This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json) Hash identifier: HU4TJClHeS7LwMHgjakeUzVZBUtwdcUSr8kHTi2H0WI= Subject key identifier: 52:DD:89:FB:2C:9D:EA:75:01:D2:71:D9:5D:40:AC:6C:30:D6:C8:CE Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d Certificate serial: 019BF72D36FC7FFEE336A14EC64859FD2B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft Manifest number: 036B Signing time: Sun 25 Jan 2026 22:01:33 +0000 Manifest this update: Sun 25 Jan 2026 22:01:33 +0000 Manifest next update: Mon 26 Jan 2026 22:01:33 +0000 Files and hashes: 1: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: qGPbUTvuPutwKOY+7LcfbCQ3Rdbol6AMYomZJfgncAw=) 2: emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (hash: MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:36:fc:7f:fe:e3:36:a1:4e:c6:48:59:fd:2b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d Validity Not Before: Jan 25 22:01:33 2026 GMT Not After : Jan 26 22:01:33 2026 GMT Subject: CN=52dd89fb2c9dea7501d271d95d40ac6c30d6c8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:3f:c8:6c:00:63:80:24:8a:b2:ef:e8:c5: 61:a9:74:ec:fd:cc:b3:79:61:cf:d2:90:17:3c:06: 2e:0c:94:b3:45:35:e7:93:8b:3c:b8:cb:20:9f:b4: 7b:9f:38:83:53:a8:40:f2:77:90:fb:c6:57:9e:19: ed:60:b9:ef:af:54:0f:8f:54:56:50:5c:b7:7d:83: 08:3c:aa:c8:f6:59:2d:c3:81:10:57:26:f1:a6:f3: 1a:56:f8:4b:c5:fc:02:dd:47:98:cf:e7:aa:62:a5: 7c:e9:d0:71:db:66:9c:59:73:ca:c3:7f:30:bb:f9: 98:92:09:fb:b2:eb:65:34:5e:e1:1d:79:05:31:1c: 1f:d0:0b:13:24:57:8d:42:65:2d:02:b9:72:c1:b6: 89:c1:0b:3b:51:4d:2e:e6:86:a4:fd:1b:41:4b:b0: 61:f3:67:5b:71:c7:eb:1a:ed:2b:06:7e:c0:07:c2: 86:0f:5b:0e:dc:d5:2d:99:de:68:e1:9a:99:cb:37: 0d:09:1e:97:97:8f:7b:34:ce:27:7a:0a:5a:a0:04: 5e:b3:26:c6:c0:56:7a:d2:e8:95:6e:7d:97:16:c1: 19:cd:aa:a4:6d:ef:13:3a:11:16:9d:38:65:06:5f: cb:89:3a:a7:21:7a:5b:97:a8:ef:b3:84:ca:60:63: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:89:FB:2C:9D:EA:75:01:D2:71:D9:5D:40:AC:6C:30:D6:C8:CE X509v3 Authority Key Identifier: keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7c:96:de:3d:38:0a:89:49:74:03:c4:3b:fc:20:cd:8b:48: 60:3c:a4:5f:b5:e2:f5:58:30:b2:00:9e:c2:9f:16:a3:be:6b: f0:e9:7c:14:5e:09:10:fc:82:8e:f4:27:eb:f1:e1:98:ea:ae: 32:d3:3f:04:6a:b7:5a:9e:a3:14:a8:cb:4f:4c:cc:45:f8:89: 19:cb:4b:4d:07:0e:74:9e:8f:40:84:28:e2:96:8c:1d:40:8e: e5:fa:e6:cd:97:62:38:78:62:59:e1:36:eb:de:6b:6e:db:1a: d2:f5:77:5e:3e:fc:56:77:f0:b8:2e:6f:e2:3c:a5:15:18:37: a8:53:f0:44:00:46:a8:05:57:81:3e:99:7d:c6:e0:69:ae:ef: 52:69:81:34:33:a7:da:37:1a:8a:23:4c:b0:81:93:40:05:e4: c4:4d:cb:e5:da:16:7a:bb:f9:b0:72:50:11:d1:78:c0:73:24: 7b:ac:c4:13:1e:19:a2:97:fe:e4:7c:c3:cd:ea:73:f2:4a:dd: 12:84:26:a8:38:18:f2:30:d1:53:76:0d:2c:5f:dd:74:c1:93: a9:f5:c8:b2:5e:d3:30:15:f9:45:c8:05:4e:12:ca:1e:7b:42: 1b:63:d9:ee:02:0a:7d:12:8d:cf:61:08:98:a9:8b:e7:11:7b: 03:b6:a0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LTb8f/7jNqFOxkhZ/StkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNWNiMDk4Y2Y2ZjdmYjY4YTE4MWFlY2RhOGVhMzhlNjRj NWFjOWQwHhcNMjYwMTI1MjIwMTMzWhcNMjYwMTI2MjIwMTMzWjAzMTEwLwYDVQQD Eyg1MmRkODlmYjJjOWRlYTc1MDFkMjcxZDk1ZDQwYWM2YzMwZDZjOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJY/yGwAY4AkirLv6MVhqXTs/cyz eWHP0pAXPAYuDJSzRTXnk4s8uMsgn7R7nziDU6hA8neQ+8ZXnhntYLnvr1QPj1RW UFy3fYMIPKrI9lktw4EQVybxpvMaVvhLxfwC3UeYz+eqYqV86dBx22acWXPKw38w u/mYkgn7sutlNF7hHXkFMRwf0AsTJFeNQmUtArlywbaJwQs7UU0u5oak/RtBS7Bh 82dbccfrGu0rBn7AB8KGD1sO3NUtmd5o4ZqZyzcNCR6Xl497NM4negpaoAResybG wFZ60uiVbn2XFsEZzaqkbe8TOhEWnThlBl/LiTqnIXpbl6jvs4TKYGPHUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLdifssnep1AdJx2V1ArGww1sjOMB8GA1UdIwQY MBaAFB1csJjPb3+2ihga7NqOo45kxaydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTkt ZDZhNDMzMTlhYTIxLzEvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTktZDZhNDMzMTlhYTIx LzEvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnyW3j04 ColJdAPEO/wgzYtIYDykX7Xi9VgwsgCewp8Wo75r8Ol8FF4JEPyCjvQn6/HhmOqu MtM/BGq3Wp6jFKjLT0zMRfiJGctLTQcOdJ6PQIQo4paMHUCO5frmzZdiOHhiWeE2 695rbtsa0vV3Xj78VnfwuC5v4jylFRg3qFPwRABGqAVXgT6Zfcbgaa7vUmmBNDOn 2jcaiiNMsIGTQAXkxE3L5doWerv5sHJQEdF4wHMke6zEEx4Zopf+5HzDzepz8krd EoQmqDgY8jDRU3YNLF/ddMGTqfXIsl7TMBX5RcgFThLKHntCG2PZ7gIKfRKNz2EI mKmL5xF7A7ag/g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:55 2026 by rpki-client