This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json) Hash identifier: +C94sQVU4sN0JnPk1PoZI0QqaicAcEp4qNf4q6+EwMY= Subject key identifier: F4:82:A4:88:E6:27:42:38:11:46:9D:DD:68:36:3C:2D:06:4A:17:32 Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019BFA64C99C8D142D7537B07BD67C7D45B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 13:01:07 +0000 Manifest this update: Mon 26 Jan 2026 13:01:07 +0000 Manifest next update: Tue 27 Jan 2026 13:01:07 +0000 Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: oxtZef+xJH8EYlGs5MhV9VnZBP4siLlte9Ey5dOj6R0=) 2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:c9:9c:8d:14:2d:75:37:b0:7b:d6:7c:7d:45:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Jan 26 13:01:07 2026 GMT Not After : Jan 27 13:01:07 2026 GMT Subject: CN=f482a488e627423811469ddd68363c2d064a1732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:a0:0a:2f:34:ee:7e:97:d2:e2:2d:10:25: 1d:d7:9b:8f:22:78:6f:82:72:0a:c3:0e:b1:4f:45: 36:7e:21:4d:82:29:91:d3:54:79:66:de:8e:9a:97: 7d:0d:20:ef:1f:8e:53:88:96:01:83:74:36:93:43: 86:a3:a2:5e:d5:65:de:45:f2:f3:6c:02:a2:b1:c3: 2f:4c:ca:a5:2b:09:80:da:92:37:1f:57:41:ba:c2: df:d0:bf:28:e2:fc:2d:2e:d3:c4:1f:72:04:ca:1d: 95:c6:dc:b4:c7:00:df:f9:65:63:3d:24:f8:1c:92: a0:6f:7b:3a:eb:a1:07:ca:83:79:07:1e:ec:25:0a: 6d:83:1a:5e:38:59:95:5c:a5:03:11:da:84:d5:ba: 2b:ba:78:06:bf:5c:da:40:9a:d2:ff:eb:13:1d:8f: 9f:73:5c:4b:d1:d2:41:eb:f0:67:1b:f3:12:49:2c: da:6d:6d:ef:23:6c:e2:39:00:52:15:e1:b4:6a:9f: 64:9c:9d:c0:d9:7a:62:49:22:04:50:3b:1e:59:ff: 22:a6:f0:fe:2b:49:37:6e:ff:04:b1:d6:47:73:8a: bc:83:d9:5c:bf:7c:03:2e:d2:c2:33:0f:c8:df:fd: ce:0f:10:fa:21:85:e9:12:c8:b5:1a:14:b1:c1:fc: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:82:A4:88:E6:27:42:38:11:46:9D:DD:68:36:3C:2D:06:4A:17:32 X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4d:0c:4a:33:3b:0a:fa:c8:23:70:bf:62:61:e9:26:c2:f9: d7:79:ea:ea:cc:5c:45:84:31:79:d9:16:98:a8:a8:cd:84:f7: 2c:63:0a:a3:41:70:5b:aa:39:fa:95:4e:e6:a4:1a:bf:9c:7f: f3:bc:4f:33:ff:69:ae:08:a5:f9:86:63:30:d7:90:5c:8c:e8: 28:28:62:8c:12:2d:90:41:c9:08:07:15:6e:2a:d2:51:87:2e: 79:fa:d8:58:c3:0c:14:b0:0b:04:59:28:33:02:fb:30:34:31: 3c:60:13:c6:64:8e:ea:17:65:ad:4a:93:1f:2a:1c:9d:11:40: d6:a4:92:3c:22:00:c3:ee:6b:85:d9:45:bf:66:8a:b5:44:96: f2:b8:fc:a4:55:07:bc:da:57:c9:8b:e1:fc:e0:84:b1:69:19: e6:7e:bf:64:e7:54:a3:44:7d:2b:2b:db:7b:e8:49:2c:ad:49: b4:38:ce:8c:a8:86:97:52:00:19:f4:5a:55:be:2f:61:25:8d: cb:6b:12:e3:0d:76:df:5f:7f:33:19:35:1e:32:66:3f:35:af: 72:9f:5b:f5:3e:6d:ad:f4:6b:5d:54:58:a5:e1:ca:d0:43:08: 11:a2:a1:e4:c0:33:33:8e:93:9e:90:0a:60:87:38:e6:31:b5: 16:2e:8c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZMmcjRQtdTewe9Z8fUW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjYwMTI2MTMwMTA3WhcNMjYwMTI3MTMwMTA3WjAzMTEwLwYDVQQD EyhmNDgyYTQ4OGU2Mjc0MjM4MTE0NjlkZGQ2ODM2M2MyZDA2NGExNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6igCi807n6X0uItECUd15uPInhv gnIKww6xT0U2fiFNgimR01R5Zt6Ompd9DSDvH45TiJYBg3Q2k0OGo6Je1WXeRfLz bAKiscMvTMqlKwmA2pI3H1dBusLf0L8o4vwtLtPEH3IEyh2Vxty0xwDf+WVjPST4 HJKgb3s666EHyoN5Bx7sJQptgxpeOFmVXKUDEdqE1borungGv1zaQJrS/+sTHY+f c1xL0dJB6/BnG/MSSSzabW3vI2ziOQBSFeG0ap9knJ3A2XpiSSIEUDseWf8ipvD+ K0k3bv8EsdZHc4q8g9lcv3wDLtLCMw/I3/3ODxD6IYXpEsi1GhSxwfz2zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSCpIjmJ0I4EUad3Wg2PC0GShcyMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk0MSjM7 CvrII3C/YmHpJsL513nq6sxcRYQxedkWmKiozYT3LGMKo0FwW6o5+pVO5qQav5x/ 87xPM/9prgil+YZjMNeQXIzoKChijBItkEHJCAcVbirSUYcuefrYWMMMFLALBFko MwL7MDQxPGATxmSO6hdlrUqTHyocnRFA1qSSPCIAw+5rhdlFv2aKtUSW8rj8pFUH vNpXyYvh/OCEsWkZ5n6/ZOdUo0R9Kyvbe+hJLK1JtDjOjKiGl1IAGfRaVb4vYSWN y2sS4w12319/Mxk1HjJmPzWvcp9b9T5trfRrXVRYpeHK0EMIEaKh5MAzM46TnpAK YIc45jG1Fi6Mew== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:46 2026 by rpki-client