This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json) Hash identifier: mNP8D+Fd9wDzoPbnhyVbWfTRZfiDBK9QSCmITOKWnVg= Subject key identifier: 88:1C:D8:44:AA:0C:50:0F:AE:5E:84:E7:E4:25:4E:7E:00:5F:CB:E0 Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019BF53E8913285649EF4D11F95D615D657F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft Manifest number: 16D6 Signing time: Sun 25 Jan 2026 13:01:14 +0000 Manifest this update: Sun 25 Jan 2026 13:01:14 +0000 Manifest next update: Mon 26 Jan 2026 13:01:14 +0000 Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: RKEUCCwwZHx0x6b1DhCPsSJ4ioL9B7biKXEVEcqVf/4=) 2: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (hash: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk=) 3: WYvB7z2E3X738_d9cgopMgPJk5I.roa (hash: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU=) 4: _0K0MbXez9Zk6hM4BfuXTicksww.roa (hash: jphVj9+5Y1KjhS9qQGa/Rzumw9Jp9UB9+NvyfpBCLSc=) 5: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (hash: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8=) 6: zNk-M0VG943BmxksL9suzBVm4vQ.roa (hash: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:89:13:28:56:49:ef:4d:11:f9:5d:61:5d:65:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 25 13:01:14 2026 GMT Not After : Jan 26 13:01:14 2026 GMT Subject: CN=881cd844aa0c500fae5e84e7e4254e7e005fcbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:d7:7c:ab:8e:d7:e2:77:35:e0:fc:94:fa: b0:c3:ab:ce:30:bf:dd:3d:23:3a:b9:b8:e3:a5:09: 2c:55:e0:1d:65:43:43:ee:ae:77:fd:0f:fc:04:db: e3:7c:01:3c:65:b3:91:2f:69:aa:62:4f:39:cd:a1: df:aa:58:4d:e7:39:69:7a:a9:68:d6:b4:fc:87:44: 08:94:59:d7:4d:95:e1:1a:11:8e:d1:a4:35:f1:44: 7f:ec:37:1d:04:53:5f:37:ae:d6:d6:0d:02:1c:70: f4:cc:98:33:99:76:24:1d:c6:16:4f:da:8d:5c:22: ee:48:b0:07:e5:1a:59:7b:01:bb:7e:d7:7a:08:7d: 8b:c9:f6:b8:19:80:36:92:c5:17:e7:fa:04:75:23: 64:c3:e2:8d:49:3f:ca:7f:04:3f:6f:e9:57:64:6b: 05:3f:a0:3d:79:39:c4:79:d8:62:48:53:76:b6:51: 54:f3:f0:a7:7d:9e:a7:f8:c2:61:6f:ad:e7:d3:ff: e4:f1:45:5f:11:eb:0c:c6:cb:de:93:4a:11:61:0b: 91:62:b3:77:61:1e:f0:f7:be:79:63:f2:ca:44:73: 28:72:0d:31:9c:cc:23:45:36:51:ac:d6:d2:19:df: 7e:2a:e9:90:c2:fb:dc:cb:3f:6f:5e:92:6e:26:02: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:D8:44:AA:0C:50:0F:AE:5E:84:E7:E4:25:4E:7E:00:5F:CB:E0 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ef:d1:21:d6:97:b0:a8:7c:1f:00:5b:a3:7e:b4:ed:2c:a2: a6:56:d2:8c:b3:c3:d1:cd:b3:76:56:34:5c:e0:41:f8:a9:9c: bc:e3:4b:3f:84:a6:f4:f8:5b:20:3c:b7:93:2f:ab:ce:79:19: fe:74:f7:34:56:29:04:8b:0f:08:b4:ed:17:42:e2:cc:c4:46: bf:a3:e3:1b:6e:6e:35:26:9e:10:01:d3:5a:bd:31:cb:f3:61: 3c:55:fb:0a:c6:41:91:c3:6b:ee:9e:7a:04:e9:09:e0:93:8b: 01:03:68:8d:cd:f6:63:7d:ff:4c:82:50:4a:0f:cf:4f:36:27: 11:ec:49:42:10:38:83:06:66:2c:1d:2f:34:00:84:21:46:5f: 06:da:cd:1b:2a:23:e1:a8:1f:4e:94:80:6b:1c:50:25:8b:2d: bd:cf:aa:49:92:4b:7a:5d:2d:4b:cc:d7:6e:cc:b9:04:55:13: 8c:f1:0d:16:03:8a:d7:28:68:c7:a9:97:2f:38:bf:31:b0:5e: f2:9c:a1:e4:75:b6:85:91:11:b2:59:6c:53:a5:b3:42:98:a6: 5b:0a:0f:36:be:b9:be:5d:f6:0c:d4:93:ce:bb:cc:99:28:41: 88:b8:ed:46:64:ee:e4:56:d5:b7:48:bc:59:c2:77:42:a4:09: ae:c2:35:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PokTKFZJ700R+V1hXWV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTI1MTMwMTE0WhcNMjYwMTI2MTMwMTE0WjAzMTEwLwYDVQQD Eyg4ODFjZDg0NGFhMGM1MDBmYWU1ZTg0ZTdlNDI1NGU3ZTAwNWZjYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA/XfKuO1+J3NeD8lPqww6vOML/d PSM6ubjjpQksVeAdZUND7q53/Q/8BNvjfAE8ZbORL2mqYk85zaHfqlhN5zlpeqlo 1rT8h0QIlFnXTZXhGhGO0aQ18UR/7DcdBFNfN67W1g0CHHD0zJgzmXYkHcYWT9qN XCLuSLAH5RpZewG7ftd6CH2Lyfa4GYA2ksUX5/oEdSNkw+KNST/KfwQ/b+lXZGsF P6A9eTnEedhiSFN2tlFU8/CnfZ6n+MJhb63n0//k8UVfEesMxsvek0oRYQuRYrN3 YR7w9755Y/LKRHMocg0xnMwjRTZRrNbSGd9+KumQwvvcyz9vXpJuJgJxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgc2ESqDFAPrl6E5+QlTn4AX8vgMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu/RIdaX sKh8HwBbo3607SyiplbSjLPD0c2zdlY0XOBB+KmcvONLP4Sm9PhbIDy3ky+rznkZ /nT3NFYpBIsPCLTtF0LizMRGv6PjG25uNSaeEAHTWr0xy/NhPFX7CsZBkcNr7p56 BOkJ4JOLAQNojc32Y33/TIJQSg/PTzYnEexJQhA4gwZmLB0vNACEIUZfBtrNGyoj 4agfTpSAaxxQJYstvc+qSZJLel0tS8zXbsy5BFUTjPENFgOK1yhox6mXLzi/MbBe 8pyh5HW2hZERsllsU6WzQpimWwoPNr65vl32DNSTzrvMmShBiLjtRmTu5FbVt0i8 WcJ3QqQJrsI19A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:40:56 2026 by rpki-client