This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json) Hash identifier: kRFWCYW8zQeLrto3LyOn013bpK22RE8KPlvVBj3+Zds= Subject key identifier: A4:D3:C8:4E:39:E8:1D:60:42:02:79:0A:E3:71:62:02:AC:11:4A:29 Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Certificate serial: 019BF8E44EF8B2D12B702D1510E858B57790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft Manifest number: 0ECE Signing time: Mon 26 Jan 2026 06:01:10 +0000 Manifest this update: Mon 26 Jan 2026 06:01:10 +0000 Manifest next update: Tue 27 Jan 2026 06:01:10 +0000 Files and hashes: 1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=) 2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: erWLVW0OrO1vNRRRRcUnL3U8RAMsCg1Sef/cwQcld6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:4e:f8:b2:d1:2b:70:2d:15:10:e8:58:b5:77:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Validity Not Before: Jan 26 06:01:10 2026 GMT Not After : Jan 27 06:01:10 2026 GMT Subject: CN=a4d3c84e39e81d604202790ae3716202ac114a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:18:e1:df:01:ec:35:06:0f:02:ef:26:47:0e: 32:1e:bc:ab:e3:eb:01:04:30:8f:40:9e:2f:a4:e3: fa:13:2d:35:1d:96:a9:87:18:82:90:57:d9:4f:5d: a9:b6:52:aa:c1:05:ef:a5:ce:ef:94:fc:c4:d4:88: 9a:21:53:c6:c8:fd:08:47:2a:d0:48:c8:f8:fd:ef: 9b:89:49:ad:66:3b:12:19:87:52:4d:3e:9a:d5:20: cb:c7:90:d1:db:19:3b:be:63:d8:4b:95:ea:71:53: af:b9:67:83:db:f0:1c:35:3f:fc:33:1a:49:e3:8b: 03:ae:57:ef:68:ec:90:36:52:55:0e:1c:d1:e1:08: f6:73:ec:0f:30:ac:b9:a8:06:e0:2a:f5:91:b7:b4: a7:6c:df:73:0d:ed:42:c1:a3:fd:7f:31:87:f3:6d: 10:63:e3:41:72:0c:d5:eb:e8:6c:03:ed:74:a5:ca: d7:ae:1e:ea:da:68:45:98:f4:f3:e8:f5:92:2a:7a: 61:db:6d:b6:0f:f9:68:71:f7:33:19:ec:09:b1:b6: b0:eb:16:b9:8b:ad:32:5c:db:84:e7:f6:b3:83:36: ef:83:0a:69:8d:7c:26:1d:4e:23:a8:86:34:df:5c: a8:e7:4a:97:28:92:59:6a:3c:ac:51:6a:1a:21:d4: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D3:C8:4E:39:E8:1D:60:42:02:79:0A:E3:71:62:02:AC:11:4A:29 X509v3 Authority Key Identifier: keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:99:38:b1:0d:f9:7a:2e:07:16:47:e6:47:de:ca:ba:98: 8c:2f:31:e2:2d:38:9f:87:d9:46:33:76:b5:ad:4f:14:16:f8: 9e:5a:80:ad:22:1f:a4:43:e3:dc:05:a9:08:3b:6f:15:1c:69: b6:f6:c9:04:9d:90:ef:4e:b9:cd:98:f3:0b:a2:ce:f4:c4:0b: 80:d1:2c:a2:cb:6d:8f:2e:7d:5f:c2:72:79:00:15:0a:c0:ed: 28:1d:28:28:8e:cc:c2:52:bd:f0:cf:34:b8:24:ae:5a:8f:d2: 11:da:0e:94:9a:bc:48:a9:98:a2:0b:ef:39:f5:93:9b:ae:9b: 0b:00:b0:2e:87:15:40:85:4e:b7:e5:e1:e0:c1:94:fb:f8:be: 0e:60:80:64:70:52:85:2f:5b:5d:16:05:64:aa:e3:7a:70:55: 35:27:ce:13:62:65:5a:4b:f1:c2:9f:b2:fa:a6:63:8e:7a:0b: 0a:b9:55:9e:44:fc:8b:3b:b7:85:a5:1b:ea:97:16:3f:1b:7b: fa:e4:ec:5e:7a:46:54:8a:b7:6d:82:6f:1a:b1:85:43:80:bf: c6:38:f2:16:2c:95:f2:19:7a:8e:5e:1c:cc:27:a3:da:94:09: 04:52:db:cc:8c:c8:a8:14:60:e1:7d:b6:9c:60:22:a5:b7:cc: 3b:38:f3:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45E74stErcC0VEOhYtXeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk ZjM3MmQwHhcNMjYwMTI2MDYwMTEwWhcNMjYwMTI3MDYwMTEwWjAzMTEwLwYDVQQD EyhhNGQzYzg0ZTM5ZTgxZDYwNDIwMjc5MGFlMzcxNjIwMmFjMTE0YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xjh3wHsNQYPAu8mRw4yHryr4+sB BDCPQJ4vpOP6Ey01HZaphxiCkFfZT12ptlKqwQXvpc7vlPzE1IiaIVPGyP0IRyrQ SMj4/e+biUmtZjsSGYdSTT6a1SDLx5DR2xk7vmPYS5XqcVOvuWeD2/AcNT/8MxpJ 44sDrlfvaOyQNlJVDhzR4Qj2c+wPMKy5qAbgKvWRt7SnbN9zDe1CwaP9fzGH820Q Y+NBcgzV6+hsA+10pcrXrh7q2mhFmPTz6PWSKnph2222D/locfczGewJsbaw6xa5 i60yXNuE5/azgzbvgwppjXwmHU4jqIY031yo50qXKJJZajysUWoaIdRgRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTTyE456B1gQgJ5CuNxYgKsEUopMB8GA1UdIwQY MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvuZOLEN +XouBxZH5kfeyrqYjC8x4i04n4fZRjN2ta1PFBb4nlqArSIfpEPj3AWpCDtvFRxp tvbJBJ2Q7065zZjzC6LO9MQLgNEsosttjy59X8JyeQAVCsDtKB0oKI7MwlK98M80 uCSuWo/SEdoOlJq8SKmYogvvOfWTm66bCwCwLocVQIVOt+Xh4MGU+/i+DmCAZHBS hS9bXRYFZKrjenBVNSfOE2JlWkvxwp+y+qZjjnoLCrlVnkT8izu3haUb6pcWPxt7 +uTsXnpGVIq3bYJvGrGFQ4C/xjjyFiyV8hl6jl4czCej2pQJBFLbzIzIqBRg4X22 nGAipbfMOzjziA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:40 2026 by rpki-client