This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json) Hash identifier: N3pTxZ8ay2IfM94BrDKojOZmzXSIqbDdS1EcK1+e/58= Subject key identifier: DE:E9:CE:71:1B:91:C7:0D:FF:8E:04:20:25:3A:B9:27:3E:74:4E:77 Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93 Certificate serial: 019BF8ACDBFCE45ABE475C56895C402B835F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft Manifest number: 044B Signing time: Mon 26 Jan 2026 05:00:36 +0000 Manifest this update: Mon 26 Jan 2026 05:00:36 +0000 Manifest next update: Tue 27 Jan 2026 05:00:36 +0000 Files and hashes: 1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: Ok3LCYsfa+tQLfu8Y23DFxMXKhjoekC/G/akNKGyLqs=) 2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=) 3: jIIHIKwEzlntc0Vy_0Y1xdxljqM.roa (hash: RKwW62ZY+qUagcWd9OQWWCF2AiuU+GfnzsEEdx/g/7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:db:fc:e4:5a:be:47:5c:56:89:5c:40:2b:83:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93 Validity Not Before: Jan 26 05:00:36 2026 GMT Not After : Jan 27 05:00:36 2026 GMT Subject: CN=dee9ce711b91c70dff8e0420253ab9273e744e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:97:b9:fb:bb:15:50:3c:a6:5d:b1:bf:98: 0c:c8:4c:4e:e3:ae:ff:d3:59:f6:53:11:0c:be:44: bf:89:bb:72:2f:bf:b4:d8:9c:f3:dd:5c:b7:89:34: 04:3f:c5:e6:98:87:cb:60:52:16:1b:2b:85:04:ed: bf:82:b2:cd:03:fa:a9:de:25:81:de:36:fa:7b:2c: 33:22:f1:1e:1e:a2:2d:b9:35:15:53:58:d8:8d:08: 55:81:1d:b8:25:55:31:e7:ed:a5:20:1d:21:5c:e5: d8:d9:17:c5:13:d6:bd:6c:06:ca:cc:ff:a4:2c:a1: a8:df:94:9e:3e:a4:2d:95:b4:ad:ef:ef:82:cc:83: b2:5f:ab:a9:ac:f4:2b:70:e2:5b:74:4a:45:1b:e4: 41:53:32:17:f3:d8:4f:99:f6:bb:22:1f:5c:73:17: ea:ee:3e:73:ab:da:95:aa:50:5b:75:1f:82:c7:9d: 9c:fc:25:d9:75:a4:bb:85:5a:60:6d:0a:0b:fe:59: e9:59:c7:b6:60:16:7b:4b:9a:63:42:23:4e:37:64: f7:00:b5:f1:c8:6c:9f:7f:4b:90:44:ae:e8:03:75: 1d:6b:78:07:aa:b2:fe:5b:1e:cf:ee:73:cf:4d:a0: 26:12:39:70:3a:e0:c6:f3:98:e5:46:6d:60:72:f0: 98:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:CE:71:1B:91:C7:0D:FF:8E:04:20:25:3A:B9:27:3E:74:4E:77 X509v3 Authority Key Identifier: keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:8b:42:d0:dd:80:fb:8c:0d:c8:07:c9:1b:c6:8b:0d:ac: 04:33:61:6a:2c:d7:0f:31:a4:73:94:43:ce:4b:f2:91:6f:e6: d0:87:22:df:ff:7b:f4:47:d7:ec:47:fa:ef:1c:0a:61:c7:cb: 92:65:8f:15:39:d4:db:36:eb:3f:53:1d:b3:5d:dc:cd:26:92: a8:04:f9:fd:a8:71:d5:62:6c:4a:48:d6:aa:a8:e8:dc:6b:df: e1:33:71:cc:71:8e:b7:51:87:22:b4:b1:ed:cc:55:9c:fc:ca: 45:62:8e:61:3f:0b:8c:9b:de:e7:57:56:77:88:2e:e2:5b:fc: b4:2a:69:42:e5:4d:01:91:a4:f3:b2:b7:1a:f8:ca:c0:61:e8: bb:f8:01:e0:22:01:33:c8:72:de:61:92:a9:8a:9d:70:2e:3f: d7:96:de:cd:91:5e:cc:da:0d:b9:d1:08:60:a4:e2:7c:8f:df: 79:72:bd:95:b1:2b:d8:da:dc:be:04:d9:89:99:a7:29:c8:2a: 0a:b0:e3:49:76:25:cf:b3:b1:d5:99:e4:51:3d:0a:84:e5:ba: 31:af:cd:20:79:35:a0:b5:46:9d:18:0e:34:ea:ba:9b:04:6c: 8e:11:b7:aa:9d:7b:d4:1a:c0:71:b7:de:25:c7:8a:05:c9:29: 1e:93:76:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rNv85Fq+R1xWiVxAK4NfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1 ODhiOTMwHhcNMjYwMTI2MDUwMDM2WhcNMjYwMTI3MDUwMDM2WjAzMTEwLwYDVQQD EyhkZWU5Y2U3MTFiOTFjNzBkZmY4ZTA0MjAyNTNhYjkyNzNlNzQ0ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBiXufu7FVA8pl2xv5gMyExO467/ 01n2UxEMvkS/ibtyL7+02Jzz3Vy3iTQEP8XmmIfLYFIWGyuFBO2/grLNA/qp3iWB 3jb6eywzIvEeHqItuTUVU1jYjQhVgR24JVUx5+2lIB0hXOXY2RfFE9a9bAbKzP+k LKGo35SePqQtlbSt7++CzIOyX6uprPQrcOJbdEpFG+RBUzIX89hPmfa7Ih9ccxfq 7j5zq9qVqlBbdR+Cx52c/CXZdaS7hVpgbQoL/lnpWce2YBZ7S5pjQiNON2T3ALXx yGyff0uQRK7oA3Uda3gHqrL+Wx7P7nPPTaAmEjlwOuDG85jlRm1gcvCYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7pznEbkccN/44EICU6uSc+dE53MB8GA1UdIwQY MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYKLQtDd gPuMDcgHyRvGiw2sBDNhaizXDzGkc5RDzkvykW/m0Ici3/979EfX7Ef67xwKYcfL kmWPFTnU2zbrP1Mds13czSaSqAT5/ahx1WJsSkjWqqjo3Gvf4TNxzHGOt1GHIrSx 7cxVnPzKRWKOYT8LjJve51dWd4gu4lv8tCppQuVNAZGk87K3GvjKwGHou/gB4CIB M8hy3mGSqYqdcC4/15bezZFezNoNudEIYKTifI/feXK9lbEr2NrcvgTZiZmnKcgq CrDjSXYlz7Ox1ZnkUT0KhOW6Ma/NIHk1oLVGnRgONOq6mwRsjhG3qp171BrAcbfe JceKBckpHpN2WA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:37 2026 by rpki-client