This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json) Hash identifier: Z7Xh9ZmnhZ6NhKeU/i+StjJwz2yYmctRV9fyA1qcWPI= Subject key identifier: 9F:ED:30:2A:9B:7E:6A:97:2A:2B:16:35:AB:84:3C:DE:5F:83:BD:A5 Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019BF619DB75F7DF9235D84B14336A31A209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft Manifest number: 08A0 Signing time: Sun 25 Jan 2026 17:00:48 +0000 Manifest this update: Sun 25 Jan 2026 17:00:48 +0000 Manifest next update: Mon 26 Jan 2026 17:00:48 +0000 Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=) 2: Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa (hash: AU77JYnyOQKBlP6fA/DR9mZ9IUbLLdZ9vaWCDV4tmXs=) 3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=) 4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: tpF1A6TyuGQEnt+6M2hiy6JXn4ImrUfStuGcKZV5Pec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:db:75:f7:df:92:35:d8:4b:14:33:6a:31:a2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Jan 25 17:00:48 2026 GMT Not After : Jan 26 17:00:48 2026 GMT Subject: CN=9fed302a9b7e6a972a2b1635ab843cde5f83bda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:e7:c5:bc:d6:71:a8:45:62:d4:32:3d:2b: 15:32:62:8d:ca:74:5e:7f:64:e4:97:13:d9:a1:9d: 17:a3:13:cd:35:a6:ee:ba:04:ce:dc:dc:4b:12:af: 98:92:0e:57:43:a8:7c:b8:4d:13:4f:bd:4a:1c:6e: 2b:20:fb:b9:e1:39:97:23:7e:42:b6:73:c8:81:9f: b0:db:78:91:fd:fe:47:7b:5a:9e:f1:68:a5:02:38: 5b:63:84:8b:bb:1c:52:f5:20:f9:88:2b:ec:1c:8f: 35:48:86:e6:cb:d7:89:2e:28:ce:a1:d5:0b:82:8b: 0e:d9:d9:b9:f5:d3:70:1a:58:0a:10:b7:1a:a1:3b: d8:53:31:4e:6f:5a:0f:90:25:e4:f9:11:c1:dd:08: ea:85:ce:a8:b7:b5:53:a4:9f:fa:78:ec:f7:e8:97: 57:e2:9d:a1:2e:bb:ff:65:3a:56:12:39:cd:89:71: ec:24:c8:9e:2a:92:47:31:21:34:fc:3a:40:64:e5: a4:21:56:d5:12:c3:ea:6d:94:bb:2b:32:fd:d0:63: 29:62:fb:2f:7a:ce:f8:f0:f8:6a:dd:d7:56:10:4c: a3:27:5a:c9:29:78:7f:da:50:f2:5a:98:9c:4d:7d: 18:fb:6b:61:5f:33:a7:57:ca:ed:b5:47:0d:ca:0b: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:30:2A:9B:7E:6A:97:2A:2B:16:35:AB:84:3C:DE:5F:83:BD:A5 X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:0d:0f:c4:d3:1d:19:37:5e:fd:a2:b1:69:5f:50:81:d5: b2:1e:64:f9:06:cb:00:b8:d7:51:23:ab:a8:9e:c8:30:2e:d9: 73:81:b1:75:d9:9d:5b:1a:1b:47:90:29:92:a1:03:30:37:c8: 6b:a4:73:7e:a8:c8:74:25:b2:33:72:4d:a3:52:ef:90:40:c4: d1:5f:7a:5a:44:78:41:f5:c8:f7:2a:78:25:58:42:e4:ed:72: 2b:5c:a8:cd:41:65:b7:71:92:65:57:c8:ca:49:ce:60:37:8f: a3:09:72:9d:ac:ff:50:e0:b3:0e:ba:dd:fc:26:9a:e9:1c:87: 0c:3a:d4:69:67:05:63:bf:5e:d6:eb:03:cb:80:f8:fc:58:c3: 94:cf:df:56:62:92:c7:81:22:2f:bb:40:6f:16:2f:b9:c0:b4: f4:a2:02:85:cb:60:5b:dd:a0:70:f9:48:1b:7a:c1:25:af:19: f4:1d:a4:8c:9a:38:1d:63:6e:df:cb:82:05:72:2a:6e:25:f1: 5a:97:4f:85:53:ad:6f:77:88:80:74:67:4e:83:73:e9:c2:42: aa:43:68:0b:76:80:6c:59:d5:38:f8:27:44:93:9e:10:2c:d1: 88:14:12:5c:fb:ea:8b:45:5d:ec:cc:e3:b9:92:66:ae:e4:e0: 8d:5b:52:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gdt199+SNdhLFDNqMaIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjYwMTI1MTcwMDQ4WhcNMjYwMTI2MTcwMDQ4WjAzMTEwLwYDVQQD Eyg5ZmVkMzAyYTliN2U2YTk3MmEyYjE2MzVhYjg0M2NkZTVmODNiZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEDnxbzWcahFYtQyPSsVMmKNynRe f2TklxPZoZ0XoxPNNabuugTO3NxLEq+Ykg5XQ6h8uE0TT71KHG4rIPu54TmXI35C tnPIgZ+w23iR/f5He1qe8WilAjhbY4SLuxxS9SD5iCvsHI81SIbmy9eJLijOodUL gosO2dm59dNwGlgKELcaoTvYUzFOb1oPkCXk+RHB3Qjqhc6ot7VTpJ/6eOz36JdX 4p2hLrv/ZTpWEjnNiXHsJMieKpJHMSE0/DpAZOWkIVbVEsPqbZS7KzL90GMpYvsv es748Phq3ddWEEyjJ1rJKXh/2lDyWpicTX0Y+2thXzOnV8rttUcNygvKkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/tMCqbfmqXKisWNauEPN5fg72lMB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5 LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/MND8TT HRk3Xv2isWlfUIHVsh5k+QbLALjXUSOrqJ7IMC7Zc4GxddmdWxobR5ApkqEDMDfI a6RzfqjIdCWyM3JNo1LvkEDE0V96WkR4QfXI9yp4JVhC5O1yK1yozUFlt3GSZVfI yknOYDePowlynaz/UOCzDrrd/Caa6RyHDDrUaWcFY79e1usDy4D4/FjDlM/fVmKS x4EiL7tAbxYvucC09KIChctgW92gcPlIG3rBJa8Z9B2kjJo4HWNu38uCBXIqbiXx WpdPhVOtb3eIgHRnToNz6cJCqkNoC3aAbFnVOPgnRJOeECzRiBQSXPvqi0Vd7Mzj uZJmruTgjVtSKg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:17 2026 by rpki-client