This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json) Hash identifier: sCiTXkUlV9ypzXXUU8AE6EW+NBzv4C1TZIADKGhQ9II= Subject key identifier: 1F:43:6D:C0:5A:5B:07:38:0A:0D:D8:DD:C7:55:2F:19:ED:59:C5:24 Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa Certificate serial: 019BF72D548C0B83E7A977DE174922CC928B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 22:01:41 +0000 Manifest this update: Sun 25 Jan 2026 22:01:41 +0000 Manifest next update: Mon 26 Jan 2026 22:01:41 +0000 Files and hashes: 1: GqjpIwPCfuY9AEJq32U-7x8s2Xc.roa (hash: hBgV71RI9VW14WRnhYAdkQpWE93JgEHcBWlBuGyNBy4=) 2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: tEwgtcLrU30rf9JaYUNMUdTtLoxAjug3/HdthbQ7lN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:54:8c:0b:83:e7:a9:77:de:17:49:22:cc:92:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa Validity Not Before: Jan 25 22:01:41 2026 GMT Not After : Jan 26 22:01:41 2026 GMT Subject: CN=1f436dc05a5b07380a0dd8ddc7552f19ed59c524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:97:2a:aa:eb:ea:d5:c3:38:54:56:35:0c:82: 6a:77:a3:fd:01:a6:a3:c4:cc:5c:84:b4:33:18:69: 39:4d:e6:15:69:d3:98:bf:35:7e:78:b4:eb:e7:35: 4a:93:75:93:7a:44:7a:d2:80:09:56:bd:cd:48:54: e5:cf:8a:af:09:69:db:39:69:0b:81:96:52:53:3b: 01:56:86:5b:e4:6f:14:a9:c5:67:41:2a:0e:09:92: 3b:1b:9a:0b:fd:32:16:59:d0:83:e6:f6:23:55:27: a1:8e:b7:33:16:ee:e7:12:77:80:d7:2c:10:e9:70: bf:50:08:30:52:56:56:15:06:67:fe:bc:45:94:bd: ad:22:dc:1c:1b:72:53:b7:4a:a0:e6:74:d7:48:14: d5:4c:91:83:97:6b:14:e2:53:b2:f8:13:74:30:94: 7a:f0:e3:e6:98:e5:e6:ac:93:f0:5d:bb:08:93:a2: 18:af:e4:0c:64:e5:6c:ca:c1:29:67:3c:25:3c:b7: 21:a5:c3:95:b7:c0:99:3d:46:08:09:17:96:e6:d6: 2c:13:f0:be:13:8c:00:c5:bf:73:5f:e8:9d:69:ae: 4e:42:32:ba:5e:ea:36:a1:f5:42:34:72:36:b5:c5: ac:dc:cd:a1:3d:48:25:06:db:33:ba:38:df:a7:ab: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:6D:C0:5A:5B:07:38:0A:0D:D8:DD:C7:55:2F:19:ED:59:C5:24 X509v3 Authority Key Identifier: keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ea:9c:ee:76:0a:87:20:90:0e:9d:db:7c:66:dd:d6:e8:e3: 19:46:17:c8:61:d5:55:ad:30:3c:e5:3d:8d:f6:3c:de:b6:c2: 17:07:94:db:02:fb:79:f3:42:49:67:8a:50:ae:5d:08:9b:67: 24:74:ea:c9:28:9e:40:1d:70:83:77:cd:4c:b4:65:6d:08:f2: 07:cc:49:15:1e:b5:ec:99:25:af:c3:37:d1:a3:0a:79:15:96: 0b:5f:34:aa:95:56:a6:07:e7:da:fe:df:05:ae:8e:da:5e:b9: f3:96:fc:d5:28:09:c7:4d:65:78:70:47:a1:14:c3:ca:2c:d3: 92:56:37:93:3a:a2:ea:91:04:6b:a0:be:a1:d0:e5:8c:dd:07: 53:cf:77:26:6e:d4:ea:84:13:fe:90:18:2e:22:3b:4f:8d:a8: 1a:06:10:55:53:72:70:3e:10:be:a1:6b:c7:5f:59:b9:9f:0d: 22:72:4f:1f:5f:ef:fe:87:78:1c:10:d7:53:dd:31:7d:f9:5e: 19:ec:3c:08:1f:d5:4b:c6:c2:f7:78:8e:a5:28:aa:8f:3d:5d: 04:39:c3:66:19:32:10:4e:c0:3f:43:e4:7e:4d:6a:bd:a0:4c: 5b:76:a4:2a:63:17:91:ca:fd:4e:eb:2a:ac:2f:be:7e:50:f1: c2:d2:da:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVSMC4PnqXfeF0kizJKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm MDdiYWEwHhcNMjYwMTI1MjIwMTQxWhcNMjYwMTI2MjIwMTQxWjAzMTEwLwYDVQQD EygxZjQzNmRjMDVhNWIwNzM4MGEwZGQ4ZGRjNzU1MmYxOWVkNTljNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pcqquvq1cM4VFY1DIJqd6P9Aaaj xMxchLQzGGk5TeYVadOYvzV+eLTr5zVKk3WTekR60oAJVr3NSFTlz4qvCWnbOWkL gZZSUzsBVoZb5G8UqcVnQSoOCZI7G5oL/TIWWdCD5vYjVSehjrczFu7nEneA1ywQ 6XC/UAgwUlZWFQZn/rxFlL2tItwcG3JTt0qg5nTXSBTVTJGDl2sU4lOy+BN0MJR6 8OPmmOXmrJPwXbsIk6IYr+QMZOVsysEpZzwlPLchpcOVt8CZPUYICReW5tYsE/C+ E4wAxb9zX+idaa5OQjK6Xuo2ofVCNHI2tcWs3M2hPUglBtszujjfp6sTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9DbcBaWwc4Cg3Y3cdVLxntWcUkMB8GA1UdIwQY MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+qc7nYK hyCQDp3bfGbd1ujjGUYXyGHVVa0wPOU9jfY83rbCFweU2wL7efNCSWeKUK5dCJtn JHTqySieQB1wg3fNTLRlbQjyB8xJFR617Jklr8M30aMKeRWWC180qpVWpgfn2v7f Ba6O2l6585b81SgJx01leHBHoRTDyizTklY3kzqi6pEEa6C+odDljN0HU893Jm7U 6oQT/pAYLiI7T42oGgYQVVNycD4QvqFrx19ZuZ8NInJPH1/v/od4HBDXU90xffle Gew8CB/VS8bC93iOpSiqjz1dBDnDZhkyEE7AP0Pkfk1qvaBMW3akKmMXkcr9Tusq rC++flDxwtLaTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:25 2026 by rpki-client