This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json) Hash identifier: 2LYZWWNVwjYaiipaX/jTBDCvgwskkePEqejrm2HljYo= Subject key identifier: 75:C3:6A:37:E7:7A:6D:62:E3:15:9E:9C:8D:32:00:36:23:2D:6E:82 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019BF79AD15DA965D0228D127EEE18448EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft Manifest number: 17B8 Signing time: Mon 26 Jan 2026 00:01:17 +0000 Manifest this update: Mon 26 Jan 2026 00:01:17 +0000 Manifest next update: Tue 27 Jan 2026 00:01:17 +0000 Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: LkxneqHiAqibPWGVxTVpPyAs1i2J7KoFPoXvvqksZ3E=) 2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:d1:5d:a9:65:d0:22:8d:12:7e:ee:18:44:8e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Jan 26 00:01:17 2026 GMT Not After : Jan 27 00:01:17 2026 GMT Subject: CN=75c36a37e77a6d62e3159e9c8d320036232d6e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:af:a7:b0:6c:10:ec:ed:2f:3d:ff:24:b5: 24:4f:79:6a:26:42:f4:b0:52:c3:bf:bc:12:2d:6d: d1:eb:c3:dc:c6:95:6e:de:a5:36:4b:cc:12:07:8d: bf:f3:c0:b8:1e:88:97:d6:56:05:56:81:52:86:5e: c9:c8:91:90:a2:7d:3d:99:8e:97:4c:df:0d:4f:2e: 35:97:4e:94:d9:ea:13:f9:dc:f3:10:e3:ff:a9:6e: 71:f9:2a:7e:9c:98:09:24:79:67:88:20:03:94:b8: bc:35:81:2a:89:97:8f:3b:43:05:be:a3:5d:e3:fb: 01:01:61:bf:9b:81:38:bb:a8:cc:46:be:3b:7a:6a: 3a:23:3b:fc:7d:0c:53:23:a2:7e:fe:5d:97:aa:7a: b4:16:3e:46:ee:77:46:f9:62:ac:06:c3:e5:1f:c1: 5d:63:8c:c9:f0:fd:e8:8c:45:8c:0f:46:be:18:d5: 0b:a4:45:86:46:77:c5:e3:f8:c4:0f:59:fc:42:75: b5:85:a8:8f:f9:72:af:23:69:3c:d3:b5:05:83:b0: 62:d0:c7:62:e7:ab:66:9b:7c:59:e9:fd:aa:6f:dc: b0:85:51:89:42:bc:24:a3:00:ed:23:38:84:f9:43: f7:e9:f1:ad:38:ec:d3:e5:62:bf:47:bd:20:6b:39: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C3:6A:37:E7:7A:6D:62:E3:15:9E:9C:8D:32:00:36:23:2D:6E:82 X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:4d:12:dc:32:5f:f4:a7:da:57:6a:42:3a:88:e1:d4:d9: 54:a9:7d:3f:67:f5:11:b6:32:29:70:38:bf:8c:cf:69:a7:66: 0f:e9:e1:3f:c5:a6:a9:8a:f7:c1:9a:10:61:07:82:b0:89:6c: 33:80:c2:8c:48:f0:93:be:c2:bc:f3:36:73:93:57:bb:3c:29: dc:23:7d:63:e6:31:2f:f7:a4:47:22:de:ba:0e:09:8b:50:5d: c1:aa:7c:58:fa:ed:18:e4:15:b3:42:ce:df:27:c5:61:27:a8: 20:ae:ff:00:c8:a3:6d:64:24:c7:b2:81:0f:fd:de:d7:d5:24: ec:4f:ea:8e:de:b1:52:55:dc:cb:a9:3c:0e:21:69:19:1e:0a: 14:20:03:44:7b:69:7c:f9:62:9b:f5:81:68:91:60:9f:16:ff: 36:ea:39:28:e6:ce:d7:fd:85:f2:6a:25:04:71:d4:d4:c6:22: e7:b0:9e:c4:c5:4f:62:3d:3a:e5:5f:e8:1b:6e:7e:01:a4:5a: f3:8b:43:97:2e:38:a1:92:fc:57:3f:48:11:97:2c:ff:6f:f3: 0c:f7:70:9d:e4:fc:02:50:dc:10:07:54:23:49:4e:fd:ce:29: 22:9d:57:7f:b8:70:73:b3:15:e4:12:10:b4:91:0e:e5:0d:aa: d9:0a:10:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mtFdqWXQIo0Sfu4YRI7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjYwMTI2MDAwMTE3WhcNMjYwMTI3MDAwMTE3WjAzMTEwLwYDVQQD Eyg3NWMzNmEzN2U3N2E2ZDYyZTMxNTllOWM4ZDMyMDAzNjIzMmQ2ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN6vp7BsEOztLz3/JLUkT3lqJkL0 sFLDv7wSLW3R68PcxpVu3qU2S8wSB42/88C4HoiX1lYFVoFShl7JyJGQon09mY6X TN8NTy41l06U2eoT+dzzEOP/qW5x+Sp+nJgJJHlniCADlLi8NYEqiZePO0MFvqNd 4/sBAWG/m4E4u6jMRr47emo6Izv8fQxTI6J+/l2Xqnq0Fj5G7ndG+WKsBsPlH8Fd Y4zJ8P3ojEWMD0a+GNULpEWGRnfF4/jED1n8QnW1haiP+XKvI2k807UFg7Bi0Mdi 56tmm3xZ6f2qb9ywhVGJQrwkowDtIziE+UP36fGtOOzT5WK/R70gazlDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXDajfnem1i4xWenI0yADYjLW6CMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkpNEtwy X/Sn2ldqQjqI4dTZVKl9P2f1EbYyKXA4v4zPaadmD+nhP8WmqYr3wZoQYQeCsIls M4DCjEjwk77CvPM2c5NXuzwp3CN9Y+YxL/ekRyLeug4Ji1Bdwap8WPrtGOQVs0LO 3yfFYSeoIK7/AMijbWQkx7KBD/3e19Uk7E/qjt6xUlXcy6k8DiFpGR4KFCADRHtp fPlim/WBaJFgnxb/Nuo5KObO1/2F8molBHHU1MYi57CexMVPYj065V/oG25+AaRa 84tDly44oZL8Vz9IEZcs/2/zDPdwneT8AlDcEAdUI0lO/c4pIp1Xf7hwc7MV5BIQ tJEO5Q2q2QoQxw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:28 2026 by rpki-client