This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json) Hash identifier: Cy5ymuo0TpzlSGFytP+u1lcQlb5yzuFJ6G/HRliWobw= Subject key identifier: 73:3B:C8:DE:00:DF:DC:14:9A:4F:BB:6B:65:14:C0:39:6C:1B:2C:E2 Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Certificate serial: 019BF8E43539D163AAACC5FC81DA99F6CD98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft Manifest number: 115E Signing time: Mon 26 Jan 2026 06:01:03 +0000 Manifest this update: Mon 26 Jan 2026 06:01:03 +0000 Manifest next update: Tue 27 Jan 2026 06:01:03 +0000 Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=) 2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: DLev3zfP7Fg/0eHCvzHY7WKQgmmEg573HPiKvQE906s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:35:39:d1:63:aa:ac:c5:fc:81:da:99:f6:cd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Validity Not Before: Jan 26 06:01:03 2026 GMT Not After : Jan 27 06:01:03 2026 GMT Subject: CN=733bc8de00dfdc149a4fbb6b6514c0396c1b2ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:f3:90:b9:d8:33:f4:a5:dc:32:53:86:32: 36:06:75:b9:c9:2e:b6:3e:7e:4e:38:2f:74:8d:f2: 4a:3d:54:4e:f4:f7:17:50:0e:33:93:c0:0f:70:36: b1:29:77:5a:3f:c5:0b:41:6f:fd:a4:7c:a4:5d:2c: b6:17:91:25:83:9d:75:68:6b:3d:76:d7:16:74:0b: 6b:76:71:d6:3f:81:81:5c:fb:82:95:44:51:bc:72: 9e:4d:f1:09:8d:54:89:1f:09:60:30:8d:ae:a9:95: 8a:54:cb:64:e4:53:1c:28:50:3a:ac:a9:01:88:a7: 82:a3:9a:9f:98:19:6d:a5:1c:c1:b6:2f:20:95:37: 27:b2:68:de:68:bd:98:4c:77:d3:09:e2:58:8c:f7: 7d:6b:f0:a3:38:cb:3c:1d:21:33:b2:e3:36:81:fd: a8:da:54:f9:e2:28:3b:cb:a4:dc:81:85:9e:14:23: d2:24:94:14:13:d9:da:c0:b8:75:2b:bb:4c:81:6c: 5e:1a:f2:00:88:d8:52:b0:9a:5d:a7:70:f6:dc:6d: b7:94:17:c5:f3:e9:46:a8:15:3c:8d:1c:48:b6:aa: 65:a9:b5:75:86:42:fe:52:68:f9:d7:32:15:e9:4c: e3:99:60:92:16:86:aa:c7:14:90:c6:60:42:02:38: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:C8:DE:00:DF:DC:14:9A:4F:BB:6B:65:14:C0:39:6C:1B:2C:E2 X509v3 Authority Key Identifier: keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:d3:21:8c:ad:07:d3:7e:65:74:5d:32:1e:da:53:e2:58: bd:fa:40:5e:f7:c5:50:9a:cf:cd:ff:22:cc:99:c3:6b:c4:38: f0:f7:89:ec:81:18:5e:f2:77:1e:62:00:d9:de:e1:9d:b6:fb: c2:e9:b8:64:d5:08:24:2e:3c:d2:ab:68:3c:c4:f2:70:2c:a9: 2c:43:f9:89:64:aa:1c:96:eb:9d:41:99:d7:fc:12:16:71:db: f7:0e:ce:8b:3d:5b:cd:68:ac:71:11:44:2f:63:a6:c3:9e:77: 1f:65:dd:7d:c8:ad:4d:3f:73:82:08:25:20:6d:d0:ee:ba:cf: bc:bc:46:1b:8a:8b:20:b8:57:bb:69:58:c5:0a:19:25:6d:26: cf:61:68:dd:bc:c0:f4:5c:69:5f:76:9e:b1:16:0d:10:9f:ad: 0f:45:20:7b:c4:9c:a5:7e:a5:bf:c4:e9:e8:83:4b:de:47:6c: 69:df:fe:94:52:f6:73:96:92:e3:66:4e:7a:af:1e:09:36:8e: bb:3e:5e:af:f2:4d:00:a1:fa:02:a1:44:c2:d4:a4:55:43:de: d0:b7:b4:9f:fa:60:d4:7f:88:c9:2f:c2:53:18:b8:1c:b7:17: eb:c7:94:6d:0a:ed:61:11:a5:3b:b6:b0:ea:b6:e5:ff:95:9a: 3b:5a:06:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45DU50WOqrMX8gdqZ9s2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh NTRkZjgwHhcNMjYwMTI2MDYwMTAzWhcNMjYwMTI3MDYwMTAzWjAzMTEwLwYDVQQD Eyg3MzNiYzhkZTAwZGZkYzE0OWE0ZmJiNmI2NTE0YzAzOTZjMWIyY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY7zkLnYM/Sl3DJThjI2BnW5yS62 Pn5OOC90jfJKPVRO9PcXUA4zk8APcDaxKXdaP8ULQW/9pHykXSy2F5Elg511aGs9 dtcWdAtrdnHWP4GBXPuClURRvHKeTfEJjVSJHwlgMI2uqZWKVMtk5FMcKFA6rKkB iKeCo5qfmBltpRzBti8glTcnsmjeaL2YTHfTCeJYjPd9a/CjOMs8HSEzsuM2gf2o 2lT54ig7y6TcgYWeFCPSJJQUE9nawLh1K7tMgWxeGvIAiNhSsJpdp3D23G23lBfF 8+lGqBU8jRxItqplqbV1hkL+Umj51zIV6UzjmWCSFoaqxxSQxmBCAjilIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM7yN4A39wUmk+7a2UUwDlsGyziMB8GA1UdIwQY MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs/TIYyt B9N+ZXRdMh7aU+JYvfpAXvfFUJrPzf8izJnDa8Q48PeJ7IEYXvJ3HmIA2d7hnbb7 wum4ZNUIJC480qtoPMTycCypLEP5iWSqHJbrnUGZ1/wSFnHb9w7Oiz1bzWiscRFE L2Omw553H2XdfcitTT9zggglIG3Q7rrPvLxGG4qLILhXu2lYxQoZJW0mz2Fo3bzA 9FxpX3aesRYNEJ+tD0Uge8ScpX6lv8Tp6INL3kdsad/+lFL2c5aS42ZOeq8eCTaO uz5er/JNAKH6AqFEwtSkVUPe0Le0n/pg1H+IyS/CUxi4HLcX68eUbQrtYRGlO7aw 6rbl/5WaO1oGKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:26 2026 by rpki-client