This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json) Hash identifier: dQZKdc4vRw601H5pkabVAGMtZXL4IJcRcqCRssqXD2c= Subject key identifier: DB:2F:64:25:26:97:35:39:FE:72:04:6C:0D:23:28:B1:BF:58:59:B4 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019BF6BF81DEF14E2E0E6494C8456E10CC4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft Manifest number: 16FE Signing time: Sun 25 Jan 2026 20:01:44 +0000 Manifest this update: Sun 25 Jan 2026 20:01:44 +0000 Manifest next update: Mon 26 Jan 2026 20:01:44 +0000 Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=) 2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: H+moBgPt6jhkHyFDrPLh7Dh0/Xno8L2D09bkroz/1aI=) 3: sscLEeP0ItNFFLLG-5gvreCdoWE.roa (hash: Ja+SzihPXfZaNmQF5Sydb9JlbsLFGRyUZqIr3rPTkfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:81:de:f1:4e:2e:0e:64:94:c8:45:6e:10:cc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Jan 25 20:01:44 2026 GMT Not After : Jan 26 20:01:44 2026 GMT Subject: CN=db2f642526973539fe72046c0d2328b1bf5859b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:28:7e:a7:c3:4a:34:c2:05:48:ce:d2:8f: 8f:1a:bb:a7:72:82:d6:00:fd:b9:1c:d1:82:c5:52: 2d:36:2f:7d:f7:7d:5c:b7:e9:a7:6d:a1:76:ba:b7: 7f:dd:36:46:df:c6:c4:45:ab:96:ca:30:c6:b5:59: e2:fd:86:c4:9c:93:f6:0e:bf:2c:59:7c:27:cd:67: f1:3d:8c:c4:eb:ad:d3:63:7e:40:72:42:33:d4:7f: c5:ed:cd:be:1d:b7:bd:28:96:36:d5:d1:99:45:24: 58:57:80:7c:77:46:19:a3:5f:47:e6:a1:a3:84:d1: da:ed:f8:2e:bd:f2:ca:30:9d:6e:48:3d:7e:1c:a1: ed:6e:17:c9:56:8d:68:72:04:24:8d:9d:71:0f:1b: 3f:5c:60:10:f3:44:bf:5f:82:98:a5:80:39:da:39: 09:d2:4b:76:de:9a:77:4b:a5:1c:dd:be:b5:ce:a1: 51:6a:a3:83:6d:cf:23:00:e9:6b:39:2e:7b:31:5a: 35:92:30:3f:f7:0b:82:5d:0a:fc:b8:36:cc:40:4c: 6d:4a:2c:7d:15:0f:29:e7:1a:71:54:28:54:4c:c4: 44:e3:5e:d1:28:17:70:08:8a:cd:b1:cd:a3:9e:41: 87:6c:fb:8a:ae:b9:8d:c5:cc:b1:e5:bc:2d:b2:5b: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2F:64:25:26:97:35:39:FE:72:04:6C:0D:23:28:B1:BF:58:59:B4 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c5:0b:59:fb:b1:0c:81:b5:3d:b5:9d:99:2a:bb:43:c6:9e: 89:8e:a8:4a:19:e0:d7:9d:41:ce:6d:03:4a:81:58:c6:0d:a7: eb:c1:1d:6f:2d:5f:b7:92:1e:5f:77:10:cd:c0:58:a8:3f:7c: 80:b4:15:40:eb:5c:1b:78:f9:05:dd:40:0a:ab:dc:d3:69:58: 87:23:31:32:a2:67:5f:15:d2:1c:c9:6c:52:25:b3:11:26:76: 26:74:e9:e5:a7:32:0a:47:df:14:f1:21:06:6f:52:63:4b:42: 6b:7f:e9:a3:f4:c1:d9:e8:d3:b7:40:ed:44:59:a2:4f:83:f5: f7:4f:9e:c5:2a:e0:0c:8f:ed:5b:02:dd:7f:29:f7:28:6f:f7: 29:e5:02:06:d7:86:89:c6:a7:e6:f6:fa:f7:4b:49:39:f7:7e: 86:41:32:1d:58:40:cf:03:2b:53:d9:bc:11:89:db:bd:5e:5d: 88:46:e2:b9:90:5b:e3:69:0a:c0:31:11:e9:2c:c0:2a:29:10: cf:21:07:c6:24:38:66:72:bb:e1:42:47:d3:f3:02:ff:b4:b8: e2:55:47:4e:f2:38:9f:8f:5f:e8:f3:e8:67:ec:bc:d0:21:11: 97:cf:04:a8:52:88:b4:a8:66:aa:99:89:92:9b:b9:e8:c4:ef: be:57:f9:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v4He8U4uDmSUyEVuEMxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjYwMTI1MjAwMTQ0WhcNMjYwMTI2MjAwMTQ0WjAzMTEwLwYDVQQD EyhkYjJmNjQyNTI2OTczNTM5ZmU3MjA0NmMwZDIzMjhiMWJmNTg1OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/AofqfDSjTCBUjO0o+PGruncoLW AP25HNGCxVItNi99931ct+mnbaF2urd/3TZG38bERauWyjDGtVni/YbEnJP2Dr8s WXwnzWfxPYzE663TY35AckIz1H/F7c2+Hbe9KJY21dGZRSRYV4B8d0YZo19H5qGj hNHa7fguvfLKMJ1uSD1+HKHtbhfJVo1ocgQkjZ1xDxs/XGAQ80S/X4KYpYA52jkJ 0kt23pp3S6Uc3b61zqFRaqODbc8jAOlrOS57MVo1kjA/9wuCXQr8uDbMQExtSix9 FQ8p5xpxVChUTMRE417RKBdwCIrNsc2jnkGHbPuKrrmNxcyx5bwtslv1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsvZCUmlzU5/nIEbA0jKLG/WFm0MB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMULWfux DIG1PbWdmSq7Q8aeiY6oShng151Bzm0DSoFYxg2n68Edby1ft5IeX3cQzcBYqD98 gLQVQOtcG3j5Bd1ACqvc02lYhyMxMqJnXxXSHMlsUiWzESZ2JnTp5acyCkffFPEh Bm9SY0tCa3/po/TB2ejTt0DtRFmiT4P190+exSrgDI/tWwLdfyn3KG/3KeUCBteG ican5vb690tJOfd+hkEyHVhAzwMrU9m8EYnbvV5diEbiuZBb42kKwDER6SzAKikQ zyEHxiQ4ZnK74UJH0/MC/7S44lVHTvI4n49f6PPoZ+y80CERl88EqFKItKhmqpmJ kpu56MTvvlf54A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:37 2026 by rpki-client