This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json) Hash identifier: EOrWdGHKfqelRb3zVM5IFPUgtFzvXUTyo2nAUR6om8I= Subject key identifier: F9:34:4A:9C:27:7D:79:1A:EF:ED:A7:4C:E5:2C:5F:BE:8A:18:3A:9A Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Certificate serial: 019BF6516898E3D9AE1F2DFCDC80D810D893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft Manifest number: 174F Signing time: Sun 25 Jan 2026 18:01:28 +0000 Manifest this update: Sun 25 Jan 2026 18:01:28 +0000 Manifest next update: Mon 26 Jan 2026 18:01:28 +0000 Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: HnkZWdeoxf2IxMbSbEZASWo+lVqCV5mt+mwB2njHnFU=) 2: J-Al8qEAjQvOqUSJW7LJw04Fukc.roa (hash: nPb+yknouPfoljMRTiffVRamSXybT5BjPnR3oDRUAko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:68:98:e3:d9:ae:1f:2d:fc:dc:80:d8:10:d8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Validity Not Before: Jan 25 18:01:28 2026 GMT Not After : Jan 26 18:01:28 2026 GMT Subject: CN=f9344a9c277d791aefeda74ce52c5fbe8a183a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:6e:09:65:97:69:7c:b7:82:83:05:76:6f: 49:6e:51:fd:a4:3b:80:8d:6b:69:04:56:20:1e:5c: 0e:da:8e:4d:96:af:15:fb:c0:b9:5b:6d:bf:da:ba: fe:d6:27:23:c2:2c:75:56:51:dc:d4:7a:98:90:b7: ce:e5:61:e0:4a:bf:2d:06:84:60:64:a2:6a:2b:04: 37:25:ca:2a:86:a7:50:55:ea:10:b1:7d:96:b9:cc: 7a:bc:b9:f8:ca:83:46:ce:9e:6c:bc:2c:ab:fc:c7: 0b:b0:f3:1e:7e:68:5c:67:81:72:df:a8:b2:f8:5c: b8:75:d6:f1:17:8e:bb:b8:45:60:4a:c9:a7:f1:41: 04:73:d3:db:0a:97:73:62:1e:e8:48:c1:09:b8:dd: 8e:84:4f:cc:02:82:f8:87:63:1e:57:35:c1:e2:0d: 00:85:4b:4a:8d:6a:2b:82:24:b3:c5:03:fb:23:54: 18:3a:9d:f1:64:71:96:d0:27:ca:80:aa:93:13:93: d0:e1:d9:f4:a4:7c:c3:54:88:b1:6f:50:43:a1:65: 02:f3:db:dc:b0:e9:17:f7:f8:1b:8b:c0:1d:b6:e2: ac:dd:1c:c7:7f:47:fc:45:67:9f:29:14:c6:8b:44: b0:5b:cb:06:ad:2d:b8:32:b8:ca:a7:8a:d4:c1:15: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:4A:9C:27:7D:79:1A:EF:ED:A7:4C:E5:2C:5F:BE:8A:18:3A:9A X509v3 Authority Key Identifier: keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8b:c4:1a:41:9e:cc:7b:94:1a:07:32:de:1d:ed:e2:83:99: d7:91:3a:9b:ab:a4:28:b5:a0:38:38:9d:a4:87:b4:c4:8f:dd: f6:9c:20:2d:04:56:ed:85:2f:e4:1e:5a:35:cf:da:46:12:2e: 69:66:79:db:18:e7:2e:46:b3:4d:8f:82:4f:7e:9a:7c:0e:91: 0e:f4:2f:5a:09:ac:7a:55:55:7b:f6:dd:a6:78:7f:64:78:f8: a4:6b:5a:26:88:e7:91:0a:5b:0d:ed:63:65:6f:3a:c5:46:e4: 07:6d:05:f5:7b:51:d8:40:ac:fc:bc:ff:2d:86:8d:6e:b7:0b: 24:a2:4b:df:f5:7f:be:ce:d9:10:26:5a:7a:f5:32:62:f9:a6: 28:23:b8:b1:5e:c0:02:f8:85:00:09:c6:b6:60:4c:a1:6e:01: ab:78:d5:93:41:e5:32:29:1d:7b:9a:07:a9:27:a2:32:db:74: 82:b1:b6:61:b3:8e:a3:e0:f3:15:1c:e2:24:28:96:a8:bb:1c: 0f:db:7d:80:a0:87:c7:fd:af:90:5d:d3:73:76:39:0e:26:62: f8:50:b6:cd:e0:11:9a:4b:d2:34:88:96:37:4d:fe:fc:b6:14: e7:e4:01:7e:d2:93:a3:0a:6c:94:8f:89:5b:6c:a7:6f:e6:ba: 78:25:b1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UWiY49muHy383IDYENiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDhiMjVjY2VhYzM4Yzk5MzcyYmY3MmIwMGM2YzhiNjQx OGU5MjMwHhcNMjYwMTI1MTgwMTI4WhcNMjYwMTI2MTgwMTI4WjAzMTEwLwYDVQQD EyhmOTM0NGE5YzI3N2Q3OTFhZWZlZGE3NGNlNTJjNWZiZThhMTgzYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmspuCWWXaXy3goMFdm9JblH9pDuA jWtpBFYgHlwO2o5Nlq8V+8C5W22/2rr+1icjwix1VlHc1HqYkLfO5WHgSr8tBoRg ZKJqKwQ3JcoqhqdQVeoQsX2Wucx6vLn4yoNGzp5svCyr/McLsPMefmhcZ4Fy36iy +Fy4ddbxF467uEVgSsmn8UEEc9PbCpdzYh7oSMEJuN2OhE/MAoL4h2MeVzXB4g0A hUtKjWorgiSzxQP7I1QYOp3xZHGW0CfKgKqTE5PQ4dn0pHzDVIixb1BDoWUC89vc sOkX9/gbi8AdtuKs3RzHf0f8RWefKRTGi0SwW8sGrS24MrjKp4rUwRUA0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk0SpwnfXka7+2nTOUsX76KGDqaMB8GA1UdIwQY MBaAFBzYslzOrDjJk3K/crAMbItkGOkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEt MTk2MzNmMDhlZDZhLzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEtMTk2MzNmMDhlZDZh LzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4vEGkGe zHuUGgcy3h3t4oOZ15E6m6ukKLWgODidpIe0xI/d9pwgLQRW7YUv5B5aNc/aRhIu aWZ52xjnLkazTY+CT36afA6RDvQvWgmselVVe/bdpnh/ZHj4pGtaJojnkQpbDe1j ZW86xUbkB20F9XtR2ECs/Lz/LYaNbrcLJKJL3/V/vs7ZECZaevUyYvmmKCO4sV7A AviFAAnGtmBMoW4Bq3jVk0HlMikde5oHqSeiMtt0grG2YbOOo+DzFRziJCiWqLsc D9t9gKCHx/2vkF3Tc3Y5DiZi+FC2zeARmkvSNIiWN03+/LYU5+QBftKTowpslI+J W2ynb+a6eCWx7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:46 2026 by rpki-client