This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json) Hash identifier: GuZ4rvzmvEKMv90pl+SjJUdDqZYxwxzPaBo0FXl3tKE= Subject key identifier: E3:F7:5D:AA:99:59:F7:4D:40:77:D9:51:2E:A5:6D:2F:FA:38:75:A7 Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Certificate serial: 019BF53EA104F99B843772327475134DA738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft Manifest number: 1178 Signing time: Sun 25 Jan 2026 13:01:20 +0000 Manifest this update: Sun 25 Jan 2026 13:01:20 +0000 Manifest next update: Mon 26 Jan 2026 13:01:20 +0000 Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=) 2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: oXXIAfFh/0HLtlKdJWFwzcAqmmq0OSDi+zcVguAW3RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a1:04:f9:9b:84:37:72:32:74:75:13:4d:a7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Validity Not Before: Jan 25 13:01:20 2026 GMT Not After : Jan 26 13:01:20 2026 GMT Subject: CN=e3f75daa9959f74d4077d9512ea56d2ffa3875a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:33:18:55:ab:3e:32:d1:63:ec:b8:ad:02: cb:ef:1a:7b:21:16:bd:7d:40:ac:80:7c:af:cb:0f: 0e:88:54:12:5d:81:fb:1a:ea:09:3d:be:3c:d7:c6: 6c:9b:cc:8f:c0:0d:eb:a1:5b:c7:88:62:7e:85:63: 45:7c:b0:5e:e2:8e:03:c4:31:73:88:e8:42:04:d1: b6:d3:7c:a5:da:b5:04:f2:5a:18:65:31:8b:9b:d3: df:f7:aa:cf:54:c6:5b:dd:bb:f6:7a:82:69:65:a0: 59:b9:99:5f:f6:4d:51:6c:59:0c:88:5c:81:74:59: aa:d7:cc:65:69:0c:a2:da:f3:94:29:13:9e:96:2a: d7:45:3a:80:9d:f7:0d:f8:95:da:69:cb:09:39:7c: 9f:91:e7:a1:48:4d:48:2c:6b:0b:58:96:c8:10:26: 39:ee:45:0a:46:e1:42:73:a3:3d:5b:57:c8:01:71: 73:85:6c:30:88:1a:83:ea:48:76:42:1f:d7:ea:38: cd:d1:7d:bf:3c:a4:0e:ce:69:a7:93:84:24:32:49: 59:b6:52:c2:2b:f5:e6:86:3d:6c:d3:f0:ab:b5:30: 3d:3e:9d:90:40:96:b5:76:4b:a8:a4:34:11:6a:bf: 37:ba:4b:72:d4:a1:4e:c8:a9:96:a1:93:9b:01:23: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:5D:AA:99:59:F7:4D:40:77:D9:51:2E:A5:6D:2F:FA:38:75:A7 X509v3 Authority Key Identifier: keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0d:d6:18:f9:e1:9f:77:b2:ef:7f:51:c9:7d:53:63:9e:40: 95:a9:64:15:fd:36:f6:69:35:81:79:40:bf:7e:9d:17:70:e6: b7:11:9a:88:7c:8f:c6:16:04:1b:31:6c:37:23:af:90:2f:a8: d0:74:cc:65:f8:ff:36:ed:56:5d:82:5b:f4:f3:20:31:c9:b2: de:ab:e3:e5:b8:72:b5:fa:dd:f1:cd:15:3b:f8:5f:2e:c6:36: 93:93:d4:87:4d:8a:21:33:31:4c:5a:5e:13:66:e8:56:99:fe: af:dc:2a:3e:4a:5b:27:fa:9e:d7:b0:d9:41:ed:9b:f8:93:62: 2f:74:55:05:3e:f8:3b:35:e3:82:48:8c:a9:d6:3c:be:6d:a6: 1a:8a:44:a6:59:88:e5:38:38:56:fe:d2:26:79:5c:81:8a:f0: 24:1f:8e:34:a8:56:cc:c1:ff:cc:18:53:3e:65:4b:d7:b8:8d: 53:bc:32:1d:45:20:60:0f:98:b8:73:95:d3:fe:36:b8:07:49: be:a3:d3:71:3b:9f:8b:52:50:7e:be:18:fd:f0:de:ff:04:43: 8e:0c:1f:58:f5:dc:3d:f8:d5:5d:db:f3:f7:00:84:79:31:76: ed:fe:ab:58:f8:94:87:d2:9a:fc:0c:80:be:80:a2:e6:70:29: 72:46:c1:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqEE+ZuEN3IydHUTTac4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi YTljNGYwHhcNMjYwMTI1MTMwMTIwWhcNMjYwMTI2MTMwMTIwWjAzMTEwLwYDVQQD EyhlM2Y3NWRhYTk5NTlmNzRkNDA3N2Q5NTEyZWE1NmQyZmZhMzg3NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlIzGFWrPjLRY+y4rQLL7xp7IRa9 fUCsgHyvyw8OiFQSXYH7GuoJPb4818Zsm8yPwA3roVvHiGJ+hWNFfLBe4o4DxDFz iOhCBNG203yl2rUE8loYZTGLm9Pf96rPVMZb3bv2eoJpZaBZuZlf9k1RbFkMiFyB dFmq18xlaQyi2vOUKROelirXRTqAnfcN+JXaacsJOXyfkeehSE1ILGsLWJbIECY5 7kUKRuFCc6M9W1fIAXFzhWwwiBqD6kh2Qh/X6jjN0X2/PKQOzmmnk4QkMklZtlLC K/Xmhj1s0/CrtTA9Pp2QQJa1dkuopDQRar83ukty1KFOyKmWoZObASMMfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP3XaqZWfdNQHfZUS6lbS/6OHWnMB8GA1UdIwQY MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2 LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw3WGPnh n3ey739RyX1TY55AlalkFf029mk1gXlAv36dF3DmtxGaiHyPxhYEGzFsNyOvkC+o 0HTMZfj/Nu1WXYJb9PMgMcmy3qvj5bhytfrd8c0VO/hfLsY2k5PUh02KITMxTFpe E2boVpn+r9wqPkpbJ/qe17DZQe2b+JNiL3RVBT74OzXjgkiMqdY8vm2mGopEplmI 5Tg4Vv7SJnlcgYrwJB+ONKhWzMH/zBhTPmVL17iNU7wyHUUgYA+YuHOV0/42uAdJ vqPTcTufi1JQfr4Y/fDe/wRDjgwfWPXcPfjVXdvz9wCEeTF27f6rWPiUh9Ka/AyA voCi5nApckbBaA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:41 2026 by rpki-client