This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json) Hash identifier: hf+xVymmGfl9vfhk/TsAnTOEBZ8jUdcHCxZocBDeX7E= Subject key identifier: 4A:9E:A0:4C:77:64:48:23:F2:86:9D:2C:B5:AC:90:E4:D0:9D:87:88 Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d Certificate serial: 019BF6F5930450F735A1BE7A919B8DC03A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft Manifest number: 0ECD Signing time: Sun 25 Jan 2026 21:00:47 +0000 Manifest this update: Sun 25 Jan 2026 21:00:47 +0000 Manifest next update: Mon 26 Jan 2026 21:00:47 +0000 Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: V5yOlgiTyAbwCD1WPIFi79Q5XRHvQg6mvlvyiurKsdo=) 2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:93:04:50:f7:35:a1:be:7a:91:9b:8d:c0:3a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d Validity Not Before: Jan 25 21:00:47 2026 GMT Not After : Jan 26 21:00:47 2026 GMT Subject: CN=4a9ea04c77644823f2869d2cb5ac90e4d09d8788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:bb:a5:c9:bd:29:e6:27:55:ba:5d:64:53: 66:bc:2d:cf:2e:c1:36:9b:51:d1:ab:b7:c8:53:9b: e8:d2:9a:d8:40:1e:2e:d2:25:72:c4:2f:ff:52:51: 7c:8a:fa:d3:17:ba:17:42:b9:46:be:f1:c8:50:fd: e5:ad:6e:de:fa:db:e9:c8:5d:f6:9c:76:cf:81:d6: 81:f7:27:a4:76:50:22:ff:5f:dc:f7:58:55:73:6f: 1b:1f:c9:ed:ce:b4:91:7b:77:bf:bb:e8:29:35:27: 9f:86:20:f3:d3:7f:17:fa:d2:e8:0e:62:41:49:3e: 57:9b:56:1d:52:6b:7f:a4:4e:17:88:4b:e2:dc:59: 43:34:1e:f4:44:04:15:e0:f7:32:53:29:57:e3:1c: db:2a:e2:93:87:b2:d5:d4:75:ff:4c:f3:55:1d:d6: d4:32:70:50:f3:58:88:8a:c8:e9:93:bc:6b:f2:04: 0e:d4:62:e1:d3:8c:ad:6b:57:85:4c:07:81:2b:f6: 7f:b0:e2:35:5f:93:78:b7:b9:81:f8:17:df:e2:76: ea:d1:f7:93:f7:c3:86:fb:d2:a9:ea:c0:ff:02:3f: ee:06:e5:c3:9b:5e:99:f7:5a:72:d2:11:38:68:20: da:45:6d:fb:26:33:e9:57:ea:91:0c:74:4d:05:29: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:A0:4C:77:64:48:23:F2:86:9D:2C:B5:AC:90:E4:D0:9D:87:88 X509v3 Authority Key Identifier: keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a7:1b:93:9e:cd:3a:46:86:af:91:99:bf:5f:7d:b5:22:7f: d6:cc:56:03:46:e1:fc:9b:f0:a1:9d:6c:16:8e:14:89:d7:a4: ae:c4:82:34:f9:bd:ef:e2:30:ff:74:f4:ea:f6:be:2e:cb:c0: 9c:5e:77:bb:65:ce:bf:46:36:70:e1:58:34:a0:d7:37:6c:cf: 03:8f:99:8d:9c:a6:6a:31:fb:b2:aa:a2:03:cf:28:80:c8:7d: de:8d:2c:c7:35:eb:69:cd:a2:a7:ee:90:60:ba:54:a4:df:58: 6e:21:9d:f8:39:cd:da:6f:e1:28:f7:d0:ae:df:f0:16:fa:75: b1:40:2f:73:e2:c9:9d:da:88:1d:25:38:d3:ad:06:f4:78:c0: 5c:c4:6b:ef:74:81:ee:87:73:28:20:d4:3e:31:fc:4a:ad:27: 30:fb:74:2e:d1:e9:74:c1:25:1f:00:00:73:70:cd:08:8d:c9: 86:1e:9d:89:d0:36:bb:8c:86:e0:eb:ca:c3:3d:61:fc:b5:5f: bb:8d:4b:b6:94:8e:e6:93:72:d2:b4:13:17:73:15:db:59:92: c4:e4:21:37:20:09:3e:77:36:a4:a1:16:c8:ec:22:ed:9b:f7: df:5a:69:92:1b:5e:d0:a2:b1:84:02:38:35:28:4b:e7:b7:8a: c6:5f:b4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZMEUPc1ob56kZuNwDp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx MDU5NWQwHhcNMjYwMTI1MjEwMDQ3WhcNMjYwMTI2MjEwMDQ3WjAzMTEwLwYDVQQD Eyg0YTllYTA0Yzc3NjQ0ODIzZjI4NjlkMmNiNWFjOTBlNGQwOWQ4Nzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit27pcm9KeYnVbpdZFNmvC3PLsE2 m1HRq7fIU5vo0prYQB4u0iVyxC//UlF8ivrTF7oXQrlGvvHIUP3lrW7e+tvpyF32 nHbPgdaB9yekdlAi/1/c91hVc28bH8ntzrSRe3e/u+gpNSefhiDz038X+tLoDmJB ST5Xm1YdUmt/pE4XiEvi3FlDNB70RAQV4PcyUylX4xzbKuKTh7LV1HX/TPNVHdbU MnBQ81iIisjpk7xr8gQO1GLh04yta1eFTAeBK/Z/sOI1X5N4t7mB+Bff4nbq0feT 98OG+9Kp6sD/Aj/uBuXDm16Z91py0hE4aCDaRW37JjPpV+qRDHRNBSnaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqeoEx3ZEgj8oadLLWskOTQnYeIMB8GA1UdIwQY MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0 LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqcbk57N OkaGr5GZv199tSJ/1sxWA0bh/JvwoZ1sFo4UidekrsSCNPm97+Iw/3T06va+LsvA nF53u2XOv0Y2cOFYNKDXN2zPA4+ZjZymajH7sqqiA88ogMh93o0sxzXrac2ip+6Q YLpUpN9YbiGd+DnN2m/hKPfQrt/wFvp1sUAvc+LJndqIHSU4060G9HjAXMRr73SB 7odzKCDUPjH8Sq0nMPt0LtHpdMElHwAAc3DNCI3Jhh6didA2u4yG4OvKwz1h/LVf u41LtpSO5pNy0rQTF3MV21mSxOQhNyAJPnc2pKEWyOwi7Zv331ppkhte0KKxhAI4 NShL57eKxl+0qg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:46 2026 by rpki-client