This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json) Hash identifier: NWMgEUX8tGGmGrOvm/E1ZZywGJXIIKlk3kyFVdHrmUk= Subject key identifier: 9A:CA:1C:B4:5C:98:1A:F3:10:C0:04:43:98:BF:81:2E:95:47:BD:1A Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d Certificate serial: 019BF6516C1B741CC853CDB3DF1F65832DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 18:01:29 +0000 Manifest this update: Sun 25 Jan 2026 18:01:29 +0000 Manifest next update: Mon 26 Jan 2026 18:01:29 +0000 Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=) 2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=) 3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: UiwK+z/kqgxJbkbMtQsHnrrXF0l+fTlgoRhb2TMDOD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:6c:1b:74:1c:c8:53:cd:b3:df:1f:65:83:2d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d Validity Not Before: Jan 25 18:01:29 2026 GMT Not After : Jan 26 18:01:29 2026 GMT Subject: CN=9aca1cb45c981af310c0044398bf812e9547bd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:0f:34:56:f6:39:7e:66:8b:3d:94:ff:05: 69:bb:60:10:83:79:67:df:3e:43:2b:28:3b:71:3b: ca:db:d7:09:d7:fc:3a:d3:b7:a7:49:d5:f7:0a:bd: f0:84:ad:8f:68:9d:b3:61:bf:98:5d:01:d8:8e:71: ab:b7:b3:93:cc:1a:c3:39:73:a0:38:a3:b4:ff:1f: 08:2d:d3:05:93:d3:bd:7a:d4:66:a5:37:c1:83:49: 7c:ec:53:36:4e:bd:e9:94:5d:97:a4:04:07:be:dd: 19:01:11:44:a6:f4:86:c6:58:79:f9:17:88:08:ac: 5c:39:d0:13:f1:d5:38:eb:9e:f4:39:b5:66:7a:83: 93:f6:5c:e8:d1:63:1e:2f:d7:02:bb:3d:59:d8:12: 86:b5:de:4b:86:f8:08:cb:46:5f:86:2d:6d:59:f5: ff:37:64:ba:b1:ff:4a:32:2f:54:0b:47:f1:4f:05: 19:5d:47:14:a6:55:1c:97:71:e5:34:cc:ce:fe:83: 47:d9:64:1e:a3:b4:e4:fb:97:48:20:16:e6:4d:7a: 0f:c8:ba:b0:58:8c:cd:12:71:e5:87:49:98:cf:c5: 69:f0:35:1f:66:7c:fc:06:23:d0:7c:e1:f7:af:2b: 42:db:f5:2b:1e:61:4f:b1:55:ef:68:c7:af:75:41: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:1C:B4:5C:98:1A:F3:10:C0:04:43:98:BF:81:2E:95:47:BD:1A X509v3 Authority Key Identifier: keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:66:c4:9d:db:ac:fe:74:9e:62:e8:05:43:be:7e:43:bc: 93:59:00:21:d5:ec:89:45:66:6c:ec:fb:ea:a3:1a:ba:03:9d: 91:63:12:30:9e:0d:c2:61:a2:1d:54:05:d2:b2:1c:ee:23:f3: 87:fe:21:fe:ef:b1:17:ec:cc:95:f1:19:22:6b:c2:94:d3:4a: 2b:00:68:b5:be:42:73:b4:19:d3:b0:d3:3e:b2:d3:9c:a9:0c: 0c:14:0f:83:93:3d:fa:c7:16:ce:d8:2e:f9:ad:0c:55:e8:d3: 17:e9:dd:c6:88:a3:76:44:0b:70:0e:d7:dd:8c:32:cc:58:6b: d0:ac:38:2f:90:cd:9a:23:a0:f1:10:31:ec:00:e9:1b:23:76: 65:cb:56:59:13:5a:eb:e4:2d:f0:b4:da:7a:f8:14:f0:d0:c5: 4d:b6:4b:ff:5c:6b:98:97:49:33:6c:02:ac:d3:5b:aa:13:64: a2:51:b9:59:e8:b3:64:55:61:2b:a0:00:be:52:15:bc:9b:43: 56:ec:d7:fa:b7:98:71:24:c0:c4:f9:dd:07:f2:fc:29:f0:23: b7:1b:43:29:e0:c8:1d:7c:47:0e:5d:14:be:6e:71:5f:38:e4: 28:d2:11:dc:62:68:87:36:66:72:56:21:e1:a2:9f:d6:f9:1e: 1f:b1:7c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UWwbdBzIU82z3x9lgy3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh ODA4MmQwHhcNMjYwMTI1MTgwMTI5WhcNMjYwMTI2MTgwMTI5WjAzMTEwLwYDVQQD Eyg5YWNhMWNiNDVjOTgxYWYzMTBjMDA0NDM5OGJmODEyZTk1NDdiZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzEPNFb2OX5miz2U/wVpu2AQg3ln 3z5DKyg7cTvK29cJ1/w607enSdX3Cr3whK2PaJ2zYb+YXQHYjnGrt7OTzBrDOXOg OKO0/x8ILdMFk9O9etRmpTfBg0l87FM2Tr3plF2XpAQHvt0ZARFEpvSGxlh5+ReI CKxcOdAT8dU46570ObVmeoOT9lzo0WMeL9cCuz1Z2BKGtd5LhvgIy0Zfhi1tWfX/ N2S6sf9KMi9UC0fxTwUZXUcUplUcl3HlNMzO/oNH2WQeo7Tk+5dIIBbmTXoPyLqw WIzNEnHlh0mYz8Vp8DUfZnz8BiPQfOH3rytC2/UrHmFPsVXvaMevdUEKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrKHLRcmBrzEMAEQ5i/gS6VR70aMB8GA1UdIwQY MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2 LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS1mxJ3b rP50nmLoBUO+fkO8k1kAIdXsiUVmbOz76qMaugOdkWMSMJ4NwmGiHVQF0rIc7iPz h/4h/u+xF+zMlfEZImvClNNKKwBotb5Cc7QZ07DTPrLTnKkMDBQPg5M9+scWztgu +a0MVejTF+ndxoijdkQLcA7X3YwyzFhr0Kw4L5DNmiOg8RAx7ADpGyN2ZctWWRNa 6+Qt8LTaevgU8NDFTbZL/1xrmJdJM2wCrNNbqhNkolG5WeizZFVhK6AAvlIVvJtD VuzX+reYcSTAxPndB/L8KfAjtxtDKeDIHXxHDl0Uvm5xXzjkKNIR3GJohzZmclYh 4aKf1vkeH7F8pA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:07 2026 by rpki-client