This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json) Hash identifier: RLFr9mcB3WBRgXkdYjd44egvq7glvdE9Le9ON/ZaQmQ= Subject key identifier: 8B:9A:8E:0E:B0:0B:85:0D:32:C9:E2:2E:7C:9C:88:3B:02:DD:92:25 Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Certificate serial: 019BF6F5927AF18F36BCCED49389D9A74760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft Manifest number: 17BE Signing time: Sun 25 Jan 2026 21:00:47 +0000 Manifest this update: Sun 25 Jan 2026 21:00:47 +0000 Manifest next update: Mon 26 Jan 2026 21:00:47 +0000 Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=) 2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: MaZDfR4nsVzWM55NP+fI9eyVLV7kyC/YdPuQzSlLY8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:92:7a:f1:8f:36:bc:ce:d4:93:89:d9:a7:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Validity Not Before: Jan 25 21:00:47 2026 GMT Not After : Jan 26 21:00:47 2026 GMT Subject: CN=8b9a8e0eb00b850d32c9e22e7c9c883b02dd9225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:80:25:19:37:c9:05:70:08:dd:64:66:e6: f2:4a:00:a0:0b:bf:fe:c0:63:94:37:10:28:be:c6: 90:e7:56:62:0d:fd:59:3f:65:f0:19:46:39:ff:94: bc:3d:1b:ce:96:56:53:a2:11:0e:0d:f0:8a:5a:2b: 39:a7:c8:1a:0c:9d:f0:17:cb:a0:73:12:06:a2:29: 7b:49:11:59:71:64:8a:e4:ab:65:be:1d:20:d7:c5: b6:35:c1:a5:81:1f:e9:bb:29:07:09:3b:84:49:3c: 7a:00:66:6a:e3:78:be:19:ba:0d:b0:1a:b0:13:05: 19:3c:7e:fd:f6:dd:24:ed:0f:21:f3:80:b9:d1:9f: cb:51:49:57:17:db:54:1d:fa:04:73:86:f6:74:75: 15:a0:56:7c:3f:63:45:b7:50:cf:16:86:80:f6:db: 21:2e:11:5b:8f:6e:cc:f9:56:c5:e3:5d:97:a2:88: 42:07:d2:9e:70:33:38:f7:12:57:60:1c:b7:20:af: 2a:5e:43:17:40:86:46:ea:01:fd:db:44:bd:2b:95: 8d:7e:51:39:4e:06:a5:4d:78:57:0e:2b:f9:37:5b: 2d:97:c2:c1:f5:b9:ac:59:c8:ba:b2:d2:44:37:07: fd:b6:60:5e:1d:1d:f9:d4:71:2c:6a:50:3b:bb:75: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:8E:0E:B0:0B:85:0D:32:C9:E2:2E:7C:9C:88:3B:02:DD:92:25 X509v3 Authority Key Identifier: keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:68:97:14:6c:c7:78:36:64:3f:d9:27:17:33:d4:b8:9e: 51:5b:8f:f5:9d:7e:9a:30:4d:ca:3c:96:f1:56:b8:b0:66:d2: ea:69:0f:8b:1b:68:7b:78:35:c2:0b:d2:58:85:16:e5:58:b0: e3:4e:a9:c2:9b:0f:91:a3:4a:15:51:ce:31:e3:60:6a:dd:79: c0:56:3f:37:e8:ee:a7:ad:7a:b7:17:1a:47:14:42:bc:e0:64: 3f:27:dc:88:89:c4:08:87:8e:4f:fe:ce:28:46:1e:12:da:36: e4:25:d4:f0:11:5f:f4:f2:2c:18:e5:af:79:09:d3:65:44:37: 91:0f:34:a0:07:ba:63:8a:82:03:21:ff:fd:d2:89:fa:8d:0b: 4b:96:1b:af:03:9a:da:76:cd:83:76:6e:27:2a:d6:eb:eb:58: 0f:09:1a:ce:67:49:93:78:de:c3:7e:a8:a4:29:fe:72:93:cf: 3e:34:37:79:cf:5b:b0:69:71:00:35:6a:2b:02:c0:24:7e:b2: 1e:df:89:81:db:66:4d:39:40:db:cf:f8:b8:5e:54:68:4f:96: ea:18:5a:0d:b5:b6:4d:9a:a3:6e:f5:67:ee:6b:5e:ee:ae:01: 58:0e:a2:79:d3:41:d0:11:74:b0:09:45:b7:c0:86:34:d3:72: 97:7c:0b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZJ68Y82vM7Uk4nZp0dgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw Y2M0YmMwHhcNMjYwMTI1MjEwMDQ3WhcNMjYwMTI2MjEwMDQ3WjAzMTEwLwYDVQQD Eyg4YjlhOGUwZWIwMGI4NTBkMzJjOWUyMmU3YzljODgzYjAyZGQ5MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw12AJRk3yQVwCN1kZubySgCgC7/+ wGOUNxAovsaQ51ZiDf1ZP2XwGUY5/5S8PRvOllZTohEODfCKWis5p8gaDJ3wF8ug cxIGoil7SRFZcWSK5Ktlvh0g18W2NcGlgR/puykHCTuESTx6AGZq43i+GboNsBqw EwUZPH799t0k7Q8h84C50Z/LUUlXF9tUHfoEc4b2dHUVoFZ8P2NFt1DPFoaA9tsh LhFbj27M+VbF412XoohCB9KecDM49xJXYBy3IK8qXkMXQIZG6gH920S9K5WNflE5 TgalTXhXDiv5N1stl8LB9bmsWci6stJENwf9tmBeHR351HEsalA7u3WADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuajg6wC4UNMsniLnyciDsC3ZIlMB8GA1UdIwQY MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt MThlNjQ0NDFkMDFlLzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGxolxRs x3g2ZD/ZJxcz1LieUVuP9Z1+mjBNyjyW8Va4sGbS6mkPixtoe3g1wgvSWIUW5Viw 406pwpsPkaNKFVHOMeNgat15wFY/N+jup616txcaRxRCvOBkPyfciInECIeOT/7O KEYeEto25CXU8BFf9PIsGOWveQnTZUQ3kQ80oAe6Y4qCAyH//dKJ+o0LS5YbrwOa 2nbNg3ZuJyrW6+tYDwkazmdJk3jew36opCn+cpPPPjQ3ec9bsGlxADVqKwLAJH6y Ht+JgdtmTTlA28/4uF5UaE+W6hhaDbW2TZqjbvVn7mte7q4BWA6iedNB0BF0sAlF t8CGNNNyl3wLMQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:37 2026 by rpki-client