This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json) Hash identifier: tjOj4LChbRK6XgiJ1v16sswfIb+ieQqBj7j0xzVvWiY= Subject key identifier: FF:9A:FD:45:30:99:3E:61:AA:16:D8:71:B1:FC:23:FC:D7:F5:79:08 Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7 Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7 Certificate serial: 019BF499A171B885788D291A7A4A6394E25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft Manifest number: 1740 Signing time: Sun 25 Jan 2026 10:01:07 +0000 Manifest this update: Sun 25 Jan 2026 10:01:07 +0000 Manifest next update: Mon 26 Jan 2026 10:01:07 +0000 Files and hashes: 1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=) 2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: VbFtaEPFqQwxQsP/o+/tI49BWaLtwK35rXhhO/CYyEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:a1:71:b8:85:78:8d:29:1a:7a:4a:63:94:e2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7 Validity Not Before: Jan 25 10:01:07 2026 GMT Not After : Jan 26 10:01:07 2026 GMT Subject: CN=ff9afd4530993e61aa16d871b1fc23fcd7f57908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:1a:89:67:19:46:a3:c4:f0:72:82:48:34: 7d:df:90:24:23:f7:11:9e:20:57:66:15:a2:6d:42: 9a:3f:e6:c1:12:db:8a:0e:32:65:7c:20:2d:3d:bd: 58:31:8d:37:6d:58:34:f4:7a:9d:33:48:ef:65:2f: f3:44:b7:64:05:99:09:26:f8:d6:ba:3e:74:8c:2f: bc:fe:2a:93:6a:da:d7:2b:df:da:6f:22:88:bf:39: 4a:c7:2d:5a:5f:c5:ca:0d:61:65:c4:da:dd:1c:55: fd:6f:60:e0:77:7c:13:08:f4:99:56:6b:8e:ab:e5: 1b:27:d8:93:60:ed:dc:ca:52:37:16:e6:65:68:62: b3:d3:a7:23:fc:db:78:7a:ef:8f:39:26:37:38:b5: 5d:6e:e3:4a:d6:78:2e:e4:07:5a:03:85:4e:14:af: 1c:4b:61:e7:aa:53:21:4d:03:30:e1:cc:42:d5:87: 36:87:89:71:ea:d2:57:b8:56:e9:b0:f3:73:4a:f6: 03:7a:c2:fd:19:a7:cf:c7:d1:30:e3:96:b2:71:2a: 3b:dc:26:0c:a0:4e:77:11:c5:96:f0:9c:d7:18:54: e5:03:f0:33:0b:e7:11:52:ee:c9:c1:a6:ef:6f:d9: f3:78:b4:98:2b:22:91:41:35:9e:0a:f5:fb:62:a2: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:FD:45:30:99:3E:61:AA:16:D8:71:B1:FC:23:FC:D7:F5:79:08 X509v3 Authority Key Identifier: keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c8:7b:6d:9c:38:55:d2:ad:59:29:d0:64:7f:ee:61:67:80: 66:53:e6:34:bc:19:aa:49:c6:4b:d5:2f:13:23:22:03:5a:66: 72:a3:76:32:7b:91:ec:f4:7f:23:2d:5d:a1:41:87:3a:43:20: c6:c6:8a:54:02:62:55:b0:47:73:63:ee:f7:35:bd:d4:98:3b: ac:d4:1b:b5:b3:3a:87:fd:24:62:61:12:4c:50:03:0f:ff:9b: 57:da:92:c6:fb:fc:cf:f9:97:0c:21:eb:10:d9:6e:39:1b:f7: 86:d4:b8:74:2a:e3:4c:0f:82:2a:13:7d:a9:b9:34:7f:83:2e: 4d:fb:1d:aa:76:1f:1c:79:4a:7e:54:75:80:8c:ed:8b:25:45: b4:6c:f4:d5:b3:34:0e:e1:d9:95:a0:67:98:16:8a:f4:21:63: a9:a6:21:99:5e:d5:f4:f6:ea:5b:97:44:6d:18:06:81:54:24: 7c:d9:c9:1a:b4:39:10:ef:cf:1b:68:ee:29:47:cb:1b:a7:34: 14:ab:71:9e:b8:cb:3e:07:02:50:5c:f5:e4:95:b4:82:44:8b: 1e:4e:7f:78:0a:3d:2e:96:a0:43:bb:bc:44:13:52:fb:cb:4e: b2:2b:02:36:36:1f:0b:0d:e1:90:8a:fb:96:59:53:25:80:24: 91:1f:08:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0maFxuIV4jSkaekpjlOJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5 NTA2ZjcwHhcNMjYwMTI1MTAwMTA3WhcNMjYwMTI2MTAwMTA3WjAzMTEwLwYDVQQD EyhmZjlhZmQ0NTMwOTkzZTYxYWExNmQ4NzFiMWZjMjNmY2Q3ZjU3OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojUaiWcZRqPE8HKCSDR935AkI/cR niBXZhWibUKaP+bBEtuKDjJlfCAtPb1YMY03bVg09HqdM0jvZS/zRLdkBZkJJvjW uj50jC+8/iqTatrXK9/abyKIvzlKxy1aX8XKDWFlxNrdHFX9b2Dgd3wTCPSZVmuO q+UbJ9iTYO3cylI3FuZlaGKz06cj/Nt4eu+POSY3OLVdbuNK1ngu5AdaA4VOFK8c S2HnqlMhTQMw4cxC1Yc2h4lx6tJXuFbpsPNzSvYDesL9GafPx9Ew45aycSo73CYM oE53EcWW8JzXGFTlA/AzC+cRUu7Jwabvb9nzeLSYKyKRQTWeCvX7YqL2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+a/UUwmT5hqhbYcbH8I/zX9XkIMB8GA1UdIwQY MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8h7bZw4 VdKtWSnQZH/uYWeAZlPmNLwZqknGS9UvEyMiA1pmcqN2MnuR7PR/Iy1doUGHOkMg xsaKVAJiVbBHc2Pu9zW91Jg7rNQbtbM6h/0kYmESTFADD/+bV9qSxvv8z/mXDCHr ENluORv3htS4dCrjTA+CKhN9qbk0f4MuTfsdqnYfHHlKflR1gIztiyVFtGz01bM0 DuHZlaBnmBaK9CFjqaYhmV7V9PbqW5dEbRgGgVQkfNnJGrQ5EO/PG2juKUfLG6c0 FKtxnrjLPgcCUFz15JW0gkSLHk5/eAo9LpagQ7u8RBNS+8tOsisCNjYfCw3hkIr7 lllTJYAkkR8Iiw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:48 2026 by rpki-client