This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: HBO/b+XdKtZqSppVP+u44kXqYyfxKgc5OE6Wo9bIhKE= Subject key identifier: C8:0C:72:8D:16:7B:07:DF:E8:99:55:2D:F5:24:C4:B0:75:3C:7F:29 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019BF5E37483016704F9E256A43A6F516EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1803 Signing time: Sun 25 Jan 2026 16:01:22 +0000 Manifest this update: Sun 25 Jan 2026 16:01:22 +0000 Manifest next update: Mon 26 Jan 2026 16:01:22 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: 7b21kRHbye2v_dmZV5VUK_LJnVA.roa (hash: EN+RdTeUkPgyWw2KZHhbSo6oaTjE7NLfzP0K37REluE=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: f3bJHKdUE0QsDsdSZBsO821yKydXiGsPuZNgDnD1/tI=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:74:83:01:67:04:f9:e2:56:a4:3a:6f:51:6e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 25 16:01:22 2026 GMT Not After : Jan 26 16:01:22 2026 GMT Subject: CN=c80c728d167b07dfe899552df524c4b0753c7f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:ed:e3:b9:d0:66:dd:ce:60:21:9c:74:a2: 47:e1:f8:46:4e:b0:bf:c8:ff:f8:ec:3d:1c:48:bf: da:1b:d0:f8:77:4d:ca:0b:d1:8a:22:4a:a6:dd:65: 85:2a:59:2c:c8:f9:94:75:c6:94:ce:41:a7:ba:e5: e7:58:6c:86:d1:9f:46:b3:50:6c:02:48:d8:f9:9b: ad:e5:a5:df:e0:b0:0f:a0:0d:a0:3f:5b:37:c2:c4: d7:87:77:2f:de:e9:0a:1e:24:fa:50:e8:5d:a2:c0: 6d:1c:8c:7c:df:7c:98:e8:77:23:cc:be:83:36:cd: 35:dc:f0:0f:7c:01:48:a9:f7:d0:3b:b0:cc:40:9f: 97:6d:88:2c:f5:f7:ca:6c:f4:6a:95:2f:b3:2f:47: 0d:99:a7:85:fc:73:33:27:7c:ff:64:a2:95:8b:8c: 48:90:37:1b:39:23:7b:45:cf:0f:b4:0f:f3:81:6f: 22:65:f4:ed:53:3b:c1:07:4a:32:2b:18:2a:1b:ba: 59:8a:10:ed:aa:e1:48:85:6a:02:52:f1:23:70:c1: 5a:f7:01:35:ab:87:e8:2b:e0:61:06:be:73:a3:bf: 8f:c2:70:ed:5d:62:87:f8:05:de:d0:92:94:e9:68: 62:26:85:b4:39:f8:c6:8b:d0:78:1b:8b:33:44:a6: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0C:72:8D:16:7B:07:DF:E8:99:55:2D:F5:24:C4:B0:75:3C:7F:29 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6c:76:c0:b3:97:a5:82:51:1c:d7:c2:cf:94:93:6d:ce:a1: 73:58:7b:7d:7b:9d:cb:c1:47:2d:c8:97:ab:c9:1b:2d:0b:55: 67:2a:99:cc:4b:b9:be:32:88:31:f5:a5:b3:ee:a7:fc:b7:84: b8:36:ee:00:32:67:5a:c4:93:85:0a:9a:e2:a2:67:f8:0d:b8: ca:4c:29:d1:c0:f6:e7:13:45:bb:24:02:56:db:dd:82:61:98: 6c:02:ae:a5:b9:45:8d:dd:d1:ff:d1:b0:6f:d8:5b:58:06:27: 61:a6:e4:c9:fd:2b:6d:a3:a9:8a:29:09:43:35:6a:30:15:8c: 03:df:3b:0f:6b:a4:ef:15:22:dc:2c:30:f8:a3:e2:d6:16:cf: 8f:9a:4f:f5:ba:e2:69:97:0d:7d:1b:71:10:ec:58:a8:df:4b: 24:a3:34:f1:54:d4:d8:91:51:a4:55:10:87:da:43:9d:b2:28: 6b:16:22:89:7c:bc:43:21:e5:23:36:dd:22:d8:3d:33:dd:de: f8:c6:8b:8b:58:fc:fd:f5:47:59:ea:f5:4d:fd:f2:71:1b:f8: d4:d1:b1:32:c8:7e:e6:7b:9f:ad:a1:2e:e8:ab:bd:58:94:b4: d1:e3:6e:d2:8b:a1:af:65:e9:77:75:6f:be:8e:d2:38:46:f7: 1b:a1:7d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv143SDAWcE+eJWpDpvUW6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTI1MTYwMTIyWhcNMjYwMTI2MTYwMTIyWjAzMTEwLwYDVQQD EyhjODBjNzI4ZDE2N2IwN2RmZTg5OTU1MmRmNTI0YzRiMDc1M2M3ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloTt47nQZt3OYCGcdKJH4fhGTrC/ yP/47D0cSL/aG9D4d03KC9GKIkqm3WWFKlksyPmUdcaUzkGnuuXnWGyG0Z9Gs1Bs AkjY+Zut5aXf4LAPoA2gP1s3wsTXh3cv3ukKHiT6UOhdosBtHIx833yY6HcjzL6D Ns013PAPfAFIqffQO7DMQJ+XbYgs9ffKbPRqlS+zL0cNmaeF/HMzJ3z/ZKKVi4xI kDcbOSN7Rc8PtA/zgW8iZfTtUzvBB0oyKxgqG7pZihDtquFIhWoCUvEjcMFa9wE1 q4foK+BhBr5zo7+PwnDtXWKH+AXe0JKU6WhiJoW0OfjGi9B4G4szRKZAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgMco0Wewff6JlVLfUkxLB1PH8pMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWx2wLOX pYJRHNfCz5STbc6hc1h7fXudy8FHLciXq8kbLQtVZyqZzEu5vjKIMfWls+6n/LeE uDbuADJnWsSThQqa4qJn+A24ykwp0cD25xNFuyQCVtvdgmGYbAKupblFjd3R/9Gw b9hbWAYnYabkyf0rbaOpiikJQzVqMBWMA987D2uk7xUi3Cww+KPi1hbPj5pP9bri aZcNfRtxEOxYqN9LJKM08VTU2JFRpFUQh9pDnbIoaxYiiXy8QyHlIzbdItg9M93e +MaLi1j8/fVHWer1Tf3ycRv41NGxMsh+5nufraEu6Ku9WJS00eNu0ouhr2Xpd3Vv vo7SOEb3G6F9MQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:30 2026 by rpki-client