This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json) Hash identifier: TAGPeBwiD2lp0JWovTHs9MUSN0R8HyYGyO7O/0s4Asw= Subject key identifier: 02:E8:9B:53:57:07:F3:CF:90:B9:FA:9F:46:A0:0A:01:4E:9A:F8:88 Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320 Certificate serial: 019BF2E23732787210FF197B47CE6B910C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft Manifest number: 025E Signing time: Sun 25 Jan 2026 02:01:10 +0000 Manifest this update: Sun 25 Jan 2026 02:01:10 +0000 Manifest next update: Mon 26 Jan 2026 02:01:10 +0000 Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=) 2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: H0rk3PJtOMxyVkK1VkqDBdhLddoFPKf93Rwk45k6Dfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:37:32:78:72:10:ff:19:7b:47:ce:6b:91:0c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320 Validity Not Before: Jan 25 02:01:10 2026 GMT Not After : Jan 26 02:01:10 2026 GMT Subject: CN=02e89b535707f3cf90b9fa9f46a00a014e9af888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:9d:a4:2e:77:5c:d5:bf:1c:99:01:e1:2b: 85:21:03:b3:6f:84:3b:d7:55:71:a9:15:4b:1c:50: a0:1c:92:82:ff:02:d0:ef:23:7e:11:6e:5f:ef:b2: 5b:f7:17:d1:33:df:4b:19:89:c3:e7:d3:2d:ce:0e: dc:2a:2e:d6:04:98:b6:dd:af:9b:93:81:28:12:09: 23:98:2b:4a:a4:51:ad:ab:5f:52:3a:93:e1:aa:0b: 92:71:7e:54:be:bc:7c:dc:43:91:26:33:4e:53:9d: 17:07:01:d2:b5:0d:e0:57:0c:8b:59:2c:ae:ec:be: e2:47:b6:45:70:e2:8d:cc:0d:06:a9:78:81:e5:f7: df:dc:70:8d:62:a5:33:e2:62:7e:7f:f0:65:a8:4b: eb:59:9d:95:d2:e9:8e:7b:05:62:48:ed:6d:19:f4: 61:da:11:cd:78:44:44:fd:c7:da:bb:15:cf:a5:8c: 08:d1:dc:44:be:63:e8:e2:6b:7d:68:37:45:77:8a: 99:63:e5:9a:26:e7:d0:12:45:ed:23:6d:14:12:5b: 31:1c:de:88:50:d3:68:7d:97:45:5c:a3:e5:52:2a: d2:10:69:d0:66:4d:08:ad:f0:23:24:31:d6:a3:dd: 32:b0:cc:9f:b9:b0:ee:07:94:9b:70:1b:8b:86:c3: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:9B:53:57:07:F3:CF:90:B9:FA:9F:46:A0:0A:01:4E:9A:F8:88 X509v3 Authority Key Identifier: keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:bb:00:cd:c6:bc:11:94:56:e8:40:be:d3:6a:d2:1c:66: af:fc:91:96:36:2a:2d:fc:2f:87:14:fa:a2:cb:74:f4:61:10: 17:28:aa:5f:33:12:3e:f3:fe:03:66:e1:07:74:f9:29:3f:22: 1c:29:01:12:c8:ed:f9:a4:ca:71:e4:50:b9:bc:71:38:24:da: 77:bf:8f:d6:a9:58:10:26:bd:08:f0:1b:6e:e5:9a:45:cc:58: 17:ce:da:5e:ee:ad:75:93:c3:b3:62:f6:b1:3c:92:ac:96:01: 39:52:7b:47:88:95:c6:7d:0f:80:d8:4a:29:5d:9b:60:ff:36: 3d:ae:0e:3e:6e:37:ad:a0:7b:ba:e8:4d:4a:9e:b4:7c:c8:db: 0a:3a:d3:fe:37:89:48:4d:8d:4e:83:c2:80:36:2d:e5:7a:83: d4:d0:55:87:93:7c:c8:77:af:ce:e3:04:fb:a2:e1:ce:5d:81: 5f:14:7a:55:0d:11:3f:81:25:cb:be:d4:bd:a1:f4:59:a6:8d: f5:5e:75:12:63:a2:7a:1b:cd:c1:39:8a:48:03:de:84:ec:d6: d1:47:f2:19:4a:41:f0:7f:e6:e8:7a:10:4f:4e:05:1c:ce:53: f8:a5:89:e4:98:3e:74:42:d3:2a:49:53:f3:f9:ef:52:6c:37: 61:88:1a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4jcyeHIQ/xl7R85rkQyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy ZjAzMjAwHhcNMjYwMTI1MDIwMTEwWhcNMjYwMTI2MDIwMTEwWjAzMTEwLwYDVQQD EygwMmU4OWI1MzU3MDdmM2NmOTBiOWZhOWY0NmEwMGEwMTRlOWFmODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtSdpC53XNW/HJkB4SuFIQOzb4Q7 11VxqRVLHFCgHJKC/wLQ7yN+EW5f77Jb9xfRM99LGYnD59Mtzg7cKi7WBJi23a+b k4EoEgkjmCtKpFGtq19SOpPhqguScX5Uvrx83EORJjNOU50XBwHStQ3gVwyLWSyu 7L7iR7ZFcOKNzA0GqXiB5fff3HCNYqUz4mJ+f/BlqEvrWZ2V0umOewViSO1tGfRh 2hHNeERE/cfauxXPpYwI0dxEvmPo4mt9aDdFd4qZY+WaJufQEkXtI20UElsxHN6I UNNofZdFXKPlUirSEGnQZk0IrfAjJDHWo90ysMyfubDuB5SbcBuLhsMh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALom1NXB/PPkLn6n0agCgFOmviIMB8GA1UdIwQY MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1 LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLS7AM3G vBGUVuhAvtNq0hxmr/yRljYqLfwvhxT6ost09GEQFyiqXzMSPvP+A2bhB3T5KT8i HCkBEsjt+aTKceRQubxxOCTad7+P1qlYECa9CPAbbuWaRcxYF87aXu6tdZPDs2L2 sTySrJYBOVJ7R4iVxn0PgNhKKV2bYP82Pa4OPm43raB7uuhNSp60fMjbCjrT/jeJ SE2NToPCgDYt5XqD1NBVh5N8yHevzuME+6Lhzl2BXxR6VQ0RP4Ely77UvaH0WaaN 9V51EmOiehvNwTmKSAPehOzW0UfyGUpB8H/m6HoQT04FHM5T+KWJ5Jg+dELTKklT 8/nvUmw3YYgaGg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:49 2026 by rpki-client