This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json) Hash identifier: 3OO7EtWPH75OOV9t+NNi8lP5gyKNBNFUB7BE7reW36I= Subject key identifier: 12:6C:E8:63:20:BE:20:D5:5C:80:D9:2C:01:5B:F1:36:80:CC:78:80 Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Certificate serial: 019BF8762DA4255793206A7E4D37A3CD5167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 04:00:53 +0000 Manifest this update: Mon 26 Jan 2026 04:00:53 +0000 Manifest next update: Tue 27 Jan 2026 04:00:53 +0000 Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: Mmtd0wssCrCay9olKrbNLwHv4NQHHJ+8lPR20vhobLY=) 2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:2d:a4:25:57:93:20:6a:7e:4d:37:a3:cd:51:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Validity Not Before: Jan 26 04:00:53 2026 GMT Not After : Jan 27 04:00:53 2026 GMT Subject: CN=126ce86320be20d55c80d92c015bf13680cc7880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:4b:23:13:e6:d2:98:35:a9:05:ba:20:a9: 10:d5:26:57:cb:3c:c8:fe:fe:3b:fa:a0:cf:25:6a: 4b:49:40:4f:71:f0:17:a1:c4:30:b4:8d:b6:b3:62: 77:e6:5c:0b:91:5f:6e:8d:3c:40:e1:5e:98:1a:95: 5f:44:57:fe:4e:d9:b4:0a:b6:7a:8d:1e:8d:f4:52: c2:b7:d1:39:ae:50:a0:1d:25:f5:8a:ab:46:5f:e0: c9:67:b2:86:75:7e:aa:d9:7d:c3:ce:06:b0:5a:e9: 65:67:d0:3e:65:73:80:56:ee:d4:53:0a:cf:6a:53: e5:94:bc:5c:c8:a3:de:e9:b7:1c:27:b3:24:c8:6e: 3b:1e:58:4c:0a:c0:ec:c1:9f:05:0b:18:79:3e:b1: 03:23:47:27:75:c6:25:c6:57:5a:04:27:fd:20:f8: be:3c:c2:d3:b8:f0:d2:c4:db:a7:62:05:ab:0f:90: 71:7a:fd:bd:55:38:35:2d:ee:b9:16:66:69:05:be: ee:59:09:ca:65:e5:7d:35:01:01:31:dc:e3:7f:25: c5:a2:4b:15:0e:1c:ed:ee:de:c0:19:d7:8c:e1:2d: 31:9c:fa:60:23:bb:50:59:b9:47:79:b8:c8:82:51: d3:57:4e:d7:79:3b:6d:ef:cd:ab:93:14:f0:13:da: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:E8:63:20:BE:20:D5:5C:80:D9:2C:01:5B:F1:36:80:CC:78:80 X509v3 Authority Key Identifier: keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f9:1b:11:3a:02:1d:2a:14:76:d7:eb:b9:5e:19:bb:82:b3: ee:a8:51:09:7d:5d:3b:1c:f3:c2:4c:9d:34:81:7f:a2:fe:e1: ee:65:fc:ad:ee:71:18:53:7f:8e:1f:71:13:74:33:e4:34:27: 01:41:89:dd:dc:cc:0f:d3:e8:bf:be:63:59:1f:4f:74:46:8c: 33:a0:3f:6c:b5:7c:fa:af:68:5f:8b:fb:f4:03:66:5d:8d:d5: e6:28:02:c7:e6:e8:bd:d3:fa:bd:34:6d:16:ea:93:07:6c:8b: 79:46:49:f0:3a:ed:a3:ea:aa:12:54:62:f4:65:a5:46:36:eb: 38:c6:1a:ae:6c:45:d2:28:92:b5:a7:1d:22:f2:aa:56:d2:a5: c3:65:29:ac:22:e3:c7:de:4c:06:02:8e:1d:ca:82:9a:fc:b8: 12:d4:cf:14:d0:e3:67:72:7a:ee:a3:ee:41:a5:61:90:25:82: 9a:11:bd:a7:c9:be:70:67:bc:54:34:72:24:54:37:14:bd:ca: 8e:29:a1:31:d8:bf:fe:15:4f:8c:7f:cd:2c:90:85:77:d4:ee: 65:f7:5e:dd:1b:48:f6:7d:a1:cd:fc:d9:7d:1f:78:f5:b9:c2: 6b:37:82:1c:bc:9e:16:0b:69:9b:d0:62:fd:7b:74:8e:8e:e2: f9:a3:47:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4di2kJVeTIGp+TTejzVFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz N2EzMjQwHhcNMjYwMTI2MDQwMDUzWhcNMjYwMTI3MDQwMDUzWjAzMTEwLwYDVQQD EygxMjZjZTg2MzIwYmUyMGQ1NWM4MGQ5MmMwMTViZjEzNjgwY2M3ODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDxLIxPm0pg1qQW6IKkQ1SZXyzzI /v47+qDPJWpLSUBPcfAXocQwtI22s2J35lwLkV9ujTxA4V6YGpVfRFf+Ttm0CrZ6 jR6N9FLCt9E5rlCgHSX1iqtGX+DJZ7KGdX6q2X3DzgawWullZ9A+ZXOAVu7UUwrP alPllLxcyKPe6bccJ7MkyG47HlhMCsDswZ8FCxh5PrEDI0cndcYlxldaBCf9IPi+ PMLTuPDSxNunYgWrD5Bxev29VTg1Le65FmZpBb7uWQnKZeV9NQEBMdzjfyXFoksV Dhzt7t7AGdeM4S0xnPpgI7tQWblHebjIglHTV07XeTtt782rkxTwE9r/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJs6GMgviDVXIDZLAFb8TaAzHiAMB8GA1UdIwQY MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPkbEToC HSoUdtfruV4Zu4Kz7qhRCX1dOxzzwkydNIF/ov7h7mX8re5xGFN/jh9xE3Qz5DQn AUGJ3dzMD9Pov75jWR9PdEaMM6A/bLV8+q9oX4v79ANmXY3V5igCx+bovdP6vTRt FuqTB2yLeUZJ8Drto+qqElRi9GWlRjbrOMYarmxF0iiStacdIvKqVtKlw2UprCLj x95MBgKOHcqCmvy4EtTPFNDjZ3J67qPuQaVhkCWCmhG9p8m+cGe8VDRyJFQ3FL3K jimhMdi//hVPjH/NLJCFd9TuZfde3RtI9n2hzfzZfR949bnCazeCHLyeFgtpm9Bi /Xt0jo7i+aNHBg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:48 2026 by rpki-client