This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json) Hash identifier: jDZ1ifw8D+3DpoLrItsNL0wZ7e5JhH1cq5YMyw3bdFM= Subject key identifier: 7B:AA:8A:D8:BD:61:BC:25:A1:FB:8F:60:C6:9D:F2:29:09:53:5B:E6 Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Certificate serial: 019BF5E40EF2BD3EA78D243F2BBC1B79E193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft Manifest number: 147D Signing time: Sun 25 Jan 2026 16:02:02 +0000 Manifest this update: Sun 25 Jan 2026 16:02:02 +0000 Manifest next update: Mon 26 Jan 2026 16:02:02 +0000 Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: bBt5aDb0WwPQgIzLYONL2H6TfbrYhT8ZWDSVdvjaOaA=) 2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:0e:f2:bd:3e:a7:8d:24:3f:2b:bc:1b:79:e1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Validity Not Before: Jan 25 16:02:02 2026 GMT Not After : Jan 26 16:02:02 2026 GMT Subject: CN=7baa8ad8bd61bc25a1fb8f60c69df22909535be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:f9:b3:67:7e:43:83:03:3c:88:ff:e0:56: a7:03:0d:18:a7:8d:11:7f:35:ae:17:05:15:52:99: f1:57:12:d8:02:70:e3:37:ca:92:2b:53:26:f3:7f: 05:3f:2d:6d:3a:3e:0a:86:8d:49:e9:c7:70:2b:68: 5d:9f:76:cd:54:29:e4:5e:5e:62:d8:1f:26:d6:91: ec:cd:13:2d:64:52:03:5f:d2:85:ad:b4:c2:5f:38: 05:82:0c:f9:af:16:05:a9:21:c7:69:c8:8d:7d:c7: 0e:2f:59:71:28:ce:c1:cb:f6:03:59:06:63:4f:f3: a6:a0:f7:da:7c:24:c9:a9:0c:ac:56:9d:62:3d:52: 5e:b1:23:9a:23:05:31:cb:95:46:1d:9b:c5:27:9a: 1f:a6:e2:04:bd:1a:cd:70:55:1b:41:07:75:28:5e: f5:bc:6b:fb:00:f6:1d:a3:bc:fd:e1:23:40:2a:e1: b7:c8:87:55:3d:3d:3a:8d:6b:1b:6c:96:0b:04:ed: 69:41:65:f6:e1:8b:f3:82:b9:78:e4:db:07:00:ef: b8:76:eb:39:76:cf:da:72:82:65:9c:3e:1a:ea:b6: 60:91:4b:c6:bb:67:fb:c2:60:e7:a7:7c:6c:63:61: f5:04:bb:c6:52:ce:e2:51:4f:4a:7c:7f:79:a6:e1: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:8A:D8:BD:61:BC:25:A1:FB:8F:60:C6:9D:F2:29:09:53:5B:E6 X509v3 Authority Key Identifier: keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8a:bc:7d:db:4b:46:b3:3f:c8:56:58:ff:87:9e:6b:b6:2f: 36:1a:76:12:a2:e5:b4:b4:ea:c0:30:3a:33:d3:60:c4:8c:7a: e6:1b:33:4a:f0:1c:58:2f:52:86:e8:ec:97:5b:0f:0b:43:f4: 7c:62:70:58:71:c6:85:9a:36:25:0e:04:71:74:15:f1:bd:bf: 87:8b:d0:f9:ca:f5:93:38:cf:88:02:f7:4a:8e:06:b0:2a:36: 7f:ad:8c:df:ad:de:a2:e3:e5:5d:af:d7:3d:48:cf:f7:a7:00: 9d:73:11:21:0e:bd:11:8e:f4:1d:81:ab:03:80:86:98:86:cc: d9:6b:30:90:37:95:5e:ed:13:b2:b7:0c:ca:10:e9:2d:e8:a2: 87:94:7c:ba:69:cc:19:21:2b:ef:3b:07:59:55:f7:32:51:98: b4:32:b2:59:ed:ff:a5:34:dc:72:cd:bc:68:31:f6:5a:23:0e: 19:ae:a0:94:d1:73:19:fe:7e:02:d3:62:76:e5:5f:ea:c7:b3: a8:7b:88:af:eb:8c:41:1d:f8:14:4e:37:a2:34:24:d2:0d:02: a4:91:23:bf:1d:44:fe:0a:a9:1a:e0:6f:73:9e:ce:60:2b:94: ae:f3:ca:c7:4b:ed:f5:62:3a:34:4d:d8:bb:00:18:9e:f3:2b: e7:6b:e5:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15A7yvT6njSQ/K7wbeeGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0 OTk0MGYwHhcNMjYwMTI1MTYwMjAyWhcNMjYwMTI2MTYwMjAyWjAzMTEwLwYDVQQD Eyg3YmFhOGFkOGJkNjFiYzI1YTFmYjhmNjBjNjlkZjIyOTA5NTM1YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqT5s2d+Q4MDPIj/4FanAw0Yp40R fzWuFwUVUpnxVxLYAnDjN8qSK1Mm838FPy1tOj4Kho1J6cdwK2hdn3bNVCnkXl5i 2B8m1pHszRMtZFIDX9KFrbTCXzgFggz5rxYFqSHHaciNfccOL1lxKM7By/YDWQZj T/OmoPfafCTJqQysVp1iPVJesSOaIwUxy5VGHZvFJ5ofpuIEvRrNcFUbQQd1KF71 vGv7APYdo7z94SNAKuG3yIdVPT06jWsbbJYLBO1pQWX24Yvzgrl45NsHAO+4dus5 ds/acoJlnD4a6rZgkUvGu2f7wmDnp3xsY2H1BLvGUs7iUU9KfH95puHt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuqiti9YbwlofuPYMad8ikJU1vmMB8GA1UdIwQY MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4q8fdtL RrM/yFZY/4eea7YvNhp2EqLltLTqwDA6M9NgxIx65hszSvAcWC9Shujsl1sPC0P0 fGJwWHHGhZo2JQ4EcXQV8b2/h4vQ+cr1kzjPiAL3So4GsCo2f62M363eouPlXa/X PUjP96cAnXMRIQ69EY70HYGrA4CGmIbM2WswkDeVXu0TsrcMyhDpLeiih5R8umnM GSEr7zsHWVX3MlGYtDKyWe3/pTTccs28aDH2WiMOGa6glNFzGf5+AtNiduVf6sez qHuIr+uMQR34FE43ojQk0g0CpJEjvx1E/gqpGuBvc57OYCuUrvPKx0vt9WI6NE3Y uwAYnvMr52vlLw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:34 2026 by rpki-client