This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json) Hash identifier: wHhA+g3SOlSicY0S32zFurJ1Oc0aLrAx5Jv61iUo1Bw= Subject key identifier: A7:07:AF:AC:BC:F9:B3:73:34:4D:65:F5:D5:2F:17:0E:69:BC:4F:3C Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e Certificate serial: 019BF876A3C7E89E6890D9F14D4D643F99DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft Manifest number: 0635 Signing time: Mon 26 Jan 2026 04:01:23 +0000 Manifest this update: Mon 26 Jan 2026 04:01:23 +0000 Manifest next update: Tue 27 Jan 2026 04:01:23 +0000 Files and hashes: 1: 7F5MFPLGX7n9kqmK4iPr3DwuhNU.roa (hash: sUozPnCyk9y8i1GS+PfFGedUQX43402xLyKa/GCV0HY=) 2: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: yRIDxs0qJ0toZM7/tmxw90nkCr8wAitoJEz1u59SPpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:a3:c7:e8:9e:68:90:d9:f1:4d:4d:64:3f:99:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e Validity Not Before: Jan 26 04:01:23 2026 GMT Not After : Jan 27 04:01:23 2026 GMT Subject: CN=a707afacbcf9b373344d65f5d52f170e69bc4f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:aa:bc:33:f4:35:0e:c8:d3:6c:81:fe:99: 36:bd:cc:18:84:5a:d2:7d:06:e2:c5:56:3a:41:29: 31:0c:c0:ee:e8:ea:10:68:9b:4d:cc:bb:50:6a:ab: a3:b1:1e:ef:39:b3:fc:d3:b2:d6:07:d6:0f:e9:4d: 13:31:85:35:8c:32:27:ef:2e:52:d5:85:21:75:f1: 76:3f:14:01:d5:f4:92:d7:3a:81:78:00:ac:de:ef: f9:36:85:96:ef:73:35:b1:13:44:7d:c4:17:17:bc: e2:21:59:c2:77:21:41:04:6c:2a:43:90:9d:60:a6: fd:06:f0:0f:25:18:13:8b:6e:06:9c:0c:15:7f:55: e4:da:e1:a9:38:29:a3:64:48:c0:45:57:37:66:38: 53:11:b0:55:df:cd:28:42:77:c9:2c:dd:12:cc:42: 28:a2:2a:3b:b2:d1:09:a1:00:cd:0d:88:13:16:fb: 1a:b8:33:1f:b4:ce:9f:75:9f:77:67:e1:66:60:dc: c0:68:14:50:41:e2:c3:82:9d:d1:de:6a:4d:77:3c: 91:1b:77:c2:a5:82:52:9f:49:0d:6e:51:7b:a5:d4: 35:2d:e5:81:91:9d:0e:c4:85:c8:ca:7b:e0:5d:57: f6:1d:62:b0:28:39:f6:f1:f7:72:fd:36:59:fa:a3: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:AF:AC:BC:F9:B3:73:34:4D:65:F5:D5:2F:17:0E:69:BC:4F:3C X509v3 Authority Key Identifier: keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3a:58:2f:a2:2d:a8:a4:46:45:20:84:67:4f:7c:26:c5:fe: bd:3b:20:df:6b:f9:8a:6e:9c:b6:6e:29:cc:7e:10:6e:f4:54: b5:c0:93:35:1f:74:83:d3:87:03:19:0f:25:90:57:d8:fb:8e: 33:c5:1c:89:70:e0:05:4d:28:0c:63:62:5b:da:96:cf:83:dc: a3:05:3e:31:b1:06:27:8d:f0:d1:39:28:f7:08:80:90:01:c4: 87:26:19:3f:76:13:c3:7d:ae:3d:bc:0f:0a:fe:86:91:f8:b8: 34:70:6f:f8:95:af:a4:f7:b7:e8:b8:8b:c3:d2:c9:8d:e3:5a: e4:82:c8:9d:96:0c:80:f7:18:97:0a:0f:fd:fc:03:d5:0b:44: a3:ca:6c:2e:89:aa:be:45:6b:b1:e8:bb:c7:a7:62:65:82:87: c8:7a:94:79:93:35:ec:21:f2:3d:08:81:0e:c5:f9:a8:7e:3a: 7c:b4:05:12:a0:dc:88:b1:4e:4e:7c:7f:9c:fe:be:de:28:5f: 89:65:d0:22:af:af:c2:0d:10:be:37:42:dd:79:3f:fe:88:f9: 92:28:21:c7:d6:fa:d0:ca:19:dd:34:3a:a7:ac:9c:a2:0b:eb: 62:b7:73:bf:55:95:73:e7:20:13:a1:86:ba:2c:b9:61:f3:75: 3a:cc:b4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dqPH6J5okNnxTU1kP5neMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl NzY0MmUwHhcNMjYwMTI2MDQwMTIzWhcNMjYwMTI3MDQwMTIzWjAzMTEwLwYDVQQD EyhhNzA3YWZhY2JjZjliMzczMzQ0ZDY1ZjVkNTJmMTcwZTY5YmM0ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw82qvDP0NQ7I02yB/pk2vcwYhFrS fQbixVY6QSkxDMDu6OoQaJtNzLtQaqujsR7vObP807LWB9YP6U0TMYU1jDIn7y5S 1YUhdfF2PxQB1fSS1zqBeACs3u/5NoWW73M1sRNEfcQXF7ziIVnCdyFBBGwqQ5Cd YKb9BvAPJRgTi24GnAwVf1Xk2uGpOCmjZEjARVc3ZjhTEbBV380oQnfJLN0SzEIo oio7stEJoQDNDYgTFvsauDMftM6fdZ93Z+FmYNzAaBRQQeLDgp3R3mpNdzyRG3fC pYJSn0kNblF7pdQ1LeWBkZ0OxIXIynvgXVf2HWKwKDn28fdy/TZZ+qPwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcHr6y8+bNzNE1l9dUvFw5pvE88MB8GA1UdIwQY MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt ZDJlMzM3MmFjMjljLzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITpYL6It qKRGRSCEZ098JsX+vTsg32v5im6ctm4pzH4QbvRUtcCTNR90g9OHAxkPJZBX2PuO M8UciXDgBU0oDGNiW9qWz4PcowU+MbEGJ43w0Tko9wiAkAHEhyYZP3YTw32uPbwP Cv6Gkfi4NHBv+JWvpPe36LiLw9LJjeNa5ILInZYMgPcYlwoP/fwD1QtEo8psLomq vkVrsei7x6diZYKHyHqUeZM17CHyPQiBDsX5qH46fLQFEqDciLFOTnx/nP6+3ihf iWXQIq+vwg0QvjdC3Xk//oj5kighx9b60MoZ3TQ6p6ycogvrYrdzv1WVc+cgE6GG uiy5YfN1Osy0rA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:48:52 2026 by rpki-client