This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json) Hash identifier: zFzBFr/MMkbtrlc2VpTIJmvMMB9VSKA9ya/kEvDmeeg= Subject key identifier: 17:BB:70:02:FA:6A:D3:B2:C8:3B:83:51:E1:D7:B0:45:3F:28:0D:8A Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 019BF6BF2BF4C10C4354059F69194DEFEF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft Manifest number: 06B4 Signing time: Sun 25 Jan 2026 20:01:22 +0000 Manifest this update: Sun 25 Jan 2026 20:01:22 +0000 Manifest next update: Mon 26 Jan 2026 20:01:22 +0000 Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=) 2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: OrKAtWJCgPQGC+2ly7S3vSbx10mo0cIhrXngLOhLZrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:2b:f4:c1:0c:43:54:05:9f:69:19:4d:ef:ef:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Jan 25 20:01:22 2026 GMT Not After : Jan 26 20:01:22 2026 GMT Subject: CN=17bb7002fa6ad3b2c83b8351e1d7b0453f280d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:5e:ee:07:7a:9a:f4:67:d3:00:a2:ae:99: c4:38:81:a3:01:1a:bd:54:c6:3e:2e:e8:ca:fe:42: 9a:4c:ef:0a:ec:7a:5d:a7:a0:a3:61:82:bf:7a:03: 55:88:92:65:b2:cd:2f:22:73:92:6c:9c:e6:00:04: 9a:de:1f:13:6e:61:ee:e6:84:58:93:8e:38:13:18: 4b:96:69:f0:b0:17:84:68:0a:f7:c3:c3:ef:4b:7a: 44:14:0c:10:89:b8:9f:eb:f4:2a:16:f9:9a:60:c0: f8:60:13:d8:be:f2:5d:3e:81:08:5c:54:c5:bb:c7: e8:5c:df:7c:0b:a2:c3:a3:d3:71:9f:b8:78:57:d9: ff:a5:6c:f2:79:66:c8:f4:ee:a9:0e:09:1e:bf:83: 0a:3a:42:76:80:86:08:0a:bb:63:3f:fc:d4:95:7e: 41:e1:d9:ce:4b:ee:34:3b:17:08:9d:60:5b:4d:b0: 3e:23:e8:ae:8d:1b:86:df:c5:3a:2e:c7:88:76:35: 34:5d:3a:29:f9:68:0d:04:b0:02:bc:40:8e:66:88: dd:9c:4e:4b:45:76:e5:c1:64:0f:2e:78:41:03:3b: a0:a8:bb:0f:a3:48:61:a4:d8:39:00:5a:f2:75:6b: 24:2a:0d:e5:eb:1f:59:57:4f:b6:7a:94:d7:c9:79: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:70:02:FA:6A:D3:B2:C8:3B:83:51:E1:D7:B0:45:3F:28:0D:8A X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:a0:96:c2:ec:70:fe:8c:9b:42:ed:c8:3c:e9:2f:15:4d: f7:92:a7:bb:f6:1d:77:0d:63:c7:1d:14:0b:dd:0f:b7:7b:63: 6b:bf:cc:b6:ee:c7:88:65:04:9b:0d:fb:bc:27:6c:cd:dd:7e: cc:8a:07:e7:70:33:88:27:c1:5e:7e:21:7a:d8:4b:ec:70:e9: 62:d8:8b:bb:bd:66:e6:f7:bd:dc:f8:de:d9:63:5d:72:76:d5: c6:0a:3e:95:ba:50:9d:be:84:22:af:bf:06:2c:1f:d8:6e:96: 6a:a1:be:27:8a:7d:ee:23:45:88:b9:9d:8d:ac:be:fd:ee:e1: 23:71:f1:05:8c:1c:24:33:6e:de:65:b6:7e:1c:07:10:da:82: 6a:fd:a5:15:06:46:7f:0f:36:9e:0c:9e:96:6d:7b:ca:c6:0c: 29:ca:51:9d:9d:62:9c:94:aa:c0:33:b6:b8:38:d5:08:b1:04: e7:44:33:26:7f:e5:d7:e3:34:db:da:d8:97:ca:88:d9:e7:b9: a4:28:c7:f8:3c:67:53:0c:7e:c4:c3:b2:41:a5:a0:eb:1b:06: f3:8c:ea:4a:dc:87:ef:b1:89:18:9d:cb:97:54:8b:ad:af:44: 5e:e0:e0:c4:39:b1:aa:5a:de:ce:5b:4f:b4:10:71:db:1b:0a: da:3b:ce:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vyv0wQxDVAWfaRlN7++FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjYwMTI1MjAwMTIyWhcNMjYwMTI2MjAwMTIyWjAzMTEwLwYDVQQD EygxN2JiNzAwMmZhNmFkM2IyYzgzYjgzNTFlMWQ3YjA0NTNmMjgwZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hBe7gd6mvRn0wCirpnEOIGjARq9 VMY+LujK/kKaTO8K7Hpdp6CjYYK/egNViJJlss0vInOSbJzmAASa3h8TbmHu5oRY k444ExhLlmnwsBeEaAr3w8PvS3pEFAwQibif6/QqFvmaYMD4YBPYvvJdPoEIXFTF u8foXN98C6LDo9Nxn7h4V9n/pWzyeWbI9O6pDgkev4MKOkJ2gIYICrtjP/zUlX5B 4dnOS+40OxcInWBbTbA+I+iujRuG38U6LseIdjU0XTop+WgNBLACvECOZojdnE5L RXblwWQPLnhBAzugqLsPo0hhpNg5AFrydWskKg3l6x9ZV0+2epTXyXnK+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe7cAL6atOyyDuDUeHXsEU/KA2KMB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUiglsLs cP6Mm0LtyDzpLxVN95Knu/Yddw1jxx0UC90Pt3tja7/Mtu7HiGUEmw37vCdszd1+ zIoH53AziCfBXn4hethL7HDpYtiLu71m5ve93Pje2WNdcnbVxgo+lbpQnb6EIq+/ Biwf2G6WaqG+J4p97iNFiLmdjay+/e7hI3HxBYwcJDNu3mW2fhwHENqCav2lFQZG fw82ngyelm17ysYMKcpRnZ1inJSqwDO2uDjVCLEE50QzJn/l1+M029rYl8qI2ee5 pCjH+DxnUwx+xMOyQaWg6xsG84zqStyH77GJGJ3Ll1SLra9EXuDgxDmxqlrezltP tBBx2xsK2jvOlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:46 2026 by rpki-client