This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json) Hash identifier: wgsMb9ksWdRqe5hEB3KdEef6Rn7iiPgvnWPbIuafEJs= Subject key identifier: BD:B8:0E:5C:FD:50:1F:5A:A9:CA:5A:14:25:12:A6:BB:C8:A6:0B:02 Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Certificate serial: 019BF8E40987E4562E0D155152C883433E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 06:00:52 +0000 Manifest this update: Mon 26 Jan 2026 06:00:52 +0000 Manifest next update: Tue 27 Jan 2026 06:00:52 +0000 Files and hashes: 1: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (hash: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E=) 2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: XFVV4ctcnUsWSkRalwKV/TWWYGe4gtohEei3b2HaP4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:09:87:e4:56:2e:0d:15:51:52:c8:83:43:3e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Validity Not Before: Jan 26 06:00:52 2026 GMT Not After : Jan 27 06:00:52 2026 GMT Subject: CN=bdb80e5cfd501f5aa9ca5a142512a6bbc8a60b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:94:04:de:80:e6:7d:18:22:da:11:f8:6c: aa:29:2a:9b:47:db:de:3c:08:16:93:76:af:59:4c: 24:75:ef:96:77:a1:05:bd:c7:9a:74:94:25:de:40: a9:2d:c4:49:22:73:3b:ba:f6:5e:b1:6b:46:bc:35: d6:eb:c3:d7:de:5f:df:2f:50:d6:d5:1f:aa:71:df: 27:c8:03:89:21:a4:86:c2:5e:1c:e9:8f:e6:8a:26: a2:b5:4b:d6:2f:4b:e7:14:33:d8:ba:1d:19:84:b8: fa:d9:6b:69:22:90:3a:36:74:34:fd:b8:df:00:36: f6:3d:4b:9d:5c:09:34:f1:9b:3d:ca:81:e2:34:93: cd:c5:b4:33:ed:4f:da:ba:0a:5a:32:b2:fc:ec:ae: 3d:b3:39:6c:62:61:ae:40:ca:ad:fe:38:be:52:5b: e8:e8:3a:f2:b4:d8:bc:14:5f:3a:de:d7:76:5b:f6: 41:06:c4:ce:c8:85:a5:bf:47:e3:dc:7b:27:d6:d7: 12:84:e0:15:ee:40:f1:d5:4c:e8:f4:32:2d:b4:4c: e3:7e:2c:08:c0:6c:45:fe:6a:7c:a5:65:0f:4e:98: a2:79:00:c8:9a:3a:3e:88:6e:ce:9d:bd:98:57:5c: 3c:6d:c3:78:d8:d6:e9:c0:33:2d:89:09:d7:db:ba: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B8:0E:5C:FD:50:1F:5A:A9:CA:5A:14:25:12:A6:BB:C8:A6:0B:02 X509v3 Authority Key Identifier: keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d3:99:67:da:56:26:67:07:ff:aa:25:be:f7:d6:e8:52:71: da:83:e6:ec:41:f1:4c:db:7b:67:45:ee:04:7d:9d:20:b2:41: 9a:78:53:c1:bf:22:26:35:0b:63:fd:94:aa:fd:d0:eb:65:41: d8:2a:d2:35:c4:8e:cd:00:16:a1:15:36:8d:de:53:43:a4:ae: df:30:e4:8b:3e:61:a3:81:de:ec:eb:8c:3e:6f:bf:44:f8:75: 23:d3:f0:67:30:28:c0:16:12:f3:d8:f5:22:12:7b:96:66:b5: 81:a7:c0:c7:2a:a3:a2:5b:fe:37:67:50:5e:ee:d4:0c:f0:c1: 5f:03:8d:88:b7:4d:89:4d:59:5e:55:c3:a2:62:e9:d1:df:c6: ea:f4:a5:1c:52:90:13:aa:d5:9e:23:bb:09:fd:53:7c:eb:57: 37:46:39:00:42:13:ea:75:0d:bd:a7:5e:77:96:6c:3f:dc:fe: 13:3f:4b:a2:16:97:71:6a:6c:a8:28:cd:52:2b:4a:cb:d3:3e: 89:6e:81:63:ef:ef:ca:f8:5a:e5:91:26:3a:0c:20:f6:f0:9a: 63:aa:d2:3b:05:e4:f7:62:c8:5e:e1:2e:e5:10:5b:2e:fc:58: 23:a8:f8:46:cd:ce:bd:3e:84:4a:9a:12:f7:e2:93:52:6b:c7: c4:ec:df:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45AmH5FYuDRVRUsiDQz6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWFjZTA2NmE0NGVkMmY5NWZlNmJjMmQwYTdkYTQxMjc2 M2JmMmEwHhcNMjYwMTI2MDYwMDUyWhcNMjYwMTI3MDYwMDUyWjAzMTEwLwYDVQQD EyhiZGI4MGU1Y2ZkNTAxZjVhYTljYTVhMTQyNTEyYTZiYmM4YTYwYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgKUBN6A5n0YItoR+GyqKSqbR9ve PAgWk3avWUwkde+Wd6EFvceadJQl3kCpLcRJInM7uvZesWtGvDXW68PX3l/fL1DW 1R+qcd8nyAOJIaSGwl4c6Y/miiaitUvWL0vnFDPYuh0ZhLj62WtpIpA6NnQ0/bjf ADb2PUudXAk08Zs9yoHiNJPNxbQz7U/augpaMrL87K49szlsYmGuQMqt/ji+Ulvo 6DrytNi8FF863td2W/ZBBsTOyIWlv0fj3Hsn1tcShOAV7kDx1Uzo9DIttEzjfiwI wGxF/mp8pWUPTpiieQDImjo+iG7Onb2YV1w8bcN42NbpwDMtiQnX27pZ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL24Dlz9UB9aqcpaFCUSprvIpgsCMB8GA1UdIwQY MBaAFISazgZqRO0vlf5rwtCn2kEnY78qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTIt ZjdjNDY1N2I3YjhkLzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTItZjdjNDY1N2I3Yjhk LzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9OZZ9pW JmcH/6olvvfW6FJx2oPm7EHxTNt7Z0XuBH2dILJBmnhTwb8iJjULY/2Uqv3Q62VB 2CrSNcSOzQAWoRU2jd5TQ6Su3zDkiz5ho4He7OuMPm+/RPh1I9PwZzAowBYS89j1 IhJ7lma1gafAxyqjolv+N2dQXu7UDPDBXwONiLdNiU1ZXlXDomLp0d/G6vSlHFKQ E6rVniO7Cf1TfOtXN0Y5AEIT6nUNvaded5ZsP9z+Ez9LohaXcWpsqCjNUitKy9M+ iW6BY+/vyvha5ZEmOgwg9vCaY6rSOwXk92LIXuEu5RBbLvxYI6j4Rs3OvT6ESpoS 9+KTUmvHxOzf0w== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:29 2026 by rpki-client