This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json) Hash identifier: HL8Wf8zHfFj/mAtZkhthrvi05srUcuzBTDljW1vZRIU= Subject key identifier: 79:C7:A2:92:8F:BE:78:94:4B:92:A0:13:1B:52:B5:32:D5:B0:62:B4 Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Certificate serial: 019BF95225E208E09EF0601238725DABDEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft Manifest number: 14D6 Signing time: Mon 26 Jan 2026 08:01:09 +0000 Manifest this update: Mon 26 Jan 2026 08:01:09 +0000 Manifest next update: Tue 27 Jan 2026 08:01:09 +0000 Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: JHi94WWeDaHYOsHlG5AiouttmygbhTMlAHbhEfDP9+k=) 2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:25:e2:08:e0:9e:f0:60:12:38:72:5d:ab:de:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Validity Not Before: Jan 26 08:01:09 2026 GMT Not After : Jan 27 08:01:09 2026 GMT Subject: CN=79c7a2928fbe78944b92a0131b52b532d5b062b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:01:19:d1:d4:e2:bf:0e:66:da:8e:80:6d: 42:d4:4a:a4:f9:29:f2:af:b3:66:bb:c7:32:e6:c5: 9f:95:75:63:18:f7:67:ad:02:05:ee:96:46:46:69: ba:d5:95:44:67:15:a8:fe:42:fb:4f:12:2f:85:76: 0e:8d:0f:85:36:5f:6a:ee:28:77:0d:85:68:27:22: 1b:49:1e:36:b7:b9:7f:49:a8:93:b9:63:b9:4f:f2: 26:06:f7:62:ef:49:23:3f:ea:65:d1:39:4d:38:ec: 0c:a9:56:91:27:60:7d:de:4a:31:5e:90:40:4a:8b: 53:0b:29:66:f6:8f:18:51:05:5c:0f:43:6e:05:ef: 73:82:a0:24:f1:bf:c2:39:46:1d:8a:4c:86:e6:50: 4d:f1:0b:9f:6a:9f:f0:7e:ee:00:12:76:98:dc:23: eb:aa:19:37:0c:7a:9a:90:13:bd:31:a9:4c:8d:46: ed:72:2e:2c:68:9c:6c:a0:20:c7:2f:45:21:ac:40: 8b:1f:cf:24:12:9d:11:34:d7:ef:5e:f6:16:4b:0c: 08:60:36:2a:66:11:f8:f3:58:82:ff:a5:bb:78:87: 7f:87:9f:d3:9d:19:4c:af:3c:78:bd:7f:44:d2:b7: c7:f5:81:22:02:5b:5e:9e:97:51:8f:a9:c5:e2:48: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C7:A2:92:8F:BE:78:94:4B:92:A0:13:1B:52:B5:32:D5:B0:62:B4 X509v3 Authority Key Identifier: keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f7:d0:c4:1b:c4:b2:27:3d:bd:da:22:1f:79:57:b0:d3:a6: e5:63:ea:d7:0e:c2:05:a7:d3:f3:37:a9:f0:1e:bc:a1:79:e9: f9:a2:44:72:0c:e0:d1:9b:81:7f:05:e4:38:c9:dd:d5:0a:0a: 50:bd:31:39:c6:d7:4d:49:3f:57:3a:7f:95:21:35:b3:28:17: 2f:72:92:97:bb:16:0a:99:37:a2:79:98:f1:33:c5:e4:fd:54: 1b:11:8c:93:a9:b9:4b:a4:42:00:b7:d3:b3:02:fd:25:cb:3f: 22:33:4f:65:ad:4b:9a:cf:d4:72:d2:e0:99:ae:40:ad:9e:b1: 2c:59:03:3f:00:36:41:2c:8d:7c:80:f3:d6:7e:b9:dd:4f:82: 46:9e:e5:67:6f:71:a3:fc:be:be:8b:7e:49:51:2f:21:20:a6: e0:40:99:88:b7:2d:02:e3:58:34:d3:eb:58:42:fd:c5:a3:b7: 73:2b:48:a8:ec:ce:d5:e2:dc:ce:58:e0:55:ee:a2:88:be:96: be:dd:79:f2:ec:e9:35:bb:2b:0c:9b:cb:90:37:fb:60:bb:99: ee:b2:57:e0:71:d6:cc:64:77:cf:9b:b3:50:40:be:cc:8c:1a: a9:3d:a8:e8:7e:e8:19:61:09:20:2e:d5:a0:51:66:3b:3a:bc: c9:d9:95:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UiXiCOCe8GASOHJdq97cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky YzI3OWUwHhcNMjYwMTI2MDgwMTA5WhcNMjYwMTI3MDgwMTA5WjAzMTEwLwYDVQQD Eyg3OWM3YTI5MjhmYmU3ODk0NGI5MmEwMTMxYjUyYjUzMmQ1YjA2MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bkBGdHU4r8OZtqOgG1C1Eqk+Sny r7Nmu8cy5sWflXVjGPdnrQIF7pZGRmm61ZVEZxWo/kL7TxIvhXYOjQ+FNl9q7ih3 DYVoJyIbSR42t7l/SaiTuWO5T/ImBvdi70kjP+pl0TlNOOwMqVaRJ2B93koxXpBA SotTCylm9o8YUQVcD0NuBe9zgqAk8b/COUYdikyG5lBN8Qufap/wfu4AEnaY3CPr qhk3DHqakBO9MalMjUbtci4saJxsoCDHL0UhrECLH88kEp0RNNfvXvYWSwwIYDYq ZhH481iC/6W7eId/h5/TnRlMrzx4vX9E0rfH9YEiAltenpdRj6nF4kjFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnHopKPvniUS5KgExtStTLVsGK0MB8GA1UdIwQY MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2 LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/fQxBvE sic9vdoiH3lXsNOm5WPq1w7CBafT8zep8B68oXnp+aJEcgzg0ZuBfwXkOMnd1QoK UL0xOcbXTUk/Vzp/lSE1sygXL3KSl7sWCpk3onmY8TPF5P1UGxGMk6m5S6RCALfT swL9Jcs/IjNPZa1Lms/UctLgma5ArZ6xLFkDPwA2QSyNfIDz1n653U+CRp7lZ29x o/y+vot+SVEvISCm4ECZiLctAuNYNNPrWEL9xaO3cytIqOzO1eLczljgVe6iiL6W vt158uzpNbsrDJvLkDf7YLuZ7rJX4HHWzGR3z5uzUEC+zIwaqT2o6H7oGWEJIC7V oFFmOzq8ydmViw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:36 2026 by rpki-client