This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft File: Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json) Hash identifier: 038XFTv+I+05Q1lUAvwuwwOmGl3OjFYf/8VZG2T1y/E= Subject key identifier: 83:9C:AF:07:D9:DC:A8:C4:EA:29:8E:5E:78:DE:DC:1B:3E:97:AA:E8 Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A Certificate issuer: /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a Certificate serial: 019BF763676606DFCCC60278D9DCE02CA688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft Manifest number: 0621 Signing time: Sun 25 Jan 2026 23:00:45 +0000 Manifest this update: Sun 25 Jan 2026 23:00:45 +0000 Manifest next update: Mon 26 Jan 2026 23:00:45 +0000 Files and hashes: 1: 0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa (hash: dZ4FeCTfblqtXelif+IwyAlXmzJNDihc4byltNkJAjA=) 2: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: Lq0MYnaoDHuMGvu3ST3NDjsY9ZgGE90I3fh0pNJ5ejs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:67:66:06:df:cc:c6:02:78:d9:dc:e0:2c:a6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a Validity Not Before: Jan 25 23:00:45 2026 GMT Not After : Jan 26 23:00:45 2026 GMT Subject: CN=839caf07d9dca8c4ea298e5e78dedc1b3e97aae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:f6:2d:37:8f:1b:31:24:e9:85:53:71:33: 84:24:ac:78:2a:a8:58:f2:9a:49:8d:04:3a:dc:0b: c9:99:4f:5c:ca:30:d4:8a:0c:b2:95:4b:c2:16:42: 61:91:89:24:06:83:ac:a6:71:d4:2a:82:ad:8a:c9: 40:83:9d:95:52:bc:9b:e0:ca:9d:65:f4:bf:0b:85: 63:ea:b6:fd:3a:87:d0:4f:f4:31:ad:41:03:03:e4: 43:5c:8a:42:b6:f3:ce:06:31:88:b3:e9:44:41:5e: fa:52:a0:ea:0b:14:c4:b6:1e:24:81:4b:99:98:64: dd:d4:c0:1b:b1:6b:0e:9f:95:40:eb:62:c0:f2:40: 30:51:a9:36:81:d6:8c:b4:59:34:9b:9a:9c:b9:0a: 67:21:5e:e5:0c:1f:dc:83:29:06:55:bb:22:a1:24: 25:ef:7a:a9:35:aa:c1:a1:93:70:fc:bf:09:75:39: c8:b8:91:04:ca:cf:69:ba:f0:e9:30:c4:b3:b7:55: ab:40:e9:c8:e8:83:08:44:33:24:d9:4e:84:3f:14: 8b:e9:a5:cc:00:28:90:23:c2:4a:f5:c4:e7:3a:25: fc:14:6c:2c:b4:1b:2c:00:85:e6:d4:23:40:82:7e: d0:5c:d0:01:af:3e:33:7d:06:ff:94:b5:b4:cf:bc: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:AF:07:D9:DC:A8:C4:EA:29:8E:5E:78:DE:DC:1B:3E:97:AA:E8 X509v3 Authority Key Identifier: keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:57:80:4f:d2:cf:67:cc:d3:57:dc:4c:16:3c:4b:fb:e3:10: db:a9:b4:7e:f6:16:ed:0f:4c:18:ef:83:51:95:c6:c0:4e:94: a6:53:c7:e5:8c:1e:2b:bb:9b:7f:3b:41:4c:77:0b:17:6a:c9: 3e:a5:48:13:30:70:dc:fa:d9:19:2b:f0:42:81:9f:c8:6e:a9: 86:06:59:89:5c:a5:34:ce:15:21:52:78:4d:46:b2:65:52:da: 48:b6:ff:44:c3:46:38:be:4e:61:00:78:56:37:eb:f5:76:4d: 19:bf:fc:ed:f0:02:ea:06:67:be:6d:84:1c:4c:c5:4b:1d:00: 23:5b:dc:d3:8e:e3:84:21:4f:29:72:ae:91:1c:2d:4b:15:48: 98:c5:21:dc:a3:9d:21:97:4c:0d:6b:6e:b5:10:8c:7b:56:c4: 35:ce:57:0f:0c:43:a8:3e:21:f0:ea:f9:f9:25:32:b4:de:bb: 55:84:bd:8b:5d:d8:c0:af:3d:ae:31:73:1c:2b:85:7f:e1:94: 94:dd:d4:f3:5d:2e:0a:22:3c:2d:b5:a1:dc:d8:3e:6d:6d:5e: 39:ce:d5:dc:58:d1:ec:7e:e2:fe:ee:40:98:3b:b3:45:41:db: ff:f7:36:00:9e:38:da:32:00:03:b1:9b:26:da:b7:17:af:2e: d3:d9:ff:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2dmBt/MxgJ42dzgLKaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWUzYzY0Y2FmZDllMjc1MzcwZDRmZDY0OTljM2M1ZDc1 MzljNGEwHhcNMjYwMTI1MjMwMDQ1WhcNMjYwMTI2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg4MzljYWYwN2Q5ZGNhOGM0ZWEyOThlNWU3OGRlZGMxYjNlOTdhYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF32LTePGzEk6YVTcTOEJKx4KqhY 8ppJjQQ63AvJmU9cyjDUigyylUvCFkJhkYkkBoOspnHUKoKtislAg52VUryb4Mqd ZfS/C4Vj6rb9OofQT/QxrUEDA+RDXIpCtvPOBjGIs+lEQV76UqDqCxTEth4kgUuZ mGTd1MAbsWsOn5VA62LA8kAwUak2gdaMtFk0m5qcuQpnIV7lDB/cgykGVbsioSQl 73qpNarBoZNw/L8JdTnIuJEEys9puvDpMMSzt1WrQOnI6IMIRDMk2U6EPxSL6aXM ACiQI8JK9cTnOiX8FGwstBssAIXm1CNAgn7QXNABrz4zfQb/lLW0z7xR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOcrwfZ3KjE6imOXnje3Bs+l6roMB8GA1UdIwQY MBaAFB6ePGTK/Z4nU3DU/WSZw8XXU5xKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80Nzg5OGEtNzY2Mi00YjExLWE4MGQt MmFhMTcwOTkyZjM3LzEvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80Nzg5OGEtNzY2Mi00YjExLWE4MGQtMmFhMTcwOTkyZjM3 LzEvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVeAT9LP Z8zTV9xMFjxL++MQ26m0fvYW7Q9MGO+DUZXGwE6UplPH5YweK7ubfztBTHcLF2rJ PqVIEzBw3PrZGSvwQoGfyG6phgZZiVylNM4VIVJ4TUayZVLaSLb/RMNGOL5OYQB4 Vjfr9XZNGb/87fAC6gZnvm2EHEzFSx0AI1vc047jhCFPKXKukRwtSxVImMUh3KOd IZdMDWtutRCMe1bENc5XDwxDqD4h8Or5+SUytN67VYS9i13YwK89rjFzHCuFf+GU lN3U810uCiI8LbWh3Ng+bW1eOc7V3FjR7H7i/u5AmDuzRUHb//c2AJ442jIAA7Gb Jtq3F68u09n/9g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:53 2026 by rpki-client