This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json) Hash identifier: zMhdq8qm6rtHeQcFgUl+c+FraQ4Isvmw/fkcScioz5c= Subject key identifier: 53:F1:0A:0D:17:43:13:8A:B8:59:AE:71:88:EF:CC:A2:B7:4B:78:53 Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Certificate serial: 019BF651D884DC46B17B6F5C6987093FC6A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft Manifest number: 159B Signing time: Sun 25 Jan 2026 18:01:57 +0000 Manifest this update: Sun 25 Jan 2026 18:01:57 +0000 Manifest next update: Mon 26 Jan 2026 18:01:57 +0000 Files and hashes: 1: FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (hash: dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=) 2: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: nbVm3tI7dCyIOkdKUo1PZjk/5usVCiJf0KLV/l38XRA=) 3: Ygz8nv_cil4CTr3aZUug7yPj4v8.roa (hash: PHkNGvc8VFiKuUZOzOtLVzJuZVZBuOD5WdBuF+PV+G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:d8:84:dc:46:b1:7b:6f:5c:69:87:09:3f:c6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Validity Not Before: Jan 25 18:01:57 2026 GMT Not After : Jan 26 18:01:57 2026 GMT Subject: CN=53f10a0d1743138ab859ae7188efcca2b74b7853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:b0:75:51:0c:cb:0f:d9:2b:6f:c9:31:12: 33:1b:d2:a8:eb:96:88:87:ad:c1:94:a4:09:2d:a6: bc:87:bf:0d:51:9f:95:85:3c:be:69:3b:54:6d:41: fe:d2:9a:23:48:69:e2:69:d2:6e:12:bb:fc:53:31: e0:4c:ed:81:89:f8:09:b3:f3:0d:b6:b3:32:d5:07: 0d:b1:b4:6b:20:4b:fd:88:07:5c:c2:9d:9e:43:3b: d8:78:16:d5:93:cb:d7:19:05:de:7b:1b:6c:82:c1: b9:f3:bc:20:2a:6d:0a:4a:8c:75:74:68:e1:e4:fe: 33:6f:cd:68:1a:e1:00:cc:1f:93:09:eb:60:83:ce: 58:43:d3:b0:86:13:fc:fe:61:f2:a3:c9:b8:21:9c: 1e:71:ec:7a:56:81:69:7c:a9:65:20:2e:a4:9d:7a: f3:92:b0:63:90:0c:30:fe:3a:4d:ab:c1:dc:39:a8: 8c:31:5a:f7:74:d3:4c:85:7e:69:c2:c8:50:f9:b5: e7:5e:f4:40:6a:a0:6c:74:85:d8:98:28:b0:2c:94: b6:dc:60:29:4d:06:23:58:fa:b4:e3:3e:e7:52:3c: aa:e8:ca:60:f2:28:89:70:4c:bc:88:ca:6f:cf:30: ab:d3:08:53:0f:2d:aa:da:a6:b6:41:03:0e:30:b8: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F1:0A:0D:17:43:13:8A:B8:59:AE:71:88:EF:CC:A2:B7:4B:78:53 X509v3 Authority Key Identifier: keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:38:0e:df:ca:9e:bc:66:60:86:e8:d0:72:10:9a:14:0a: 21:b4:5a:ef:7c:bd:f4:85:31:53:96:87:c0:37:0d:55:45:f1: c1:da:7a:22:80:c0:4b:6f:d9:33:17:eb:06:1f:c6:4d:02:6b: f2:64:02:1f:8d:db:e0:b5:6d:ee:a7:36:7a:2b:97:5d:46:bb: 87:fe:65:ec:ab:ad:ea:c2:88:57:1a:bd:77:96:ad:c6:c5:f1: 5f:d5:6b:5c:e5:cc:fc:ef:6d:a0:9e:74:57:89:f0:4e:97:a9: b2:f4:b2:44:02:4a:c9:13:c6:9e:63:3c:0f:3d:1e:d6:18:34: f3:84:e8:26:b6:f0:2b:10:0c:ac:9a:ef:50:e9:3f:b3:5f:9a: 7a:32:a4:83:77:f5:37:70:3c:9c:f6:85:65:fa:16:1f:aa:81: 45:49:1e:6b:5a:44:77:67:70:5c:90:45:2c:ae:d9:29:11:0a: bb:e2:f4:f0:2c:0a:73:cd:d7:f2:c1:5c:ff:1d:6d:1a:33:1f: 73:77:f7:85:18:eb:b5:2e:3c:b2:7a:4d:e0:7d:8a:79:66:c9: 36:83:43:f0:33:0c:ea:97:15:22:7b:d7:6d:9f:e8:44:3b:6f: f8:4e:71:32:29:06:1d:12:75:e8:0b:c7:78:9c:f8:63:46:f8: 0a:11:5f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UdiE3Eaxe29caYcJP8amMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3 NmMwMDcwHhcNMjYwMTI1MTgwMTU3WhcNMjYwMTI2MTgwMTU3WjAzMTEwLwYDVQQD Eyg1M2YxMGEwZDE3NDMxMzhhYjg1OWFlNzE4OGVmY2NhMmI3NGI3ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QiwdVEMyw/ZK2/JMRIzG9Ko65aI h63BlKQJLaa8h78NUZ+VhTy+aTtUbUH+0pojSGniadJuErv8UzHgTO2BifgJs/MN trMy1QcNsbRrIEv9iAdcwp2eQzvYeBbVk8vXGQXeextsgsG587wgKm0KSox1dGjh 5P4zb81oGuEAzB+TCetgg85YQ9OwhhP8/mHyo8m4IZwecex6VoFpfKllIC6knXrz krBjkAww/jpNq8HcOaiMMVr3dNNMhX5pwshQ+bXnXvRAaqBsdIXYmCiwLJS23GAp TQYjWPq04z7nUjyq6Mpg8iiJcEy8iMpvzzCr0whTDy2q2qa2QQMOMLhQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPxCg0XQxOKuFmucYjvzKK3S3hTMB8GA1UdIwQY MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkQ4Dt/K nrxmYIbo0HIQmhQKIbRa73y99IUxU5aHwDcNVUXxwdp6IoDAS2/ZMxfrBh/GTQJr 8mQCH43b4LVt7qc2eiuXXUa7h/5l7Kut6sKIVxq9d5atxsXxX9VrXOXM/O9toJ50 V4nwTpepsvSyRAJKyRPGnmM8Dz0e1hg084ToJrbwKxAMrJrvUOk/s1+aejKkg3f1 N3A8nPaFZfoWH6qBRUkea1pEd2dwXJBFLK7ZKREKu+L08CwKc83X8sFc/x1tGjMf c3f3hRjrtS48snpN4H2KeWbJNoND8DMM6pcVInvXbZ/oRDtv+E5xMikGHRJ16AvH eJz4Y0b4ChFfLA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:04:05 2026 by rpki-client