This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json) Hash identifier: 3AW/fX/+2Xu3dqViQYhxhRbhCAWbzK5IGJXzD5Grbi4= Subject key identifier: C6:CE:43:27:A9:A8:91:97:0A:3A:0E:0D:9E:4F:C9:3F:1C:2D:97:4A Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019B9EC5B837F3401F5C9BC6DB7359CDC1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft Manifest number: 167C Signing time: Thu 08 Jan 2026 18:01:56 +0000 Manifest this update: Thu 08 Jan 2026 18:01:56 +0000 Manifest next update: Fri 09 Jan 2026 18:01:56 +0000 Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: YH3P9oy4JCmVbm1zkBuC1n26iajak8/E3gYcyGXnjmY=) 2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=) 3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=) 4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:b8:37:f3:40:1f:5c:9b:c6:db:73:59:cd:c1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Jan 8 18:01:56 2026 GMT Not After : Jan 9 18:01:56 2026 GMT Subject: CN=c6ce4327a9a891970a3a0e0d9e4fc93f1c2d974a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:d5:0a:36:30:d7:85:3e:f6:9c:3a:4a:f0: 2a:15:ac:f8:f0:8c:51:1e:48:da:0a:04:7e:a7:a4: 1b:a8:a4:3c:1c:9a:fb:2e:7d:34:37:9e:e3:56:c4: 41:0b:1f:a1:f3:9a:e5:e8:c7:e9:0a:5c:51:ea:d6: 20:ab:3d:da:0f:a0:05:bc:79:77:81:ae:b1:ef:4b: ac:0b:d7:7f:36:10:f1:7d:5b:60:a0:3d:99:e8:dc: a2:ed:28:b7:0f:67:19:f5:ba:04:97:bb:9d:8c:e1: 9a:00:62:e4:e6:3f:4d:e0:66:86:7f:98:bb:e2:3b: d9:10:b4:7a:f3:ab:5e:90:72:ce:13:52:4b:2a:5e: 8d:41:36:e8:10:78:f6:a8:0d:cb:8c:3b:37:e4:77: f9:81:4f:58:a8:d0:24:4b:b4:16:6d:43:af:f1:d9: d7:de:61:d1:a6:29:2e:ad:04:63:da:59:17:2f:48: f1:ea:73:51:2f:1e:8d:ce:79:17:2b:77:b1:85:f4: 8c:15:1e:fe:4f:4e:ff:08:bc:a8:af:8d:e0:e8:52: 15:d8:3f:4d:8e:a7:85:e6:78:05:22:1c:4e:c2:2e: 48:75:02:ad:84:9e:ac:98:29:88:6a:62:4b:80:3a: 0b:95:ee:2c:07:dd:da:f1:74:c7:9a:b4:62:6b:08: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CE:43:27:A9:A8:91:97:0A:3A:0E:0D:9E:4F:C9:3F:1C:2D:97:4A X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0c:31:98:ea:49:04:8d:9a:80:76:1d:c4:70:fd:2b:7a:60: 18:02:7a:f3:13:43:d0:a1:6a:12:64:48:d1:87:af:31:98:bb: b6:e8:e9:0b:42:43:bc:48:86:64:62:a3:99:ef:2c:89:28:9d: 0c:05:f9:cc:6d:b8:2c:06:c4:a2:10:4d:c7:35:92:44:88:68: 1c:0a:52:33:99:0d:b1:8a:56:de:16:17:9a:0d:e8:6a:71:6d: f9:29:79:48:ff:56:c4:0c:09:33:26:0c:fd:76:42:8a:c5:5f: 60:e7:12:01:ec:c6:16:80:a0:15:d6:45:ec:cd:22:7d:33:80: 93:9a:5a:7b:62:fb:60:fb:06:58:d8:16:78:6e:70:d3:d2:59: e0:df:25:db:7a:a7:68:01:1f:09:9e:c5:93:62:4d:90:3a:14: 1c:3f:23:8b:16:e4:62:3b:2c:a5:c6:42:94:48:cb:86:65:f0: 9f:98:a9:43:82:b9:cf:02:f6:df:f9:ad:23:1a:3a:35:f3:23: 49:22:95:5d:c6:a7:e7:1f:d0:76:5f:77:06:cc:7e:47:31:b6: d5:39:8e:53:c4:a0:b4:bd:68:c6:b5:e6:96:3a:34:07:56:58: f0:07:50:20:46:c3:04:e0:ed:a5:f7:2b:94:87:af:16:94:78: 17:c0:9e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexbg380AfXJvG23NZzcGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjYwMTA4MTgwMTU2WhcNMjYwMTA5MTgwMTU2WjAzMTEwLwYDVQQD EyhjNmNlNDMyN2E5YTg5MTk3MGEzYTBlMGQ5ZTRmYzkzZjFjMmQ5NzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfTVCjYw14U+9pw6SvAqFaz48IxR HkjaCgR+p6QbqKQ8HJr7Ln00N57jVsRBCx+h85rl6MfpClxR6tYgqz3aD6AFvHl3 ga6x70usC9d/NhDxfVtgoD2Z6Nyi7Si3D2cZ9boEl7udjOGaAGLk5j9N4GaGf5i7 4jvZELR686tekHLOE1JLKl6NQTboEHj2qA3LjDs35Hf5gU9YqNAkS7QWbUOv8dnX 3mHRpikurQRj2lkXL0jx6nNRLx6NznkXK3exhfSMFR7+T07/CLyor43g6FIV2D9N jqeF5ngFIhxOwi5IdQKthJ6smCmIamJLgDoLle4sB93a8XTHmrRiawjNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbOQyepqJGXCjoODZ5PyT8cLZdKMB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQwxmOpJ BI2agHYdxHD9K3pgGAJ68xND0KFqEmRI0YevMZi7tujpC0JDvEiGZGKjme8siSid DAX5zG24LAbEohBNxzWSRIhoHApSM5kNsYpW3hYXmg3oanFt+Sl5SP9WxAwJMyYM /XZCisVfYOcSAezGFoCgFdZF7M0ifTOAk5pae2L7YPsGWNgWeG5w09JZ4N8l23qn aAEfCZ7Fk2JNkDoUHD8jixbkYjsspcZClEjLhmXwn5ipQ4K5zwL23/mtIxo6NfMj SSKVXcan5x/Qdl93Bsx+RzG21TmOU8SgtL1oxrXmljo0B1ZY8AdQIEbDBODtpfcr lIevFpR4F8CerQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:25 2026 by rpki-client