This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json) Hash identifier: qgyG/3jFzDn3Y54uX8lbPtzciBiT13v3j6xu+lc9r/8= Subject key identifier: A2:2D:E6:54:21:6E:02:D7:17:2E:D9:DC:D0:6E:23:A7:E1:A6:6B:46 Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33 Certificate serial: 019BF79A3AC59DF3B47F4B303D0ADC60EFB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft Manifest number: 152E Signing time: Mon 26 Jan 2026 00:00:38 +0000 Manifest this update: Mon 26 Jan 2026 00:00:38 +0000 Manifest next update: Tue 27 Jan 2026 00:00:38 +0000 Files and hashes: 1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=) 2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: tqfNzLFAn7K+Cdu8hRqRvQ0en7ohYiave//VS1YytXo=) 3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=) 4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:3a:c5:9d:f3:b4:7f:4b:30:3d:0a:dc:60:ef:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33 Validity Not Before: Jan 26 00:00:38 2026 GMT Not After : Jan 27 00:00:38 2026 GMT Subject: CN=a22de654216e02d7172ed9dcd06e23a7e1a66b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:71:cf:e5:5b:5e:39:16:e8:90:4f:b7:57: a8:46:c1:7c:91:46:35:f8:fa:60:75:fc:45:2c:41: 4d:48:c4:a8:c1:ca:e4:c5:6e:1b:98:89:c3:77:06: 02:de:86:5f:93:2d:06:37:43:8f:71:69:dd:89:ea: 5d:d1:aa:bb:ad:e8:25:73:4b:44:18:16:0e:36:7c: b7:ff:b7:67:39:8b:d6:8a:f6:7b:a8:68:73:86:23: 12:81:2a:85:11:15:db:26:b1:27:41:84:20:09:ad: cb:c0:13:d5:87:30:eb:75:fe:b5:82:ee:5b:81:61: 65:10:10:e9:4b:63:5e:4a:a4:60:b0:04:b9:f7:36: 3f:47:95:1d:c9:42:89:f6:f9:bc:80:fb:ee:e1:e1: 9f:37:2b:f5:c6:4e:72:02:81:ab:d2:f7:78:a0:fc: 75:62:c3:31:d0:97:d9:68:30:8a:b9:88:ca:21:32: 0e:40:c0:53:b8:fd:9f:0f:9c:a6:39:5d:c1:ea:d5: 25:5d:5e:ea:e7:0f:c6:7b:22:9c:a5:b7:b7:15:f0: 0c:67:ca:9a:b6:ec:d4:fa:96:0d:64:30:29:da:72: 92:01:31:b3:af:f3:c6:5e:cd:5b:ff:47:79:0e:32: 78:5c:f2:aa:cb:99:d9:29:f9:ea:43:f6:3e:8b:a8: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:E6:54:21:6E:02:D7:17:2E:D9:DC:D0:6E:23:A7:E1:A6:6B:46 X509v3 Authority Key Identifier: keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:1b:b5:82:18:2c:2b:fc:d9:2a:ae:b8:23:3e:ff:12:9d:49: 98:c0:d9:91:9b:8c:75:da:5d:86:ce:54:dd:6e:e0:ee:54:ed: d1:28:ee:3f:6c:6a:b5:93:68:6b:f4:c2:12:05:96:8f:b4:22: b2:03:74:6a:cf:6e:7a:6a:81:0e:3a:f4:94:5e:e1:29:4b:b7: e2:94:3a:81:f2:ab:f4:eb:26:31:96:1c:3c:cb:f9:35:ec:4f: 7a:a0:9c:9b:10:23:e2:f4:88:14:1e:e9:fc:9a:f5:d7:13:b8: 1b:5a:c3:ac:e5:94:1b:6c:d9:54:11:26:02:80:c1:ef:ea:98: 44:17:ad:50:b2:9b:6a:5b:29:75:bb:b6:7e:ec:63:cc:d1:c4: 1b:47:de:dd:31:b8:74:5a:88:c6:e1:92:9f:9d:42:a3:14:40: a7:59:d3:b4:01:2c:10:0c:89:16:bb:fa:7c:f5:6f:ac:55:25: 51:39:ac:14:6f:9a:9d:e1:d7:39:ec:6a:53:78:1f:c0:94:1c: 3c:55:98:e6:81:d5:85:a2:02:a8:3d:5c:0e:a7:44:73:71:17: 79:81:31:5e:5b:86:23:b2:bb:c7:2b:35:3f:d5:52:2f:aa:a8: c6:51:e3:3f:a8:b1:eb:11:89:21:88:9c:38:a1:81:2b:c6:d1: 5a:ad:11:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mjrFnfO0f0swPQrcYO+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi YTViMzMwHhcNMjYwMTI2MDAwMDM4WhcNMjYwMTI3MDAwMDM4WjAzMTEwLwYDVQQD EyhhMjJkZTY1NDIxNmUwMmQ3MTcyZWQ5ZGNkMDZlMjNhN2UxYTY2YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzJxz+VbXjkW6JBPt1eoRsF8kUY1 +PpgdfxFLEFNSMSowcrkxW4bmInDdwYC3oZfky0GN0OPcWndiepd0aq7reglc0tE GBYONny3/7dnOYvWivZ7qGhzhiMSgSqFERXbJrEnQYQgCa3LwBPVhzDrdf61gu5b gWFlEBDpS2NeSqRgsAS59zY/R5UdyUKJ9vm8gPvu4eGfNyv1xk5yAoGr0vd4oPx1 YsMx0JfZaDCKuYjKITIOQMBTuP2fD5ymOV3B6tUlXV7q5w/GeyKcpbe3FfAMZ8qa tuzU+pYNZDAp2nKSATGzr/PGXs1b/0d5DjJ4XPKqy5nZKfnqQ/Y+i6inoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIt5lQhbgLXFy7Z3NBuI6fhpmtGMB8GA1UdIwQY MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt ODE5MTdkZmZkY2Q3LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3 LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxu1ghgs K/zZKq64Iz7/Ep1JmMDZkZuMddpdhs5U3W7g7lTt0SjuP2xqtZNoa/TCEgWWj7Qi sgN0as9uemqBDjr0lF7hKUu34pQ6gfKr9OsmMZYcPMv5NexPeqCcmxAj4vSIFB7p /Jr11xO4G1rDrOWUG2zZVBEmAoDB7+qYRBetULKbalspdbu2fuxjzNHEG0fe3TG4 dFqIxuGSn51CoxRAp1nTtAEsEAyJFrv6fPVvrFUlUTmsFG+aneHXOexqU3gfwJQc PFWY5oHVhaICqD1cDqdEc3EXeYExXluGI7K7xys1P9VSL6qoxlHjP6ix6xGJIYic OKGBK8bRWq0RfA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:43 2026 by rpki-client