This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json) Hash identifier: sTnr2iGOfphFvai7Sol0T7IK+88+XumaW1yN3t3Sw8o= Subject key identifier: D2:EA:56:60:22:3E:B9:72:B0:B4:A4:1D:71:E4:E8:FC:50:E7:5F:88 Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Certificate serial: 019BF763DF4E7EAECEA98376FD9EF0B547C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft Manifest number: 0CAD Signing time: Sun 25 Jan 2026 23:01:16 +0000 Manifest this update: Sun 25 Jan 2026 23:01:16 +0000 Manifest next update: Mon 26 Jan 2026 23:01:16 +0000 Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=) 2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: Ggb7Bz1UhIDpzDzXeBZp07/wnPfEG12m5uxaajXthHY=) 3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:df:4e:7e:ae:ce:a9:83:76:fd:9e:f0:b5:47:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Validity Not Before: Jan 25 23:01:16 2026 GMT Not After : Jan 26 23:01:16 2026 GMT Subject: CN=d2ea5660223eb972b0b4a41d71e4e8fc50e75f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:e3:d6:79:ac:e2:76:b9:58:18:6e:51:57: c4:96:e3:0e:50:ab:33:c2:b6:4e:0c:df:15:6b:4f: fa:a5:62:33:04:12:c3:cc:9c:f9:87:c3:32:9f:4a: cb:2a:d3:be:00:59:33:98:61:42:f5:ef:e5:ec:08: 9c:ad:17:6d:6d:35:f6:d1:b1:73:5c:0f:10:78:97: 9f:fc:b5:68:46:6c:f1:2d:99:21:73:94:32:8b:3d: 2d:51:6c:bd:77:f5:fd:cd:09:d9:d0:27:6b:e4:1b: 67:b4:fc:cd:aa:b7:dc:ba:47:7d:e3:57:37:17:d8: 9c:35:5b:a7:6e:2e:a7:58:01:0b:c0:d7:00:78:a6: 45:81:f4:bf:b8:1c:3a:0d:0d:0e:a0:f5:bf:46:d5: 03:46:cc:03:b7:18:3c:1a:ff:4b:04:2c:65:b0:c4: f8:3b:b3:24:4b:53:97:e3:a4:bc:e8:e0:f0:0f:0d: 26:84:a0:c2:b9:90:40:1f:3b:4e:ae:a9:04:6a:4d: 38:ed:96:ae:10:e9:8b:2c:a3:bb:a0:5f:0a:95:70: bc:b1:e6:d1:27:98:09:1a:b3:03:68:02:b0:98:47: d0:de:05:58:ee:73:1d:13:d4:68:b8:61:86:6d:91: 85:39:ef:e0:68:37:a5:cd:1d:44:eb:ca:11:bc:41: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EA:56:60:22:3E:B9:72:B0:B4:A4:1D:71:E4:E8:FC:50:E7:5F:88 X509v3 Authority Key Identifier: keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:14:eb:63:7c:81:f5:d4:6c:e5:1e:c5:f5:77:fc:42:ef:f7: 7e:01:88:67:15:7d:02:a2:2f:01:04:35:a5:b6:df:60:38:0c: 07:ed:02:bb:44:18:9c:80:24:51:ad:52:0f:3b:f7:ca:17:2f: e9:6e:59:e8:9e:ad:91:eb:76:dd:a9:3f:62:cc:08:de:e9:10: 1c:e4:4b:a2:a8:c4:73:82:80:86:4d:7f:b4:35:28:76:ac:03: ab:ba:9f:68:d0:f5:f8:e2:6f:40:cc:ce:40:b7:ca:e9:66:5b: 15:2f:e9:98:4f:0d:b5:cf:3f:ba:c6:eb:5e:9d:bd:5b:f9:3e: ba:09:df:dc:6d:06:76:58:b7:6a:ab:ca:d3:ef:d7:d9:e3:71: 8b:f8:87:f9:b2:03:43:b2:ec:14:de:2c:84:ca:4a:92:e4:02: da:d9:75:37:52:5c:77:cc:b2:a5:27:4d:0c:f9:e2:14:46:27: 51:8d:d1:ad:dc:9a:14:ca:2c:61:0e:99:7c:66:4e:05:e3:8e: 53:46:69:ce:6e:14:f4:86:cf:34:7f:40:9c:9d:14:dd:f1:7f: 30:17:ca:a7:f4:8d:83:2d:92:38:3a:7a:09:df:7e:77:c0:22: 76:61:ca:12:2d:1c:c5:86:cb:0d:63:e6:81:d4:5a:e2:42:f8: 2a:24:85:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y99Ofq7OqYN2/Z7wtUfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk Y2U1MTYwHhcNMjYwMTI1MjMwMTE2WhcNMjYwMTI2MjMwMTE2WjAzMTEwLwYDVQQD EyhkMmVhNTY2MDIyM2ViOTcyYjBiNGE0MWQ3MWU0ZThmYzUwZTc1Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KDj1nms4na5WBhuUVfEluMOUKsz wrZODN8Va0/6pWIzBBLDzJz5h8Myn0rLKtO+AFkzmGFC9e/l7AicrRdtbTX20bFz XA8QeJef/LVoRmzxLZkhc5Qyiz0tUWy9d/X9zQnZ0Cdr5BtntPzNqrfcukd941c3 F9icNVunbi6nWAELwNcAeKZFgfS/uBw6DQ0OoPW/RtUDRswDtxg8Gv9LBCxlsMT4 O7MkS1OX46S86ODwDw0mhKDCuZBAHztOrqkEak047ZauEOmLLKO7oF8KlXC8sebR J5gJGrMDaAKwmEfQ3gVY7nMdE9RouGGGbZGFOe/gaDelzR1E68oRvEH1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLqVmAiPrlysLSkHXHk6PxQ51+IMB8GA1UdIwQY MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5 LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxTrY3yB 9dRs5R7F9Xf8Qu/3fgGIZxV9AqIvAQQ1pbbfYDgMB+0Cu0QYnIAkUa1SDzv3yhcv 6W5Z6J6tket23ak/YswI3ukQHORLoqjEc4KAhk1/tDUodqwDq7qfaND1+OJvQMzO QLfK6WZbFS/pmE8Ntc8/usbrXp29W/k+ugnf3G0Gdli3aqvK0+/X2eNxi/iH+bID Q7LsFN4shMpKkuQC2tl1N1Jcd8yypSdNDPniFEYnUY3RrdyaFMosYQ6ZfGZOBeOO U0Zpzm4U9IbPNH9AnJ0U3fF/MBfKp/SNgy2SODp6Cd9+d8AidmHKEi0cxYbLDWPm gdRa4kL4KiSFpg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:42 2026 by rpki-client