This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: l/rFTgOth2/c23bHmf5hLWpRnFV2NuUlfRN9YtpTDAk= Subject key identifier: 40:47:E4:8F:05:65:D8:42:7F:70:7C:BC:05:38:D7:5F:25:F7:5E:83 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019BF35079562FA1AEF002B86A080E91B14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 15AC Signing time: Sun 25 Jan 2026 04:01:36 +0000 Manifest this update: Sun 25 Jan 2026 04:01:36 +0000 Manifest next update: Mon 26 Jan 2026 04:01:36 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 5RWOU1CA4mGJMODtNywaRZ68vja1RVwcO7+vIPk18cw=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:79:56:2f:a1:ae:f0:02:b8:6a:08:0e:91:b1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 25 04:01:36 2026 GMT Not After : Jan 26 04:01:36 2026 GMT Subject: CN=4047e48f0565d8427f707cbc0538d75f25f75e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:99:ac:5b:38:e1:70:ba:ba:3e:de:03:a9: 52:1a:3f:98:0f:f7:aa:6b:0d:ee:12:ec:c5:71:ba: f6:9d:4f:e6:8e:6b:8f:da:8d:b2:8b:c5:f5:b3:d0: 40:08:95:e7:f2:10:d0:7f:30:e5:e2:94:03:00:29: cf:fb:bb:15:05:0e:3d:53:c7:29:c3:33:c2:a8:0d: 62:66:90:19:65:41:5d:18:02:17:e0:08:f3:bb:94: 0e:78:1d:97:16:d1:2c:d4:ed:60:10:6a:59:a1:04: 00:f2:e2:1a:d8:02:5b:33:ed:5a:ef:85:33:5b:3b: 51:ac:71:04:9c:18:5d:79:02:6a:24:6a:3c:93:77: 86:12:26:12:9d:fd:87:03:4a:52:e2:f8:ed:d1:39: c7:8f:2b:82:45:cd:3c:c0:22:d8:18:b6:a0:4e:cc: 36:76:da:82:24:b8:0e:57:c1:0d:02:5c:d8:9c:cf: b4:63:df:ac:9e:6c:3e:04:94:c4:d4:17:ff:e7:ae: 0c:02:4e:b7:aa:cf:02:32:14:13:09:60:6b:4f:14: b0:18:37:4c:0f:1b:5f:a0:78:70:b9:ae:f9:b5:a5: d8:a4:da:71:b2:6c:b3:c9:81:44:9f:36:79:e4:bf: ae:a1:06:84:38:a8:6d:83:76:ef:79:ad:4b:a6:ea: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:E4:8F:05:65:D8:42:7F:70:7C:BC:05:38:D7:5F:25:F7:5E:83 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b1:35:d1:f6:14:d8:34:6c:cd:86:27:ad:4c:1b:14:ba:8c: 89:06:b8:90:35:28:fc:b3:76:b5:ab:a8:61:cc:b6:68:0e:09: 65:2a:2b:27:12:42:63:ed:40:68:ef:d0:3c:b2:94:bb:1a:40: 94:72:d4:00:3f:87:7f:bb:ed:97:cd:6d:de:e4:5c:71:4f:da: 94:f4:eb:f6:f6:b3:d0:4b:49:e6:f0:35:e3:be:d2:0d:a7:f3: 36:af:6f:b5:d5:e8:ac:d6:2a:74:66:73:ef:ac:a8:fb:62:01: 8f:5f:42:59:d0:5e:ae:81:4d:a7:b0:07:11:98:47:8a:a8:98: 94:5f:79:3a:9f:1a:35:0d:5e:11:13:53:bb:18:bb:0d:37:0a: a7:3e:e8:1f:21:ad:c6:28:6f:b5:0f:eb:06:8b:db:d2:e7:95: 34:2c:88:54:ad:7f:96:86:5e:fb:78:71:b5:68:44:a2:be:83: ea:84:c7:c8:fe:67:cb:1f:95:80:25:22:cd:5e:67:4a:35:09: a4:a0:d7:84:5f:53:61:ab:b5:5b:9a:1b:c5:3a:b6:30:95:a4: 5c:22:83:6f:d3:a9:85:81:cb:a3:b2:6e:03:2c:cb:c7:50:dd: 75:4d:1d:9a:11:4a:26:10:80:64:b9:3e:34:90:be:99:0b:19: d5:12:c4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUHlWL6Gu8AK4aggOkbFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTI1MDQwMTM2WhcNMjYwMTI2MDQwMTM2WjAzMTEwLwYDVQQD Eyg0MDQ3ZTQ4ZjA1NjVkODQyN2Y3MDdjYmMwNTM4ZDc1ZjI1Zjc1ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleWZrFs44XC6uj7eA6lSGj+YD/eq aw3uEuzFcbr2nU/mjmuP2o2yi8X1s9BACJXn8hDQfzDl4pQDACnP+7sVBQ49U8cp wzPCqA1iZpAZZUFdGAIX4Ajzu5QOeB2XFtEs1O1gEGpZoQQA8uIa2AJbM+1a74Uz WztRrHEEnBhdeQJqJGo8k3eGEiYSnf2HA0pS4vjt0TnHjyuCRc08wCLYGLagTsw2 dtqCJLgOV8ENAlzYnM+0Y9+snmw+BJTE1Bf/564MAk63qs8CMhQTCWBrTxSwGDdM DxtfoHhwua75taXYpNpxsmyzyYFEnzZ55L+uoQaEOKhtg3bvea1LpurouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBH5I8FZdhCf3B8vAU4118l916DMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbE10fYU 2DRszYYnrUwbFLqMiQa4kDUo/LN2tauoYcy2aA4JZSorJxJCY+1AaO/QPLKUuxpA lHLUAD+Hf7vtl81t3uRccU/alPTr9vaz0EtJ5vA1477SDafzNq9vtdXorNYqdGZz 76yo+2IBj19CWdBeroFNp7AHEZhHiqiYlF95Op8aNQ1eERNTuxi7DTcKpz7oHyGt xihvtQ/rBovb0ueVNCyIVK1/loZe+3hxtWhEor6D6oTHyP5nyx+VgCUizV5nSjUJ pKDXhF9TYau1W5obxTq2MJWkXCKDb9OphYHLo7JuAyzLx1DddU0dmhFKJhCAZLk+ NJC+mQsZ1RLEvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:48 2026 by rpki-client