This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json) Hash identifier: 0PqXcTeDLlBdfdlSreeHYz8PPW6hK+b0U1X8z3a7JQM= Subject key identifier: 57:84:5F:62:1A:7D:B5:B0:5C:6F:77:47:13:B8:79:67:50:51:87:3F Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Certificate serial: 019BF6F5C069384614121F5C8C6FF3596904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 21:00:59 +0000 Manifest this update: Sun 25 Jan 2026 21:00:59 +0000 Manifest next update: Mon 26 Jan 2026 21:00:59 +0000 Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=) 2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: 7FNDwYBLlNhEHhADykZ8lXIV75+rloUJSkthqpYSt0g=) 3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c0:69:38:46:14:12:1f:5c:8c:6f:f3:59:69:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Validity Not Before: Jan 25 21:00:59 2026 GMT Not After : Jan 26 21:00:59 2026 GMT Subject: CN=57845f621a7db5b05c6f774713b879675051873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:34:2d:98:aa:88:1e:d8:d0:de:b8:21:87: 56:e4:c0:18:e4:c4:99:47:41:27:bb:7e:7c:11:ce: bf:d6:8a:88:d9:21:0d:91:f6:a5:bf:cc:c0:b8:1a: b7:fe:6a:7d:ab:27:40:bb:c4:51:ad:d4:1a:79:50: da:5d:a0:9a:60:09:33:c3:f9:b3:c7:5e:ac:13:83: a3:b5:bf:2a:d4:d6:96:17:70:d8:dc:51:6d:97:2d: 0b:93:67:f8:42:1e:6b:ce:b6:57:18:5d:b4:c1:5b: a3:30:88:7f:c9:ea:6a:c7:78:6a:a4:ce:91:ea:be: d6:fe:97:1d:d6:93:58:92:8f:5e:12:50:b9:9b:fa: 52:fb:bc:bb:18:25:bd:2e:ad:b1:3a:c5:88:67:5b: 3c:03:82:aa:12:83:03:7b:dd:6b:58:fb:72:36:d8: 64:47:54:d0:6d:59:80:66:bd:76:0d:97:3c:fa:23: f2:8a:df:20:33:04:b5:38:ed:91:99:ce:86:22:23: 83:df:55:bb:74:cc:fa:ba:a0:2c:f9:5d:59:8e:47: 78:fd:2c:33:33:b9:12:b7:80:a6:90:7f:93:57:b3: d6:2c:9b:b2:92:1d:4d:55:29:03:2d:31:25:48:af: ec:9e:12:d1:62:a9:7b:b1:82:ce:ec:f5:b5:0f:b5: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:84:5F:62:1A:7D:B5:B0:5C:6F:77:47:13:B8:79:67:50:51:87:3F X509v3 Authority Key Identifier: keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:43:e3:2e:12:7b:2e:db:fa:16:2a:c3:3d:64:8e:39:4e:3e: 31:e7:84:4e:bd:3f:e5:02:3c:89:6d:ac:0d:ca:28:11:38:53: a2:fb:0a:6f:46:9d:03:34:1e:1a:25:23:59:cc:35:05:49:fc: ed:0d:51:d5:3a:ef:7b:43:ee:77:cb:6b:c7:1f:3c:88:1e:9a: 24:1a:ef:19:e5:fc:c2:69:dc:63:da:89:97:f2:1e:55:7c:47: 99:ec:9b:5a:91:f0:42:20:b0:5e:d3:72:e8:9e:06:c7:d4:4d: f2:e8:25:87:53:0c:a8:7a:3d:07:cb:eb:f5:60:88:54:71:05: ae:91:80:ce:52:1d:38:3b:5c:ed:43:09:fb:43:dd:9f:84:ed: 17:77:0c:a9:c2:61:c2:d1:2a:cd:32:58:3a:62:71:80:99:c3: e7:0a:43:ad:c4:0d:24:ab:95:d5:e4:79:e1:3d:15:af:f4:8e: 3a:fa:cd:d7:18:8f:50:58:a1:8d:84:00:28:15:53:33:c6:c6: ea:40:00:4e:62:da:d6:de:86:fe:3b:6b:c8:97:a9:f4:44:4b: 7f:17:ee:d5:de:c4:74:4a:3b:24:40:48:77:87:1e:ec:86:23: cd:f1:5a:a1:b7:ff:5b:ea:85:22:c5:71:8b:60:b4:9f:7f:e3: 47:3c:77:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cBpOEYUEh9cjG/zWWkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk ZGRmMzUwHhcNMjYwMTI1MjEwMDU5WhcNMjYwMTI2MjEwMDU5WjAzMTEwLwYDVQQD Eyg1Nzg0NWY2MjFhN2RiNWIwNWM2Zjc3NDcxM2I4Nzk2NzUwNTE4NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9A0LZiqiB7Y0N64IYdW5MAY5MSZ R0Enu358Ec6/1oqI2SENkfalv8zAuBq3/mp9qydAu8RRrdQaeVDaXaCaYAkzw/mz x16sE4Ojtb8q1NaWF3DY3FFtly0Lk2f4Qh5rzrZXGF20wVujMIh/yepqx3hqpM6R 6r7W/pcd1pNYko9eElC5m/pS+7y7GCW9Lq2xOsWIZ1s8A4KqEoMDe91rWPtyNthk R1TQbVmAZr12DZc8+iPyit8gMwS1OO2Rmc6GIiOD31W7dMz6uqAs+V1Zjkd4/Swz M7kSt4CmkH+TV7PWLJuykh1NVSkDLTElSK/snhLRYql7sYLO7PW1D7V2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeEX2IafbWwXG93RxO4eWdQUYc/MB8GA1UdIwQY MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4 LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUPjLhJ7 Ltv6FirDPWSOOU4+MeeETr0/5QI8iW2sDcooEThTovsKb0adAzQeGiUjWcw1BUn8 7Q1R1Trve0Pud8trxx88iB6aJBrvGeX8wmncY9qJl/IeVXxHmeybWpHwQiCwXtNy 6J4Gx9RN8uglh1MMqHo9B8vr9WCIVHEFrpGAzlIdODtc7UMJ+0Pdn4TtF3cMqcJh wtEqzTJYOmJxgJnD5wpDrcQNJKuV1eR54T0Vr/SOOvrN1xiPUFihjYQAKBVTM8bG 6kAATmLa1t6G/jtryJep9ERLfxfu1d7EdEo7JEBId4ce7IYjzfFaobf/W+qFIsVx i2C0n3/jRzx3jQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:07 2026 by rpki-client