This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft File: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft (raw, json) Hash identifier: gnGTZNJAYbjYErZBkdR9jSg7PccsxkNt368ZP6oZaZU= Subject key identifier: CC:F4:20:D2:AF:4E:D4:EE:06:33:51:60:47:F5:3E:32:61:63:DD:18 Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Certificate serial: 019BF499BC389C68DA564A3B775A6A6E1654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 10:01:14 +0000 Manifest this update: Sun 25 Jan 2026 10:01:14 +0000 Manifest next update: Mon 26 Jan 2026 10:01:14 +0000 Files and hashes: 1: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl (hash: KBi9LJHTbJdUWfSyruOmrL33Uv+mAE2FlQg2icrQmiQ=) 2: gfabm9UWQoAATxByyOzldR-OoLw.roa (hash: WKaBZla4LRLfqgI3uwqubZPPQ3HBh8rqcOXnhfR6oF8=) 3: pVhPz1Lv4Tfe1koijnFU9xHK8TY.roa (hash: 9qDr4kEVPSIWiFKaY/CZHN8PT6dMsGvFWVv39pNQi2Y=) 4: vGBPTsN1UTQ9ljsou8EYqesA-xA.roa (hash: KDijiFyY5rddvKU52MlKJXu0OVC57lOatdyVnFfXTSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:bc:38:9c:68:da:56:4a:3b:77:5a:6a:6e:16:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Validity Not Before: Jan 25 10:01:14 2026 GMT Not After : Jan 26 10:01:14 2026 GMT Subject: CN=ccf420d2af4ed4ee0633516047f53e326163dd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:78:05:7c:d5:fa:9e:08:05:16:39:5e:2c: 99:e8:31:b5:11:b3:ba:1a:e9:67:53:47:69:1c:9c: 30:71:ad:fe:6c:22:38:7e:32:5a:af:6d:6b:cd:75: bb:3f:5c:d4:9a:7b:77:91:13:30:6d:c6:f7:02:15: 18:e4:b3:57:9a:3e:2a:08:ee:25:b0:32:28:85:e3: cd:b4:2b:92:3c:45:09:a5:4f:0f:14:d8:09:9d:89: 7a:6f:7e:16:7d:e1:70:6b:ac:da:7c:c7:c0:87:b2: 4e:91:87:08:b0:e9:f5:d4:47:aa:89:df:f8:af:3c: 99:97:8d:6a:84:3b:d4:54:6c:e6:14:03:3d:25:68: f1:ef:3b:4b:90:4a:e3:e8:54:58:5a:c9:14:80:3a: dc:5b:4e:99:df:12:6e:6a:34:ee:e9:5c:3d:d6:c1: 8d:1b:a1:2c:a5:2b:45:2c:be:3a:76:3f:b1:fb:a0: 16:6e:43:da:d8:aa:e9:36:87:ac:ba:11:60:01:28: b2:38:e6:32:28:3a:d4:a5:bd:bd:b7:27:c0:9f:da: 25:8f:8a:5e:44:a6:20:f0:91:ed:b6:ef:12:a5:1e: de:b8:83:e2:7c:e2:4e:55:97:0f:60:90:a4:b0:11: ed:b0:22:c6:4a:27:d8:17:29:ac:2e:96:fc:7e:73: c1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F4:20:D2:AF:4E:D4:EE:06:33:51:60:47:F5:3E:32:61:63:DD:18 X509v3 Authority Key Identifier: keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:f4:a1:6d:b5:22:7c:60:66:0f:0e:2a:f1:2a:28:6e:f0: 6a:ee:4a:cd:4b:6b:39:fc:13:f8:dc:d5:b7:45:ba:7a:85:64: 36:ac:18:17:19:30:63:43:8e:f1:c7:8e:1d:33:0a:db:d0:cb: a1:77:1f:88:5c:4e:5a:f1:ff:9d:0b:34:7b:fe:95:d6:3c:0b: 42:f9:0a:bc:9f:81:bf:01:5a:a1:2d:60:a8:c0:58:0b:17:ca: 3e:ca:28:0d:08:e1:c9:08:73:90:f8:48:d9:a3:90:c3:48:10: 76:79:bc:58:4e:70:dc:f2:25:93:48:52:cf:7d:ce:23:3b:21: 64:a9:5a:43:58:a8:9e:a2:ee:3f:cd:3a:f7:66:ef:b1:db:b9: db:66:97:03:20:5a:da:24:b2:02:31:b0:56:1a:45:6d:50:35: 2d:36:25:d8:18:cd:ae:17:15:39:6f:d1:31:3e:1f:3f:9e:79: 75:e3:bc:6b:6e:e6:96:ec:26:8f:f0:7a:57:0b:3f:7e:06:4a: 41:b8:01:4f:63:bb:51:78:e8:f1:2a:52:dc:d9:50:98:2c:17: 27:0f:0f:44:95:1d:27:23:2d:92:41:2c:bb:b9:e3:f2:f9:a6: 9e:88:42:17:a5:78:45:9b:84:14:8b:ef:61:88:a6:fe:8c:77: e9:99:74:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mbw4nGjaVko7d1pqbhZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZTVlZmJmNjU4OTcxNjBkNTVhNTJkYzNhMjJjMDE3ODc2 Y2QwNmMwHhcNMjYwMTI1MTAwMTE0WhcNMjYwMTI2MTAwMTE0WjAzMTEwLwYDVQQD EyhjY2Y0MjBkMmFmNGVkNGVlMDYzMzUxNjA0N2Y1M2UzMjYxNjNkZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLF4BXzV+p4IBRY5XiyZ6DG1EbO6 GulnU0dpHJwwca3+bCI4fjJar21rzXW7P1zUmnt3kRMwbcb3AhUY5LNXmj4qCO4l sDIohePNtCuSPEUJpU8PFNgJnYl6b34WfeFwa6zafMfAh7JOkYcIsOn11Eeqid/4 rzyZl41qhDvUVGzmFAM9JWjx7ztLkErj6FRYWskUgDrcW06Z3xJuajTu6Vw91sGN G6EspStFLL46dj+x+6AWbkPa2KrpNoesuhFgASiyOOYyKDrUpb29tyfAn9olj4pe RKYg8JHttu8SpR7euIPifOJOVZcPYJCksBHtsCLGSifYFymsLpb8fnPB0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz0INKvTtTuBjNRYEf1PjJhY90YMB8GA1UdIwQY MBaAFB7l779liXFg1VpS3DoiwBeHbNBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUt N2MwZGI3YmFlMTM1LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUtN2MwZGI3YmFlMTM1 LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjn0oW21 InxgZg8OKvEqKG7wau5KzUtrOfwT+NzVt0W6eoVkNqwYFxkwY0OO8ceOHTMK29DL oXcfiFxOWvH/nQs0e/6V1jwLQvkKvJ+BvwFaoS1gqMBYCxfKPsooDQjhyQhzkPhI 2aOQw0gQdnm8WE5w3PIlk0hSz33OIzshZKlaQ1ionqLuP80692bvsdu522aXAyBa 2iSyAjGwVhpFbVA1LTYl2BjNrhcVOW/RMT4fP555deO8a27mluwmj/B6Vws/fgZK QbgBT2O7UXjo8SpS3NlQmCwXJw8PRJUdJyMtkkEsu7nj8vmmnohCF6V4RZuEFIvv YYim/ox36Zl0/g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:37 2026 by rpki-client