This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json) Hash identifier: Ro5rOa89VBtvwFn97O+6dwXprc8tCOr9AMmABS5eh2M= Subject key identifier: 33:37:35:F4:B1:D2:0F:29:17:F6:E1:22:AE:B4:B6:B1:22:53:0E:1B Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2 Certificate serial: 019BF7634B3B390E037A284BA08DF0D151B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft Manifest number: 0787 Signing time: Sun 25 Jan 2026 23:00:38 +0000 Manifest this update: Sun 25 Jan 2026 23:00:38 +0000 Manifest next update: Mon 26 Jan 2026 23:00:38 +0000 Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: ts5qEsW3bvbzeYrspO/iwSy0Fv6FrSF5t0XPr+uiZBo=) 2: tWUs5_OoSfOVpkRE9FrQnWN345I.roa (hash: Ik3wfYejmGeFJTK3ER8Y42u6+FSgfq4mC824weZ/UdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:4b:3b:39:0e:03:7a:28:4b:a0:8d:f0:d1:51:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2 Validity Not Before: Jan 25 23:00:38 2026 GMT Not After : Jan 26 23:00:38 2026 GMT Subject: CN=333735f4b1d20f2917f6e122aeb4b6b122530e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:56:ea:7f:56:44:62:02:17:9b:dc:db:cc: 6b:f3:13:1c:d2:98:cd:9c:e2:3f:b1:73:28:0e:20: 4f:dc:4b:95:48:bf:e2:5d:ab:4e:02:2f:6f:21:ea: 1d:9c:72:37:2b:21:e0:22:2d:53:8e:83:52:51:a9: 8a:dd:00:a2:df:fc:cc:07:65:f0:9a:8a:75:74:96: e1:4a:a0:5d:72:ff:c8:2d:f8:90:59:75:d9:4e:8b: 35:e0:44:ad:ac:d4:de:2c:56:2d:de:72:92:56:e4: 93:c8:08:e3:89:2f:1d:f4:38:bf:a5:3f:49:81:6a: b4:b8:72:60:3c:68:c8:aa:07:3c:f3:19:d1:a1:31: cc:ca:40:8b:6e:fb:08:87:93:04:cd:bd:f5:35:7f: 2c:f6:be:ff:84:62:d0:6c:ef:f5:90:ae:73:4a:a0: 66:b5:54:8d:58:d7:bc:95:b3:4c:29:45:be:66:65: 23:7e:d5:23:1b:df:09:07:9e:1d:ea:6a:f1:2b:cb: 75:5e:86:f3:6a:65:2e:4e:4e:b4:33:a3:c7:4c:04: 72:fd:93:c8:06:f9:51:f9:59:62:cc:6b:8d:94:5a: 06:ab:76:f3:06:27:a5:5d:6d:21:d8:59:98:7a:04: bb:6c:ba:fe:3b:e7:7b:e4:95:09:7c:34:34:fe:84: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:37:35:F4:B1:D2:0F:29:17:F6:E1:22:AE:B4:B6:B1:22:53:0E:1B X509v3 Authority Key Identifier: keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2c:fa:86:93:83:84:aa:3b:2b:9b:ab:0d:94:72:62:3d:32: 6c:dd:c9:b1:ff:11:ee:bf:c6:ad:dc:00:f7:ea:70:ba:e9:fb: af:2e:c2:66:4e:a9:65:ee:ef:33:ed:3f:80:bc:dc:ef:62:eb: e7:00:aa:8f:80:b8:d6:31:33:6c:42:ef:02:9c:04:b2:73:58: 19:f1:84:60:c8:54:23:dc:a4:f6:0e:cf:a6:16:c6:97:7c:24: 68:50:24:1f:7f:63:24:e2:3c:08:62:84:57:e3:11:43:56:ea: 31:e8:6c:3e:88:02:39:4f:fd:f1:d4:b3:fe:df:2e:5f:5f:7c: 5a:54:8b:21:bf:47:83:a4:a2:83:15:2e:e8:20:45:3e:c3:24: 40:30:05:e0:b2:6d:34:d2:3f:c7:17:fd:5b:94:e9:80:d9:1f: f5:65:c3:dd:81:26:71:25:ce:aa:f8:d5:2d:d5:bd:24:85:86: 3d:88:50:d6:fb:f2:2f:36:ed:3e:7e:ef:a5:95:af:b2:3e:1c: 0d:8e:7e:5b:64:4a:ce:08:e4:ac:aa:90:2d:db:d0:c3:9a:27: 24:b6:22:a3:fc:f6:06:64:8b:ea:96:c8:f9:6b:c1:d8:82:54: a4:70:21:3d:5a:a6:b0:3d:23:4d:61:51:3f:b6:40:2a:4a:95: 99:3a:d8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0s7OQ4DeihLoI3w0VGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz MWQxYzIwHhcNMjYwMTI1MjMwMDM4WhcNMjYwMTI2MjMwMDM4WjAzMTEwLwYDVQQD EygzMzM3MzVmNGIxZDIwZjI5MTdmNmUxMjJhZWI0YjZiMTIyNTMwZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+pW6n9WRGICF5vc28xr8xMc0pjN nOI/sXMoDiBP3EuVSL/iXatOAi9vIeodnHI3KyHgIi1TjoNSUamK3QCi3/zMB2Xw mop1dJbhSqBdcv/ILfiQWXXZTos14EStrNTeLFYt3nKSVuSTyAjjiS8d9Di/pT9J gWq0uHJgPGjIqgc88xnRoTHMykCLbvsIh5MEzb31NX8s9r7/hGLQbO/1kK5zSqBm tVSNWNe8lbNMKUW+ZmUjftUjG98JB54d6mrxK8t1XobzamUuTk60M6PHTARy/ZPI BvlR+VlizGuNlFoGq3bzBielXW0h2FmYegS7bLr+O+d75JUJfDQ0/oQYHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM3NfSx0g8pF/bhIq60trEiUw4bMB8GA1UdIwQY MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiz6hpOD hKo7K5urDZRyYj0ybN3Jsf8R7r/GrdwA9+pwuun7ry7CZk6pZe7vM+0/gLzc72Lr 5wCqj4C41jEzbELvApwEsnNYGfGEYMhUI9yk9g7PphbGl3wkaFAkH39jJOI8CGKE V+MRQ1bqMehsPogCOU/98dSz/t8uX198WlSLIb9Hg6SigxUu6CBFPsMkQDAF4LJt NNI/xxf9W5TpgNkf9WXD3YEmcSXOqvjVLdW9JIWGPYhQ1vvyLzbtPn7vpZWvsj4c DY5+W2RKzgjkrKqQLdvQw5onJLYio/z2BmSL6pbI+WvB2IJUpHAhPVqmsD0jTWFR P7ZAKkqVmTrYbA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:27:44 2026 by rpki-client