This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft File: aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json) Hash identifier: hBpMZwismvRP7R0eTR5M6H3FfmmEEpGk54EozNEIhVY= Subject key identifier: 77:67:F7:61:71:DB:F0:2A:FF:38:C9:DF:17:35:AB:82:39:3B:DB:7A Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Certificate serial: 019BF5E31FB09797E87AF0878D2862CF5970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft Manifest number: 131B Signing time: Sun 25 Jan 2026 16:01:01 +0000 Manifest this update: Sun 25 Jan 2026 16:01:01 +0000 Manifest next update: Mon 26 Jan 2026 16:01:01 +0000 Files and hashes: 1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=) 2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=) 3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=) 4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=) 5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: 2OsIlLOpR4lPWfT7PdWUeUzdcf+tiJDCtU4Ky0OLVMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:1f:b0:97:97:e8:7a:f0:87:8d:28:62:cf:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Validity Not Before: Jan 25 16:01:01 2026 GMT Not After : Jan 26 16:01:01 2026 GMT Subject: CN=7767f76171dbf02aff38c9df1735ab82393bdb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:37:c9:71:cf:e9:17:2f:26:0c:e0:3a:55:36: 02:c1:f6:f6:62:9b:65:3a:a2:c3:a4:52:ec:9b:3c: 98:31:18:28:5d:2f:7d:e7:49:88:00:bf:67:1f:61: 09:bd:13:6b:d8:e5:c5:c4:35:a8:0c:a4:35:d2:d9: d9:b8:04:e3:6e:14:77:60:15:84:78:ef:25:af:1f: 97:a3:e2:1a:5c:63:09:4b:b0:6b:89:c8:12:cc:e2: d2:12:e3:a7:aa:fa:2a:15:22:07:f1:06:5f:ea:e3: 30:11:8c:de:26:ce:3e:d3:7e:a8:78:67:b4:97:8f: 17:c0:a9:8d:ab:1e:50:92:48:c5:26:c1:d0:ce:b2: 76:03:43:d1:58:25:a9:c1:d1:e9:09:7a:2a:94:93: de:b8:96:31:2b:b2:08:5e:2d:20:7e:8c:2f:50:c7: 33:c1:c1:5f:ac:19:b8:2b:56:62:41:6a:bb:ed:35: c0:bd:fa:df:88:d5:83:ed:53:f7:ae:a8:62:a9:8b: 5f:8d:4e:e8:12:11:4a:7d:29:17:63:84:cb:9d:19: e8:b7:d0:cf:3b:b1:8e:f6:38:7f:6a:e5:ca:18:59: a0:d6:6a:9e:89:86:fb:39:49:03:b4:f9:58:ee:05: e1:6d:e5:35:67:74:90:36:ac:9e:a8:7e:a5:58:19: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:67:F7:61:71:DB:F0:2A:FF:38:C9:DF:17:35:AB:82:39:3B:DB:7A X509v3 Authority Key Identifier: keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:e9:7f:3f:49:fe:b5:db:3d:e7:8a:ce:32:4d:2a:81:aa: ba:31:69:cc:e7:fa:33:a4:06:29:ba:c6:1b:87:ef:db:a8:a5: 74:fa:e6:b7:ff:d5:b3:da:ac:ae:92:3c:7d:9e:50:f0:0a:a0: 1b:d5:c2:f8:d8:33:ac:35:4e:ee:63:56:be:b8:7c:94:fd:7d: 01:ee:73:66:3a:6e:75:74:5d:01:b2:ba:d5:f3:b2:03:79:5c: 49:b2:27:8f:ea:db:e7:49:e4:c3:d5:96:79:33:8b:51:5e:15: 12:96:f2:dc:38:3f:65:d2:67:29:13:9b:ba:88:d8:3c:81:d7: 00:1d:c7:e5:9e:cf:1e:d8:bf:54:ff:e4:fc:cd:0b:65:39:8c: ed:e1:c0:44:91:ca:96:52:ea:ed:10:62:15:cf:ad:15:3f:75: 11:02:a8:f1:1a:d9:d6:76:30:25:4d:5c:eb:5e:e7:61:99:24: 43:19:64:dc:2c:16:9e:4c:0b:71:f6:47:f5:4f:4c:5d:aa:ce: f7:e5:30:d0:80:23:86:f8:82:53:21:3c:53:61:ef:ba:71:a8: 8c:a1:4b:44:6f:e2:11:c9:d7:03:d6:2e:c4:77:8e:47:b0:d6: b2:11:d2:b2:00:78:1e:e3:c6:5f:74:4a:16:fa:bf:32:6d:06: 18:92:a6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14x+wl5foevCHjShiz1lwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll ZDIxMWQwHhcNMjYwMTI1MTYwMTAxWhcNMjYwMTI2MTYwMTAxWjAzMTEwLwYDVQQD Eyg3NzY3Zjc2MTcxZGJmMDJhZmYzOGM5ZGYxNzM1YWI4MjM5M2JkYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zfJcc/pFy8mDOA6VTYCwfb2Yptl OqLDpFLsmzyYMRgoXS9950mIAL9nH2EJvRNr2OXFxDWoDKQ10tnZuATjbhR3YBWE eO8lrx+Xo+IaXGMJS7BricgSzOLSEuOnqvoqFSIH8QZf6uMwEYzeJs4+036oeGe0 l48XwKmNqx5QkkjFJsHQzrJ2A0PRWCWpwdHpCXoqlJPeuJYxK7IIXi0gfowvUMcz wcFfrBm4K1ZiQWq77TXAvfrfiNWD7VP3rqhiqYtfjU7oEhFKfSkXY4TLnRnot9DP O7GO9jh/auXKGFmg1mqeiYb7OUkDtPlY7gXhbeU1Z3SQNqyeqH6lWBmutwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdn92Fx2/Aq/zjJ3xc1q4I5O9t6MB8GA1UdIwQY MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt NGIyZGExOTdhN2U2LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2 LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgbpfz9J /rXbPeeKzjJNKoGqujFpzOf6M6QGKbrGG4fv26ildPrmt//Vs9qsrpI8fZ5Q8Aqg G9XC+NgzrDVO7mNWvrh8lP19Ae5zZjpudXRdAbK61fOyA3lcSbInj+rb50nkw9WW eTOLUV4VEpby3Dg/ZdJnKRObuojYPIHXAB3H5Z7PHti/VP/k/M0LZTmM7eHARJHK llLq7RBiFc+tFT91EQKo8RrZ1nYwJU1c617nYZkkQxlk3CwWnkwLcfZH9U9MXarO 9+Uw0IAjhviCUyE8U2HvunGojKFLRG/iEcnXA9YuxHeOR7DWshHSsgB4HuPGX3RK Fvq/Mm0GGJKmbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:20 2026 by rpki-client