This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json) Hash identifier: GH8MvOLbaZ77Uwl87n/w6ktgPJleeJEGD2oSE5Czx/4= Subject key identifier: 97:E5:84:11:B5:F5:00:FA:3D:C1:68:1D:8E:64:85:04:B6:36:CE:F1 Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Certificate serial: 019BF687B43AB6936393B4C2983EF79E2F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft Manifest number: 0EDA Signing time: Sun 25 Jan 2026 19:00:47 +0000 Manifest this update: Sun 25 Jan 2026 19:00:47 +0000 Manifest next update: Mon 26 Jan 2026 19:00:47 +0000 Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: IMdcdRcdoVe3/6nbNl8a3GktxJBk1tY5afhiPkn2SkM=) 2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b4:3a:b6:93:63:93:b4:c2:98:3e:f7:9e:2f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Validity Not Before: Jan 25 19:00:47 2026 GMT Not After : Jan 26 19:00:47 2026 GMT Subject: CN=97e58411b5f500fa3dc1681d8e648504b636cef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:ba:76:08:bc:ae:ab:53:e2:2b:55:7c:82: 43:4b:65:78:55:df:29:2e:78:2b:ab:03:61:f0:bd: 85:25:35:b5:e6:85:89:b2:ca:ab:a7:cc:27:41:7f: 94:f0:b2:e6:32:05:6f:39:a5:d7:c1:4c:b3:91:fc: 99:01:b1:4e:7c:ff:59:eb:05:6a:6d:e5:88:9a:74: f6:00:0a:04:89:e4:2b:66:89:31:00:15:f5:25:26: fc:1d:6c:70:71:3e:9f:1b:9f:ec:d6:0d:d1:3a:05: 7c:cc:3f:ff:a1:f0:9b:e8:8e:bb:fa:df:30:84:74: ba:6a:3a:61:c5:76:34:2d:a0:4b:ed:29:bf:0a:50: e8:d3:ab:e3:08:a5:16:ed:e7:63:f9:7c:0b:b5:69: aa:2a:6a:44:e8:4a:9a:23:4f:6a:a2:ad:a7:27:a4: 96:e5:cd:a6:79:fa:3a:47:cc:b6:b6:a2:44:b6:f3: 1c:3f:a2:a3:bc:1d:df:a1:cc:e1:7f:bd:b1:2b:27: 06:c3:0b:d0:ff:30:8a:12:a0:f9:d1:3b:8e:ea:00: 7a:db:0a:f0:c0:a4:5a:f1:2f:cf:b4:6a:e7:80:9f: ca:6d:8b:57:8e:89:cf:03:96:23:bd:5f:93:3b:77: ba:03:69:f8:6e:a5:bd:4f:7b:d8:e7:27:c2:7c:7c: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E5:84:11:B5:F5:00:FA:3D:C1:68:1D:8E:64:85:04:B6:36:CE:F1 X509v3 Authority Key Identifier: keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bc:17:e9:63:10:ee:2e:fd:d1:54:c0:08:86:cd:13:cd:7a: 71:4c:dc:af:39:7f:58:42:98:0b:24:af:cc:7e:75:1b:71:2b: b6:26:de:31:40:d4:0f:f0:eb:92:e0:00:31:c3:71:8f:44:e8: e9:57:8e:ba:53:53:42:66:85:c1:30:9d:81:88:e2:dd:a7:10: 4c:6b:fc:3a:46:cc:6f:ce:5a:f2:f7:2e:94:f4:a4:02:2e:62: 69:13:35:6a:9f:33:ba:c9:81:30:6e:40:6b:c1:49:74:69:51: 98:16:0f:78:2a:3b:91:ba:7d:03:f5:cb:73:fd:4f:f7:9b:4f: b1:64:d9:8d:68:85:a8:15:29:07:d5:df:f2:3d:14:dc:83:9f: cd:1d:67:a2:c1:ce:d1:a9:df:17:90:03:1e:47:d8:b6:5f:33: 39:55:74:e6:c0:28:24:ff:ac:c3:8c:8c:29:9f:b7:da:b8:cf: d4:b0:d4:31:45:40:bc:d6:0d:1c:40:5a:00:20:b8:8f:ce:7e: 37:d3:81:4a:54:c3:61:40:69:55:ca:77:63:22:cc:73:cc:a5: 17:ef:4a:f2:2b:7c:7d:3c:0a:c6:ec:8a:34:91:4f:36:f1:dd: 85:8e:6f:2d:99:14:79:05:60:38:63:6a:96:7e:7b:e8:40:7a: 14:e8:5a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7Q6tpNjk7TCmD73ni9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0 Mzk5NDEwHhcNMjYwMTI1MTkwMDQ3WhcNMjYwMTI2MTkwMDQ3WjAzMTEwLwYDVQQD Eyg5N2U1ODQxMWI1ZjUwMGZhM2RjMTY4MWQ4ZTY0ODUwNGI2MzZjZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7q6dgi8rqtT4itVfIJDS2V4Vd8p LngrqwNh8L2FJTW15oWJssqrp8wnQX+U8LLmMgVvOaXXwUyzkfyZAbFOfP9Z6wVq beWImnT2AAoEieQrZokxABX1JSb8HWxwcT6fG5/s1g3ROgV8zD//ofCb6I67+t8w hHS6ajphxXY0LaBL7Sm/ClDo06vjCKUW7edj+XwLtWmqKmpE6EqaI09qoq2nJ6SW 5c2mefo6R8y2tqJEtvMcP6KjvB3foczhf72xKycGwwvQ/zCKEqD50TuO6gB62wrw wKRa8S/PtGrngJ/KbYtXjonPA5YjvV+TO3e6A2n4bqW9T3vY5yfCfHwG+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJflhBG19QD6PcFoHY5khQS2Ns7xMB8GA1UdIwQY MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2 LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLwX6WMQ 7i790VTACIbNE816cUzcrzl/WEKYCySvzH51G3ErtibeMUDUD/DrkuAAMcNxj0To 6VeOulNTQmaFwTCdgYji3acQTGv8OkbMb85a8vculPSkAi5iaRM1ap8zusmBMG5A a8FJdGlRmBYPeCo7kbp9A/XLc/1P95tPsWTZjWiFqBUpB9Xf8j0U3IOfzR1nosHO 0anfF5ADHkfYtl8zOVV05sAoJP+sw4yMKZ+32rjP1LDUMUVAvNYNHEBaACC4j85+ N9OBSlTDYUBpVcp3YyLMc8ylF+9K8it8fTwKxuyKNJFPNvHdhY5vLZkUeQVgOGNq ln576EB6FOha7g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:15 2026 by rpki-client