This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json) Hash identifier: DOr/JcRYfRDQrTEB2F8+au4KRT5a+paDGaW2xWknxWg= Subject key identifier: 4C:EE:4F:FE:61:24:18:5C:7F:DE:BB:A4:84:BA:47:72:2C:FB:3B:67 Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b Certificate serial: 019BF83F46567A718BBBF008B28D94A87190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft Manifest number: 0DF2 Signing time: Mon 26 Jan 2026 03:00:54 +0000 Manifest this update: Mon 26 Jan 2026 03:00:54 +0000 Manifest next update: Tue 27 Jan 2026 03:00:54 +0000 Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=) 2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: +AtVX+2zWybSimGW6N939ZqwLCw1nPyfvIrpX7ogodg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:46:56:7a:71:8b:bb:f0:08:b2:8d:94:a8:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b Validity Not Before: Jan 26 03:00:54 2026 GMT Not After : Jan 27 03:00:54 2026 GMT Subject: CN=4cee4ffe6124185c7fdebba484ba47722cfb3b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:49:ca:df:b5:96:d9:c1:e6:fb:1e:bd:7b: c6:29:e4:6d:e1:16:68:99:b6:c6:43:5c:23:26:df: 48:3d:89:a2:c4:98:e1:be:01:17:f2:93:de:fa:f2: 94:4b:ac:9c:0a:4f:b7:5b:fc:9b:07:19:40:9c:a4: a7:68:d6:f5:e4:4a:18:85:ac:ba:39:c6:93:37:8b: 54:d4:17:cf:69:85:30:60:b5:74:7f:5d:79:22:f8: 4d:43:65:67:a0:55:59:4c:2b:04:26:cf:0f:5f:04: 2e:83:82:6a:ac:aa:5b:46:6d:7a:88:b8:42:7d:1e: 51:6f:5d:88:19:ad:de:e6:93:5e:ba:2d:22:3e:ee: af:73:9f:85:6b:37:e8:44:70:2e:98:ae:8e:f1:6a: c4:29:0a:00:ad:5b:24:cc:23:38:64:e0:4e:ec:d5: 6b:12:95:5f:32:bb:f2:a8:e8:27:6a:ca:9a:9f:14: 0f:4d:4f:81:47:fe:16:f7:e6:d0:07:ee:6e:99:d2: 0c:9b:6a:3b:51:01:79:81:91:7c:fd:6b:fd:dc:51: d5:65:5e:c7:29:d4:33:c2:ad:36:11:48:e4:14:fc: 32:97:18:dc:df:f4:f7:e6:4d:75:18:24:65:76:ef: 9e:72:1f:1b:2a:7b:ff:e2:56:89:03:ca:19:aa:30: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EE:4F:FE:61:24:18:5C:7F:DE:BB:A4:84:BA:47:72:2C:FB:3B:67 X509v3 Authority Key Identifier: keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c6:ab:dd:a4:43:4b:f0:7b:c2:3b:39:85:54:5a:ca:03:59: a2:14:83:d5:33:a3:c3:b4:37:62:59:3a:7c:4a:55:9e:ab:39: 59:68:3d:df:0e:85:c3:22:fd:ca:82:ac:25:f6:7b:1f:95:5e: ba:cf:7f:16:f1:c9:27:97:31:06:ef:22:e1:5d:be:c4:0e:c0: 18:7d:31:04:21:90:70:ab:6a:69:3d:a0:0b:1d:0a:6f:fa:11: 11:8d:a9:1e:97:bd:87:9d:5f:46:32:17:e7:35:d7:15:10:31: 78:ce:c0:6d:4f:cb:49:03:74:e9:e0:e8:f6:11:27:49:07:95: da:61:45:a8:db:11:9f:cf:1b:b4:d2:d3:40:42:c6:72:c8:e9: cb:6a:a5:f5:07:6c:7a:4f:ca:5b:65:82:2d:d2:00:81:52:3e: a7:03:d7:e9:d0:87:ef:71:8e:06:d4:3a:cd:c5:b7:a9:d0:d4: 13:49:48:e2:28:60:92:77:b6:81:6b:42:17:fd:55:a5:75:0f: ff:80:0e:98:d8:38:fa:24:3e:2a:32:dd:c5:8a:72:b1:f1:1c: ec:1e:74:99:19:f3:06:b8:49:17:35:d1:99:1e:4a:d3:e3:e2: f2:be:9f:d4:1f:6a:8d:8a:c8:6b:42:00:56:89:b8:c3:28:2b: 0c:e2:a0:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P0ZWenGLu/AIso2UqHGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTFmOGE2YjI4M2I1MjYwNGQ5MzJhMjU4OTNiODY0MDQx MjFlOGIwHhcNMjYwMTI2MDMwMDU0WhcNMjYwMTI3MDMwMDU0WjAzMTEwLwYDVQQD Eyg0Y2VlNGZmZTYxMjQxODVjN2ZkZWJiYTQ4NGJhNDc3MjJjZmIzYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJlJyt+1ltnB5vsevXvGKeRt4RZo mbbGQ1wjJt9IPYmixJjhvgEX8pPe+vKUS6ycCk+3W/ybBxlAnKSnaNb15EoYhay6 OcaTN4tU1BfPaYUwYLV0f115IvhNQ2VnoFVZTCsEJs8PXwQug4JqrKpbRm16iLhC fR5Rb12IGa3e5pNeui0iPu6vc5+FazfoRHAumK6O8WrEKQoArVskzCM4ZOBO7NVr EpVfMrvyqOgnasqanxQPTU+BR/4W9+bQB+5umdIMm2o7UQF5gZF8/Wv93FHVZV7H KdQzwq02EUjkFPwylxjc3/T35k11GCRldu+ech8bKnv/4laJA8oZqjDYDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzuT/5hJBhcf967pIS6R3Is+ztnMB8GA1UdIwQY MBaAFB4R+Kayg7UmBNkyoliTuGQEEh6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQt MWE1OTMxOTRjNzk4LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQtMWE1OTMxOTRjNzk4 LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8ar3aRD S/B7wjs5hVRaygNZohSD1TOjw7Q3Ylk6fEpVnqs5WWg93w6FwyL9yoKsJfZ7H5Ve us9/FvHJJ5cxBu8i4V2+xA7AGH0xBCGQcKtqaT2gCx0Kb/oREY2pHpe9h51fRjIX 5zXXFRAxeM7AbU/LSQN06eDo9hEnSQeV2mFFqNsRn88btNLTQELGcsjpy2ql9Qds ek/KW2WCLdIAgVI+pwPX6dCH73GOBtQ6zcW3qdDUE0lI4ihgkne2gWtCF/1VpXUP /4AOmNg4+iQ+KjLdxYpysfEc7B50mRnzBrhJFzXRmR5K0+Pi8r6f1B9qjYrIa0IA Vom4wygrDOKgaA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:01 2026 by rpki-client