This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json) Hash identifier: PsCneAWKnqgg62vKCkCEgYMasNR3a7stlorGgFkKBJY= Subject key identifier: AC:EE:3E:F1:7C:C6:92:A2:49:1C:1E:2F:DD:86:81:FC:5C:47:9A:F5 Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156 Certificate serial: 019BF499ACCCA06544062601C0D84F3D9329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft Manifest number: 0334 Signing time: Sun 25 Jan 2026 10:01:10 +0000 Manifest this update: Sun 25 Jan 2026 10:01:10 +0000 Manifest next update: Mon 26 Jan 2026 10:01:10 +0000 Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: mVBFOt16E9Gw4XbvwCqJT/nhTqXydUbMn3BwguJ//y8=) 2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=) 3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:ac:cc:a0:65:44:06:26:01:c0:d8:4f:3d:93:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156 Validity Not Before: Jan 25 10:01:10 2026 GMT Not After : Jan 26 10:01:10 2026 GMT Subject: CN=acee3ef17cc692a2491c1e2fdd8681fc5c479af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:8e:1a:6d:09:e2:51:42:64:a7:36:7a:22: a3:71:22:e2:39:53:43:5e:3c:d6:07:c8:cb:48:5b: 47:29:90:25:4e:28:8c:ef:ba:4a:ae:20:2b:ea:56: 1d:98:ee:bd:e7:75:9c:73:94:98:9b:8f:7c:54:10: d9:c1:ad:e7:43:de:cb:6e:b5:ed:c0:c2:0d:fc:32: a0:fa:77:3b:b6:22:c2:ac:00:30:b7:79:96:c8:47: 12:8c:24:c3:ab:82:ed:47:65:38:a3:2b:d9:ba:f9: 67:f4:b5:0f:59:53:43:c6:29:87:b7:8f:39:2e:5a: 46:f0:ea:a1:bc:e3:62:9d:0a:f6:e9:81:12:dc:43: 44:a6:79:b0:c5:d6:82:fd:d4:ac:9e:7a:c5:0d:f2: 01:59:e3:f4:14:b3:6a:b4:73:ca:09:53:69:8b:18: 39:38:20:fe:5b:d0:f0:22:00:7e:36:f6:5f:d7:ca: 55:17:00:db:52:f5:83:60:0a:01:48:d4:04:42:2e: b9:ea:3e:85:79:2a:86:89:e0:c7:f8:49:3f:05:ea: 7e:89:2c:24:3d:5d:9e:d9:f5:49:80:b9:a2:4f:55: 6a:8d:31:f8:72:88:ca:91:bb:9b:c6:91:d1:fd:bf: ed:dd:cb:dd:7e:62:00:eb:97:ad:d5:5f:18:2b:20: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EE:3E:F1:7C:C6:92:A2:49:1C:1E:2F:DD:86:81:FC:5C:47:9A:F5 X509v3 Authority Key Identifier: keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:39:e8:36:83:f3:0e:a7:89:82:ba:56:00:ed:60:ce:a4: d7:49:4a:30:35:b6:7b:dc:8b:ae:8f:7d:ce:99:3b:68:68:f1: 05:99:57:eb:8a:46:0e:12:c0:95:b0:ec:e1:d3:69:19:fb:d7: a8:33:dd:ab:50:9e:c5:20:dd:30:3c:24:cb:8b:e1:3f:62:04: 09:0f:2b:57:26:12:db:23:e4:32:6b:42:ec:cb:8e:72:85:42: be:87:6c:2f:7f:6d:9a:04:20:f9:fa:a6:aa:94:0f:89:75:56: 34:06:da:6e:58:d4:81:29:b4:af:50:71:4a:3a:6d:ee:96:0c: 7d:b9:21:8b:e0:e2:55:a2:dd:1a:da:f4:2a:4c:f5:aa:3b:12: 73:e1:65:16:8f:6b:60:ff:72:56:2f:0b:02:0d:ee:4a:55:ea: e0:cd:3d:e3:88:65:18:4a:da:98:97:00:17:68:3e:9d:41:eb: a1:20:6a:26:d2:7e:76:b7:4f:8c:a8:1e:35:0b:f6:9e:6b:57: 25:48:46:d9:46:18:d5:84:89:6e:a5:06:d7:13:d7:e2:75:92: 58:c5:14:b2:bc:c3:cb:e8:75:e2:50:7c:8c:17:98:ca:ad:dd: 10:5d:86:5f:a9:3e:5c:f2:fc:16:15:fb:12:d5:e6:d8:d6:9f: d5:d7:d1:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mazMoGVEBiYBwNhPPZMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3 MTgxNTYwHhcNMjYwMTI1MTAwMTEwWhcNMjYwMTI2MTAwMTEwWjAzMTEwLwYDVQQD EyhhY2VlM2VmMTdjYzY5MmEyNDkxYzFlMmZkZDg2ODFmYzVjNDc5YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW+OGm0J4lFCZKc2eiKjcSLiOVND XjzWB8jLSFtHKZAlTiiM77pKriAr6lYdmO6953Wcc5SYm498VBDZwa3nQ97LbrXt wMIN/DKg+nc7tiLCrAAwt3mWyEcSjCTDq4LtR2U4oyvZuvln9LUPWVNDximHt485 LlpG8OqhvONinQr26YES3ENEpnmwxdaC/dSsnnrFDfIBWeP0FLNqtHPKCVNpixg5 OCD+W9DwIgB+NvZf18pVFwDbUvWDYAoBSNQEQi656j6FeSqGieDH+Ek/Bep+iSwk PV2e2fVJgLmiT1VqjTH4cojKkbubxpHR/b/t3cvdfmIA65et1V8YKyCRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzuPvF8xpKiSRweL92GgfxcR5r1MB8GA1UdIwQY MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt ZDE5NTlmM2UyZjc2LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2 LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3o56DaD 8w6niYK6VgDtYM6k10lKMDW2e9yLro99zpk7aGjxBZlX64pGDhLAlbDs4dNpGfvX qDPdq1CexSDdMDwky4vhP2IECQ8rVyYS2yPkMmtC7MuOcoVCvodsL39tmgQg+fqm qpQPiXVWNAbabljUgSm0r1BxSjpt7pYMfbkhi+DiVaLdGtr0Kkz1qjsSc+FlFo9r YP9yVi8LAg3uSlXq4M0944hlGEramJcAF2g+nUHroSBqJtJ+drdPjKgeNQv2nmtX JUhG2UYY1YSJbqUG1xPX4nWSWMUUsrzDy+h14lB8jBeYyq3dEF2GX6k+XPL8FhX7 EtXm2Naf1dfRJg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:57:28 2026 by rpki-client