This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json) Hash identifier: E0esgAF8GEo5G7MKnJI7FzpxKwyRXPMsyhTerp9rtck= Subject key identifier: 30:86:79:F9:DF:C1:9F:EA:32:0D:4D:0B:9F:88:0B:19:8E:B9:14:EE Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019BF3F57CA33B833CD6466FD6A64D63969F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft Manifest number: 0B2B Signing time: Sun 25 Jan 2026 07:01:50 +0000 Manifest this update: Sun 25 Jan 2026 07:01:50 +0000 Manifest next update: Mon 26 Jan 2026 07:01:50 +0000 Files and hashes: 1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=) 2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=) 3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: fEan0z0cTYaspam6Y6gyT/FyIr16s3XTVAlXp157PHo=) 4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=) 5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:7c:a3:3b:83:3c:d6:46:6f:d6:a6:4d:63:96:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Jan 25 07:01:50 2026 GMT Not After : Jan 26 07:01:50 2026 GMT Subject: CN=308679f9dfc19fea320d4d0b9f880b198eb914ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:7a:99:48:79:6e:94:ab:a8:f3:84:7c:e5: f3:af:70:90:cc:8a:da:37:9e:b7:1f:b7:14:fc:4e: 09:e0:91:15:20:43:3a:26:40:6a:68:27:78:e5:41: 19:fa:6d:32:ce:ec:b1:41:84:d5:c6:bf:20:ff:0b: 16:c6:23:70:48:33:d5:03:5e:96:32:24:97:99:4f: 0e:aa:db:fe:2a:89:3d:08:88:eb:58:bb:9c:ca:0a: 16:25:f4:57:ca:59:b5:6d:dc:e0:4f:30:89:72:07: e5:0a:f2:ce:7a:96:af:aa:65:39:8e:1f:c7:22:47: 51:a4:96:5b:02:f9:d4:db:17:e3:12:22:17:f8:e1: be:23:c6:72:57:42:2b:09:3c:cd:04:d2:fc:a0:a4: 26:76:d0:96:15:d0:0b:de:52:56:ce:04:ff:77:31: 03:ba:cf:24:20:2d:6e:ee:26:f9:39:21:6a:33:5f: 4c:5b:4c:26:6d:4c:32:98:e0:ac:e6:8b:bb:24:a6: 12:4e:88:7a:be:76:44:d0:8c:43:6f:7e:cc:32:59: 0f:35:95:36:6f:77:d6:ee:06:61:fc:2a:92:64:58: 1a:27:03:fc:ee:40:0d:ea:d3:30:b5:89:b3:52:0b: ed:f5:18:f8:a1:f0:c0:e1:98:d1:dd:43:40:8f:bb: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:79:F9:DF:C1:9F:EA:32:0D:4D:0B:9F:88:0B:19:8E:B9:14:EE X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9b:85:35:81:aa:8b:d6:6e:d4:4c:10:91:4e:2e:5d:ff:61: 76:95:e2:ec:df:01:a4:d0:9c:a9:d5:2f:ac:9b:f3:5d:b6:98: f7:75:f3:a3:fa:b9:25:ad:67:06:4a:62:c8:2b:96:6e:ff:32: 5c:a8:a5:a2:d9:41:1e:74:f6:ea:22:47:da:ae:dc:8d:a7:32: 11:69:4f:18:67:3d:78:ca:f8:dc:4e:5f:40:71:45:83:c2:fa: 12:2e:81:36:e9:a7:78:4e:dc:0e:3a:9a:bc:c3:a7:5d:b2:13: 18:42:1b:e7:79:90:f8:e8:f7:0c:9a:c2:e8:88:02:01:bd:5d: 1f:15:cf:85:fc:aa:c4:92:20:17:68:a6:79:20:67:1f:97:a4: 29:01:0b:aa:d4:31:30:55:ab:0b:8c:94:5d:87:05:e2:32:37: 07:e7:7d:4a:d8:6b:b7:fa:a2:cc:b7:92:7d:6f:8e:98:69:7f: ec:6a:9d:e8:2c:d0:bd:f5:38:7a:47:2c:5e:9d:50:42:79:fe: 9e:b2:55:ef:3e:f1:a0:ec:69:1f:31:56:d8:11:65:b3:75:d8: d1:e2:3a:d2:49:b0:98:70:1d:4d:f7:c6:95:85:97:50:70:4e: 19:0e:d3:39:29:0f:9d:70:71:c3:3e:ac:e8:b2:eb:b9:8b:24: a5:1a:c5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9XyjO4M81kZv1qZNY5afMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjYwMTI1MDcwMTUwWhcNMjYwMTI2MDcwMTUwWjAzMTEwLwYDVQQD EygzMDg2NzlmOWRmYzE5ZmVhMzIwZDRkMGI5Zjg4MGIxOThlYjkxNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlat6mUh5bpSrqPOEfOXzr3CQzIra N563H7cU/E4J4JEVIEM6JkBqaCd45UEZ+m0yzuyxQYTVxr8g/wsWxiNwSDPVA16W MiSXmU8Oqtv+Kok9CIjrWLucygoWJfRXylm1bdzgTzCJcgflCvLOepavqmU5jh/H IkdRpJZbAvnU2xfjEiIX+OG+I8ZyV0IrCTzNBNL8oKQmdtCWFdAL3lJWzgT/dzED us8kIC1u7ib5OSFqM19MW0wmbUwymOCs5ou7JKYSToh6vnZE0IxDb37MMlkPNZU2 b3fW7gZh/CqSZFgaJwP87kAN6tMwtYmzUgvt9Rj4ofDA4ZjR3UNAj7vX/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCGefnfwZ/qMg1NC5+ICxmOuRTuMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJuFNYGq i9Zu1EwQkU4uXf9hdpXi7N8BpNCcqdUvrJvzXbaY93Xzo/q5Ja1nBkpiyCuWbv8y XKilotlBHnT26iJH2q7cjacyEWlPGGc9eMr43E5fQHFFg8L6Ei6BNumneE7cDjqa vMOnXbITGEIb53mQ+Oj3DJrC6IgCAb1dHxXPhfyqxJIgF2imeSBnH5ekKQELqtQx MFWrC4yUXYcF4jI3B+d9Sthrt/qizLeSfW+OmGl/7Gqd6CzQvfU4ekcsXp1QQnn+ nrJV7z7xoOxpHzFW2BFls3XY0eI60kmwmHAdTffGlYWXUHBOGQ7TOSkPnXBxwz6s 6LLruYskpRrFzw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:05 2026 by rpki-client