This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json) Hash identifier: qP6p9lomyWz7BPiB4+wmqUziED6fke1SXNirtBgTEbQ= Subject key identifier: DD:59:50:46:3B:CC:F2:7F:B7:DB:D2:4B:0A:D2:53:EA:59:6B:4D:92 Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d Certificate serial: 019BF687BA5814DF99A4D9D2883F9386F1B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft Manifest number: 0AE2 Signing time: Sun 25 Jan 2026 19:00:48 +0000 Manifest this update: Sun 25 Jan 2026 19:00:48 +0000 Manifest next update: Mon 26 Jan 2026 19:00:48 +0000 Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: TaU5tdwtMKkCHHIYywEh5sOsCUQejkq42EDYVsa1Z6c=) 2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=) 3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ba:58:14:df:99:a4:d9:d2:88:3f:93:86:f1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d Validity Not Before: Jan 25 19:00:48 2026 GMT Not After : Jan 26 19:00:48 2026 GMT Subject: CN=dd5950463bccf27fb7dbd24b0ad253ea596b4d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:b5:69:75:b7:50:d0:b7:02:43:b7:0e:99: 8d:57:d1:87:5f:8d:4b:51:ad:a6:4b:df:2b:90:d5: d1:d2:00:c7:53:76:75:ad:1d:9f:4d:e6:2e:23:ff: b5:d9:e4:02:7f:a2:a8:2e:b9:e0:49:1e:61:64:56: 90:9d:19:2a:88:f8:11:c3:e9:69:ff:40:54:8b:66: 65:fc:49:ea:72:2b:3a:62:d9:5b:8d:18:3b:63:11: 05:d0:b7:f7:b5:3c:de:5d:f6:b5:c6:77:34:f5:87: e0:28:f2:f4:87:20:6d:21:34:a7:e4:f4:e1:15:de: f8:29:9f:b8:d1:74:2f:63:0f:ac:89:3a:91:41:c0: 14:73:ca:db:dc:29:cd:84:06:2f:58:02:f1:d2:4e: df:d2:4f:24:73:aa:36:63:6b:ea:0b:6b:a5:85:e5: 00:7e:88:28:c3:64:24:b7:9d:11:be:6d:88:17:de: 4d:af:ef:3c:78:84:46:67:c7:98:bb:78:4a:c0:18: 88:d6:ab:dc:89:8d:4f:66:8b:d9:3f:79:e0:32:bc: 6e:d1:b7:96:dd:3a:d9:70:dc:56:c3:48:d1:77:ff: 19:60:04:73:c4:d4:bb:9e:96:02:a6:5b:76:30:d3: 4f:f9:d9:12:a6:0b:7f:03:05:66:95:6d:19:4d:54: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:59:50:46:3B:CC:F2:7F:B7:DB:D2:4B:0A:D2:53:EA:59:6B:4D:92 X509v3 Authority Key Identifier: keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:3b:84:3b:1f:bb:96:f1:ce:b6:b8:40:a8:73:b5:67:7b: 5d:11:fd:00:2a:fc:8c:2a:36:f1:c2:80:83:3f:26:aa:3d:84: a5:72:5a:5a:16:ee:04:a5:93:b6:70:19:bf:e0:31:2d:ca:c3: 99:88:5a:e6:3d:cb:59:28:02:39:ba:11:f0:2e:01:cd:2e:f0: 96:5a:95:13:8f:70:82:a0:54:2a:af:4d:b6:bd:5d:6f:e4:85: c7:29:03:35:6d:7c:15:8b:aa:6f:73:09:63:d2:96:7a:ea:f5: 3c:0a:6a:e3:4f:e6:0a:eb:5b:60:e4:6d:d1:5d:4a:71:7e:a2: 36:22:74:b6:70:77:09:e1:6f:ff:98:18:86:b7:8a:16:ec:c6: ea:75:39:b3:23:95:65:12:56:0f:73:3c:38:b8:9c:fd:70:89: f4:42:a1:c9:4a:79:ce:15:c4:86:f7:60:d5:ca:53:e5:27:d0: b7:b6:be:7b:4e:ae:0c:3d:b9:e2:ac:fa:42:2d:18:84:10:3e: 65:1f:28:21:20:fe:6b:69:a4:e3:1f:39:58:55:65:ab:d1:6a: 68:cb:6d:0c:5e:0e:69:23:08:2e:53:3f:10:91:6c:ab:40:48: f3:2f:dd:7a:08:45:1d:58:30:16:e5:e2:c5:57:28:ad:05:18: 47:4a:20:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7pYFN+ZpNnSiD+ThvG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZjJjZjFhNjIzMGNkNjJjYjNjYThhMWJjMWQ0YTRiYjQz MzdjMWQwHhcNMjYwMTI1MTkwMDQ4WhcNMjYwMTI2MTkwMDQ4WjAzMTEwLwYDVQQD EyhkZDU5NTA0NjNiY2NmMjdmYjdkYmQyNGIwYWQyNTNlYTU5NmI0ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaK1aXW3UNC3AkO3DpmNV9GHX41L Ua2mS98rkNXR0gDHU3Z1rR2fTeYuI/+12eQCf6KoLrngSR5hZFaQnRkqiPgRw+lp /0BUi2Zl/Enqcis6YtlbjRg7YxEF0Lf3tTzeXfa1xnc09YfgKPL0hyBtITSn5PTh Fd74KZ+40XQvYw+siTqRQcAUc8rb3CnNhAYvWALx0k7f0k8kc6o2Y2vqC2ulheUA fogow2Qkt50Rvm2IF95Nr+88eIRGZ8eYu3hKwBiI1qvciY1PZovZP3ngMrxu0beW 3TrZcNxWw0jRd/8ZYARzxNS7npYCplt2MNNP+dkSpgt/AwVmlW0ZTVQw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1ZUEY7zPJ/t9vSSwrSU+pZa02SMB8GA1UdIwQY MBaAFB/yzxpiMM1iyzyoobwdSku0M3wdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEt NmNlZGNmMjM0OTc1LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEtNmNlZGNmMjM0OTc1 LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcME7hDsf u5bxzra4QKhztWd7XRH9ACr8jCo28cKAgz8mqj2EpXJaWhbuBKWTtnAZv+AxLcrD mYha5j3LWSgCOboR8C4BzS7wllqVE49wgqBUKq9Ntr1db+SFxykDNW18FYuqb3MJ Y9KWeur1PApq40/mCutbYORt0V1KcX6iNiJ0tnB3CeFv/5gYhreKFuzG6nU5syOV ZRJWD3M8OLic/XCJ9EKhyUp5zhXEhvdg1cpT5SfQt7a+e06uDD254qz6Qi0YhBA+ ZR8oISD+a2mk4x85WFVlq9FqaMttDF4OaSMILlM/EJFsq0BI8y/deghFHVgwFuXi xVcorQUYR0ogxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:21 2026 by rpki-client