This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: 5F93Rck8shk15Sh8ZqEhpziyo7oBqZT7/krJwyT1m88= Subject key identifier: 68:5F:DC:A2:A3:88:15:A9:CA:48:71:3A:FA:D5:54:A5:1E:78:8D:35 Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019BF4629FCC76184B387C2EE409ECE1C8AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0FAD Signing time: Sun 25 Jan 2026 09:01:02 +0000 Manifest this update: Sun 25 Jan 2026 09:01:02 +0000 Manifest next update: Mon 26 Jan 2026 09:01:02 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: RVQKKm+3OppPFP+lynKchX5lIli59BODiBRzVqU1quw=) 2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9f:cc:76:18:4b:38:7c:2e:e4:09:ec:e1:c8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Jan 25 09:01:02 2026 GMT Not After : Jan 26 09:01:02 2026 GMT Subject: CN=685fdca2a38815a9ca48713afad554a51e788d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:4a:0b:f9:ee:02:93:2a:3c:cf:69:43:2e: 91:fd:8e:f8:64:98:b4:a6:81:4a:2c:90:56:cf:24: a3:d9:b6:6b:fc:67:52:72:2a:e5:e2:5c:38:ee:bf: a3:74:12:78:14:f8:0e:7a:e9:af:c4:fc:61:48:7b: d0:f2:54:e4:d0:2e:bc:de:1c:1f:48:f2:74:50:dd: dd:df:78:d6:e3:88:c2:94:e5:e7:9c:57:0b:df:ad: a7:e0:b3:5a:09:bd:b2:60:5f:45:f7:34:e0:90:35: 70:58:59:fb:bd:18:52:26:1f:d6:51:d8:e8:c5:03: 09:ed:4f:5f:42:c2:d4:61:7e:0b:09:b6:e8:40:e7: d1:29:c4:c4:4c:60:a2:d3:85:52:11:50:0e:b0:bc: ea:90:30:0c:9e:9a:8e:63:0b:10:b1:26:81:3d:03: 84:3d:c6:71:f6:97:71:d4:45:ed:17:ab:9c:5a:82: bb:3a:30:b1:b0:f9:9b:06:bf:04:40:b5:85:d1:a0: 65:29:69:4d:e7:3b:49:88:13:ff:24:08:ce:6b:50: 7f:0f:d4:c5:ed:2b:b9:a6:66:9d:57:20:b2:db:a9: a6:af:99:96:39:01:e5:56:3f:4e:2f:1c:85:72:b1: bf:a6:58:14:8d:74:5d:58:5c:1e:f9:9f:a9:ff:66: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:DC:A2:A3:88:15:A9:CA:48:71:3A:FA:D5:54:A5:1E:78:8D:35 X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:44:08:b6:ca:d2:20:cb:41:16:1a:ab:21:18:ab:cf:5c:3a: b1:75:5e:79:4b:1e:f5:d0:1d:2d:87:6d:b3:26:7f:85:57:24: b4:b7:30:b3:09:ba:e1:72:47:39:1d:b2:2e:03:0c:5b:49:78: 60:85:82:97:39:df:84:e5:37:57:8f:5a:ff:86:b0:19:26:b2: b7:1b:99:c4:1b:58:7a:54:f1:06:a1:04:c7:89:18:4e:4b:00: 9d:c8:63:42:d1:2b:b9:69:8f:a0:90:41:c9:6b:57:91:da:7a: f4:d7:2a:c6:bc:18:62:ee:d7:3e:ad:04:3e:df:76:0d:47:9b: 6b:e7:10:58:a4:33:6f:3e:39:d6:b7:8f:84:79:37:46:08:9a: 2f:75:40:1a:e8:f2:2c:95:86:9b:37:54:25:c4:20:dd:08:f3: 0c:98:0c:3b:50:49:a4:eb:d0:94:71:80:90:2f:0c:77:22:83: a9:b1:f0:39:20:1e:f5:04:0a:a6:ad:de:44:16:41:65:f0:80: 5e:d4:43:62:94:70:91:c9:07:b8:53:21:ba:8a:e9:11:7b:f5: 2b:39:cc:1c:2e:78:e0:a6:82:62:f4:df:db:f0:05:b1:17:0b: 6d:d8:de:da:33:a6:62:35:53:e0:70:55:9f:46:b1:71:c3:6e: 3e:8a:76:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yp/MdhhLOHwu5Ans4ciqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjYwMTI1MDkwMTAyWhcNMjYwMTI2MDkwMTAyWjAzMTEwLwYDVQQD Eyg2ODVmZGNhMmEzODgxNWE5Y2E0ODcxM2FmYWQ1NTRhNTFlNzg4ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZKC/nuApMqPM9pQy6R/Y74ZJi0 poFKLJBWzySj2bZr/GdScirl4lw47r+jdBJ4FPgOeumvxPxhSHvQ8lTk0C683hwf SPJ0UN3d33jW44jClOXnnFcL362n4LNaCb2yYF9F9zTgkDVwWFn7vRhSJh/WUdjo xQMJ7U9fQsLUYX4LCbboQOfRKcTETGCi04VSEVAOsLzqkDAMnpqOYwsQsSaBPQOE PcZx9pdx1EXtF6ucWoK7OjCxsPmbBr8EQLWF0aBlKWlN5ztJiBP/JAjOa1B/D9TF 7Su5pmadVyCy26mmr5mWOQHlVj9OLxyFcrG/plgUjXRdWFwe+Z+p/2YSkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhf3KKjiBWpykhxOvrVVKUeeI01MB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEQItsrS IMtBFhqrIRirz1w6sXVeeUse9dAdLYdtsyZ/hVcktLcwswm64XJHOR2yLgMMW0l4 YIWClznfhOU3V49a/4awGSaytxuZxBtYelTxBqEEx4kYTksAnchjQtEruWmPoJBB yWtXkdp69NcqxrwYYu7XPq0EPt92DUeba+cQWKQzbz451rePhHk3RgiaL3VAGujy LJWGmzdUJcQg3QjzDJgMO1BJpOvQlHGAkC8MdyKDqbHwOSAe9QQKpq3eRBZBZfCA XtRDYpRwkckHuFMhuorpEXv1KznMHC544KaCYvTf2/AFsRcLbdje2jOmYjVT4HBV n0axccNuPop25w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:59 2026 by rpki-client