c0259bde05d4c66d1997263e2e8e76f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:a0:e5:b3:2a:72:1a:c3:3b:13:ba:3c:05: a0:15:8c:27:f7:ad:58:9d:17:83:8c:fb:44:9a:82: 13:71:e2:e9:01:30:f2:96:d9:06:4a:54:67:99:ef: 54:2e:f7:19:35:59:c8:3b:e9:ab:c4:4d:aa:6a:29: 89:b4:58:37:b9:5b:14:a8:fd:5b:0e:a2:dc:f3:9a: 74:c6:f6:b1:0c:cd:ba:6b:c0:aa:2c:24:39:a1:71: 25:c5:d3:15:68:68:8d:48:b7:d1:a8:e8:e9:cf:96: 2b:08:dc:4c:ac:9f:4f:48:ea:8b:d5:36:48:44:b1: af:e6:c4:6a:41:69:ab:e9:59:11:5f:f0:eb:f1:b2: c9:40:0b:ba:ff:98:6f:93:3b:ed:74:73:2c:f3:54: b7:22:d3:ea:a3:ff:a2:f9:b9:15:0a:25:6a:e3:80: 42:2a:88:3b:ca:42:07:4f:4c:21:27:95:1c:54:59: 6f:89:a9:8d:ea:7c:fd:dc:6c:d3:3e:4c:07:65:1e: 16:1a:ff:0a:8b:64:b5:21:ee:a0:d0:66:22:4e:3b: 84:9c:73:44:c6:9a:11:1d:4c:ca:34:0c:0a:45:06: b6:34:06:5b:f9:57:bc:9c:ff:0b:66:0a:52:ad:cc: e1:c4:17:f1:1d:c6:46:20:eb:2a:7c:10:2c:f8:5c: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EA:19:C0:C0:25:9B:DE:05:D4:C6:6D:19:97:26:3E:2E:8E:76:F8 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:01:ba:e5:d5:c4:17:f8:82:84:11:f4:dc:92:95:67:fe:ea: ba:de:bf:fc:a6:29:62:b6:60:1c:3d:c3:24:28:79:a7:12:20: 4f:df:dc:36:da:47:e7:94:6c:97:da:bc:e7:e1:2d:66:90:09: bf:24:52:22:c7:82:db:c2:56:b1:38:93:ff:76:fd:ca:c4:75: 54:0a:60:db:e6:d7:bb:55:13:71:b9:08:2f:37:b8:63:eb:fe: 91:eb:c8:33:3b:e6:34:38:07:d1:c0:c6:34:4a:7d:b3:5a:76: 36:00:02:98:c2:aa:95:ff:39:19:2e:98:71:ad:47:30:5b:86: 79:49:8d:75:94:6e:03:e8:0f:5b:a2:56:d4:04:e3:78:9d:16: e2:b9:ae:81:37:81:81:a4:af:54:9a:06:df:5d:3b:10:16:a6: 40:a9:39:ef:2d:0b:58:09:49:38:13:5c:53:03:b8:0c:3a:7a: 2d:28:95:d6:41:67:32:2c:0e:98:0e:8d:4b:0f:01:65:84:e7: ce:4a:f0:5e:ad:4c:40:20:83:06:e4:ac:3b:24:2b:2c:52:b9: 2d:fe:65:ef:ce:08:8a:48:c1:e4:12:e3:28:89:08:a5:13:cd: d6:56:5c:bb:d2:fd:7f:b9:db:78:46:8f:d3:20:d6:2f:2c:e5: 1d:9d:2a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PrDfZNqqYCvq992Ohm3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTI1MTMwMTI0WhcNMjYwMTI2MTMwMTI0WjAzMTEwLwYDVQQD Eyg5ZWVhMTljMGMwMjU5YmRlMDVkNGM2NmQxOTk3MjYzZTJlOGU3NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Kg5bMqchrDOxO6PAWgFYwn961Y nReDjPtEmoITceLpATDyltkGSlRnme9ULvcZNVnIO+mrxE2qaimJtFg3uVsUqP1b DqLc85p0xvaxDM26a8CqLCQ5oXElxdMVaGiNSLfRqOjpz5YrCNxMrJ9PSOqL1TZI RLGv5sRqQWmr6VkRX/Dr8bLJQAu6/5hvkzvtdHMs81S3ItPqo/+i+bkVCiVq44BC Kog7ykIHT0whJ5UcVFlviamN6nz93GzTPkwHZR4WGv8Ki2S1Ie6g0GYiTjuEnHNE xpoRHUzKNAwKRQa2NAZb+Ve8nP8LZgpSrczhxBfxHcZGIOsqfBAs+FyEnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7qGcDAJZveBdTGbRmXJj4ujnb4MB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngG65dXE F/iChBH03JKVZ/7qut6//KYpYrZgHD3DJCh5pxIgT9/cNtpH55Rsl9q85+EtZpAJ vyRSIseC28JWsTiT/3b9ysR1VApg2+bXu1UTcbkILze4Y+v+kevIMzvmNDgH0cDG NEp9s1p2NgACmMKqlf85GS6Yca1HMFuGeUmNdZRuA+gPW6JW1ATjeJ0W4rmugTeB gaSvVJoG3107EBamQKk57y0LWAlJOBNcUwO4DDp6LSiV1kFnMiwOmA6NSw8BZYTn zkrwXq1MQCCDBuSsOyQrLFK5Lf5l784IikjB5BLjKIkIpRPN1lZcu9L9f7nbeEaP 0yDWLyzlHZ0qWw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:55 2026 by rpki-client