This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json) Hash identifier: i2pLcMG6YjqkbuI+O3YVa/AfWuOC6jJvqGaOz5Mhluc= Subject key identifier: 70:52:87:EC:16:6E:99:14:4C:81:4B:5C:58:DA:D5:88:56:7E:71:94 Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Certificate serial: 019BF5E302DC93DB4F3D30E2B520607CD524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft Manifest number: 029E Signing time: Sun 25 Jan 2026 16:00:53 +0000 Manifest this update: Sun 25 Jan 2026 16:00:53 +0000 Manifest next update: Mon 26 Jan 2026 16:00:53 +0000 Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: eH76xDGFojyso+rOtFPAM11QWg4FHR8JzCsbk40H90g=) 2: hVCMHbhbfZIv6_XEgHNxBb1iBTg.roa (hash: +BlQApbHjZb7f8RHAby22GvRQWprbhCIUcnRWldtZiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:02:dc:93:db:4f:3d:30:e2:b5:20:60:7c:d5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Validity Not Before: Jan 25 16:00:53 2026 GMT Not After : Jan 26 16:00:53 2026 GMT Subject: CN=705287ec166e99144c814b5c58dad588567e7194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:fd:dd:48:62:63:ee:7f:b8:33:c8:ce:53: 8f:b6:b1:98:31:40:e9:d9:ea:81:76:20:eb:81:0f: 37:c2:f2:a9:8c:e3:b1:24:ce:2e:41:6e:f7:7e:30: ea:99:5d:16:d8:f2:f1:79:49:1c:87:22:c7:09:fd: aa:17:4a:5f:16:38:c7:fc:7e:ed:c1:27:02:9c:72: e3:c6:d0:f5:ec:c6:cd:a0:f6:b1:54:ca:df:b5:e3: 08:02:c6:08:e9:1a:be:99:bc:07:b5:9c:ec:05:8f: 60:a8:95:cc:4b:94:19:0a:11:3f:a8:dc:22:c7:fa: b5:ce:23:ab:1f:7f:9f:ad:00:64:c6:a5:93:00:e5: 8a:7d:17:44:8e:b7:bb:a9:25:81:8f:08:a9:cd:be: 04:b2:af:77:d0:c0:75:c6:83:8c:20:55:9a:70:f1: 7f:bf:c0:a1:1d:a1:1f:b6:ab:b5:a6:3b:73:ed:17: 19:42:7a:ba:70:cf:d5:cf:ac:9f:0c:12:b6:e9:f4: 5d:33:80:dc:6a:87:b8:bf:94:15:be:98:3b:71:44: a5:f9:22:80:63:0e:58:75:a4:c9:09:a3:9f:6b:86: 00:04:14:e9:3f:c9:97:66:d7:b0:8a:93:36:a6:5c: a6:20:2b:10:d9:75:b7:d8:f4:3c:27:17:5b:4e:49: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:52:87:EC:16:6E:99:14:4C:81:4B:5C:58:DA:D5:88:56:7E:71:94 X509v3 Authority Key Identifier: keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:33:d1:68:de:2e:c9:00:eb:68:56:57:30:de:80:28:3e:19: 5c:39:04:d8:54:77:67:d4:a7:c7:ef:6f:79:f3:0f:97:2a:62: 11:5d:ff:d0:86:9a:ba:47:89:ac:c6:d1:35:68:d8:39:bf:9f: 59:7d:88:d7:4d:bb:ac:39:1b:1b:80:f9:fa:ca:b9:79:24:4d: 45:6c:1e:ae:84:c2:51:09:3b:dc:d8:05:dd:ec:74:97:44:9b: 3c:77:1f:c3:44:4d:18:5c:8a:c3:60:fe:d8:82:1c:5e:3a:69: 8f:c2:b5:c6:d3:ae:02:3a:db:39:f3:ff:c5:cb:80:8b:04:c3: ed:5b:1d:ba:0b:39:39:62:63:97:4c:7c:70:f8:73:55:ec:a6: a9:29:e4:b3:ac:9b:42:8e:1c:1b:7d:94:da:67:07:50:e3:11: 00:e8:ff:44:69:aa:76:eb:15:89:e9:51:cb:fc:c6:38:3d:e7: 9c:d2:e0:71:fd:7e:36:a3:fd:19:d4:3a:a0:68:92:a8:9f:36: 3e:26:3b:04:ed:3e:00:48:c8:11:10:a1:1d:be:91:69:f8:d0: 63:86:89:84:3c:14:0c:61:21:7a:e1:cb:0c:4f:68:f3:ea:a4: 55:cb:1a:34:65:e3:ed:cf:ac:ce:41:ac:92:62:66:83:49:0f: e0:d2:e6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14wLck9tPPTDitSBgfNUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4 YmE2MTQwHhcNMjYwMTI1MTYwMDUzWhcNMjYwMTI2MTYwMDUzWjAzMTEwLwYDVQQD Eyg3MDUyODdlYzE2NmU5OTE0NGM4MTRiNWM1OGRhZDU4ODU2N2U3MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmon93UhiY+5/uDPIzlOPtrGYMUDp 2eqBdiDrgQ83wvKpjOOxJM4uQW73fjDqmV0W2PLxeUkchyLHCf2qF0pfFjjH/H7t wScCnHLjxtD17MbNoPaxVMrfteMIAsYI6Rq+mbwHtZzsBY9gqJXMS5QZChE/qNwi x/q1ziOrH3+frQBkxqWTAOWKfRdEjre7qSWBjwipzb4Esq930MB1xoOMIFWacPF/ v8ChHaEftqu1pjtz7RcZQnq6cM/Vz6yfDBK26fRdM4Dcaoe4v5QVvpg7cUSl+SKA Yw5YdaTJCaOfa4YABBTpP8mXZtewipM2plymICsQ2XW32PQ8JxdbTkkV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBSh+wWbpkUTIFLXFja1YhWfnGUMB8GA1UdIwQY MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDPRaN4u yQDraFZXMN6AKD4ZXDkE2FR3Z9Snx+9vefMPlypiEV3/0IaaukeJrMbRNWjYOb+f WX2I1027rDkbG4D5+sq5eSRNRWweroTCUQk73NgF3ex0l0SbPHcfw0RNGFyKw2D+ 2IIcXjppj8K1xtOuAjrbOfP/xcuAiwTD7Vsdugs5OWJjl0x8cPhzVeymqSnks6yb Qo4cG32U2mcHUOMRAOj/RGmqdusVielRy/zGOD3nnNLgcf1+NqP9GdQ6oGiSqJ82 PiY7BO0+AEjIERChHb6RafjQY4aJhDwUDGEheuHLDE9o8+qkVcsaNGXj7c+szkGs kmJmg0kP4NLmYQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:57 2026 by rpki-client