This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft File: hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json) Hash identifier: NP4kFvDz/72ulP23TtYRtr9CuAtXo959fvibPMOc8Yg= Subject key identifier: 70:CF:DC:FA:DD:2B:7A:C1:14:D9:D8:89:E1:AF:1C:D4:08:93:00:4A Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019BF5E3F772E647890D4F70E43DC1FA418C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft Manifest number: 1448 Signing time: Sun 25 Jan 2026 16:01:56 +0000 Manifest this update: Sun 25 Jan 2026 16:01:56 +0000 Manifest next update: Mon 26 Jan 2026 16:01:56 +0000 Files and hashes: 1: Kix4kTPQLQIQBS24-RxgbmJP4uM.roa (hash: IZRFChFiccTGrMi/xaHD/Y4tJtbN4JDWbyxQCJ6ZGnE=) 2: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (hash: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8=) 3: U-2-vdzKJW10nmZ8R9cwZPe1DJo.roa (hash: nQFt4KKc4aLyiGsSy8KXsL646+IOodr1L6IOWwHG5ek=) 4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: RDQtXIrQKB9FgMKG/hszQw+Of9wEWjfc5ST9ZAyiIFE=) 5: k_1EWr6TT4OeQM7j9nrbpaIqcOA.roa (hash: 2HdlKCer6OR1eYI5oco+zFvSBQWIdH/6nbjqpzGMvtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f7:72:e6:47:89:0d:4f:70:e4:3d:c1:fa:41:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Jan 25 16:01:56 2026 GMT Not After : Jan 26 16:01:56 2026 GMT Subject: CN=70cfdcfadd2b7ac114d9d889e1af1cd40893004a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:eb:7e:d0:fc:0c:f0:c3:bb:51:c6:b6:27: 29:8f:02:ab:5e:ca:25:5d:63:11:a6:0d:65:90:88: 15:7b:4f:99:f1:14:a0:c4:f4:9b:27:93:98:c1:63: 4f:31:d6:3a:39:f7:14:99:47:50:ca:fa:d4:e0:1f: fa:05:07:35:ef:00:ad:40:1e:f8:e3:5d:ae:f8:e1: c9:8e:58:1e:df:4d:d2:a3:ea:7c:61:de:dc:87:2f: c8:6c:94:36:4b:9c:d1:72:98:69:f4:9f:e0:88:a6: 29:ca:e1:7d:fa:e4:6e:b8:15:43:30:f4:64:53:f3: ab:19:df:20:23:50:26:12:2c:89:38:d1:4c:61:17: d6:3c:53:ec:c8:d8:a7:34:47:d1:ff:8f:00:59:c0: a6:ef:94:ea:ed:88:f2:7a:fa:e3:f2:9f:f6:ab:af: ff:08:17:b8:17:96:26:ac:f9:90:7a:e2:05:58:fc: ee:34:ff:ab:a1:ad:7b:f2:64:8c:ea:14:c8:25:6b: 04:04:13:34:72:93:82:19:c7:a4:da:b0:4f:c8:70: 5a:60:ba:19:d9:b8:44:8f:de:1e:18:de:65:23:e5: d4:7b:26:46:6c:7b:18:f8:09:76:68:8c:a9:ca:d4: 61:0e:c1:e4:3e:98:5a:fe:13:b4:2f:27:4a:ae:cd: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:DC:FA:DD:2B:7A:C1:14:D9:D8:89:E1:AF:1C:D4:08:93:00:4A X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:27:73:24:9e:11:bc:fb:c9:c6:6f:be:69:60:3e:db:7b: 71:6b:4a:a2:69:f2:bf:78:7b:f0:33:e7:bd:fd:b6:e2:89:2a: cf:31:cb:d8:14:e6:68:82:4c:cb:56:55:fe:2d:45:85:68:f9: c9:bf:47:89:4b:c1:b1:44:04:4f:c1:7c:c7:bf:71:ce:7e:0c: 85:dd:bc:c3:42:24:42:31:ab:b9:16:ad:e1:95:ca:4c:dd:b8: c7:10:74:01:40:55:99:f8:a7:60:9d:27:93:f8:00:07:13:15: 58:a4:1c:3f:db:00:11:1c:89:41:4b:65:b5:ff:bb:35:37:6b: c8:c4:1b:c5:14:61:55:77:23:34:0b:67:64:06:32:d4:00:51: 7a:c9:b3:60:ba:55:14:4e:ee:a0:dd:db:e9:79:44:5e:22:2b: fe:ea:30:f6:bb:bc:47:c5:33:5b:08:fc:25:60:a3:62:ca:21: 1c:a3:d3:80:d9:20:2f:ab:09:51:d2:e4:7e:d6:c9:43:0a:19: 63:69:fb:78:b3:f7:73:84:f8:79:ef:05:1a:90:32:ff:8f:a2: ec:eb:5e:f8:a9:fb:b9:13:fd:58:53:58:a3:a0:38:96:91:1e: 83:a6:e6:fc:81:f2:c1:c3:ac:37:51:0b:f2:92:60:22:ec:d5: b9:bb:b9:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/dy5keJDU9w5D3B+kGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjYwMTI1MTYwMTU2WhcNMjYwMTI2MTYwMTU2WjAzMTEwLwYDVQQD Eyg3MGNmZGNmYWRkMmI3YWMxMTRkOWQ4ODllMWFmMWNkNDA4OTMwMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hXrftD8DPDDu1HGticpjwKrXsol XWMRpg1lkIgVe0+Z8RSgxPSbJ5OYwWNPMdY6OfcUmUdQyvrU4B/6BQc17wCtQB74 412u+OHJjlge303So+p8Yd7chy/IbJQ2S5zRcphp9J/giKYpyuF9+uRuuBVDMPRk U/OrGd8gI1AmEiyJONFMYRfWPFPsyNinNEfR/48AWcCm75Tq7Yjyevrj8p/2q6// CBe4F5YmrPmQeuIFWPzuNP+roa178mSM6hTIJWsEBBM0cpOCGcek2rBPyHBaYLoZ 2bhEj94eGN5lI+XUeyZGbHsY+Al2aIypytRhDsHkPpha/hO0LydKrs1AgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDP3PrdK3rBFNnYieGvHNQIkwBKMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4cncySe Ebz7ycZvvmlgPtt7cWtKomnyv3h78DPnvf224okqzzHL2BTmaIJMy1ZV/i1FhWj5 yb9HiUvBsUQET8F8x79xzn4Mhd28w0IkQjGruRat4ZXKTN24xxB0AUBVmfinYJ0n k/gABxMVWKQcP9sAERyJQUtltf+7NTdryMQbxRRhVXcjNAtnZAYy1ABResmzYLpV FE7uoN3b6XlEXiIr/uow9ru8R8UzWwj8JWCjYsohHKPTgNkgL6sJUdLkftbJQwoZ Y2n7eLP3c4T4ee8FGpAy/4+i7Ote+Kn7uRP9WFNYo6A4lpEeg6bm/IHywcOsN1EL 8pJgIuzVubu5vQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:51:58 2026 by rpki-client