This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json) Hash identifier: H7jm42lFOvH98mgJPGUICcf7Nen1IgV+dKHUbpPB8Og= Subject key identifier: 4B:58:EB:DE:5F:53:16:1C:77:CB:7D:BD:E8:C8:66:D1:D3:7D:00:83 Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Certificate serial: 019BF6F613BC5F9DB6E77F5D76C7DFCA05E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft Manifest number: 167D Signing time: Sun 25 Jan 2026 21:01:20 +0000 Manifest this update: Sun 25 Jan 2026 21:01:20 +0000 Manifest next update: Mon 26 Jan 2026 21:01:20 +0000 Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=) 2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: SQxOeJ9IV+C/iFTM7LXji9iUYICjDKdXPMelSTKoJqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:13:bc:5f:9d:b6:e7:7f:5d:76:c7:df:ca:05:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Validity Not Before: Jan 25 21:01:20 2026 GMT Not After : Jan 26 21:01:20 2026 GMT Subject: CN=4b58ebde5f53161c77cb7dbde8c866d1d37d0083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:56:4d:de:bf:55:8a:aa:6e:f3:59:25:16: ac:42:58:80:44:25:7d:9f:c2:92:1f:b6:26:59:55: 27:e5:fb:65:d9:82:f2:0a:1e:70:5d:c0:4b:fe:06: 41:bc:fe:ab:8a:4f:13:63:73:80:bc:e2:b3:cc:d2: ad:65:d4:37:a1:b4:4f:ba:92:70:3c:a0:8a:96:50: e4:08:37:09:53:64:8f:40:06:e6:d0:0f:c3:32:56: 54:88:5f:92:96:65:b9:c5:0e:14:0f:81:56:26:29: b7:24:89:2c:70:24:42:71:59:00:df:70:fa:c7:b7: 2b:6d:51:09:c4:ba:6b:7f:f4:5d:f7:06:20:5b:bc: 3b:6a:80:7d:26:40:76:c4:e7:52:9f:ac:1e:77:18: 5d:4e:c7:63:33:a7:f7:ae:b1:09:2e:a5:f8:f9:8f: 3c:bc:46:d7:c8:eb:98:e6:ac:bf:3d:98:e5:84:36: 18:74:6a:0a:e1:ed:4f:c8:b4:1d:cf:30:43:42:d0: 79:c9:97:79:6d:37:44:e8:4d:6b:25:26:ce:d3:86: 9a:8a:48:24:ae:6e:f3:2d:5f:93:59:d7:e9:7a:c5: 3d:3c:27:59:e9:c2:25:ca:50:79:28:61:91:37:e5: b9:2a:73:67:4f:44:38:53:9d:88:1d:b7:0b:1a:6f: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:EB:DE:5F:53:16:1C:77:CB:7D:BD:E8:C8:66:D1:D3:7D:00:83 X509v3 Authority Key Identifier: keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d2:36:4c:4a:10:76:52:6b:84:4b:c5:ff:d6:7f:bd:fc:75: 38:99:8d:8a:28:55:d4:88:0e:36:a4:39:7c:a7:6d:09:2b:e0: 86:4b:3f:b3:3a:e1:92:4a:36:d7:8c:90:c6:5f:d7:92:47:45: e3:24:8c:5a:b1:b9:ee:cf:64:e2:43:8a:35:d8:47:7c:6c:55: da:45:4f:65:4d:63:1e:3a:fc:c9:e3:e3:5e:f2:a0:e2:d6:b0: 4d:4e:2b:9e:26:73:93:ae:32:31:45:cf:51:a3:be:ec:df:eb: a4:2a:d3:23:fc:de:3d:25:38:92:b1:5e:60:05:1c:38:b7:47: ac:38:ac:d4:bf:62:2f:d9:c1:8c:33:eb:62:89:a1:87:d9:dd: 4b:d9:52:29:a7:de:1c:7e:3a:20:d6:11:35:6d:a1:24:ea:6d: c2:f2:8c:7f:5c:70:60:33:cb:18:98:b0:36:94:d3:0f:af:11: cc:6c:d1:6b:ff:b3:9d:72:82:6d:41:59:de:f6:07:e0:33:a7: 1c:a4:c1:69:15:32:31:56:3e:b6:8c:c8:c9:53:92:8c:c9:b9: 5f:51:e5:98:51:f7:7a:f3:43:af:cc:78:18:cc:42:43:a8:38: 32:c3:1a:c1:7c:0f:2f:fa:2b:12:e1:26:af:95:8e:f5:14:d2: ae:44:86:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29hO8X522539ddsffygXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1 NDE1YTgwHhcNMjYwMTI1MjEwMTIwWhcNMjYwMTI2MjEwMTIwWjAzMTEwLwYDVQQD Eyg0YjU4ZWJkZTVmNTMxNjFjNzdjYjdkYmRlOGM4NjZkMWQzN2QwMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HJWTd6/VYqqbvNZJRasQliARCV9 n8KSH7YmWVUn5ftl2YLyCh5wXcBL/gZBvP6rik8TY3OAvOKzzNKtZdQ3obRPupJw PKCKllDkCDcJU2SPQAbm0A/DMlZUiF+SlmW5xQ4UD4FWJim3JIkscCRCcVkA33D6 x7crbVEJxLprf/Rd9wYgW7w7aoB9JkB2xOdSn6wedxhdTsdjM6f3rrEJLqX4+Y88 vEbXyOuY5qy/PZjlhDYYdGoK4e1PyLQdzzBDQtB5yZd5bTdE6E1rJSbO04aaikgk rm7zLV+TWdfpesU9PCdZ6cIlylB5KGGRN+W5KnNnT0Q4U52IHbcLGm8IgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtY695fUxYcd8t9vejIZtHTfQCDMB8GA1UdIwQY MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActI2TEoQ dlJrhEvF/9Z/vfx1OJmNiihV1IgONqQ5fKdtCSvghks/szrhkko214yQxl/XkkdF 4ySMWrG57s9k4kOKNdhHfGxV2kVPZU1jHjr8yePjXvKg4tawTU4rniZzk64yMUXP UaO+7N/rpCrTI/zePSU4krFeYAUcOLdHrDis1L9iL9nBjDPrYomhh9ndS9lSKafe HH46INYRNW2hJOptwvKMf1xwYDPLGJiwNpTTD68RzGzRa/+znXKCbUFZ3vYH4DOn HKTBaRUyMVY+tozIyVOSjMm5X1HlmFH3evNDr8x4GMxCQ6g4MsMawXwPL/orEuEm r5WO9RTSrkSGPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:05 2026 by rpki-client