This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json) Hash identifier: tSHQXNgZzJL8n1waBtZTYpDCWB8nuN8vG2K36oitjmk= Subject key identifier: 32:13:EA:33:51:53:2F:64:2D:3A:C1:6A:ED:9E:C2:77:DD:8B:E3:FB Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Certificate serial: 019BF42BDC7020C43809DF32140F57DB74E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 08:01:13 +0000 Manifest this update: Sun 25 Jan 2026 08:01:13 +0000 Manifest next update: Mon 26 Jan 2026 08:01:13 +0000 Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=) 2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: OkhRuSoU6+YImDPZHX1FPRB6WwLDJmF+HHezL98XUmA=) 3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:dc:70:20:c4:38:09:df:32:14:0f:57:db:74:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Validity Not Before: Jan 25 08:01:13 2026 GMT Not After : Jan 26 08:01:13 2026 GMT Subject: CN=3213ea3351532f642d3ac16aed9ec277dd8be3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:07:a9:70:1b:11:18:49:7d:cc:73:e2:04: ed:54:81:6f:4a:ef:4f:64:63:ce:66:96:37:63:52: d4:e1:a9:2c:40:e6:4a:46:f5:dc:c8:f2:04:42:90: 9f:8f:26:82:9a:2f:9f:df:e1:19:76:3e:d2:99:fc: 4a:63:a8:d0:cf:f3:f3:95:f8:3c:d8:31:e8:90:5a: a1:c5:c1:03:e2:af:66:0e:4b:37:25:b6:44:f7:ce: 18:00:e5:3d:08:03:88:29:0d:d1:8a:d0:d0:f7:d7: 11:f2:fd:00:66:e5:5c:6d:63:49:a7:cf:c3:87:f2: c4:a4:11:8c:b9:cf:dc:dc:17:b1:9d:da:60:df:e7: 90:b6:d3:9b:1a:6a:c7:a8:a8:95:c5:b7:7f:95:a9: 3e:a3:41:9c:c3:03:0a:ce:aa:39:f4:86:63:b3:58: 8b:b3:e7:bf:1d:bf:5a:43:b0:7b:31:cd:89:39:69: 2b:19:c9:63:ec:8a:21:fe:1e:47:a0:e0:48:25:3e: 45:64:2c:6c:63:52:87:d1:cd:03:cb:8a:99:8d:2b: 17:00:05:18:57:fd:83:32:81:92:c2:71:60:06:78: b1:e8:c4:d9:8e:d2:17:9e:61:94:63:e2:9c:68:69: c7:44:27:a4:dd:d5:40:1b:30:2c:29:f4:55:a8:76: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:EA:33:51:53:2F:64:2D:3A:C1:6A:ED:9E:C2:77:DD:8B:E3:FB X509v3 Authority Key Identifier: keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:55:f7:a4:a5:b3:1b:fb:21:14:49:bf:b1:a4:6b:38:6b:52: df:07:4e:8a:21:5a:1d:45:2c:65:09:cc:fb:ba:80:5d:d4:eb: 2b:d5:da:cc:32:75:b7:bf:52:d2:b4:67:a4:b4:18:2b:68:e2: 3d:da:69:ec:bf:ef:bc:45:02:cd:18:65:18:a0:b6:97:fb:81: d0:dc:9f:e4:47:57:50:b4:ce:32:82:e4:c9:af:be:38:b5:6e: 3c:de:ec:f2:71:40:78:f3:be:15:25:80:d3:93:a7:58:d8:c9: a9:38:cb:7e:f7:12:07:59:a7:a8:21:f6:6a:f2:14:c0:58:58: e8:de:5d:b6:63:73:4c:c6:ee:70:f6:5d:de:20:dc:59:2b:bf: 00:48:55:3a:6b:25:76:f6:9e:3c:ef:44:11:f9:bb:f2:55:e9: 3b:61:e5:8a:ee:79:cd:36:37:01:9f:7b:6a:b3:6d:4f:d4:5e: b9:1d:57:35:98:05:5e:cc:3b:af:2b:61:c4:4c:a6:49:c0:97: 80:9e:a7:79:71:f0:2e:de:ae:f6:e2:85:98:fd:75:69:23:da: b6:89:9a:b6:e5:8d:10:56:23:f3:a9:85:c8:2c:4d:ca:ae:49: f6:5f:ea:78:a6:29:cb:2c:3a:fe:29:75:2e:ad:2a:35:ec:e0: f9:b1:ae:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9xwIMQ4Cd8yFA9X23TlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx MzUwYTEwHhcNMjYwMTI1MDgwMTEzWhcNMjYwMTI2MDgwMTEzWjAzMTEwLwYDVQQD EygzMjEzZWEzMzUxNTMyZjY0MmQzYWMxNmFlZDllYzI3N2RkOGJlM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HUHqXAbERhJfcxz4gTtVIFvSu9P ZGPOZpY3Y1LU4aksQOZKRvXcyPIEQpCfjyaCmi+f3+EZdj7SmfxKY6jQz/Pzlfg8 2DHokFqhxcED4q9mDks3JbZE984YAOU9CAOIKQ3RitDQ99cR8v0AZuVcbWNJp8/D h/LEpBGMuc/c3Bexndpg3+eQttObGmrHqKiVxbd/lak+o0GcwwMKzqo59IZjs1iL s+e/Hb9aQ7B7Mc2JOWkrGclj7Ioh/h5HoOBIJT5FZCxsY1KH0c0Dy4qZjSsXAAUY V/2DMoGSwnFgBnix6MTZjtIXnmGUY+KcaGnHRCek3dVAGzAsKfRVqHbjIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIT6jNRUy9kLTrBau2ewnfdi+P7MB8GA1UdIwQY MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4 LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFX3pKWz G/shFEm/saRrOGtS3wdOiiFaHUUsZQnM+7qAXdTrK9XazDJ1t79S0rRnpLQYK2ji Pdpp7L/vvEUCzRhlGKC2l/uB0Nyf5EdXULTOMoLkya++OLVuPN7s8nFAePO+FSWA 05OnWNjJqTjLfvcSB1mnqCH2avIUwFhY6N5dtmNzTMbucPZd3iDcWSu/AEhVOmsl dvaePO9EEfm78lXpO2Hliu55zTY3AZ97arNtT9ReuR1XNZgFXsw7rythxEymScCX gJ6neXHwLt6u9uKFmP11aSPatomatuWNEFYj86mFyCxNyq5J9l/qeKYpyyw6/il1 Lq0qNezg+bGuuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:30:02 2026 by rpki-client