This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json) Hash identifier: rz5kRbf4cyH8RhReAbJG0gNXqWqXsFklotHFy574og4= Subject key identifier: 01:37:FA:BE:1B:E3:9A:B2:E3:BD:BD:2A:D3:F7:48:3C:A4:FE:3B:98 Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424 Certificate serial: 019C202895DE03B226C5816A63D5D9027107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft Manifest number: 0154 Signing time: Mon 02 Feb 2026 21:00:56 +0000 Manifest this update: Mon 02 Feb 2026 21:00:56 +0000 Manifest next update: Tue 03 Feb 2026 21:00:56 +0000 Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: 29PLQ0E576TYYrVecCZ+zrZQnnjq1AUiSjfDIQ0fhEs=) 2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:28:95:de:03:b2:26:c5:81:6a:63:d5:d9:02:71:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424 Validity Not Before: Feb 2 21:00:56 2026 GMT Not After : Feb 3 21:00:56 2026 GMT Subject: CN=0137fabe1be39ab2e3bdbd2ad3f7483ca4fe3b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:19:fa:db:7e:ff:b3:f6:ca:c0:a3:ce:b5: c2:d4:65:0f:ab:4f:59:7a:f5:3f:b4:9d:5d:e2:79: b2:2c:db:fc:43:0a:1e:d4:88:99:2d:9e:9c:38:c1: 12:bd:ae:81:55:f7:15:7e:20:0e:50:e7:93:0c:d2: 71:25:37:0f:b2:23:63:30:5a:fb:02:21:49:30:56: 44:94:f7:82:8a:be:9a:49:da:ef:34:0c:d1:e1:23: 3c:ac:98:fb:35:a4:09:2d:a0:b7:63:b3:78:33:7a: 2c:c4:77:9e:a8:0f:97:be:c5:a1:60:db:86:f9:73: c2:96:f1:c8:c4:a4:88:a2:a1:9a:7b:59:62:6a:83: a1:ee:0d:62:59:6b:69:77:f8:17:8b:ea:92:8d:4f: 48:d7:69:e3:b5:89:6b:7e:2e:08:fa:8b:8b:7d:18: d9:7d:56:f3:73:00:ce:19:47:97:52:b2:20:cc:54: 61:4c:f7:eb:d4:f7:7c:7a:71:d7:8e:07:4e:0c:7c: 21:c0:51:89:d5:0e:cc:cc:c0:9c:61:8e:44:ba:e4: 71:4f:eb:0b:ec:b2:eb:d4:1e:86:cb:41:28:47:44: c5:0d:ec:76:fa:07:e3:6e:ba:93:4c:60:20:3f:cb: 45:71:47:89:8a:e5:26:3f:ac:7a:2b:33:0c:80:44: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:FA:BE:1B:E3:9A:B2:E3:BD:BD:2A:D3:F7:48:3C:A4:FE:3B:98 X509v3 Authority Key Identifier: keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:73:02:92:b8:c2:3b:24:6a:95:b8:6e:b4:95:9b:83:75: fb:cf:c7:d4:2e:dd:a5:dd:64:a5:43:81:c8:3b:ac:e6:f3:20: 8d:d6:68:f0:5e:e2:e6:48:72:0b:e0:af:f2:bc:c0:7d:24:f3: d4:29:6a:4d:85:e6:2a:c7:2c:ba:64:27:07:f4:8a:b7:be:dd: 25:bb:ef:70:26:0e:42:3b:5c:0b:b5:d4:54:0d:5b:c2:39:e6: 38:df:e6:1b:3c:44:3b:0c:47:1c:d6:fb:0b:71:b5:cb:7e:e0: e2:5e:0c:2b:37:fc:1e:2e:d3:46:e2:5c:9f:84:6a:b0:4b:fd: b8:f8:13:45:8d:ff:05:01:a1:32:da:dd:86:db:f1:54:b9:68: 80:0b:0f:2a:5a:5c:cb:82:90:b0:c2:c5:8c:31:ab:c8:7f:07: 1a:29:2b:94:dc:77:68:6e:64:22:99:cc:6b:a1:9f:82:62:5d: 93:de:48:3f:44:09:45:b1:05:14:db:2f:20:8d:f4:84:bd:ef: df:46:1e:28:7a:f6:e3:0e:5a:e7:1d:7f:c9:23:c3:a6:67:7e: 48:13:7c:d9:70:36:99:54:59:c3:d1:02:67:36:02:6d:94:4b: f2:31:ed:f7:26:51:a5:1c:cf:b3:c0:03:09:87:34:fa:54:ea: c1:6c:b4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgKJXeA7ImxYFqY9XZAnEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3 M2U0MjQwHhcNMjYwMjAyMjEwMDU2WhcNMjYwMjAzMjEwMDU2WjAzMTEwLwYDVQQD EygwMTM3ZmFiZTFiZTM5YWIyZTNiZGJkMmFkM2Y3NDgzY2E0ZmUzYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T0Z+tt+/7P2ysCjzrXC1GUPq09Z evU/tJ1d4nmyLNv8Qwoe1IiZLZ6cOMESva6BVfcVfiAOUOeTDNJxJTcPsiNjMFr7 AiFJMFZElPeCir6aSdrvNAzR4SM8rJj7NaQJLaC3Y7N4M3osxHeeqA+XvsWhYNuG +XPClvHIxKSIoqGae1liaoOh7g1iWWtpd/gXi+qSjU9I12njtYlrfi4I+ouLfRjZ fVbzcwDOGUeXUrIgzFRhTPfr1Pd8enHXjgdODHwhwFGJ1Q7MzMCcYY5EuuRxT+sL 7LLr1B6Gy0EoR0TFDex2+gfjbrqTTGAgP8tFcUeJiuUmP6x6KzMMgER2xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE3+r4b45qy4729KtP3SDyk/juYMB8GA1UdIwQY MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAxzApK4 wjskapW4brSVm4N1+8/H1C7dpd1kpUOByDus5vMgjdZo8F7i5khyC+Cv8rzAfSTz 1ClqTYXmKscsumQnB/SKt77dJbvvcCYOQjtcC7XUVA1bwjnmON/mGzxEOwxHHNb7 C3G1y37g4l4MKzf8Hi7TRuJcn4RqsEv9uPgTRY3/BQGhMtrdhtvxVLlogAsPKlpc y4KQsMLFjDGryH8HGikrlNx3aG5kIpnMa6GfgmJdk95IP0QJRbEFFNsvII30hL3v 30YeKHr24w5a5x1/ySPDpmd+SBN82XA2mVRZw9ECZzYCbZRL8jHt9yZRpRzPs8AD CYc0+lTqwWy0pg== -----END CERTIFICATE-----Generated at Tue Feb 3 01:54:29 2026 by rpki-client