This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json) Hash identifier: i8YGtyx5fIpcYMPVO7BNqEjchw5S4Nov/ya7qr7lGVY= Subject key identifier: BA:3E:5C:ED:2B:48:B2:5A:C8:C4:DC:1B:DC:04:3E:3A:E3:2B:4D:B8 Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Certificate serial: 019BF3F5AD2422B9054AE56AF57326978993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft Manifest number: 1394 Signing time: Sun 25 Jan 2026 07:02:02 +0000 Manifest this update: Sun 25 Jan 2026 07:02:02 +0000 Manifest next update: Mon 26 Jan 2026 07:02:02 +0000 Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=) 2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 2CqOcStEEqV8lKuJ6e36CT1v01stcYiNG/BMcUKlFQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:ad:24:22:b9:05:4a:e5:6a:f5:73:26:97:89:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Validity Not Before: Jan 25 07:02:02 2026 GMT Not After : Jan 26 07:02:02 2026 GMT Subject: CN=ba3e5ced2b48b25ac8c4dc1bdc043e3ae32b4db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:01:6b:4b:ce:f8:b5:a3:e5:ad:bc:f9:0d: 0b:79:7c:71:f5:b6:b3:07:9b:57:d2:04:17:a0:23: c0:13:ff:b0:f9:4f:37:44:1a:80:b8:61:5a:33:75: 2a:15:32:7a:4a:72:05:f6:29:26:a3:7f:a3:a7:5a: 35:63:27:e9:2f:84:3c:a1:69:f6:77:be:9e:53:37: 3d:b3:1f:84:27:b2:9f:9a:24:43:36:cf:8b:99:82: 94:01:e4:fc:ce:d0:60:68:68:cb:58:27:bf:01:51: 3e:1a:77:27:7a:4a:29:30:4d:22:38:3d:86:72:94: 93:c4:5e:63:a3:63:ec:ca:79:ea:e8:54:34:62:78: fc:66:f5:df:b2:b3:7f:3d:58:3e:06:2f:de:02:5e: 25:1d:4d:71:70:38:66:db:f1:59:de:5a:6e:a1:26: aa:00:63:3c:19:5c:4c:dd:9b:d0:ca:c3:fd:15:5e: b6:01:87:8f:9a:f2:d3:3c:67:80:4b:52:19:c0:d8: bb:5e:72:0e:e3:2d:ad:8f:5e:eb:00:b7:e4:b4:e2: 76:3f:65:63:cf:82:13:ea:66:d5:fa:35:38:15:a3: 63:b4:c4:6a:e9:31:9b:e6:f1:96:2e:31:38:35:93: 84:5f:a1:27:11:f5:ce:ef:65:d5:72:aa:04:25:e7: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:5C:ED:2B:48:B2:5A:C8:C4:DC:1B:DC:04:3E:3A:E3:2B:4D:B8 X509v3 Authority Key Identifier: keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1a:99:73:ca:b3:ca:e7:7c:85:f5:a4:34:ac:15:d1:95:bf: 9f:df:b4:19:88:e7:81:bc:67:0f:7a:1a:97:76:07:66:c3:19: 71:c6:55:fe:c5:61:1a:7e:40:6a:19:79:51:24:2f:a7:d5:e3: 60:64:08:71:7b:c0:50:96:95:17:33:80:74:0c:39:d3:70:77: 35:d1:ce:73:f8:c4:d9:ec:bb:66:19:20:6b:8e:6a:00:e7:80: b4:23:19:05:3a:04:77:38:3e:4d:50:6a:d1:d4:43:1d:03:0f: 91:5e:3f:29:11:bf:62:86:2b:1d:f1:27:17:0e:7f:cd:48:ae: cc:b9:ee:77:73:aa:ec:47:50:33:be:f0:ae:fc:ba:3f:d5:2a: d0:bf:0e:32:30:e9:00:8a:9f:ef:b7:1a:c8:49:02:a8:4e:6b: 83:56:6c:06:d7:a2:54:41:62:90:27:31:0a:d2:b0:35:21:c5: 33:a8:a2:29:3d:e3:d8:29:b3:a1:ae:b8:d9:5b:bb:c8:30:5a: 2b:e2:bd:3a:dd:2d:af:cc:61:5c:be:85:41:0d:14:41:6d:69: a0:e9:58:0c:2d:f3:e7:d6:34:29:d0:18:ad:18:f1:c5:f2:ae: c5:06:6e:f4:06:e5:8e:f6:2e:31:25:c1:08:19:8c:1f:46:54: 6c:86:33:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9a0kIrkFSuVq9XMml4mTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl MzA5MjEwHhcNMjYwMTI1MDcwMjAyWhcNMjYwMTI2MDcwMjAyWjAzMTEwLwYDVQQD EyhiYTNlNWNlZDJiNDhiMjVhYzhjNGRjMWJkYzA0M2UzYWUzMmI0ZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykkBa0vO+LWj5a28+Q0LeXxx9baz B5tX0gQXoCPAE/+w+U83RBqAuGFaM3UqFTJ6SnIF9ikmo3+jp1o1YyfpL4Q8oWn2 d76eUzc9sx+EJ7KfmiRDNs+LmYKUAeT8ztBgaGjLWCe/AVE+GncnekopME0iOD2G cpSTxF5jo2Psynnq6FQ0Ynj8ZvXfsrN/PVg+Bi/eAl4lHU1xcDhm2/FZ3lpuoSaq AGM8GVxM3ZvQysP9FV62AYePmvLTPGeAS1IZwNi7XnIO4y2tj17rALfktOJ2P2Vj z4IT6mbV+jU4FaNjtMRq6TGb5vGWLjE4NZOEX6EnEfXO72XVcqoEJefieQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo+XO0rSLJayMTcG9wEPjrjK024MB8GA1UdIwQY MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0 LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBqZc8qz yud8hfWkNKwV0ZW/n9+0GYjngbxnD3oal3YHZsMZccZV/sVhGn5Aahl5USQvp9Xj YGQIcXvAUJaVFzOAdAw503B3NdHOc/jE2ey7Zhkga45qAOeAtCMZBToEdzg+TVBq 0dRDHQMPkV4/KRG/YoYrHfEnFw5/zUiuzLnud3Oq7EdQM77wrvy6P9Uq0L8OMjDp AIqf77cayEkCqE5rg1ZsBteiVEFikCcxCtKwNSHFM6iiKT3j2Cmzoa642Vu7yDBa K+K9Ot0tr8xhXL6FQQ0UQW1poOlYDC3z59Y0KdAYrRjxxfKuxQZu9AbljvYuMSXB CBmMH0ZUbIYzZg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:39 2026 by rpki-client