This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: B3kl3ywHLtt/rItzgmtn1Ny+SBPFNViZpdgoSUEZqu4= Subject key identifier: 41:04:DC:B1:71:F8:71:E8:83:DF:84:DA:A1:6E:32:08:76:12:95:D0 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019BF72CFE2625D4340C332AEBA3DCD9BA3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 1703 Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: /eu4oxKz+/iSa1O1ACy3wTTfV6cWuEkyWNltB5GOEcQ=) 2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=) 3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=) 4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fe:26:25:d4:34:0c:33:2a:eb:a3:dc:d9:ba:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=4104dcb171f871e883df84daa16e3208761295d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:63:dc:19:21:c8:bd:44:27:3b:d1:56:22: 40:7d:9a:ca:3d:b4:3d:37:87:d2:d7:6b:a9:80:0e: 90:6d:0d:ad:5b:0d:ce:c5:4d:26:ff:8d:be:c6:39: 75:27:88:99:12:53:71:c0:65:2c:70:ff:33:71:0f: 71:bb:1e:44:75:77:7d:98:bf:e5:00:b9:e4:05:87: 53:ec:3f:c3:7b:b0:da:e8:aa:fb:96:43:3c:3f:ee: e5:a6:90:0c:aa:3a:82:c4:3b:6f:52:21:ad:43:b5: 4c:dc:d9:2a:86:43:47:65:f3:f0:7d:27:95:37:e9: bd:fc:d8:05:f5:42:74:99:23:03:60:1d:4b:ae:4b: a8:f0:e5:37:79:f7:2a:4e:88:ab:75:a5:46:41:45: 1e:e8:56:2e:e8:1f:6b:66:be:3b:29:f3:5b:91:03: cb:52:3a:5b:bf:24:cf:80:92:18:d8:6f:a1:1d:51: 25:1e:60:80:9d:f9:9e:02:93:6f:c4:19:bf:b1:09: 39:f9:02:9d:6c:66:f9:79:4c:f4:3d:bf:60:25:40: a8:7d:cb:2b:5f:e5:a3:49:4c:33:13:af:93:6f:4e: 5a:1d:0d:79:7f:a3:6f:8a:43:ae:ea:aa:c3:d3:6e: 69:b2:bf:ac:4e:45:d8:6b:2a:56:d7:94:6d:74:c7: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:DC:B1:71:F8:71:E8:83:DF:84:DA:A1:6E:32:08:76:12:95:D0 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:19:aa:e6:94:02:b9:77:21:6b:32:94:cf:d9:e9:6c:1d:db: 64:0b:32:11:b4:13:6f:8d:e0:5e:e5:2e:14:92:9b:a7:ee:1b: c9:2a:a4:59:23:02:8b:4a:bc:3f:6c:78:8b:f8:5b:c9:03:94: 3a:44:e1:93:58:f0:67:3f:1e:c4:9e:eb:69:8a:8f:75:04:af: f5:41:79:53:c6:63:33:eb:4d:1a:50:5f:4f:4e:9b:33:cf:a0: 11:98:35:53:6b:72:39:6a:25:18:7e:60:77:ec:93:25:6b:c6: f3:f7:a7:31:91:5f:f4:99:70:77:2d:5d:c5:b9:44:97:6b:25: 77:d3:dc:37:20:0a:bc:1f:c1:0f:fc:29:b9:cc:bd:31:e8:f6: 0d:02:54:ea:bc:67:f1:39:40:e7:0a:68:14:30:2e:7c:13:28: 75:66:60:b7:42:fc:8a:28:77:7f:ac:f1:08:c0:cb:ab:ad:da: a5:9e:43:97:c6:8d:dc:c0:82:5e:a7:5c:04:6d:5b:8b:6c:09: d7:e2:61:fc:99:21:db:24:bf:c3:c9:97:db:8f:c5:3a:17:12: 68:99:d0:25:e8:65:d0:21:ad:f3:cf:d9:cc:8b:7c:f5:00:83: 47:2e:fd:36:3a:56:3e:17:68:7b:f7:82:d0:97:19:9d:29:48: 8b:c0:d2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LP4mJdQ0DDMq66Pc2bo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD Eyg0MTA0ZGNiMTcxZjg3MWU4ODNkZjg0ZGFhMTZlMzIwODc2MTI5NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UBj3BkhyL1EJzvRViJAfZrKPbQ9 N4fS12upgA6QbQ2tWw3OxU0m/42+xjl1J4iZElNxwGUscP8zcQ9xux5EdXd9mL/l ALnkBYdT7D/De7Da6Kr7lkM8P+7lppAMqjqCxDtvUiGtQ7VM3NkqhkNHZfPwfSeV N+m9/NgF9UJ0mSMDYB1Lrkuo8OU3efcqToirdaVGQUUe6FYu6B9rZr47KfNbkQPL UjpbvyTPgJIY2G+hHVElHmCAnfmeApNvxBm/sQk5+QKdbGb5eUz0Pb9gJUCofcsr X+WjSUwzE6+Tb05aHQ15f6NvikOu6qrD025psr+sTkXYaypW15RtdMexgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEE3LFx+HHog9+E2qFuMgh2EpXQMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBmq5pQC uXchazKUz9npbB3bZAsyEbQTb43gXuUuFJKbp+4bySqkWSMCi0q8P2x4i/hbyQOU OkThk1jwZz8exJ7raYqPdQSv9UF5U8ZjM+tNGlBfT06bM8+gEZg1U2tyOWolGH5g d+yTJWvG8/enMZFf9Jlwdy1dxblEl2sld9PcNyAKvB/BD/wpucy9Mej2DQJU6rxn 8TlA5wpoFDAufBModWZgt0L8iih3f6zxCMDLq63apZ5Dl8aN3MCCXqdcBG1bi2wJ 1+Jh/Jkh2yS/w8mX24/FOhcSaJnQJehl0CGt88/ZzIt89QCDRy79NjpWPhdoe/eC 0JcZnSlIi8DSfg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:42 2026 by rpki-client