This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json) Hash identifier: RkWpJwSLLbsGY96Uvg5g+nr/ffk19GJcS6+JJO6TAjU= Subject key identifier: 47:44:92:C2:97:9A:98:7C:99:05:A3:BB:90:3E:A5:EA:47:72:8D:EF Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019BF53E8869A7680338C17BAE7453E50E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft Manifest number: 0B00 Signing time: Sun 25 Jan 2026 13:01:14 +0000 Manifest this update: Sun 25 Jan 2026 13:01:14 +0000 Manifest next update: Mon 26 Jan 2026 13:01:14 +0000 Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=) 2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: iF3lHWguHkM5eQMcoOFPsi9MQVc/NmleeuT/X7jTpGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:88:69:a7:68:03:38:c1:7b:ae:74:53:e5:0e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Jan 25 13:01:14 2026 GMT Not After : Jan 26 13:01:14 2026 GMT Subject: CN=474492c2979a987c9905a3bb903ea5ea47728def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:53:0c:5e:e8:3a:03:10:c2:40:19:76:e6: bf:df:33:69:ff:a6:0a:d5:99:d5:24:31:88:2d:ab: ab:1e:fb:02:20:19:8c:52:0f:04:14:20:84:14:fa: c0:36:6b:a3:9c:0c:c9:b8:92:d7:bf:a2:d4:77:fe: cf:ee:9f:c8:6d:e7:07:1e:7f:89:29:e2:d9:d1:e7: 9a:cc:81:60:d4:ae:82:df:8b:74:d4:82:94:84:9a: c0:5b:2b:c7:6a:67:71:9b:85:7a:17:d2:a1:ec:8e: 0e:da:c4:a5:df:d8:f6:6c:39:5f:4c:cd:66:20:2e: 27:bb:27:13:df:db:10:e5:87:76:39:46:09:08:c3: 67:75:29:2b:6e:2a:c3:a0:d0:ac:2b:93:e7:fd:97: 22:59:b3:b2:63:0e:f2:10:f6:e2:9c:98:d6:74:e4: 5d:3e:08:f6:9a:19:a2:86:01:1c:cf:ac:eb:19:22: 9d:ce:69:69:98:21:4a:d9:20:4f:3f:aa:7d:d6:0c: a1:33:50:a0:0b:4e:cd:ef:9e:6d:2e:7c:2c:03:28: 0a:33:ac:4f:d5:c7:c2:20:c0:fa:48:8c:5b:ca:89: 3d:36:93:17:43:3a:2d:ab:e1:83:de:45:a5:15:1c: 55:f7:13:a8:b7:e6:f7:68:52:27:11:4d:c1:b0:40: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:92:C2:97:9A:98:7C:99:05:A3:BB:90:3E:A5:EA:47:72:8D:EF X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:65:a1:80:4e:36:f6:b2:94:ef:3b:00:eb:b4:e8:f1:86:94: e0:02:08:8a:a2:2f:4a:b2:e1:4a:6b:e9:ef:a7:a5:16:d5:6b: 80:e5:1a:d6:1e:45:b9:a6:fb:a7:07:00:a1:80:e5:0d:d8:b9: e5:fe:d9:0f:9c:57:47:18:78:cd:da:0f:f5:fa:e3:9e:a6:9d: 2c:82:b0:6c:68:42:71:47:0b:b3:4b:a1:49:98:5b:c1:1d:30: b2:87:29:9c:eb:02:64:c7:dd:85:dd:0a:15:89:d2:2e:35:a9: 71:9d:d8:0f:3f:3f:af:c5:ff:6f:24:cc:ae:0e:5d:b0:90:e4: 23:60:d1:69:35:c1:8a:9c:c8:29:1e:51:c8:5e:62:3d:46:25: a0:93:b5:7a:c8:77:a6:6d:b7:e2:f5:cf:18:72:f9:3c:69:99: 50:93:27:de:8b:e2:bb:be:ea:fb:04:aa:96:0a:d6:de:ef:2b: c7:fe:59:0e:d2:ae:42:4d:79:74:f0:70:28:69:ba:97:a1:bb: 9c:30:9a:20:3e:37:f0:e6:a1:50:57:10:67:ee:29:0c:09:08: 7f:3c:e6:b2:3e:8d:eb:e8:e5:68:56:0d:71:85:01:c6:ed:15: 41:d1:df:d2:33:76:9b:9d:e7:29:95:0e:d9:07:f1:93:36:77: 0f:fc:38:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pohpp2gDOMF7rnRT5Q4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjYwMTI1MTMwMTE0WhcNMjYwMTI2MTMwMTE0WjAzMTEwLwYDVQQD Eyg0NzQ0OTJjMjk3OWE5ODdjOTkwNWEzYmI5MDNlYTVlYTQ3NzI4ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xTDF7oOgMQwkAZdua/3zNp/6YK 1ZnVJDGILaurHvsCIBmMUg8EFCCEFPrANmujnAzJuJLXv6LUd/7P7p/IbecHHn+J KeLZ0eeazIFg1K6C34t01IKUhJrAWyvHamdxm4V6F9Kh7I4O2sSl39j2bDlfTM1m IC4nuycT39sQ5Yd2OUYJCMNndSkrbirDoNCsK5Pn/ZciWbOyYw7yEPbinJjWdORd Pgj2mhmihgEcz6zrGSKdzmlpmCFK2SBPP6p91gyhM1CgC07N755tLnwsAygKM6xP 1cfCIMD6SIxbyok9NpMXQzotq+GD3kWlFRxV9xOot+b3aFInEU3BsEC3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdEksKXmph8mQWju5A+pepHco3vMB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2WhgE42 9rKU7zsA67To8YaU4AIIiqIvSrLhSmvp76elFtVrgOUa1h5Fuab7pwcAoYDlDdi5 5f7ZD5xXRxh4zdoP9frjnqadLIKwbGhCcUcLs0uhSZhbwR0wsocpnOsCZMfdhd0K FYnSLjWpcZ3YDz8/r8X/byTMrg5dsJDkI2DRaTXBipzIKR5RyF5iPUYloJO1esh3 pm234vXPGHL5PGmZUJMn3oviu77q+wSqlgrW3u8rx/5ZDtKuQk15dPBwKGm6l6G7 nDCaID438OahUFcQZ+4pDAkIfzzmsj6N6+jlaFYNcYUBxu0VQdHf0jN2m53nKZUO 2QfxkzZ3D/w4Dg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:35:31 2026 by rpki-client