This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json) Hash identifier: Adc6mPjSkd3Y0C4jc2+7sr54KO49uDNA9GOIP4kBd8Q= Subject key identifier: B5:9C:08:E4:DE:7D:76:F4:7E:F2:51:C9:8C:13:1E:23:13:84:02:FE Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019BF80836E447166E319EC695ADE6759C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft Manifest number: 08A1 Signing time: Mon 26 Jan 2026 02:00:46 +0000 Manifest this update: Mon 26 Jan 2026 02:00:46 +0000 Manifest next update: Tue 27 Jan 2026 02:00:46 +0000 Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=) 2: Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa (hash: AU77JYnyOQKBlP6fA/DR9mZ9IUbLLdZ9vaWCDV4tmXs=) 3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=) 4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: 1XcAxqhde+t0TKn8zn63s5DjzNzl21eQhI88CvrNWwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:36:e4:47:16:6e:31:9e:c6:95:ad:e6:75:9c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Jan 26 02:00:46 2026 GMT Not After : Jan 27 02:00:46 2026 GMT Subject: CN=b59c08e4de7d76f47ef251c98c131e23138402fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:54:16:67:13:6b:5a:00:a0:cc:6a:5e:39: bc:cc:41:39:1c:4e:5d:9c:aa:52:4f:4c:a4:d1:34: 46:07:16:ad:3c:56:8a:2a:9a:b9:e1:8a:ac:d3:fc: 53:fc:7a:b9:d1:d3:5c:b2:f1:c7:06:a8:e6:79:eb: 2b:61:a5:4d:71:da:80:97:9f:0a:e6:fa:bb:ac:32: 2a:5a:99:5e:b3:ce:f1:22:4a:d2:2d:b9:78:28:cd: 58:f2:45:e2:18:71:75:75:87:4b:b9:56:81:7a:5f: 45:37:0b:e4:80:8c:40:ce:d9:c6:f1:e1:18:61:63: 7d:7a:b6:97:cc:eb:54:89:29:c2:d9:fd:dc:e7:7f: fa:95:c2:a9:e7:94:1a:9e:4f:30:f4:3a:99:53:08: e6:00:3f:d1:b4:9b:36:13:8a:c4:0e:c8:47:e5:02: 03:e8:19:7d:ca:44:ed:f8:14:49:63:88:cb:ef:b4: 5b:8b:7c:02:a2:f1:71:14:3c:d5:4f:1e:51:9c:d5: db:b8:2c:d5:5c:3e:7e:83:c1:c8:b8:56:b1:87:f7: e6:f8:f8:a0:71:fe:ab:12:0a:7a:c9:56:be:fa:39: 2b:ac:bf:fd:14:36:c6:7d:34:99:49:55:45:44:6d: 34:93:46:01:33:2b:cd:4c:42:20:7a:59:5c:f9:31: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:08:E4:DE:7D:76:F4:7E:F2:51:C9:8C:13:1E:23:13:84:02:FE X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:89:09:5e:e1:1e:eb:3b:5d:ac:45:da:37:38:a9:41:31:33: f7:30:81:28:0f:72:7e:23:a3:aa:e1:7f:5c:84:83:55:91:68: d5:03:a0:ce:4c:91:b4:0c:c2:43:c6:39:29:f4:e3:7d:40:c9: a7:44:c4:3e:48:21:db:8a:47:86:09:ae:3b:29:28:8b:4a:c4: c2:51:5f:e5:1e:24:6d:1d:cb:2e:cc:0e:b3:48:39:c8:31:f0: b0:ef:85:26:b8:78:49:ec:96:39:75:6d:e4:c7:f4:95:bc:4f: 92:23:2e:91:36:98:93:6b:d4:e2:3b:f8:22:87:81:f1:78:f2: 20:11:d9:a0:fb:a4:b8:c1:66:4a:6b:d4:a9:4c:f3:9a:51:d7: 65:c5:7b:24:95:02:a1:d4:6e:44:2b:44:32:43:ac:da:cb:2a: 88:7c:71:36:cd:fc:dc:fb:2c:0f:f5:60:53:4a:44:ec:03:81: ca:c5:ae:4b:9a:0e:b3:c8:c7:a0:55:b1:68:26:27:c2:02:25: 16:02:b2:57:80:d4:39:74:e5:e4:11:56:3a:15:b5:ad:c0:e3: c4:62:2f:92:f5:96:21:b4:b9:05:97:41:54:d9:20:22:f0:0a: d7:75:3f:e7:6d:8b:fa:ea:d6:8f:97:bf:37:68:c8:3f:02:cb: 9d:9b:d0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDbkRxZuMZ7Gla3mdZxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjYwMTI2MDIwMDQ2WhcNMjYwMTI3MDIwMDQ2WjAzMTEwLwYDVQQD EyhiNTljMDhlNGRlN2Q3NmY0N2VmMjUxYzk4YzEzMWUyMzEzODQwMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwNUFmcTa1oAoMxqXjm8zEE5HE5d nKpST0yk0TRGBxatPFaKKpq54Yqs0/xT/Hq50dNcsvHHBqjmeesrYaVNcdqAl58K 5vq7rDIqWples87xIkrSLbl4KM1Y8kXiGHF1dYdLuVaBel9FNwvkgIxAztnG8eEY YWN9eraXzOtUiSnC2f3c53/6lcKp55Qank8w9DqZUwjmAD/RtJs2E4rEDshH5QID 6Bl9ykTt+BRJY4jL77Rbi3wCovFxFDzVTx5RnNXbuCzVXD5+g8HIuFaxh/fm+Pig cf6rEgp6yVa++jkrrL/9FDbGfTSZSVVFRG00k0YBMyvNTEIgellc+TH0DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWcCOTefXb0fvJRyYwTHiMThAL+MB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5 LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIkJXuEe 6ztdrEXaNzipQTEz9zCBKA9yfiOjquF/XISDVZFo1QOgzkyRtAzCQ8Y5KfTjfUDJ p0TEPkgh24pHhgmuOykoi0rEwlFf5R4kbR3LLswOs0g5yDHwsO+FJrh4SeyWOXVt 5Mf0lbxPkiMukTaYk2vU4jv4IoeB8XjyIBHZoPukuMFmSmvUqUzzmlHXZcV7JJUC odRuRCtEMkOs2ssqiHxxNs383PssD/VgU0pE7AOBysWuS5oOs8jHoFWxaCYnwgIl FgKyV4DUOXTl5BFWOhW1rcDjxGIvkvWWIbS5BZdBVNkgIvAK13U/522L+urWj5e/ N2jIPwLLnZvQOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:48 2026 by rpki-client