This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json) Hash identifier: 5yl/oydpQ5mAjWb10niftHCZSt59/MlaNhdSzVsJyII= Subject key identifier: 07:39:97:73:3F:E5:CA:5D:80:B2:35:AE:62:CA:E5:80:22:3C:18:39 Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Certificate serial: 019BF5750A2CB1181C3AD5404B17445A3D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft Manifest number: 0EDE Signing time: Sun 25 Jan 2026 14:00:46 +0000 Manifest this update: Sun 25 Jan 2026 14:00:46 +0000 Manifest next update: Mon 26 Jan 2026 14:00:46 +0000 Files and hashes: 1: HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa (hash: N2c+1xmqIJ2oL3KdyPfmWmiUkJmY9BIkjqzElqkXBQ0=) 2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: nhCROqfIpMtKe/EpOGTDhjMMX8U5g7JvQCJEEYUgH/s=) 3: xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa (hash: 4iBkWP8qWume/2A2mXJkWl5EI5fYnKSC+vvo5StFXVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0a:2c:b1:18:1c:3a:d5:40:4b:17:44:5a:3d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Validity Not Before: Jan 25 14:00:46 2026 GMT Not After : Jan 26 14:00:46 2026 GMT Subject: CN=073997733fe5ca5d80b235ae62cae580223c1839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:f1:ab:51:30:e1:9a:93:bf:18:5b:e8:da: f7:36:6a:ab:f7:b6:73:a0:0d:19:d9:a7:a4:70:c9: d4:1c:ec:8a:18:94:44:02:98:01:41:57:9a:39:15: a3:d5:76:77:91:5a:55:24:56:9f:26:c4:0d:8d:96: 26:b2:9d:24:66:18:79:da:d7:8e:2f:89:6f:79:51: c8:03:4c:75:e7:a3:80:53:18:fc:13:b7:55:4f:08: 44:49:99:d5:87:3d:13:b0:4e:15:f3:e4:8c:0d:8d: 33:be:07:f0:dd:28:a7:c0:23:7b:ce:7f:0b:49:62: 82:d9:ff:4e:98:ef:ed:1c:21:2b:4f:fa:bf:7f:7b: 5d:29:0d:11:7e:10:12:49:f4:81:87:31:49:0c:c6: 72:4d:93:0a:c2:06:20:53:d3:12:38:f6:15:8e:e1: a9:47:3d:18:4b:c6:de:17:f5:d5:12:1a:4f:f3:29: fd:eb:5d:d3:2c:9c:bd:55:25:ba:2e:eb:61:ab:fe: 0e:aa:ca:5d:33:19:ab:c1:93:7e:01:70:2d:ce:2f: 47:ac:6e:35:35:fd:f8:0e:7a:76:a6:b4:63:82:68: d3:bc:f8:01:fb:e1:44:a9:cc:d0:fc:72:d8:28:ec: 2d:ec:55:96:2d:cf:68:3b:27:3a:bd:9e:74:46:0f: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:39:97:73:3F:E5:CA:5D:80:B2:35:AE:62:CA:E5:80:22:3C:18:39 X509v3 Authority Key Identifier: keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:2d:9e:69:af:7c:64:72:77:c7:e8:35:cb:19:dc:c8:5e:87: a2:26:9d:33:07:d5:75:66:f3:f6:51:af:37:99:ff:2b:c0:cb: c4:d5:29:ee:24:8b:5b:ca:dd:80:47:d5:37:52:75:46:d1:aa: b2:c3:41:d7:ce:02:df:89:df:7e:b8:77:67:bb:02:b5:9a:df: cf:ea:a7:db:1a:83:2e:ff:19:87:c2:0c:fd:53:ea:d4:59:42: b3:bd:7a:b7:b7:f8:26:77:46:64:5f:49:f7:92:74:05:73:8a: 28:89:58:19:0c:7c:9d:32:13:c2:aa:75:cd:d0:97:89:3a:d6: 65:21:e0:ea:f5:28:b0:82:50:7e:d0:b2:08:17:05:ef:5a:ad: 29:cf:26:a1:d0:bf:5f:82:ad:71:1c:91:2a:81:37:10:84:4e: a9:a2:4c:d3:ce:aa:ab:79:c0:e2:aa:ec:a7:f6:fa:f5:68:6b: 52:f7:43:12:47:a5:49:59:08:db:78:14:85:7c:67:99:29:b4: 9f:c6:18:2a:96:99:85:61:0f:0d:a3:2a:70:cb:d6:9d:d6:7b: b2:68:3e:84:51:59:ab:81:15:41:b8:47:c8:c4:b6:4e:18:bc: b6:c3:b5:09:f8:92:a1:40:1d:ea:e1:38:65:45:68:2f:01:29: 1e:e7:7d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQossRgcOtVASxdEWj1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDE5ODZlNjU1MWJiM2EwMTVhYzY0ZWQ2NzQ3YzIzNGIy YTc5ZTAwHhcNMjYwMTI1MTQwMDQ2WhcNMjYwMTI2MTQwMDQ2WjAzMTEwLwYDVQQD EygwNzM5OTc3MzNmZTVjYTVkODBiMjM1YWU2MmNhZTU4MDIyM2MxODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPxq1Ew4ZqTvxhb6Nr3Nmqr97Zz oA0Z2aekcMnUHOyKGJREApgBQVeaORWj1XZ3kVpVJFafJsQNjZYmsp0kZhh52teO L4lveVHIA0x156OAUxj8E7dVTwhESZnVhz0TsE4V8+SMDY0zvgfw3SinwCN7zn8L SWKC2f9OmO/tHCErT/q/f3tdKQ0RfhASSfSBhzFJDMZyTZMKwgYgU9MSOPYVjuGp Rz0YS8beF/XVEhpP8yn9613TLJy9VSW6Luthq/4OqspdMxmrwZN+AXAtzi9HrG41 Nf34Dnp2prRjgmjTvPgB++FEqczQ/HLYKOwt7FWWLc9oOyc6vZ50Rg+Y+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAc5l3M/5cpdgLI1rmLK5YAiPBg5MB8GA1UdIwQY MBaAFB4BmG5lUbs6AVrGTtZ0fCNLKnngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt ZmY4ZjU1NDVlYmEyLzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy LzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzS2eaa98 ZHJ3x+g1yxncyF6HoiadMwfVdWbz9lGvN5n/K8DLxNUp7iSLW8rdgEfVN1J1RtGq ssNB184C34nffrh3Z7sCtZrfz+qn2xqDLv8Zh8IM/VPq1FlCs716t7f4JndGZF9J 95J0BXOKKIlYGQx8nTITwqp1zdCXiTrWZSHg6vUosIJQftCyCBcF71qtKc8modC/ X4KtcRyRKoE3EIROqaJM086qq3nA4qrsp/b69WhrUvdDEkelSVkI23gUhXxnmSm0 n8YYKpaZhWEPDaMqcMvWndZ7smg+hFFZq4EVQbhHyMS2Thi8tsO1CfiSoUAd6uE4 ZUVoLwEpHud99Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:29 2026 by rpki-client