This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json) Hash identifier: ohkYqOWDrLajAg+pRQnIltApjR0QVwVbgHedbRctne4= Subject key identifier: FF:6F:47:58:8E:B6:06:81:BA:F3:FB:8F:B9:6D:53:8A:95:4C:32:05 Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500 Certificate serial: 019BF83F80DD8859272AC2A85869C6AB5D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft Manifest number: 1476 Signing time: Mon 26 Jan 2026 03:01:09 +0000 Manifest this update: Mon 26 Jan 2026 03:01:09 +0000 Manifest next update: Tue 27 Jan 2026 03:01:09 +0000 Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 3fHinvLoHXfwY2+b8E6WTQEPqC3X3y3Y9yEdqtXcltE=) 2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:80:dd:88:59:27:2a:c2:a8:58:69:c6:ab:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500 Validity Not Before: Jan 26 03:01:09 2026 GMT Not After : Jan 27 03:01:09 2026 GMT Subject: CN=ff6f47588eb60681baf3fb8fb96d538a954c3205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:26:93:63:97:11:ea:52:b3:ad:57:a5:73: b8:82:4b:01:f6:1e:ae:f7:9d:a9:ee:cf:d1:21:2e: d3:d5:95:d7:c1:82:c7:3c:bd:36:a0:c3:c0:01:87: 39:b6:bc:1b:40:f2:19:2d:18:5f:ad:4b:86:c4:ed: ce:8e:fd:e7:68:fe:a5:12:a1:60:fc:87:c5:74:3d: 97:db:54:c7:aa:53:82:79:2a:ed:77:c3:76:2c:95: 3b:a4:fc:0d:42:55:bd:27:03:a7:d3:ee:77:10:45: dc:5f:00:7c:a4:52:27:69:42:f2:76:55:68:9f:34: 24:56:cb:5f:b6:85:29:d7:c4:a2:83:db:78:bf:71: 28:70:42:1c:80:9b:f7:3a:ec:08:10:79:72:d0:74: 2b:51:bc:52:62:7b:88:71:69:ab:bf:97:c4:e4:1c: f0:6e:ea:4b:87:14:26:48:d6:f2:c4:bc:17:80:d1: ea:35:eb:f2:bd:5f:f2:9e:d7:b1:e9:f6:95:75:d2: 93:9e:80:fd:8e:ed:c6:b1:f2:16:7e:d3:28:1e:6f: c2:0f:cf:e4:75:3f:41:33:6f:96:a3:11:ce:bb:db: 94:cd:58:60:f7:2c:a4:d0:d3:52:23:55:12:e6:1c: 00:05:45:52:5e:64:cd:b5:6a:55:e1:ef:d5:9c:06: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6F:47:58:8E:B6:06:81:BA:F3:FB:8F:B9:6D:53:8A:95:4C:32:05 X509v3 Authority Key Identifier: keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1d:68:1d:9c:81:a2:ff:1b:7d:c0:b3:df:db:ca:fa:2e:d5: 4a:60:2a:af:e2:de:28:f9:58:cc:b6:7b:3b:20:91:c0:4a:2f: 6c:63:f2:ae:55:58:82:3c:2a:1a:9b:bd:e8:29:6d:93:a9:a1: 24:43:cc:a2:f5:f0:65:9f:3a:6c:44:33:9f:27:72:11:93:75: 43:3e:a3:97:ab:03:3c:c9:00:fb:23:4d:0c:a9:60:9f:57:3f: c5:a7:d3:45:37:25:b7:03:86:64:32:e2:fa:86:2f:4b:e7:cb: 7d:46:cb:d1:b0:1f:92:ba:69:e8:b5:8e:7d:21:8b:3a:be:e2: a2:7d:ca:7f:c6:93:6d:40:6b:fc:e0:9f:a6:a0:b8:e8:cc:30: 50:29:7c:7c:06:13:65:8a:ef:ae:db:ea:a9:3e:2b:45:69:c2: f5:5c:4e:5c:17:f0:0a:d2:e6:a3:5c:c9:92:6f:6f:7e:63:ef: 3f:24:62:69:13:a4:69:3c:d2:33:fe:46:db:54:96:48:87:4c: 23:f2:47:90:89:ee:98:1e:58:fc:61:ff:41:92:db:45:6a:fe: 80:76:18:f7:7f:9e:22:f8:cc:fb:ae:0f:54:8b:a5:92:27:d9: b7:92:f3:6f:c8:d1:0d:37:c0:c0:43:a4:47:00:bd:72:b4:ff: 96:d3:d2:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P4DdiFknKsKoWGnGq11JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz OTM1MDAwHhcNMjYwMTI2MDMwMTA5WhcNMjYwMTI3MDMwMTA5WjAzMTEwLwYDVQQD EyhmZjZmNDc1ODhlYjYwNjgxYmFmM2ZiOGZiOTZkNTM4YTk1NGMzMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSomk2OXEepSs61XpXO4gksB9h6u 952p7s/RIS7T1ZXXwYLHPL02oMPAAYc5trwbQPIZLRhfrUuGxO3Ojv3naP6lEqFg /IfFdD2X21THqlOCeSrtd8N2LJU7pPwNQlW9JwOn0+53EEXcXwB8pFInaULydlVo nzQkVstftoUp18Sig9t4v3EocEIcgJv3OuwIEHly0HQrUbxSYnuIcWmrv5fE5Bzw bupLhxQmSNbyxLwXgNHqNevyvV/yntex6faVddKTnoD9ju3GsfIWftMoHm/CD8/k dT9BM2+WoxHOu9uUzVhg9yyk0NNSI1US5hwABUVSXmTNtWpV4e/VnAZ3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9vR1iOtgaBuvP7j7ltU4qVTDIFMB8GA1UdIwQY MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0 LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx1oHZyB ov8bfcCz39vK+i7VSmAqr+LeKPlYzLZ7OyCRwEovbGPyrlVYgjwqGpu96Cltk6mh JEPMovXwZZ86bEQznydyEZN1Qz6jl6sDPMkA+yNNDKlgn1c/xafTRTcltwOGZDLi +oYvS+fLfUbL0bAfkrpp6LWOfSGLOr7ion3Kf8aTbUBr/OCfpqC46MwwUCl8fAYT ZYrvrtvqqT4rRWnC9VxOXBfwCtLmo1zJkm9vfmPvPyRiaROkaTzSM/5G21SWSIdM I/JHkInumB5Y/GH/QZLbRWr+gHYY93+eIvjM+64PVIulkifZt5Lzb8jRDTfAwEOk RwC9crT/ltPSvg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:17 2026 by rpki-client