This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json) Hash identifier: tWaeoMiuYz1TXeB93jvO/V+BVmJC0GZrALUYz8DqjEI= Subject key identifier: FC:9F:B5:77:21:FD:C3:51:A6:15:3C:D6:18:47:4E:EA:78:BD:DC:09 Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a Certificate serial: 019BF619FC0D31C6072815025EB821362B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft Manifest number: 1133 Signing time: Sun 25 Jan 2026 17:00:56 +0000 Manifest this update: Sun 25 Jan 2026 17:00:56 +0000 Manifest next update: Mon 26 Jan 2026 17:00:56 +0000 Files and hashes: 1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=) 2: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=) 3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: l3T09lhxENyi+dvH06sH/smjsAcc1zQGkJBLS2YjG1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fc:0d:31:c6:07:28:15:02:5e:b8:21:36:2b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8536146119b044539082e326cca903200b8d4b1a Validity Not Before: Jan 25 17:00:56 2026 GMT Not After : Jan 26 17:00:56 2026 GMT Subject: CN=fc9fb57721fdc351a6153cd618474eea78bddc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:46:38:17:c4:e2:8a:88:06:ac:b1:b0:35: 27:1d:cb:28:ef:23:35:a0:de:88:03:40:9c:cf:d3: 7c:3a:d5:0a:8e:dd:b1:b8:ee:84:60:61:d7:78:19: 19:ac:75:e3:9c:1a:2c:10:b3:73:5b:bb:37:5b:19: 3c:29:06:d4:f0:e2:08:c6:4e:5f:c8:16:af:0f:d7: af:40:9f:9f:82:0f:94:5d:88:91:87:aa:d8:ff:be: 1f:5e:24:04:b8:70:20:38:8b:0c:1e:17:e9:ae:be: 72:e1:e3:5b:12:26:13:7e:4b:98:92:a7:be:e5:06: 18:7a:6d:95:54:f1:6f:d4:26:5e:6d:6a:09:ee:9c: 6a:ea:9f:36:53:24:8f:26:c4:e6:c8:3d:a6:a0:8f: 56:bc:d7:73:d0:dd:ee:d7:cc:74:87:21:2f:25:05: 1d:bf:04:ca:dc:7c:72:55:3f:a4:52:ce:45:ad:b6: ad:58:61:ea:19:0c:83:5f:28:7a:b7:74:c3:2f:d8: 61:ee:a8:d2:86:a5:c3:00:2d:d2:2e:65:79:99:be: 39:93:83:63:80:30:6d:c1:31:92:09:eb:64:56:90: 04:6e:eb:4d:26:3c:c9:fd:4f:af:49:22:e8:97:55: 3a:e7:47:36:17:4a:7d:31:ae:5f:3d:da:67:28:93: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9F:B5:77:21:FD:C3:51:A6:15:3C:D6:18:47:4E:EA:78:BD:DC:09 X509v3 Authority Key Identifier: keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:aa:9e:4e:75:d2:d0:23:c5:14:1f:91:03:63:8a:ac:15:e7: 9e:a3:a0:76:ab:67:f4:f9:05:a2:35:f1:57:82:19:4b:31:b9: b2:2e:27:bb:75:c7:7d:4e:d6:11:f0:8f:d4:5d:92:5e:54:7a: 6e:90:bf:c4:e8:81:66:e2:3d:df:d8:5d:81:da:80:5b:81:cf: da:28:9a:85:f9:5f:c7:04:69:3e:4d:47:d1:ca:09:33:e9:a9: ef:e3:a7:1b:8f:e9:72:df:ff:1d:a9:b8:c3:56:53:2d:7f:8d: f5:22:9a:e1:7a:16:a7:56:32:f3:44:5d:cb:1c:90:73:e8:22: 93:bd:4b:0c:fc:4b:09:90:b4:66:91:0a:91:1f:c4:40:5f:96: 17:8a:a1:56:6e:3c:47:10:c9:da:f7:52:0a:95:e1:3c:4e:8f: 3b:52:f8:1e:3c:e4:fd:dd:4f:fd:bf:63:f7:8f:67:6e:cc:b7: 70:33:97:c1:8a:1b:24:a4:16:ab:0f:09:91:69:42:c0:d7:f3: f9:e7:2b:bb:65:71:7b:3a:8a:7f:4a:70:45:e1:46:f0:d8:15: a2:2f:0c:99:54:34:46:88:4f:8d:df:5c:0c:f7:67:50:20:12: aa:cf:a0:ad:eb:46:31:fa:86:81:69:ec:43:bd:e7:bb:c4:e4: 9c:76:a9:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfwNMcYHKBUCXrghNitzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4 ZDRiMWEwHhcNMjYwMTI1MTcwMDU2WhcNMjYwMTI2MTcwMDU2WjAzMTEwLwYDVQQD EyhmYzlmYjU3NzIxZmRjMzUxYTYxNTNjZDYxODQ3NGVlYTc4YmRkYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk5GOBfE4oqIBqyxsDUnHcso7yM1 oN6IA0Ccz9N8OtUKjt2xuO6EYGHXeBkZrHXjnBosELNzW7s3Wxk8KQbU8OIIxk5f yBavD9evQJ+fgg+UXYiRh6rY/74fXiQEuHAgOIsMHhfprr5y4eNbEiYTfkuYkqe+ 5QYYem2VVPFv1CZebWoJ7pxq6p82UySPJsTmyD2moI9WvNdz0N3u18x0hyEvJQUd vwTK3HxyVT+kUs5FrbatWGHqGQyDXyh6t3TDL9hh7qjShqXDAC3SLmV5mb45k4Nj gDBtwTGSCetkVpAEbutNJjzJ/U+vSSLol1U650c2F0p9Ma5fPdpnKJOfbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyftXch/cNRphU81hhHTup4vdwJMB8GA1UdIwQY MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt MGM2NzIxN2NjOTZiLzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6qeTnXS 0CPFFB+RA2OKrBXnnqOgdqtn9PkFojXxV4IZSzG5si4nu3XHfU7WEfCP1F2SXlR6 bpC/xOiBZuI939hdgdqAW4HP2iiahflfxwRpPk1H0coJM+mp7+OnG4/pct//Ham4 w1ZTLX+N9SKa4XoWp1Yy80RdyxyQc+gik71LDPxLCZC0ZpEKkR/EQF+WF4qhVm48 RxDJ2vdSCpXhPE6PO1L4Hjzk/d1P/b9j949nbsy3cDOXwYobJKQWqw8JkWlCwNfz +ecru2VxezqKf0pwReFG8NgVoi8MmVQ0RohPjd9cDPdnUCASqs+gretGMfqGgWns Q73nu8TknHapcw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:01 2026 by rpki-client