This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json) Hash identifier: UUApsP25aue0KlbTVQl0AlHtmeD+pD47ZylAbF0YZXU= Subject key identifier: 4D:D6:CD:5E:9A:23:ED:01:33:9B:4E:49:9D:64:CF:06:DA:01:35:3E Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Certificate serial: 019BF83EF38A3088684859E93048E3798967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 03:00:33 +0000 Manifest this update: Mon 26 Jan 2026 03:00:33 +0000 Manifest next update: Tue 27 Jan 2026 03:00:33 +0000 Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: Cltt0ouqcLF8lorQmvoB1Xq9fSvrSlFSskMt9usgIvo=) 2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:f3:8a:30:88:68:48:59:e9:30:48:e3:79:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Validity Not Before: Jan 26 03:00:33 2026 GMT Not After : Jan 27 03:00:33 2026 GMT Subject: CN=4dd6cd5e9a23ed01339b4e499d64cf06da01353e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:b8:b0:f3:97:ae:64:1b:f6:e0:c7:26:c8: c8:82:bb:a4:31:10:e5:51:b0:27:4c:f9:9e:de:8b: 95:ec:e3:b0:b9:3b:1c:9c:b9:ce:86:2f:87:8e:fe: 0c:26:21:70:2d:37:48:4e:e3:a3:5b:7b:ca:01:68: c8:e7:d4:97:32:d9:77:3f:6f:0a:ec:de:30:72:e3: e6:e4:83:f5:47:16:d6:3a:92:1f:ce:34:d6:e5:5a: bf:f5:50:10:af:61:ff:73:ab:29:1e:b4:2e:fc:f6: 37:93:73:bb:54:2e:06:c0:8b:56:b7:c1:2b:6c:d9: 7f:09:ad:61:0f:2d:89:34:cd:40:28:b3:3d:96:4e: 68:ad:8e:42:5d:24:d8:30:1b:76:fa:87:8d:67:8f: 24:b8:ab:49:66:64:d9:a2:a5:3a:34:7b:fa:81:25: 10:15:8e:9b:28:0d:59:9e:96:ee:70:dd:37:bb:cd: 3c:e2:17:df:8b:9d:36:3f:53:36:f0:57:ba:cb:a6: 3c:26:28:90:e5:9d:c3:67:19:74:8f:48:87:a1:1a: 2e:51:1f:6a:47:92:4f:e9:83:3e:5b:3f:d6:63:1a: fc:a7:d9:d4:a6:df:fa:38:60:d4:e2:3f:3b:a0:60: 63:ae:df:f8:3a:d0:28:48:8c:97:7e:16:78:f4:7a: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:CD:5E:9A:23:ED:01:33:9B:4E:49:9D:64:CF:06:DA:01:35:3E X509v3 Authority Key Identifier: keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:5b:eb:83:50:fe:19:a2:9d:3d:a7:88:af:d4:6f:1e:9f: 26:75:b5:ae:45:f0:c4:37:b6:18:3b:27:3b:3f:de:34:a9:6e: d9:da:d7:d9:19:cb:95:25:16:7e:86:1b:7f:2a:29:57:6d:32: 17:8f:4a:63:56:0c:2e:c2:73:f0:16:75:12:28:04:17:5f:52: 4e:bb:d0:d0:88:70:a3:c6:d8:5b:9e:64:16:ec:19:dd:56:a6: be:2a:81:17:d9:87:1a:14:64:bd:80:9a:45:42:63:c5:c3:7f: 2a:ca:9b:50:24:70:b5:bd:d0:5d:d5:75:7e:dc:fb:98:3b:6a: aa:25:2a:68:0c:24:40:d3:d4:b9:90:d6:8c:2d:1d:ba:13:33: 66:5b:54:21:5c:62:0b:20:31:09:38:db:68:e3:43:d4:43:3c: 4b:77:54:58:b0:b1:cf:a8:cb:20:da:ab:90:d7:f3:04:ad:4d: 05:71:08:84:a4:27:cc:e4:d8:df:e2:e9:ef:54:c3:98:bf:63: d4:79:45:ca:b4:f3:df:8b:67:8a:4f:ac:44:74:d7:ea:76:5c: b7:90:1d:96:29:96:59:31:88:32:06:4b:70:dc:08:b9:1a:57: 14:d6:25:e0:b1:c0:f2:11:2e:7b:a1:c4:c3:34:1b:3e:2d:a5: 91:47:94:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PvOKMIhoSFnpMEjjeYlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5 Yjc5ZjAwHhcNMjYwMTI2MDMwMDMzWhcNMjYwMTI3MDMwMDMzWjAzMTEwLwYDVQQD Eyg0ZGQ2Y2Q1ZTlhMjNlZDAxMzM5YjRlNDk5ZDY0Y2YwNmRhMDEzNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33y4sPOXrmQb9uDHJsjIgrukMRDl UbAnTPme3ouV7OOwuTscnLnOhi+Hjv4MJiFwLTdITuOjW3vKAWjI59SXMtl3P28K 7N4wcuPm5IP1RxbWOpIfzjTW5Vq/9VAQr2H/c6spHrQu/PY3k3O7VC4GwItWt8Er bNl/Ca1hDy2JNM1AKLM9lk5orY5CXSTYMBt2+oeNZ48kuKtJZmTZoqU6NHv6gSUQ FY6bKA1ZnpbucN03u8084hffi502P1M28Fe6y6Y8JiiQ5Z3DZxl0j0iHoRouUR9q R5JP6YM+Wz/WYxr8p9nUpt/6OGDU4j87oGBjrt/4OtAoSIyXfhZ49HoCMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3WzV6aI+0BM5tOSZ1kzwbaATU+MB8GA1UdIwQY MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4 LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgApb64NQ /hminT2niK/Ubx6fJnW1rkXwxDe2GDsnOz/eNKlu2drX2RnLlSUWfoYbfyopV20y F49KY1YMLsJz8BZ1EigEF19STrvQ0Ihwo8bYW55kFuwZ3VamviqBF9mHGhRkvYCa RUJjxcN/KsqbUCRwtb3QXdV1ftz7mDtqqiUqaAwkQNPUuZDWjC0duhMzZltUIVxi CyAxCTjbaOND1EM8S3dUWLCxz6jLINqrkNfzBK1NBXEIhKQnzOTY3+Lp71TDmL9j 1HlFyrTz34tnik+sRHTX6nZct5AdlimWWTGIMgZLcNwIuRpXFNYl4LHA8hEue6HE wzQbPi2lkUeUXA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:09 2026 by rpki-client