This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json) Hash identifier: KnzGHpr2Y0xnqC2NTcuL5Fcf5b37F8B6pHSxHmphtvI= Subject key identifier: B8:09:EA:AD:0B:41:86:CC:AE:F4:3F:22:6B:E7:24:EE:32:23:96:68 Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466 Certificate serial: 019BF687975E081CE58219A568E0ED7CE563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft Manifest number: 0EF2 Signing time: Sun 25 Jan 2026 19:00:39 +0000 Manifest this update: Sun 25 Jan 2026 19:00:39 +0000 Manifest next update: Mon 26 Jan 2026 19:00:39 +0000 Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 1S/41ScdgSZ00DqZWstmGBp3Qv/+15T0lS+CANU0t0o=) 2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:97:5e:08:1c:e5:82:19:a5:68:e0:ed:7c:e5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466 Validity Not Before: Jan 25 19:00:39 2026 GMT Not After : Jan 26 19:00:39 2026 GMT Subject: CN=b809eaad0b4186ccaef43f226be724ee32239668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:92:f5:eb:fe:36:a6:4f:98:96:20:bf:70: 09:7e:03:b0:44:7b:f8:86:56:20:ae:8b:3f:c8:f5: 4a:d8:b0:07:58:dd:0e:ae:4a:b7:9c:be:8b:93:ae: fc:9b:d4:b7:ac:c6:9a:5f:19:68:68:9d:4a:64:fa: b1:85:d4:05:8f:ff:5d:01:3b:e9:8d:bc:4f:cc:78: 98:d5:7d:da:75:7c:b6:29:fe:b5:5b:de:e2:50:ce: c5:b2:12:4e:c3:b3:ea:38:df:7c:3b:9f:1e:58:87: 26:6a:aa:eb:f2:1c:91:a1:11:93:7f:bc:e0:a3:d9: 6c:e0:c4:27:d3:b8:f5:71:93:69:a7:65:29:8a:2f: e0:4d:92:a9:0d:c6:a4:43:9f:01:da:1b:84:b9:e2: f4:e2:b1:65:17:12:84:15:ff:4a:aa:d6:de:48:52: 65:eb:84:60:6d:ec:bc:b8:98:2d:72:c0:6b:4c:93: 92:04:f0:18:bd:73:de:97:3e:96:7c:19:f6:d0:c5: 2f:30:4f:fa:75:80:51:87:70:fe:8f:f1:12:fd:e4: 5c:a1:9f:88:2d:83:ab:8b:50:29:da:40:fa:7d:98: 5a:6f:07:7e:fd:bc:c4:ad:11:cd:a0:6a:5f:53:f6: 1e:d6:28:55:83:76:ab:ff:93:cd:72:c0:ac:52:30: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:09:EA:AD:0B:41:86:CC:AE:F4:3F:22:6B:E7:24:EE:32:23:96:68 X509v3 Authority Key Identifier: keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:00:63:6a:d4:ce:20:c6:cc:d1:5f:5e:c9:99:a8:7d:63:08: bf:16:bf:2c:59:8e:f8:d9:ad:bf:e4:47:27:b8:34:fe:4f:6a: 48:5f:04:d5:d1:52:1d:de:3d:2e:5d:e9:6e:90:40:6d:5d:f3: c3:64:0a:f9:ae:e9:22:a1:e4:70:04:c2:10:d9:e6:95:89:cb: 5d:70:27:14:61:5a:27:97:ef:fa:11:5d:64:a8:1d:28:aa:aa: 8b:97:3d:c4:0f:4b:59:32:ca:a6:7d:63:84:56:ca:d5:5b:9f: 1f:4b:fe:8b:ca:06:a8:54:d8:d7:e3:0a:37:06:9e:df:cc:e8: 40:e4:f4:4e:bd:e6:71:9d:9b:fc:d7:3a:d9:06:d7:6e:2c:40: 9b:d5:b2:44:af:c9:8f:d3:d6:89:8b:0b:ff:3d:0e:58:b4:34: fc:2b:d1:04:05:53:c8:ee:46:f3:bb:98:50:bf:96:cf:04:9a: 72:57:3d:97:85:77:96:43:79:cd:34:4a:35:60:6e:a0:36:79: de:4f:42:3e:18:f4:3a:62:19:99:90:e2:e6:3b:30:aa:e3:ad: e1:8a:22:45:ee:65:c9:e1:90:dc:7b:4d:30:64:78:5e:d9:6f: e8:2d:f5:84:00:64:e4:7c:15:36:84:85:5e:9c:5e:90:65:aa: 4a:c0:15:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5deCBzlghmlaODtfOVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0 MDQ0NjYwHhcNMjYwMTI1MTkwMDM5WhcNMjYwMTI2MTkwMDM5WjAzMTEwLwYDVQQD EyhiODA5ZWFhZDBiNDE4NmNjYWVmNDNmMjI2YmU3MjRlZTMyMjM5NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3iS9ev+NqZPmJYgv3AJfgOwRHv4 hlYgros/yPVK2LAHWN0Orkq3nL6Lk678m9S3rMaaXxloaJ1KZPqxhdQFj/9dATvp jbxPzHiY1X3adXy2Kf61W97iUM7FshJOw7PqON98O58eWIcmaqrr8hyRoRGTf7zg o9ls4MQn07j1cZNpp2Upii/gTZKpDcakQ58B2huEueL04rFlFxKEFf9KqtbeSFJl 64Rgbey8uJgtcsBrTJOSBPAYvXPelz6WfBn20MUvME/6dYBRh3D+j/ES/eRcoZ+I LYOri1Ap2kD6fZhabwd+/bzErRHNoGpfU/Ye1ihVg3ar/5PNcsCsUjC+RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgJ6q0LQYbMrvQ/ImvnJO4yI5ZoMB8GA1UdIwQY MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwBjatTO IMbM0V9eyZmofWMIvxa/LFmO+Nmtv+RHJ7g0/k9qSF8E1dFSHd49Ll3pbpBAbV3z w2QK+a7pIqHkcATCENnmlYnLXXAnFGFaJ5fv+hFdZKgdKKqqi5c9xA9LWTLKpn1j hFbK1VufH0v+i8oGqFTY1+MKNwae38zoQOT0Tr3mcZ2b/Nc62QbXbixAm9WyRK/J j9PWiYsL/z0OWLQ0/CvRBAVTyO5G87uYUL+WzwSaclc9l4V3lkN5zTRKNWBuoDZ5 3k9CPhj0OmIZmZDi5jswquOt4YoiRe5lyeGQ3HtNMGR4Xtlv6C31hABk5HwVNoSF XpxekGWqSsAV5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:57 2026 by rpki-client