This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json) Hash identifier: 2eVSOrsI6jNOryhiL1is5lmWjLbnt8y4q+W/pEOB6X0= Subject key identifier: 99:AD:69:F6:B7:4B:99:4C:A2:4D:0C:DA:1E:6A:EC:B6:50:43:9D:AF Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502 Certificate serial: 019BF5E366792CB8A30F0E64F67E4854DCBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 16:01:19 +0000 Manifest this update: Sun 25 Jan 2026 16:01:19 +0000 Manifest next update: Mon 26 Jan 2026 16:01:19 +0000 Files and hashes: 1: C5XEOKd3fauF5wNLgFLgU_UqhDk.roa (hash: gq6WkJtrJKgQndCeB0nR0Q6T7/UN9Av/CBIcRy+j3B8=) 2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: w3P0q5WdRJpXebZMk2U0LJ4+34ObZKZebrYogQ8lfCo=) 3: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=) 4: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:66:79:2c:b8:a3:0f:0e:64:f6:7e:48:54:dc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502 Validity Not Before: Jan 25 16:01:19 2026 GMT Not After : Jan 26 16:01:19 2026 GMT Subject: CN=99ad69f6b74b994ca24d0cda1e6aecb650439daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:aa:13:25:72:a0:05:ff:85:97:38:d5:77: fb:c4:c4:1e:fc:7e:14:b6:60:a9:6a:3a:8a:69:99: f4:11:ed:d6:0d:23:a6:ed:d7:e5:49:2c:6a:54:26: ab:7d:ab:cc:92:b6:55:49:1a:a4:87:4b:ed:69:d5: a5:00:57:6f:53:d8:44:bb:54:50:dc:26:ad:dc:02: 7e:e0:4a:0c:a7:7f:5c:7e:8d:c3:b0:40:1c:a9:fe: dd:d9:fa:47:10:81:0a:5f:29:56:f1:c7:b8:c1:8a: ce:8e:9b:4b:58:2e:0d:dd:4d:69:ae:03:3c:d1:79: ff:d9:c7:46:63:e0:3f:c5:4f:a8:1e:b0:f1:7b:d9: b6:81:a6:28:79:b8:b6:07:91:e4:95:c0:a0:e3:73: 15:26:36:00:fe:b1:d2:b1:d9:79:ae:46:d8:ea:49: f3:40:32:4c:25:30:92:38:41:df:a3:33:5e:33:d0: da:b4:7f:13:15:ae:a5:55:0c:39:aa:67:af:d4:c2: ae:8b:62:d2:75:0b:c1:c7:81:e4:6f:e2:22:33:9d: 70:c7:3a:32:38:7f:90:0c:9b:f0:41:65:92:81:8c: f5:7e:ba:9b:f9:25:31:25:e8:e1:09:91:7f:33:30: ce:f4:b7:c2:49:c5:ad:60:7f:7c:ea:ab:d7:d4:88: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:69:F6:B7:4B:99:4C:A2:4D:0C:DA:1E:6A:EC:B6:50:43:9D:AF X509v3 Authority Key Identifier: keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:85:91:2e:72:1d:8c:f6:d8:e5:9e:a1:1d:18:b5:01:7a: 25:24:f0:4b:46:99:cd:8c:22:86:00:b1:dc:4d:c9:f2:e5:54: 96:76:2e:cd:7b:eb:f7:8b:fb:9a:14:23:6a:e8:36:07:70:b3: b0:62:d7:b3:73:90:32:67:e8:88:19:cd:fc:80:af:d6:98:df: 7e:1c:bc:bb:db:22:ca:d5:f4:ad:27:f4:08:b0:ea:8b:22:5a: 44:df:35:12:6a:cd:44:64:b0:33:08:b2:7e:eb:c7:61:50:b0: c5:a0:4e:8a:cd:21:17:2e:5a:ac:ed:b6:da:d2:d7:1e:20:43: 2c:cb:5e:71:37:e8:8b:5d:31:92:e7:e7:53:96:98:5b:61:32: 76:de:71:c3:92:ba:4f:23:70:a1:63:19:b3:61:90:04:93:14: 87:04:d7:df:58:51:d3:0f:61:28:73:cd:d2:aa:17:4a:2f:62: 27:0f:24:09:d2:2e:fe:3f:f9:c3:5f:23:99:bd:d2:25:a4:1f: 65:fb:27:19:64:89:c3:16:40:c0:4f:49:42:3b:48:f5:b9:82: 14:ce:98:a0:1b:95:8f:08:cd:35:8e:e6:ec:b5:32:ae:fb:d7: c5:38:9b:7c:81:d0:bf:52:26:fa:81:e7:4d:ce:2e:70:20:f5: 94:c0:6e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142Z5LLijDw5k9n5IVNy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz NGE1MDIwHhcNMjYwMTI1MTYwMTE5WhcNMjYwMTI2MTYwMTE5WjAzMTEwLwYDVQQD Eyg5OWFkNjlmNmI3NGI5OTRjYTI0ZDBjZGExZTZhZWNiNjUwNDM5ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw62qEyVyoAX/hZc41Xf7xMQe/H4U tmCpajqKaZn0Ee3WDSOm7dflSSxqVCarfavMkrZVSRqkh0vtadWlAFdvU9hEu1RQ 3Cat3AJ+4EoMp39cfo3DsEAcqf7d2fpHEIEKXylW8ce4wYrOjptLWC4N3U1prgM8 0Xn/2cdGY+A/xU+oHrDxe9m2gaYoebi2B5HklcCg43MVJjYA/rHSsdl5rkbY6knz QDJMJTCSOEHfozNeM9DatH8TFa6lVQw5qmev1MKui2LSdQvBx4Hkb+IiM51wxzoy OH+QDJvwQWWSgYz1frqb+SUxJejhCZF/MzDO9LfCScWtYH986qvX1IjD/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmtafa3S5lMok0M2h5q7LZQQ52vMB8GA1UdIwQY MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2 LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR6FkS5y HYz22OWeoR0YtQF6JSTwS0aZzYwihgCx3E3J8uVUlnYuzXvr94v7mhQjaug2B3Cz sGLXs3OQMmfoiBnN/ICv1pjffhy8u9siytX0rSf0CLDqiyJaRN81EmrNRGSwMwiy fuvHYVCwxaBOis0hFy5arO222tLXHiBDLMtecTfoi10xkufnU5aYW2Eydt5xw5K6 TyNwoWMZs2GQBJMUhwTX31hR0w9hKHPN0qoXSi9iJw8kCdIu/j/5w18jmb3SJaQf ZfsnGWSJwxZAwE9JQjtI9bmCFM6YoBuVjwjNNY7m7LUyrvvXxTibfIHQv1Im+oHn Tc4ucCD1lMBung== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:05 2026 by rpki-client