This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json) Hash identifier: pTxn0AnVFxhqvE5nso6ob0qSrKizcMvfzFV6jHoIfzg= Subject key identifier: 67:32:65:FD:69:BA:76:D8:52:07:E3:F0:A3:5B:6F:F6:DE:04:4B:BE Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019BF79A4CC2ED7A640DA9A1F2EEA995842E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 00:00:43 +0000 Manifest this update: Mon 26 Jan 2026 00:00:43 +0000 Manifest next update: Tue 27 Jan 2026 00:00:43 +0000 Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=) 2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=) 3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: rECsbLnd1YYRofvpDPpqrkKGVGOxyhKIbsp42u2+NYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:4c:c2:ed:7a:64:0d:a9:a1:f2:ee:a9:95:84:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Jan 26 00:00:43 2026 GMT Not After : Jan 27 00:00:43 2026 GMT Subject: CN=673265fd69ba76d85207e3f0a35b6ff6de044bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:6d:c7:91:f6:42:01:a5:4c:c6:17:76:45: 43:8d:73:22:f3:f9:45:63:b3:62:d3:e4:95:0c:7a: cd:1c:b9:2f:ba:45:81:cd:95:c8:2e:41:e0:b2:c3: e8:b1:55:af:be:e3:8e:97:fd:78:08:e4:36:b8:d7: 16:bb:07:df:e0:e3:2d:d0:ac:57:00:0b:e3:1a:f0: 9b:08:e0:93:9d:94:b8:d4:31:04:44:e8:0e:a6:d7: 89:bb:04:8d:d4:2d:aa:cf:df:5f:60:cf:c4:2b:e6: 5a:13:b1:e5:3c:b4:9e:65:63:4a:64:09:dd:2e:54: 9e:83:c4:22:f6:7f:32:62:31:e8:51:ba:ee:40:ec: 4d:b4:d8:33:bf:c3:15:55:82:70:15:26:4e:0c:52: cc:59:67:71:f0:d4:97:e9:02:8b:8f:47:24:fd:e8: 41:11:a2:57:fa:c1:2c:e6:19:c8:6f:f1:28:ea:4e: 24:5c:5c:1a:15:a3:15:3c:57:14:88:88:c3:c0:44: 84:e5:96:94:94:f5:ef:b4:f9:53:47:3f:d5:cb:ca: 8f:38:6c:33:17:7f:76:fb:ff:b0:7e:f0:1a:62:8e: 6b:1d:ce:b8:84:3f:bc:47:a0:1a:b2:03:f6:f0:c7: 18:03:13:90:48:4e:5e:e2:7b:fe:b7:0f:5c:e1:16: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:65:FD:69:BA:76:D8:52:07:E3:F0:A3:5B:6F:F6:DE:04:4B:BE X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:3d:9c:8b:30:1e:ed:9b:d2:e6:64:60:ab:dd:fa:8e:0c: 0e:00:d7:31:39:3b:3e:d2:5b:18:de:bc:24:86:88:31:f6:e5: 1e:ca:17:66:5f:40:7a:e0:39:69:3f:40:88:3b:e3:23:e0:06: f7:26:86:9c:43:69:48:86:11:e6:78:a2:99:73:fc:13:10:a9: 43:9a:db:4e:f7:ef:eb:69:7e:aa:86:47:70:60:5c:a4:e9:ee: 47:72:ca:00:a0:e1:51:66:9b:ff:5c:5b:de:f8:cf:c7:48:a9: 1d:4c:35:8a:f3:3d:cb:31:f0:3c:ba:87:c8:34:14:17:8f:d9: 39:89:01:a5:9e:fa:f0:9a:f8:9c:4e:1f:38:17:9c:77:8e:a3: 42:fa:04:03:fd:50:c0:87:0a:bf:7d:c5:c7:98:48:93:fb:b6: 26:2d:a8:32:ff:5f:b8:e5:2d:df:76:51:4e:79:20:96:79:89: fb:ff:99:d3:f3:8b:cf:a7:77:24:c7:c2:6d:3b:e2:a0:1c:24: 78:a3:7a:85:dd:99:91:4f:56:5b:da:78:05:bf:57:7e:a8:66: 53:9e:c9:64:fd:1b:fc:36:e8:19:1e:b5:db:4f:ad:d5:1c:86: 90:89:86:2a:97:1d:30:e4:74:08:62:e3:32:5d:47:6a:bb:9e: bd:25:77:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mkzC7XpkDamh8u6plYQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjYwMTI2MDAwMDQzWhcNMjYwMTI3MDAwMDQzWjAzMTEwLwYDVQQD Eyg2NzMyNjVmZDY5YmE3NmQ4NTIwN2UzZjBhMzViNmZmNmRlMDQ0YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWNtx5H2QgGlTMYXdkVDjXMi8/lF Y7Ni0+SVDHrNHLkvukWBzZXILkHgssPosVWvvuOOl/14COQ2uNcWuwff4OMt0KxX AAvjGvCbCOCTnZS41DEEROgOpteJuwSN1C2qz99fYM/EK+ZaE7HlPLSeZWNKZAnd LlSeg8Qi9n8yYjHoUbruQOxNtNgzv8MVVYJwFSZODFLMWWdx8NSX6QKLj0ck/ehB EaJX+sEs5hnIb/Eo6k4kXFwaFaMVPFcUiIjDwESE5ZaUlPXvtPlTRz/Vy8qPOGwz F392+/+wfvAaYo5rHc64hD+8R6AasgP28McYAxOQSE5e4nv+tw9c4RZAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcyZf1punbYUgfj8KNbb/beBEu+MB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGU9nIsw Hu2b0uZkYKvd+o4MDgDXMTk7PtJbGN68JIaIMfblHsoXZl9AeuA5aT9AiDvjI+AG 9yaGnENpSIYR5niimXP8ExCpQ5rbTvfv62l+qoZHcGBcpOnuR3LKAKDhUWab/1xb 3vjPx0ipHUw1ivM9yzHwPLqHyDQUF4/ZOYkBpZ768Jr4nE4fOBecd46jQvoEA/1Q wIcKv33Fx5hIk/u2Ji2oMv9fuOUt33ZRTnkglnmJ+/+Z0/OLz6d3JMfCbTvioBwk eKN6hd2ZkU9WW9p4Bb9XfqhmU57JZP0b/DboGR6120+t1RyGkImGKpcdMOR0CGLj Ml1HaruevSV3Mw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:38:37 2026 by rpki-client