This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: 6KL0AcO24qQx5rP7gfTszPFx8yDhMezNUIbQyJQ3BE4= Subject key identifier: 18:C9:8B:5A:C0:9B:11:80:1A:3F:3D:B1:B2:38:6D:14:8D:40:9B:1B Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019BF53E0710277FCF9E1FCB5433A9E79C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 1702 Signing time: Sun 25 Jan 2026 13:00:41 +0000 Manifest this update: Sun 25 Jan 2026 13:00:41 +0000 Manifest next update: Mon 26 Jan 2026 13:00:41 +0000 Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: fqTPzvZWtF0fy8vRtkIeTBEBjZLYbnb62+Gz9f1Q9fM=) 2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=) 3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=) 4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:07:10:27:7f:cf:9e:1f:cb:54:33:a9:e7:9c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Jan 25 13:00:41 2026 GMT Not After : Jan 26 13:00:41 2026 GMT Subject: CN=18c98b5ac09b11801a3f3db1b2386d148d409b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:f6:2f:99:e3:58:af:1d:c4:21:47:32:86: 6f:7c:67:49:a8:3c:db:f2:21:39:cf:a4:ab:e8:11: 3a:84:2b:91:22:d8:f5:3e:be:87:e1:c5:74:e4:a4: dd:0b:39:3c:c2:b7:61:47:ed:28:e0:46:ba:17:25: 21:d3:7e:b3:40:85:ba:02:97:4c:b3:2c:ad:72:af: 2d:ea:b4:d3:e1:23:0f:60:83:35:e9:f5:95:94:c6: d7:15:87:e3:44:51:c8:01:8b:55:19:9a:9b:24:da: 25:17:58:40:9d:fc:0b:6e:5e:4a:15:7e:d8:22:aa: 87:39:ee:db:f4:cf:bf:47:1d:01:c3:04:b2:2c:db: 4c:23:db:81:c9:1b:ca:aa:77:32:e7:8b:71:7d:fb: 05:ef:22:5f:02:ab:48:97:48:11:18:bc:45:b2:38: a5:b6:59:9a:72:81:18:c3:10:23:57:0d:aa:e1:d0: ff:36:bc:c2:bb:73:e3:28:79:98:d0:d9:f6:29:ab: 06:5b:61:29:49:c2:ad:ba:3a:30:c1:e5:42:69:ce: 7e:5e:6c:fe:8b:56:72:bb:d8:a8:d7:b6:67:c4:2b: 47:c7:4a:69:19:3a:45:0c:df:8d:ef:b4:6b:19:29: e3:f0:91:2b:00:3c:ce:9a:d9:0d:af:9c:31:ba:3c: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:8B:5A:C0:9B:11:80:1A:3F:3D:B1:B2:38:6D:14:8D:40:9B:1B X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:77:fa:af:74:23:91:4f:b5:47:58:22:c4:46:f8:40:2a:de: bc:19:50:92:73:c0:86:1d:d0:c4:95:d0:ed:56:44:e8:b3:b2: a4:97:85:e9:17:99:b6:6e:a7:00:d2:cd:9e:f1:b2:fd:07:eb: 07:fb:6a:f9:fe:dc:52:73:a1:2c:00:02:49:01:66:a4:d9:0b: 83:da:df:2d:fb:d5:9e:d5:0e:29:bd:3a:1c:e0:13:33:fe:b9: da:4a:bf:63:87:31:62:74:ec:c9:b4:30:42:fe:89:c9:c3:9c: 7f:38:28:ff:19:da:93:b0:b1:c6:46:0d:1a:03:fd:f9:0a:9d: 5f:f5:89:6d:58:76:91:18:56:26:7d:05:b3:a6:5f:1a:3d:f8: b8:f4:da:b4:6a:7d:ed:e5:31:e3:71:a0:ab:11:b9:1c:8b:63: 98:d1:14:bd:ca:8a:27:04:69:b7:6b:de:c5:d9:bc:b0:ab:03: bc:77:62:75:65:54:3f:e3:46:e4:c0:e7:f6:25:72:00:0c:b3: 5b:c5:c4:6d:bf:b9:f1:54:81:2d:da:ec:7b:b3:e5:66:df:0f: 45:e9:f1:39:e4:37:12:d8:18:de:1e:da:14:a2:ff:79:79:70: 50:49:69:43:81:f7:69:f2:29:28:e7:6b:a7:09:36:56:4b:8a: 01:33:4f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgcQJ3/Pnh/LVDOp55wnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjYwMTI1MTMwMDQxWhcNMjYwMTI2MTMwMDQxWjAzMTEwLwYDVQQD EygxOGM5OGI1YWMwOWIxMTgwMWEzZjNkYjFiMjM4NmQxNDhkNDA5YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApen2L5njWK8dxCFHMoZvfGdJqDzb 8iE5z6Sr6BE6hCuRItj1Pr6H4cV05KTdCzk8wrdhR+0o4Ea6FyUh036zQIW6ApdM syytcq8t6rTT4SMPYIM16fWVlMbXFYfjRFHIAYtVGZqbJNolF1hAnfwLbl5KFX7Y IqqHOe7b9M+/Rx0BwwSyLNtMI9uByRvKqncy54txffsF7yJfAqtIl0gRGLxFsjil tlmacoEYwxAjVw2q4dD/NrzCu3PjKHmY0Nn2KasGW2EpScKtujowweVCac5+Xmz+ i1Zyu9io17ZnxCtHx0ppGTpFDN+N77RrGSnj8JErADzOmtkNr5wxujwf4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjJi1rAmxGAGj89sbI4bRSNQJsbMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHf6r3Qj kU+1R1gixEb4QCrevBlQknPAhh3QxJXQ7VZE6LOypJeF6ReZtm6nANLNnvGy/Qfr B/tq+f7cUnOhLAACSQFmpNkLg9rfLfvVntUOKb06HOATM/652kq/Y4cxYnTsybQw Qv6JycOcfzgo/xnak7CxxkYNGgP9+QqdX/WJbVh2kRhWJn0Fs6ZfGj34uPTatGp9 7eUx43GgqxG5HItjmNEUvcqKJwRpt2vexdm8sKsDvHdidWVUP+NG5MDn9iVyAAyz W8XEbb+58VSBLdrse7PlZt8PRenxOeQ3EtgY3h7aFKL/eXlwUElpQ4H3afIpKOdr pwk2VkuKATNPTw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:17:11 2026 by rpki-client