This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json) Hash identifier: yaiegRxfNJPr2UERt64d79KcZ39WtinGXYegvjsccnc= Subject key identifier: FB:13:72:06:1A:8A:A3:16:5E:BF:E7:EF:02:D4:EB:01:4F:69:8C:2A Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Certificate serial: 019BAF4B2361345B3AD5361BD67C36181A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft Manifest number: 145C Signing time: Sun 11 Jan 2026 23:01:35 +0000 Manifest this update: Sun 11 Jan 2026 23:01:35 +0000 Manifest next update: Mon 12 Jan 2026 23:01:35 +0000 Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=) 2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: M6zWGoiXXovB6WvxfcCYOstfOZj0CLltFMRYhIVP+wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:23:61:34:5b:3a:d5:36:1b:d6:7c:36:18:1a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Validity Not Before: Jan 11 23:01:35 2026 GMT Not After : Jan 12 23:01:35 2026 GMT Subject: CN=fb1372061a8aa3165ebfe7ef02d4eb014f698c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:e2:ba:89:be:57:f4:18:cb:72:6e:8c:d2: 5f:16:0a:29:c0:e9:b1:24:39:cf:37:e8:5d:89:97: 75:4a:fe:59:42:a9:25:ea:2f:eb:19:65:47:43:17: 6d:cd:74:1d:ca:0d:db:7d:99:a1:c4:3a:4f:9c:1a: a3:19:bb:43:43:d8:e9:1d:77:8a:e9:6a:5c:0e:b2: 27:e6:a5:ae:56:25:8e:54:1d:76:ad:37:85:cb:89: 2f:67:1c:dd:27:f5:b9:d4:aa:ef:7e:3f:29:7a:27: 77:af:14:46:97:8a:72:e5:3e:21:88:4b:63:54:86: dc:33:da:ce:5a:a7:d4:58:ea:4b:79:ab:9e:4e:8b: 7e:43:92:78:9f:c4:4b:ee:6e:c8:f8:ec:31:42:1c: 57:d0:86:5f:d7:2f:79:4e:35:88:48:70:16:cf:4b: 28:f7:40:93:b2:a6:96:ba:44:23:3e:ed:4e:f8:ee: 8b:8d:5e:02:09:14:6b:2d:d8:ee:a6:ba:48:de:06: 25:25:e7:70:ac:ec:a5:f1:d2:5e:a7:a4:da:1d:fc: 90:9c:ad:a1:05:08:dc:b4:33:1e:75:c4:69:ea:76: 6e:80:fb:dd:7e:d1:59:7d:fc:72:bd:10:3f:e3:c0: 7c:91:ba:1e:cf:ab:2d:ab:f6:be:61:b7:06:54:f2: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:72:06:1A:8A:A3:16:5E:BF:E7:EF:02:D4:EB:01:4F:69:8C:2A X509v3 Authority Key Identifier: keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:0d:73:b2:d0:9a:32:cc:0d:d1:c2:df:60:25:d2:da:fc: 0c:d1:ba:94:80:71:eb:54:0d:44:16:e3:52:45:a5:8d:15:88: 2d:7d:2d:e6:a0:72:cb:7e:9d:ab:24:3e:16:13:42:07:f7:fe: e7:9d:97:cc:6f:63:88:80:9f:05:c4:6a:ec:03:ba:53:23:63: ed:c4:fc:0b:0b:0b:c1:a4:7a:36:ed:34:20:44:01:21:ba:3a: b4:71:e3:56:2f:32:a9:87:51:0d:8e:cf:8d:a6:04:0a:a4:0d: 1f:3a:ce:d1:d6:04:f7:38:9d:3e:1c:bd:4e:00:b7:37:2f:a2: ec:d5:94:1a:e3:75:4c:a8:73:e9:ec:69:71:b6:bd:99:7a:1b: 58:fb:1b:46:55:fc:37:98:a2:0e:03:e8:bd:d5:44:96:7c:4a: 30:b8:c5:a5:ea:84:48:ed:74:4c:12:c6:9d:3d:e8:ac:4f:16: d4:15:04:83:2c:22:f9:a6:d8:90:25:5e:49:e3:d1:18:24:15: 87:36:67:a8:aa:eb:d5:e7:3b:22:f8:c6:1d:99:fd:a7:f5:4c: 02:0f:3d:e5:0a:a4:20:e4:f1:bb:c3:63:6e:1e:2c:25:6f:e7: 5b:67:89:8c:26:29:06:5c:04:50:d4:27:28:2d:f9:39:21:31: 04:36:6c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSyNhNFs61TYb1nw2GBo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx NDc3ZWYwHhcNMjYwMTExMjMwMTM1WhcNMjYwMTEyMjMwMTM1WjAzMTEwLwYDVQQD EyhmYjEzNzIwNjFhOGFhMzE2NWViZmU3ZWYwMmQ0ZWIwMTRmNjk4YzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GXiuom+V/QYy3JujNJfFgopwOmx JDnPN+hdiZd1Sv5ZQqkl6i/rGWVHQxdtzXQdyg3bfZmhxDpPnBqjGbtDQ9jpHXeK 6WpcDrIn5qWuViWOVB12rTeFy4kvZxzdJ/W51Krvfj8peid3rxRGl4py5T4hiEtj VIbcM9rOWqfUWOpLeaueTot+Q5J4n8RL7m7I+OwxQhxX0IZf1y95TjWISHAWz0so 90CTsqaWukQjPu1O+O6LjV4CCRRrLdjuprpI3gYlJedwrOyl8dJep6TaHfyQnK2h BQjctDMedcRp6nZugPvdftFZffxyvRA/48B8kboez6stq/a+YbcGVPJoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsTcgYaiqMWXr/n7wLU6wFPaYwqMB8GA1UdIwQY MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEgNc7LQ mjLMDdHC32Al0tr8DNG6lIBx61QNRBbjUkWljRWILX0t5qByy36dqyQ+FhNCB/f+ 552XzG9jiICfBcRq7AO6UyNj7cT8CwsLwaR6Nu00IEQBIbo6tHHjVi8yqYdRDY7P jaYECqQNHzrO0dYE9zidPhy9TgC3Ny+i7NWUGuN1TKhz6expcba9mXobWPsbRlX8 N5iiDgPovdVElnxKMLjFpeqESO10TBLGnT3orE8W1BUEgywi+abYkCVeSePRGCQV hzZnqKrr1ec7IvjGHZn9p/VMAg895QqkIOTxu8Njbh4sJW/nW2eJjCYpBlwEUNQn KC35OSExBDZsyw== -----END CERTIFICATE-----Generated at Mon Jan 12 02:57:07 2026 by rpki-client