This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: YDhgXyU93bQmejONAf9nAi1OZousbmmZnbPlU6UxZGs= Subject key identifier: C1:49:75:61:16:C6:AD:EC:4A:F7:4F:70:26:EA:58:28:C8:B1:F2:DB Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019BF35080700DC1FADA871F8440B6C844EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1477 Signing time: Sun 25 Jan 2026 04:01:37 +0000 Manifest this update: Sun 25 Jan 2026 04:01:37 +0000 Manifest next update: Mon 26 Jan 2026 04:01:37 +0000 Files and hashes: 1: 3jDJ5a-rblvvz-j2fpP0Sarh3To.roa (hash: +EqyrRTCgEyUFu+EGwkPk5fx5YkNUQzVTN15shVfS7c=) 2: 4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa (hash: FKTV+GMV2F3rBs+0rAhquEp7r2XIbw+tGPzN2CvtSt0=) 3: 75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (hash: IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=) 4: 8MsqChfqyk1noQMRXmiLEoP7JJc.roa (hash: 5HC+gRN9Kd7T3/h7fthoFYQYhTna8IfEWC1qAEQyFlA=) 5: A-rHPJxadoP-DN7xVNjnNuVuw6A.roa (hash: 4l5BCwURt7YDV10rwuZHqQQEai25MJkXH4mq+zGFBZk=) 6: A3WTKCACeEMnsJPRt1EtZ_IOE_o.roa (hash: fTMDJzlNdc8urBX1kRcFBR3Pb++06Ji2RDkWJYrM/nE=) 7: GwgBmAn3zMvBSWwkZNC0s2b7Otc.roa (hash: aaLxieN/n3yBrcTTRt8f3C9YEFE8nrKX/yFFAYKui70=) 8: VuEhHAq2HoPe8RVU69XPTei-cE8.roa (hash: Bq3m8GApqW3tKQWVbNfLNzBDZRLHrGvbYKJZWCdv6TI=) 9: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: RdYgdkYtiQaIwhmMPMpcCVfvmCYYJPUMJKUOEYxmjAg=) 10: tKFH2HoWkbg9bb1yJ7KiMyAru7Q.roa (hash: Hl1JR0aJQiWIXrA53WzTjCP5mFFzxpdo6sRUi29w3iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:80:70:0d:c1:fa:da:87:1f:84:40:b6:c8:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jan 25 04:01:37 2026 GMT Not After : Jan 26 04:01:37 2026 GMT Subject: CN=c149756116c6adec4af74f7026ea5828c8b1f2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:e8:7c:89:98:dd:32:c2:46:a3:aa:2f:fb: 47:44:8d:eb:bf:85:37:03:70:ac:79:c8:29:6c:62: 5b:49:b1:38:6b:9d:05:1c:90:e2:04:2c:b1:aa:9d: af:55:71:25:e0:81:3d:6b:9f:4e:ac:fa:d6:66:2c: 6c:45:12:06:fa:2f:65:cd:9f:b6:e3:b7:87:31:72: 4c:d2:1a:e3:13:95:82:7c:50:e7:f3:6e:54:ab:2c: f8:17:bc:f7:79:56:de:05:93:f7:05:07:87:5f:29: 04:17:17:88:80:8a:db:31:13:ab:6a:99:0a:a8:3a: ea:eb:70:30:95:87:c3:b4:01:3b:28:f3:6c:10:8b: 54:02:cf:37:09:40:b5:d2:fa:12:d5:fe:7d:fd:17: 34:d0:54:c0:94:b2:39:ba:ce:7c:bb:db:f1:6f:f2: 02:c8:a2:6a:e5:39:3e:b7:0c:fd:72:85:77:b5:9b: f5:9b:c4:3f:7e:11:d7:a7:3f:b2:43:10:30:c4:91: b5:95:7d:ef:45:81:39:91:de:67:99:34:f0:a6:04: d4:77:34:92:62:b4:9f:46:78:0c:95:0a:02:a3:8b: eb:75:3c:bd:95:df:9f:1c:9b:9c:2e:ca:56:7b:ff: 9a:66:01:bd:c3:07:bd:ac:85:69:12:d0:fb:6e:b2: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:49:75:61:16:C6:AD:EC:4A:F7:4F:70:26:EA:58:28:C8:B1:F2:DB X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4f:10:df:fa:1b:2d:7c:29:78:a2:6b:ad:18:00:eb:5b:e0: e0:26:0a:61:c5:74:19:65:6e:66:bc:8b:b0:91:7a:b8:a1:65: 57:27:f3:51:ca:89:99:f2:00:9a:b2:e8:09:0f:00:42:5f:85: 6f:cb:80:4f:a0:a5:56:ce:bc:92:b9:70:09:c6:42:35:19:68: 09:4a:ca:e9:db:8b:4c:3d:2c:9c:a3:1e:c2:cc:fb:4b:51:a3: 32:6f:63:43:0e:ee:a4:91:d0:63:34:6d:1f:5e:dd:27:9d:6f: 48:3c:01:54:66:b0:79:67:4d:1c:ef:3f:90:df:dd:23:d9:6d: e3:70:62:58:12:46:67:c9:f4:a6:67:bc:78:5a:22:a9:58:a8: 8f:01:69:12:cd:a2:57:55:5d:37:d4:2f:b3:74:2c:21:4d:76: e4:a4:07:59:05:01:8d:73:b2:4d:c0:da:58:6e:71:3d:ba:8b: b7:41:f5:a5:bb:ee:c8:2d:7c:25:17:2c:36:e9:76:67:38:0d: f7:7f:a0:d2:20:c9:0e:2b:9e:09:93:13:51:89:61:58:a5:7a: 96:3f:fe:cc:38:6b:35:62:e6:f1:b6:d6:32:24:e6:8a:a0:8f: 95:7e:e3:ea:f6:24:ce:e3:a1:f0:30:dd:74:eb:51:9d:65:e1: 2b:4f:47:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUIBwDcH62ocfhEC2yETsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjYwMTI1MDQwMTM3WhcNMjYwMTI2MDQwMTM3WjAzMTEwLwYDVQQD EyhjMTQ5NzU2MTE2YzZhZGVjNGFmNzRmNzAyNmVhNTgyOGM4YjFmMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H3ofImY3TLCRqOqL/tHRI3rv4U3 A3CsecgpbGJbSbE4a50FHJDiBCyxqp2vVXEl4IE9a59OrPrWZixsRRIG+i9lzZ+2 47eHMXJM0hrjE5WCfFDn825Uqyz4F7z3eVbeBZP3BQeHXykEFxeIgIrbMROrapkK qDrq63AwlYfDtAE7KPNsEItUAs83CUC10voS1f59/Rc00FTAlLI5us58u9vxb/IC yKJq5Tk+twz9coV3tZv1m8Q/fhHXpz+yQxAwxJG1lX3vRYE5kd5nmTTwpgTUdzSS YrSfRngMlQoCo4vrdTy9ld+fHJucLspWe/+aZgG9wwe9rIVpEtD7brJpDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFJdWEWxq3sSvdPcCbqWCjIsfLbMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk8Q3/ob LXwpeKJrrRgA61vg4CYKYcV0GWVuZryLsJF6uKFlVyfzUcqJmfIAmrLoCQ8AQl+F b8uAT6ClVs68krlwCcZCNRloCUrK6duLTD0snKMewsz7S1GjMm9jQw7upJHQYzRt H17dJ51vSDwBVGaweWdNHO8/kN/dI9lt43BiWBJGZ8n0pme8eFoiqViojwFpEs2i V1VdN9Qvs3QsIU125KQHWQUBjXOyTcDaWG5xPbqLt0H1pbvuyC18JRcsNul2ZzgN 93+g0iDJDiueCZMTUYlhWKV6lj/+zDhrNWLm8bbWMiTmiqCPlX7j6vYkzuOh8DDd dOtRnWXhK09HTA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:29 2026 by rpki-client