This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json) Hash identifier: sgbWVfJJ2YGZB3gpCT4wJ5kLimiPVHqy8HeJFB5zw88= Subject key identifier: 10:E8:7C:29:0A:E9:A6:DC:AA:C4:F3:0B:E3:6F:EB:36:41:36:1C:6E Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Certificate serial: 019BF4D0523159D0B30B2B1A5C4041D455AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft Manifest number: A4 Signing time: Sun 25 Jan 2026 11:00:51 +0000 Manifest this update: Sun 25 Jan 2026 11:00:51 +0000 Manifest next update: Mon 26 Jan 2026 11:00:51 +0000 Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: 6o2fVSpDgL+NxuSNkwtMKmJ3FwYvBDa1uv5IspwICXs=) 2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:52:31:59:d0:b3:0b:2b:1a:5c:40:41:d4:55:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Validity Not Before: Jan 25 11:00:51 2026 GMT Not After : Jan 26 11:00:51 2026 GMT Subject: CN=10e87c290ae9a6dcaac4f30be36feb3641361c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:a2:9b:06:a1:7c:ab:b7:c5:90:44:d7:2d: 5b:99:8a:85:66:63:51:f4:83:2e:09:a3:f6:d8:42: d1:54:ae:9d:0e:85:66:d4:34:44:8c:33:77:1f:04: 56:9d:7c:f9:eb:14:5b:4a:66:d2:49:3c:95:ee:55: e0:c0:ed:09:d4:1f:6a:d7:55:20:cf:33:14:37:19: 75:7f:4f:54:93:1e:a3:92:7d:bf:85:ce:48:85:8f: 37:bf:c9:c9:92:7c:ed:f2:7f:cd:86:6e:71:4a:3f: aa:2a:95:34:3c:b7:ab:c0:85:43:c2:64:4c:89:e7: a7:53:a4:51:e7:df:da:8a:21:1d:06:e9:25:60:8e: 62:80:87:45:ad:19:aa:cb:79:2c:33:d5:dd:6f:e3: e9:e7:3d:59:61:eb:5d:21:b5:3c:13:a5:61:aa:ba: 22:7a:37:ae:98:a0:e4:39:25:84:fc:24:b0:7c:ae: 73:9a:d2:1f:3c:8c:7e:51:32:03:cb:e0:2c:cb:ef: 31:7f:9a:57:4f:f1:47:1d:b8:e0:76:d8:01:d4:e0: d1:6c:fa:bd:04:ba:6d:01:3d:8b:06:0c:4c:ad:96: ed:69:8c:13:11:ad:9d:a4:80:10:37:85:a1:e7:99: 5b:38:60:98:d3:4e:79:e3:f0:cf:fa:23:67:cf:2e: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E8:7C:29:0A:E9:A6:DC:AA:C4:F3:0B:E3:6F:EB:36:41:36:1C:6E X509v3 Authority Key Identifier: keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a2:02:6a:0d:24:da:b9:dd:c8:aa:5f:b4:c8:9b:81:79:67: 2d:17:14:c4:0b:92:28:db:6c:b8:63:7f:e3:07:a0:53:cb:49: bd:f9:8e:11:26:2c:c3:50:0e:57:0a:ac:8b:1e:be:fc:9e:41: eb:03:52:71:60:67:9b:c9:58:d9:9d:e1:0c:2d:cc:b0:9d:b8: 27:94:7c:17:fb:4c:44:20:97:7f:a9:bd:93:d9:98:02:cb:fd: 59:5e:55:f6:1d:0e:6e:f2:ad:31:71:91:b3:c6:6b:d7:c5:f7: 55:d8:9b:fe:e2:df:54:d4:78:a3:2d:53:d0:aa:da:ab:3b:20: 3a:91:76:85:bf:f6:10:3d:c0:00:92:69:b3:58:3e:6c:54:16: bf:7f:ba:22:43:70:db:e9:ef:6a:c6:df:38:ff:95:40:3e:77: ab:5b:cd:c4:81:3d:5e:fa:a2:cb:5a:98:b6:de:5d:37:89:23: ae:25:0f:2a:bc:c1:45:b8:c7:2f:12:73:3b:d5:6e:46:4c:a4: 99:b9:7a:8f:6b:5e:b0:46:50:e4:f6:f7:78:ad:38:73:9f:1e: 67:a9:6e:d1:24:a8:9f:3f:3f:90:87:a5:4e:31:5b:b0:dd:06: 75:7f:32:1b:68:4f:89:e2:42:79:d9:5e:51:b6:14:15:51:aa: a9:1a:89:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00FIxWdCzCysaXEBB1FWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzZiMzFmOWRlOWQzNTk0OTU5ZDFlNTlkNjZjOWI3ZTkz ZmVkNjYwHhcNMjYwMTI1MTEwMDUxWhcNMjYwMTI2MTEwMDUxWjAzMTEwLwYDVQQD EygxMGU4N2MyOTBhZTlhNmRjYWFjNGYzMGJlMzZmZWIzNjQxMzYxYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdGimwahfKu3xZBE1y1bmYqFZmNR 9IMuCaP22ELRVK6dDoVm1DREjDN3HwRWnXz56xRbSmbSSTyV7lXgwO0J1B9q11Ug zzMUNxl1f09Ukx6jkn2/hc5IhY83v8nJknzt8n/Nhm5xSj+qKpU0PLerwIVDwmRM ieenU6RR59/aiiEdBuklYI5igIdFrRmqy3ksM9Xdb+Pp5z1ZYetdIbU8E6Vhqroi ejeumKDkOSWE/CSwfK5zmtIfPIx+UTIDy+Asy+8xf5pXT/FHHbjgdtgB1ODRbPq9 BLptAT2LBgxMrZbtaYwTEa2dpIAQN4Wh55lbOGCY00554/DP+iNnzy4NeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDofCkK6abcqsTzC+Nv6zZBNhxuMB8GA1UdIwQY MBaAFB7Gsx+d6dNZSVnR5Z1mybfpP+1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDct ODU3ODM4OGE1N2ZmLzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDctODU3ODM4OGE1N2Zm LzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKICag0k 2rndyKpftMibgXlnLRcUxAuSKNtsuGN/4wegU8tJvfmOESYsw1AOVwqsix6+/J5B 6wNScWBnm8lY2Z3hDC3MsJ24J5R8F/tMRCCXf6m9k9mYAsv9WV5V9h0ObvKtMXGR s8Zr18X3Vdib/uLfVNR4oy1T0KraqzsgOpF2hb/2ED3AAJJps1g+bFQWv3+6IkNw 2+nvasbfOP+VQD53q1vNxIE9Xvqiy1qYtt5dN4kjriUPKrzBRbjHLxJzO9VuRkyk mbl6j2tesEZQ5Pb3eK04c58eZ6lu0SSonz8/kIelTjFbsN0GdX8yG2hPieJCedle UbYUFVGqqRqJ+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:55 2026 by rpki-client