This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json) Hash identifier: uM1hxD97bVT8I4TAH4sWWruKIZ41f2gvLcpix+/gnrc= Subject key identifier: 03:E4:B0:BC:B2:F4:3C:F8:4B:6C:C6:2F:4F:9A:EA:CE:37:17:07:F8 Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019BF6884B44F668A8B6235702A39984B0B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft Manifest number: 1803 Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=) 2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: vpUS8B23VsrdTb+OqCd1/hgPfDZVD/yy8YWTV4TJOvg=) 3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=) 4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=) 5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=) 6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=) 7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:4b:44:f6:68:a8:b6:23:57:02:a3:99:84:b0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=03e4b0bcb2f43cf84b6cc62f4f9aeace371707f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:b7:07:e5:9c:98:7e:7a:30:72:42:0b:10: 4b:b7:90:bf:67:e5:ae:b2:38:6d:9b:ad:b9:98:27: 17:a9:2c:b7:83:55:d5:3d:8e:b1:b2:f1:a6:47:20: c8:a9:61:68:62:7f:12:44:81:74:f2:0b:07:d2:e6: 61:8c:b8:2a:ba:4b:0c:fb:98:3e:14:45:ca:37:b6: 46:c0:5d:a3:25:ba:9f:5f:22:6b:1f:5e:b4:18:08: ef:cc:90:5e:bb:30:0b:bd:72:f4:bb:41:0d:85:e9: 7f:76:8d:0a:47:3b:8f:e8:8c:62:22:78:48:fa:a1: 71:29:c4:87:f6:cf:dd:c0:f2:4b:29:2d:a2:74:2c: 06:88:ff:d0:ff:41:e6:9e:30:32:7f:00:02:de:98: 5d:5c:3f:e5:6b:81:70:be:bf:49:ea:5b:a5:63:90: 3f:ff:cf:c5:ba:30:11:1f:6c:c3:cd:47:43:83:22: 64:23:ec:30:cd:21:6b:51:94:ff:c6:f3:06:f3:52: 3a:03:19:cb:7b:44:b7:c2:d1:fe:ff:a9:d2:6f:11: 73:07:52:09:7c:3a:ed:48:58:fd:e8:76:8d:9e:5f: 7c:f8:36:83:3f:79:6f:45:62:b9:e9:c0:b6:e2:85: 1b:98:e9:9e:46:5c:69:30:e5:a1:38:90:11:4b:88: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E4:B0:BC:B2:F4:3C:F8:4B:6C:C6:2F:4F:9A:EA:CE:37:17:07:F8 X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c0:d3:4f:74:b6:59:2e:f8:55:99:18:15:82:68:01:16:99: ac:f1:2d:04:26:a1:7f:7e:1f:da:da:69:60:09:64:70:9a:16: 5d:c7:5f:20:88:e7:ff:41:a5:b7:0d:8a:8c:ff:2d:ab:5c:09: 9f:32:0e:ce:de:09:21:3e:bc:04:8c:69:13:fc:59:02:d2:2e: 02:a4:c7:52:eb:2d:e4:31:f8:09:98:69:1a:7a:2c:d6:89:0e: f5:f4:4e:63:a1:0f:4f:72:ba:b6:a3:67:72:c7:a5:81:13:5d: e9:7a:06:c9:39:26:c7:b7:d3:2d:f5:73:ef:d1:9b:75:74:76: ec:11:99:40:f9:d3:a6:94:b3:4b:a8:ea:65:11:e6:b0:79:57: bf:ec:f7:7e:54:0f:2a:0e:ea:43:a2:8a:8f:e3:de:78:c0:e2: 1a:ad:7a:5c:23:b6:41:39:e5:a7:d8:43:34:34:a2:1a:31:5f: 6d:81:48:15:c1:09:f7:a2:fe:0e:28:81:f6:b9:ff:95:c7:f2: 75:0f:0d:3d:c8:f8:59:f9:b3:5b:ff:f8:70:fa:f3:47:dd:88: c3:51:7d:42:0e:e3:35:58:b1:87:b0:3c:37:b5:96:3e:c0:ae: 56:7a:8d:cc:78:34:31:9e:fd:fe:57:2b:6e:70:f3:09:22:a8: 7a:cd:a4:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEtE9miotiNXAqOZhLC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD EygwM2U0YjBiY2IyZjQzY2Y4NGI2Y2M2MmY0ZjlhZWFjZTM3MTcwN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAu3B+WcmH56MHJCCxBLt5C/Z+Wu sjhtm625mCcXqSy3g1XVPY6xsvGmRyDIqWFoYn8SRIF08gsH0uZhjLgquksM+5g+ FEXKN7ZGwF2jJbqfXyJrH160GAjvzJBeuzALvXL0u0ENhel/do0KRzuP6IxiInhI +qFxKcSH9s/dwPJLKS2idCwGiP/Q/0HmnjAyfwAC3phdXD/la4Fwvr9J6lulY5A/ /8/FujARH2zDzUdDgyJkI+wwzSFrUZT/xvMG81I6AxnLe0S3wtH+/6nSbxFzB1IJ fDrtSFj96HaNnl98+DaDP3lvRWK56cC24oUbmOmeRlxpMOWhOJARS4gyCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPksLyy9Dz4S2zGL0+a6s43Fwf4MB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8DTT3S2 WS74VZkYFYJoARaZrPEtBCahf34f2tppYAlkcJoWXcdfIIjn/0Gltw2KjP8tq1wJ nzIOzt4JIT68BIxpE/xZAtIuAqTHUust5DH4CZhpGnos1okO9fROY6EPT3K6tqNn cselgRNd6XoGyTkmx7fTLfVz79GbdXR27BGZQPnTppSzS6jqZRHmsHlXv+z3flQP Kg7qQ6KKj+PeeMDiGq16XCO2QTnlp9hDNDSiGjFfbYFIFcEJ96L+DiiB9rn/lcfy dQ8NPcj4WfmzW//4cPrzR92Iw1F9Qg7jNVixh7A8N7WWPsCuVnqNzHg0MZ79/lcr bnDzCSKoes2kqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:37 2026 by rpki-client