This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json) Hash identifier: iZFZVC5M+4rhgrFNl0mHeWvGTggqRrXjHSFYkZZJy24= Subject key identifier: 5E:33:4B:CB:86:FC:1A:85:65:A1:E9:93:CD:EF:C6:EF:D1:A6:3D:32 Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Certificate serial: 019BF72D241BD66DCC26D0FE13E0EE6EE26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft Manifest number: 1177 Signing time: Sun 25 Jan 2026 22:01:29 +0000 Manifest this update: Sun 25 Jan 2026 22:01:29 +0000 Manifest next update: Mon 26 Jan 2026 22:01:29 +0000 Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: fvHIAZxK1SqQcCDIPRAE7TKRlf8a1StJePyk+LFUH5w=) 2: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (hash: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:24:1b:d6:6d:cc:26:d0:fe:13:e0:ee:6e:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Validity Not Before: Jan 25 22:01:29 2026 GMT Not After : Jan 26 22:01:29 2026 GMT Subject: CN=5e334bcb86fc1a8565a1e993cdefc6efd1a63d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:bc:19:b2:c9:3a:e9:3f:5e:c7:36:72:9d: 41:de:32:50:ca:ac:ff:ff:51:20:93:23:e9:bc:33: 0d:8c:41:e9:53:ad:39:43:a3:a5:90:ff:40:64:2b: b4:6c:02:c7:9a:e0:97:20:70:e5:87:d8:aa:73:a1: 9c:96:11:56:55:71:e3:ff:12:3a:15:a8:bc:4d:c5: 1d:e1:39:ac:11:7e:d6:94:73:f5:75:a2:e4:04:93: 43:2a:06:ef:49:71:f5:e1:a4:e0:b1:95:f2:1c:c1: 1b:e2:85:31:85:90:04:e1:26:f8:39:71:42:67:8e: 5c:c5:04:61:03:89:82:d9:2b:80:79:09:33:97:85: 1e:08:9b:a7:7c:7a:b3:0b:bf:ce:d0:2c:19:5c:5c: 91:84:75:46:36:96:18:9a:dd:68:d3:05:fe:65:d1: eb:c6:7c:a1:db:bd:36:3d:ae:b0:19:55:e0:1f:2b: 7e:ca:fd:c5:0b:03:64:54:e1:26:25:2c:9e:1e:bc: b1:ed:d3:ad:67:e1:dd:bd:f0:d5:c0:7e:09:6f:51: c9:3e:3f:a4:08:5b:87:53:e6:7f:a4:64:93:f6:b4: 22:f9:2d:7f:a7:cf:f9:d8:aa:d6:43:33:23:94:0f: 64:ce:4c:11:a7:0f:57:06:8d:95:ae:2c:a4:36:02: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:33:4B:CB:86:FC:1A:85:65:A1:E9:93:CD:EF:C6:EF:D1:A6:3D:32 X509v3 Authority Key Identifier: keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:9d:09:0f:60:6c:f9:10:c4:1f:ed:2e:54:4c:f5:ad:84: 8e:be:5d:84:93:40:62:94:3a:9b:fc:ad:f6:ea:87:2a:71:8b: 67:a3:5b:71:91:2c:29:96:e4:af:c5:ee:38:5b:71:45:2a:70: 30:e7:d2:67:04:f9:76:c9:a4:0d:88:56:48:c6:29:00:c3:66: bc:a6:2f:9f:4e:fa:56:2b:ba:82:27:9a:29:90:40:ec:6a:86: 89:86:3a:87:94:14:3d:c5:6f:21:cf:89:d4:70:a8:79:01:f7: 0b:1a:8c:c6:b0:90:83:e4:18:ac:1f:6e:5b:1f:c2:5a:d5:87: 2a:a9:18:e8:53:ab:ca:b9:1d:39:56:a3:7f:f0:fa:c3:32:a3: 88:55:12:62:63:98:44:46:2f:86:cc:41:ed:2b:f2:a2:95:f6: 1a:47:84:da:b7:da:7d:32:98:db:3b:1c:a1:65:ca:e1:5d:ec: d6:c9:91:43:05:b7:66:62:ad:8c:db:0c:96:46:2e:94:e7:48: e1:c6:bf:f4:e6:18:69:d8:06:89:20:20:2c:32:1f:e2:18:a4: 4a:12:97:9d:03:3c:d5:20:d1:b1:ef:99:6d:78:3d:18:81:f2: fe:9c:b2:96:8d:92:74:22:f1:f4:a8:0d:5b:ff:fc:13:04:a8: 06:de:bc:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSQb1m3MJtD+E+DubuJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2 YTE4YTMwHhcNMjYwMTI1MjIwMTI5WhcNMjYwMTI2MjIwMTI5WjAzMTEwLwYDVQQD Eyg1ZTMzNGJjYjg2ZmMxYTg1NjVhMWU5OTNjZGVmYzZlZmQxYTYzZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvW8GbLJOuk/Xsc2cp1B3jJQyqz/ /1EgkyPpvDMNjEHpU605Q6OlkP9AZCu0bALHmuCXIHDlh9iqc6GclhFWVXHj/xI6 Fai8TcUd4TmsEX7WlHP1daLkBJNDKgbvSXH14aTgsZXyHMEb4oUxhZAE4Sb4OXFC Z45cxQRhA4mC2SuAeQkzl4UeCJunfHqzC7/O0CwZXFyRhHVGNpYYmt1o0wX+ZdHr xnyh2702Pa6wGVXgHyt+yv3FCwNkVOEmJSyeHryx7dOtZ+HdvfDVwH4Jb1HJPj+k CFuHU+Z/pGST9rQi+S1/p8/52KrWQzMjlA9kzkwRpw9XBo2VriykNgIcMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4zS8uG/BqFZaHpk83vxu/Rpj0yMB8GA1UdIwQY MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt NTI0MWUzMWNkOGRhLzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLmdCQ9g bPkQxB/tLlRM9a2Ejr5dhJNAYpQ6m/yt9uqHKnGLZ6NbcZEsKZbkr8XuOFtxRSpw MOfSZwT5dsmkDYhWSMYpAMNmvKYvn076Viu6gieaKZBA7GqGiYY6h5QUPcVvIc+J 1HCoeQH3CxqMxrCQg+QYrB9uWx/CWtWHKqkY6FOryrkdOVajf/D6wzKjiFUSYmOY REYvhsxB7SvyopX2GkeE2rfafTKY2zscoWXK4V3s1smRQwW3ZmKtjNsMlkYulOdI 4ca/9OYYadgGiSAgLDIf4hikShKXnQM81SDRse+ZbXg9GIHy/pyylo2SdCLx9KgN W//8EwSoBt68Dg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:41 2026 by rpki-client