This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json) Hash identifier: DjRWCCbyCI+2BtWSnzdfcV6u/tLW6lcLHEqzY59cSjw= Subject key identifier: 85:2E:88:A0:91:90:30:20:42:DA:4B:74:65:D6:49:83:74:60:40:DA Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Certificate serial: 019BF31905262FCBBFCE825F9A95447E53A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft Manifest number: 0F06 Signing time: Sun 25 Jan 2026 03:01:01 +0000 Manifest this update: Sun 25 Jan 2026 03:01:01 +0000 Manifest next update: Mon 26 Jan 2026 03:01:01 +0000 Files and hashes: 1: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: MTG+beJoUnVZ9zg0eoJNJmfrPKYbyHbSQL/ONUUGKnQ=) 2: N_Jul0j3jUL-F4iuEeP9lcen_ME.roa (hash: 68J7iK3pOuG8xYDdpx1Rr0BIzlJOCl0ODoQcNwpDaYs=) 3: WNTolADIm9VNsoqCozxJi_Sdj1g.roa (hash: dbLLv/tU+oB7TYkA/M9m2Fdt/qMi9LlERRpEMvrtzNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:05:26:2f:cb:bf:ce:82:5f:9a:95:44:7e:53:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Validity Not Before: Jan 25 03:01:01 2026 GMT Not After : Jan 26 03:01:01 2026 GMT Subject: CN=852e88a09190302042da4b7465d64983746040da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:d5:f1:d7:e2:d2:04:bb:16:37:1b:54:3e: 69:1f:ec:fb:69:2b:7f:90:bf:85:bf:7c:85:21:d4: 9b:c5:39:02:cb:19:71:86:2c:9f:30:35:be:82:35: 3d:67:31:df:dd:5d:77:79:e0:04:31:bd:e2:6a:b6: a2:ab:e0:c5:34:82:ef:79:3a:44:0b:2d:56:cb:c9: 67:13:a3:a4:93:41:89:d6:dc:b5:31:5e:bd:d6:2c: 2d:67:af:5c:51:17:35:38:26:07:2a:28:7e:75:04: 9d:8c:8e:19:b3:e6:5b:80:85:b6:c0:73:65:98:ee: c8:aa:c8:40:0e:90:b4:61:f6:e1:23:06:26:94:93: c8:94:e4:2b:3c:21:d9:19:1a:76:91:cf:2c:60:5b: 31:0c:b0:ee:58:2d:9f:bf:d9:50:db:5c:31:21:32: 3d:9c:fe:48:5c:2f:2b:25:46:c7:b3:f2:b6:b8:45: 2f:35:ff:4f:2e:06:28:dc:39:92:eb:bd:63:85:7d: cc:29:77:b3:39:9f:d6:39:90:2e:a6:96:dc:3a:9c: b6:ac:c5:03:93:1a:f7:d5:da:7f:82:06:f4:44:65: 6b:a8:2c:a9:da:b3:de:e8:4e:db:74:83:eb:15:f2: f0:63:33:20:ab:0e:b2:dd:c1:3b:41:eb:96:73:ab: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:88:A0:91:90:30:20:42:DA:4B:74:65:D6:49:83:74:60:40:DA X509v3 Authority Key Identifier: keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:89:d9:5d:60:ca:98:5c:19:21:6c:1b:69:13:3a:b5:c5:7b: da:c3:e0:cb:10:d4:c6:83:71:ea:40:a7:a8:4e:4b:4f:c1:f5: 0d:11:4d:ab:56:7e:c7:90:08:c3:d1:15:40:63:78:d2:62:71: 56:3d:45:e2:45:d5:fa:d8:25:03:70:4f:5d:bc:bd:26:50:47: 1a:9f:1c:8f:0d:c8:62:41:22:fd:63:0b:e2:36:cc:89:ef:11: 65:6b:a9:6f:a5:4c:0d:77:ab:00:cc:b7:8f:a6:6d:99:0d:d3: 48:b0:08:56:c0:17:2a:51:08:7d:fe:8b:98:29:a4:42:2a:bd: f8:4b:0a:c0:54:87:1b:7e:a9:c4:7f:05:4a:be:07:4a:90:e1: d4:21:aa:30:de:8c:00:b4:84:85:84:99:35:4a:df:31:25:51: 48:d3:e6:0f:dd:95:5f:e1:58:1f:02:a7:4f:ed:bd:ba:20:a1: 3b:00:57:90:1f:12:14:1a:fb:71:a1:4b:a6:f5:fa:03:78:27: ff:6e:1a:63:53:ab:88:50:1a:e4:cb:09:c8:ea:d4:61:a0:7f: fd:eb:18:e0:78:83:0e:22:75:2e:d3:42:29:bd:f7:e7:6b:48: cc:1a:09:a8:1a:c9:ce:4f:72:c9:64:ea:39:03:da:48:98:a3: 66:c6:49:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGQUmL8u/zoJfmpVEflOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2 OWIzZjUwHhcNMjYwMTI1MDMwMTAxWhcNMjYwMTI2MDMwMTAxWjAzMTEwLwYDVQQD Eyg4NTJlODhhMDkxOTAzMDIwNDJkYTRiNzQ2NWQ2NDk4Mzc0NjA0MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+fV8dfi0gS7FjcbVD5pH+z7aSt/ kL+Fv3yFIdSbxTkCyxlxhiyfMDW+gjU9ZzHf3V13eeAEMb3iaraiq+DFNILveTpE Cy1Wy8lnE6Okk0GJ1ty1MV691iwtZ69cURc1OCYHKih+dQSdjI4Zs+ZbgIW2wHNl mO7IqshADpC0YfbhIwYmlJPIlOQrPCHZGRp2kc8sYFsxDLDuWC2fv9lQ21wxITI9 nP5IXC8rJUbHs/K2uEUvNf9PLgYo3DmS671jhX3MKXezOZ/WOZAuppbcOpy2rMUD kxr31dp/ggb0RGVrqCyp2rPe6E7bdIPrFfLwYzMgqw6y3cE7QeuWc6vl+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUuiKCRkDAgQtpLdGXWSYN0YEDaMB8GA1UdIwQY MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2 LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARInZXWDK mFwZIWwbaRM6tcV72sPgyxDUxoNx6kCnqE5LT8H1DRFNq1Z+x5AIw9EVQGN40mJx Vj1F4kXV+tglA3BPXby9JlBHGp8cjw3IYkEi/WML4jbMie8RZWupb6VMDXerAMy3 j6ZtmQ3TSLAIVsAXKlEIff6LmCmkQiq9+EsKwFSHG36pxH8FSr4HSpDh1CGqMN6M ALSEhYSZNUrfMSVRSNPmD92VX+FYHwKnT+29uiChOwBXkB8SFBr7caFLpvX6A3gn /24aY1OriFAa5MsJyOrUYaB//esY4HiDDiJ1LtNCKb3352tIzBoJqBrJzk9yyWTq OQPaSJijZsZJEw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:18 2026 by rpki-client