This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft File: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json) Hash identifier: 89QDa65z0uNBMOGVEziV67NtV8GhdP6pZfTFDsvOROk= Subject key identifier: C5:2E:8D:05:62:0B:A9:08:A5:87:4F:93:2F:3C:42:89:84:65:95:E0 Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019BFC1BC474708A3657B0D3D6DE6E3F8604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 21:00:36 +0000 Manifest this update: Mon 26 Jan 2026 21:00:36 +0000 Manifest next update: Tue 27 Jan 2026 21:00:36 +0000 Files and hashes: 1: 1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa (hash: 2cHGvx3rw1zFTiwFmSKRPxp+Yh74QRl9au/Y2339KsI=) 2: Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa (hash: 5S7unqujHWRwDHCe4gkQrhEC290D97kkFboUxzuHNTk=) 3: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: RTV8WpmTrwPGB4QyMi/XAqDOnDiu5FfwYsH2maqIhq0=) 4: I5oIKyc-Nnsg2P5sBEZFMHv808I.roa (hash: A5np8yhL8kgzony1w/u2xXkkcbdyP8sEVHMrTdXVIdE=) 5: W__alkBuZRj8gzkXd-vzfVbHK2Q.roa (hash: 0kBZjg6sW5SXO3x1fTOof+1+5GjGHO22pAAtjoqsY2Q=) 6: cPf8LTmHuQNpFCebW57DX4X7lVg.roa (hash: EC/kmKIvEJeWcU36Llbivi0e5yeWXS5Hz9Nq+HvVB00=) 7: hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa (hash: pfSMpgk/ODrUlGox+4Mj+0AxVVPVgzj1yETRt0uvYPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:c4:74:70:8a:36:57:b0:d3:d6:de:6e:3f:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Jan 26 21:00:36 2026 GMT Not After : Jan 27 21:00:36 2026 GMT Subject: CN=c52e8d05620ba908a5874f932f3c4289846595e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:0f:43:20:f6:bd:bb:51:e7:c8:6c:f1:94: 9c:8a:66:69:43:11:57:4a:76:1f:66:27:32:ab:10: 64:61:8c:bd:ae:52:67:68:35:f0:9e:f5:96:d6:0d: 2a:dc:4a:04:3b:8f:34:e6:e1:b1:86:62:cc:08:76: cd:9c:d1:ec:07:d8:91:cf:9b:c7:25:a2:f6:74:6e: 65:b2:41:64:6f:37:d7:b3:80:a3:c6:02:74:57:14: cb:4d:86:aa:e1:d5:f7:98:1a:fa:cc:39:84:eb:a7: ae:3e:2a:c0:12:9b:4a:c2:36:85:eb:04:c9:1c:5e: 52:83:73:41:d1:86:e2:08:87:f8:3e:05:a5:13:bd: b2:04:d6:42:1a:61:48:d6:97:82:54:55:05:d9:dc: 7b:69:a2:d2:1e:f5:33:ea:cc:e1:30:8f:b8:5d:33: cb:35:35:f5:43:48:91:70:45:c4:59:80:fa:4b:80: 1d:51:a3:ca:68:b3:3e:4e:fa:a4:9a:28:a6:74:01: 4c:0b:dd:32:84:7f:4d:96:e5:48:b3:91:0b:e1:e7: 83:e7:a2:ba:35:02:11:4e:e3:3b:a8:e0:e9:97:bd: a4:b1:93:55:4f:f5:e5:7a:21:00:37:15:bf:41:e5: 69:e4:5e:95:1b:d2:bf:46:0e:7e:de:19:f2:39:f1: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:8D:05:62:0B:A9:08:A5:87:4F:93:2F:3C:42:89:84:65:95:E0 X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3a:b8:58:e1:3c:eb:8d:d6:9d:70:c0:84:4f:7b:1f:c6:96: b1:e3:f2:56:66:af:8c:5c:09:41:2c:cb:93:14:17:63:fb:c3: 01:77:6d:ef:df:cb:01:69:50:2f:7d:3f:ce:b3:c3:e1:a2:0f: 3f:19:d7:d3:50:ac:14:6b:76:e0:36:3f:de:e2:d7:6d:f4:36: 0c:01:0b:82:3b:b8:2b:72:5f:28:ee:c9:5a:35:9d:81:a8:c9: 06:ef:01:44:07:0a:ae:d5:47:e7:e6:98:c0:71:f2:d5:d8:3e: 59:08:5f:08:0f:e6:28:70:a1:ab:aa:0a:fb:06:c1:ea:37:b8: 14:e4:83:f0:d4:bb:97:ae:3a:8f:9c:52:55:a4:ab:89:ae:1b: ca:e8:c6:11:df:e5:aa:18:10:9c:eb:ce:de:97:b4:69:3d:fd: 86:57:1a:34:bc:8e:11:7d:e6:69:d4:29:ef:e1:fb:42:cc:4d: 56:96:fe:61:af:70:0e:67:bd:ed:29:4c:f1:d3:7f:ae:53:c7: ed:15:2f:fa:0b:07:3d:30:86:d9:f5:11:1e:c1:66:23:13:59: f9:7a:16:ee:4e:34:ee:4a:14:94:90:26:23:5c:c8:5d:bb:a5: b1:c9:e4:32:a2:bc:ed:6e:e2:3c:e2:5e:cf:1c:60:34:2d:ac: 55:f7:37:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G8R0cIo2V7DT1t5uP4YEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjYwMTI2MjEwMDM2WhcNMjYwMTI3MjEwMDM2WjAzMTEwLwYDVQQD EyhjNTJlOGQwNTYyMGJhOTA4YTU4NzRmOTMyZjNjNDI4OTg0NjU5NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyIPQyD2vbtR58hs8ZScimZpQxFX SnYfZicyqxBkYYy9rlJnaDXwnvWW1g0q3EoEO4805uGxhmLMCHbNnNHsB9iRz5vH JaL2dG5lskFkbzfXs4CjxgJ0VxTLTYaq4dX3mBr6zDmE66euPirAEptKwjaF6wTJ HF5Sg3NB0YbiCIf4PgWlE72yBNZCGmFI1peCVFUF2dx7aaLSHvUz6szhMI+4XTPL NTX1Q0iRcEXEWYD6S4AdUaPKaLM+TvqkmiimdAFMC90yhH9NluVIs5EL4eeD56K6 NQIRTuM7qODpl72ksZNVT/XleiEANxW/QeVp5F6VG9K/Rg5+3hnyOfH93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUujQViC6kIpYdPky88QomEZZXgMB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDq4WOE8 643WnXDAhE97H8aWsePyVmavjFwJQSzLkxQXY/vDAXdt79/LAWlQL30/zrPD4aIP PxnX01CsFGt24DY/3uLXbfQ2DAELgju4K3JfKO7JWjWdgajJBu8BRAcKrtVH5+aY wHHy1dg+WQhfCA/mKHChq6oK+wbB6je4FOSD8NS7l646j5xSVaSria4byujGEd/l qhgQnOvO3pe0aT39hlcaNLyOEX3madQp7+H7QsxNVpb+Ya9wDme97SlM8dN/rlPH 7RUv+gsHPTCG2fURHsFmIxNZ+XoW7k407koUlJAmI1zIXbulscnkMqK87W7iPOJe zxxgNC2sVfc30g== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:34 2026 by rpki-client