This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json) Hash identifier: d0W49QgAom2nfij+DBbqJKi23dkKTjz2FFHewJ2VaQQ= Subject key identifier: 9C:DD:69:91:F3:8C:78:D1:EA:83:59:72:02:77:CE:23:9F:D0:1D:E3 Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Certificate serial: 019C08208741C7C137BDBE1286911CE4462C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft Manifest number: 1782 Signing time: Thu 29 Jan 2026 05:01:15 +0000 Manifest this update: Thu 29 Jan 2026 05:01:15 +0000 Manifest next update: Fri 30 Jan 2026 05:01:15 +0000 Files and hashes: 1: J2vsYiO_j7zPiKzW4JGDK-XoS3M.roa (hash: CDGBFZZXjqUOo82TFc4xaYNNSk3nq1xi7rB9+MvdQeA=) 2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: Bolbl7p6Ak3Amc9eZ11tbGncorqTYe1gHGWCuvQQ/h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:20:87:41:c7:c1:37:bd:be:12:86:91:1c:e4:46:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Validity Not Before: Jan 29 05:01:15 2026 GMT Not After : Jan 30 05:01:15 2026 GMT Subject: CN=9cdd6991f38c78d1ea8359720277ce239fd01de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:9d:20:e0:b3:87:dd:17:bd:fa:96:54:ff: b7:85:10:4e:58:73:e0:96:fe:08:93:05:76:83:e7: 4c:54:c4:ac:c1:5d:56:d5:57:ea:08:c0:4e:25:26: 3a:56:5a:9e:32:da:35:11:25:52:ee:03:b8:ec:24: 29:2e:13:e2:d4:72:c9:05:bd:5b:1e:ac:b9:db:17: 1d:2e:ff:02:b2:e9:f4:a7:bd:c3:68:6c:ea:8f:01: ae:4b:9a:f4:d2:4b:f7:cd:4b:2f:2f:87:62:ad:e5: 88:8c:77:be:9d:d2:a3:df:37:32:cd:62:73:27:4d: 92:a9:25:9f:a3:ef:fe:dc:4a:4d:0d:f3:f2:7c:1b: 53:30:68:1e:3e:00:9e:8f:53:da:dd:cb:ab:4d:eb: 94:54:2f:77:6f:1e:64:a4:0d:f8:f7:cf:49:c4:3a: 32:d6:3d:bf:a5:8f:76:c3:a5:e2:7c:93:b1:29:3f: 3c:ce:44:6a:90:31:a2:f8:bf:07:5e:23:6b:a8:16: 2d:11:ef:a4:ed:3f:f0:1c:d8:1f:b0:e9:86:6b:0d: 31:af:e5:f0:c1:3d:87:53:ad:a5:d8:b0:9c:19:56: 2c:a0:86:22:d4:78:e0:07:15:ce:ea:f0:8f:ec:f3: 50:05:a7:e8:ba:69:fe:9c:67:fc:f3:d9:2f:95:02: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DD:69:91:F3:8C:78:D1:EA:83:59:72:02:77:CE:23:9F:D0:1D:E3 X509v3 Authority Key Identifier: keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:42:77:34:bd:b7:f5:c3:8e:e2:12:f7:01:e6:c5:20:9e:85: b2:16:f3:ff:6b:73:d9:86:65:32:a4:e6:95:66:e6:5b:67:a5: fd:de:6a:12:07:d6:84:f7:4d:6e:3a:29:83:73:6a:6a:1a:5f: f2:fb:36:57:28:e0:11:a5:58:46:dd:17:51:ae:a3:35:09:d2: 08:71:1f:4a:21:29:4b:11:27:f4:c7:de:e1:e0:a9:5d:4b:8e: ad:42:5f:04:ce:e1:9f:42:6e:8b:c3:4a:9e:04:ca:8b:3b:12: 45:ff:59:04:b6:8e:5e:9b:d6:4c:0c:e7:77:f6:7e:ff:cd:be: ec:15:30:92:37:88:57:2d:2f:9a:67:b0:8b:36:15:34:b7:70: 73:05:30:63:9b:a9:2e:6e:02:da:b6:e1:ea:5f:bd:ba:b4:17: 2b:86:c9:b3:e4:85:30:d3:54:4c:9e:5d:80:0b:ca:84:96:fd: 95:e3:22:00:17:8d:a1:e8:de:42:8f:a1:72:ff:b6:0d:cb:e5: da:1b:50:a5:5a:a9:6b:d6:4b:3f:ff:58:3f:a4:2b:d4:9e:77: c6:ac:0a:76:2d:65:dc:40:a5:92:02:43:05:b6:16:9f:8b:83: c8:77:4f:28:0d:7d:50:95:97:4a:9e:93:25:d8:bc:c3:68:4e: de:66:83:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwIIIdBx8E3vb4ShpEc5EYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzg1NmU5NTZjNGFkZGI2MTU5OGYzYzI0ODlmMmJkZjZl ZDFkMTgwHhcNMjYwMTI5MDUwMTE1WhcNMjYwMTMwMDUwMTE1WjAzMTEwLwYDVQQD Eyg5Y2RkNjk5MWYzOGM3OGQxZWE4MzU5NzIwMjc3Y2UyMzlmZDAxZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaydIOCzh90XvfqWVP+3hRBOWHPg lv4IkwV2g+dMVMSswV1W1VfqCMBOJSY6VlqeMto1ESVS7gO47CQpLhPi1HLJBb1b Hqy52xcdLv8Csun0p73DaGzqjwGuS5r00kv3zUsvL4direWIjHe+ndKj3zcyzWJz J02SqSWfo+/+3EpNDfPyfBtTMGgePgCej1Pa3curTeuUVC93bx5kpA34989JxDoy 1j2/pY92w6XifJOxKT88zkRqkDGi+L8HXiNrqBYtEe+k7T/wHNgfsOmGaw0xr+Xw wT2HU62l2LCcGVYsoIYi1HjgBxXO6vCP7PNQBafoumn+nGf889kvlQJgqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzdaZHzjHjR6oNZcgJ3ziOf0B3jMB8GA1UdIwQY MBaAFLPIVulWxK3bYVmPPCSJ8r327R0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMt MWIwZWY0NGY3ODg0LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMtMWIwZWY0NGY3ODg0 LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUJ3NL23 9cOO4hL3AebFIJ6Fshbz/2tz2YZlMqTmlWbmW2el/d5qEgfWhPdNbjopg3Nqahpf 8vs2VyjgEaVYRt0XUa6jNQnSCHEfSiEpSxEn9Mfe4eCpXUuOrUJfBM7hn0Jui8NK ngTKizsSRf9ZBLaOXpvWTAznd/Z+/82+7BUwkjeIVy0vmmewizYVNLdwcwUwY5up Lm4C2rbh6l+9urQXK4bJs+SFMNNUTJ5dgAvKhJb9leMiABeNoejeQo+hcv+2Dcvl 2htQpVqpa9ZLP/9YP6Qr1J53xqwKdi1l3EClkgJDBbYWn4uDyHdPKA19UJWXSp6T Jdi8w2hO3maDXw== -----END CERTIFICATE-----Generated at Thu Jan 29 10:02:06 2026 by rpki-client