This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json) Hash identifier: HEs9/SAd/ItelaLj2c99h4g/PKLvWC5rXsiWlkY+uOc= Subject key identifier: BF:C1:29:E1:E3:7B:44:15:EC:7E:59:BD:4F:C5:B1:02:F3:BB:1A:BA Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe Certificate serial: 019BF6517A287553C80CF4E18F086B127E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft Manifest number: 1492 Signing time: Sun 25 Jan 2026 18:01:33 +0000 Manifest this update: Sun 25 Jan 2026 18:01:33 +0000 Manifest next update: Mon 26 Jan 2026 18:01:33 +0000 Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=) 2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: NJ3QdGKwt8/hDPAptpPGmXEtZ35pzxRwCYrdQziaMdk=) 3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:7a:28:75:53:c8:0c:f4:e1:8f:08:6b:12:7e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe Validity Not Before: Jan 25 18:01:33 2026 GMT Not After : Jan 26 18:01:33 2026 GMT Subject: CN=bfc129e1e37b4415ec7e59bd4fc5b102f3bb1aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:cb:ea:72:40:16:29:d9:9d:35:e7:29:15: 0e:7d:96:c0:25:ca:15:ff:46:27:c4:41:3f:f4:f5: 7b:b6:9b:81:e3:15:08:35:46:5e:3b:7d:5b:5d:0d: c8:90:3d:86:09:0a:36:4d:9c:a2:5a:52:67:ca:87: 94:30:6e:8c:06:6d:ac:82:82:69:1a:0c:cd:f3:01: 16:1c:18:e2:af:69:80:a5:0b:57:db:ca:65:10:c4: 46:9e:9e:b9:78:d6:b4:64:5c:0e:88:64:ea:05:cb: 19:96:03:12:8c:17:d4:33:0c:fd:f4:4b:f3:e1:59: 38:70:85:3d:77:89:9f:de:7f:c6:40:c2:2e:86:a6: 16:80:3c:7e:74:6e:2a:c9:0e:bf:db:26:03:7f:6a: 9c:b9:56:cd:30:f7:21:f7:00:b1:6a:25:2f:f0:83: 2a:e0:9d:f2:65:8b:cb:cc:76:8f:43:78:86:5f:2d: 53:c1:ba:a1:94:14:ce:71:df:a4:c6:d1:69:eb:ea: 1d:0a:bc:53:7b:6b:d4:8d:59:11:ce:92:7f:8c:80: 78:05:da:86:f6:f8:74:da:6c:2e:7a:da:c5:5d:59: 4b:ac:41:20:24:a8:4d:21:cf:5a:d8:36:79:48:e7: 92:cc:ab:cd:d3:19:5e:d3:da:9b:6f:cd:41:fe:1a: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:29:E1:E3:7B:44:15:EC:7E:59:BD:4F:C5:B1:02:F3:BB:1A:BA X509v3 Authority Key Identifier: keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:08:95:83:cb:0c:74:97:61:4b:f4:e7:ac:8a:e7:cc:4d:db: af:ad:65:8c:10:56:67:95:51:a8:d0:46:a6:6c:de:d6:10:0c: 1b:d6:6a:1b:d6:d1:82:95:26:70:6f:bc:cb:7d:d4:bc:92:67: 36:47:06:87:ca:ea:23:09:cf:e0:42:f4:4f:46:48:cc:73:5f: d8:9b:1e:61:7f:1e:11:0f:49:5a:c5:6b:f4:36:f7:53:4a:2f: 81:73:44:bb:c2:4f:69:1a:13:a4:ad:01:19:b2:d5:0d:f6:08: fa:be:ad:7d:9d:32:37:d7:c4:0e:a9:91:d4:a9:3f:a7:6e:0e: d5:5b:36:ab:f2:6a:c5:e1:23:87:e4:1d:6d:b0:27:d1:6d:09: 0c:9b:d9:d6:64:b8:c3:71:a5:15:17:a3:4e:e0:f5:42:46:47: 54:68:5f:88:84:14:22:54:4d:6e:c6:b0:69:06:2f:cb:c8:ec: f2:b9:5d:a5:21:90:b6:0a:1f:40:c3:52:05:9a:12:eb:14:30: 75:17:66:96:66:01:68:60:7e:83:44:35:57:ed:13:8a:83:6b: f7:bf:7e:a6:7c:58:14:c8:17:b7:c3:4a:f3:18:48:45:b8:3d: d1:eb:ec:3c:d8:56:c0:65:1f:a4:91:7a:f9:49:e1:67:83:90: e2:f0:20:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXoodVPIDPThjwhrEn4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw MDRjZmUwHhcNMjYwMTI1MTgwMTMzWhcNMjYwMTI2MTgwMTMzWjAzMTEwLwYDVQQD EyhiZmMxMjllMWUzN2I0NDE1ZWM3ZTU5YmQ0ZmM1YjEwMmYzYmIxYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PTL6nJAFinZnTXnKRUOfZbAJcoV /0YnxEE/9PV7tpuB4xUINUZeO31bXQ3IkD2GCQo2TZyiWlJnyoeUMG6MBm2sgoJp GgzN8wEWHBjir2mApQtX28plEMRGnp65eNa0ZFwOiGTqBcsZlgMSjBfUMwz99Evz 4Vk4cIU9d4mf3n/GQMIuhqYWgDx+dG4qyQ6/2yYDf2qcuVbNMPch9wCxaiUv8IMq 4J3yZYvLzHaPQ3iGXy1TwbqhlBTOcd+kxtFp6+odCrxTe2vUjVkRzpJ/jIB4BdqG 9vh02mwuetrFXVlLrEEgJKhNIc9a2DZ5SOeSzKvN0xle09qbb81B/hr+pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/BKeHje0QV7H5ZvU/FsQLzuxq6MB8GA1UdIwQY MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3giVg8sM dJdhS/TnrIrnzE3br61ljBBWZ5VRqNBGpmze1hAMG9ZqG9bRgpUmcG+8y33UvJJn NkcGh8rqIwnP4EL0T0ZIzHNf2JseYX8eEQ9JWsVr9Db3U0ovgXNEu8JPaRoTpK0B GbLVDfYI+r6tfZ0yN9fEDqmR1Kk/p24O1Vs2q/JqxeEjh+QdbbAn0W0JDJvZ1mS4 w3GlFRejTuD1QkZHVGhfiIQUIlRNbsawaQYvy8js8rldpSGQtgofQMNSBZoS6xQw dRdmlmYBaGB+g0Q1V+0TioNr979+pnxYFMgXt8NK8xhIRbg90evsPNhWwGUfpJF6 +UnhZ4OQ4vAgjg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:20 2026 by rpki-client