This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json) Hash identifier: 9X4HgDP6vNKjzEuZj4ntluDy0KGj0d5iVy8AB5P94Bc= Subject key identifier: 7C:D7:3A:84:4D:C8:64:CA:37:21:72:9F:5F:4D:C3:28:2D:90:F9:4A Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Certificate serial: 019BF7638E30B458A50AF138A7637AB59851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft Manifest number: 0E92 Signing time: Sun 25 Jan 2026 23:00:55 +0000 Manifest this update: Sun 25 Jan 2026 23:00:55 +0000 Manifest next update: Mon 26 Jan 2026 23:00:55 +0000 Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: VLd+xO38p+fsdpfaUdVg6fyYm0FfBD5HL4t82WH7A9M=) 2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8e:30:b4:58:a5:0a:f1:38:a7:63:7a:b5:98:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Validity Not Before: Jan 25 23:00:55 2026 GMT Not After : Jan 26 23:00:55 2026 GMT Subject: CN=7cd73a844dc864ca3721729f5f4dc3282d90f94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:c3:b0:30:23:23:74:70:fc:ac:f8:0e:52: 4f:f5:f6:e8:99:32:28:61:23:8f:6a:53:9b:30:4d: 80:75:5c:9c:71:0c:4b:77:4b:34:eb:cc:ff:01:9b: 5d:e1:42:83:6d:38:5c:88:fe:23:a2:20:5b:7f:1e: 4a:26:95:85:9f:a8:d0:b9:0e:28:84:72:99:22:64: 34:ae:2f:18:11:c1:25:41:e5:5c:98:02:84:d6:09: 57:67:bd:29:6e:60:8a:41:9e:52:d0:28:4d:c9:de: a6:ca:1e:01:9f:d5:d5:62:4f:16:8a:2f:65:40:46: b9:ee:35:4c:07:7f:9d:78:e6:22:32:b7:e0:d8:44: 56:0a:50:a0:69:1e:ec:8d:04:b8:3b:dd:6c:ce:71: 12:b5:92:58:40:46:3f:04:6a:3f:06:0f:df:fb:67: 54:db:07:b8:9d:41:a4:77:e3:3e:8b:6a:64:d5:3d: b0:96:bb:d5:14:57:2b:1e:9e:cb:5b:a3:77:d5:93: 26:6e:8a:76:47:c3:1c:11:8d:26:db:38:4d:a8:f1: 9a:b4:9a:48:af:10:52:1f:c8:3f:c9:d9:dd:ff:97: bd:da:56:c3:6c:c4:fc:a8:8a:4f:c8:2c:20:7a:be: 51:da:1b:c6:8f:7b:55:f9:fb:e2:10:b0:f7:80:12: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:3A:84:4D:C8:64:CA:37:21:72:9F:5F:4D:C3:28:2D:90:F9:4A X509v3 Authority Key Identifier: keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:69:a6:5f:2f:8a:e1:69:d4:56:91:b5:0c:88:5c:1c:2b:2d: bc:d0:16:a5:22:54:0e:07:4f:c7:d4:d5:e5:4b:2f:15:53:72: 6c:5b:11:9a:70:0b:5b:8d:42:66:85:de:7b:b1:44:d1:ad:70: f7:01:36:bb:12:44:37:9e:e9:36:b2:1a:20:1c:6c:7b:1a:d4: 7f:a2:a7:c1:c4:f4:ee:b1:f5:01:06:3a:2a:22:ff:17:55:79: 75:1d:b2:49:b5:c5:cb:e8:ee:55:90:80:63:db:d5:10:d3:e4: ea:c7:f5:d3:f0:7b:c5:33:3a:27:ff:50:66:f7:22:9b:1c:74: ee:dc:e5:ff:9e:f2:f3:86:6e:28:86:20:2f:da:61:d5:3f:32: cd:ef:ee:ac:ce:ba:77:0c:2a:dc:f7:b9:68:ef:a8:23:f4:6b: 83:b9:45:61:00:63:b6:e3:23:75:a5:0a:48:b7:87:63:34:f5: 70:60:6c:0f:99:e5:0b:24:5d:de:38:48:78:00:06:6f:16:31: fe:96:f8:8d:69:37:a9:a3:94:5b:15:2d:9b:98:e5:68:6c:df: 0b:bb:34:19:50:66:96:2f:51:8b:90:68:e9:b3:61:90:c4:35: 8c:80:3b:5d:cf:34:10:72:5c:3c:70:b5:83:d4:35:92:25:8b: a7:55:32:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y44wtFilCvE4p2N6tZhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYjk5YzEyMGVjOTk0ZjNiNzBkYmZjNWUwMTlhMmU4YjE4 N2NkMGMwHhcNMjYwMTI1MjMwMDU1WhcNMjYwMTI2MjMwMDU1WjAzMTEwLwYDVQQD Eyg3Y2Q3M2E4NDRkYzg2NGNhMzcyMTcyOWY1ZjRkYzMyODJkOTBmOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokPDsDAjI3Rw/Kz4DlJP9fbomTIo YSOPalObME2AdVyccQxLd0s068z/AZtd4UKDbThciP4joiBbfx5KJpWFn6jQuQ4o hHKZImQ0ri8YEcElQeVcmAKE1glXZ70pbmCKQZ5S0ChNyd6myh4Bn9XVYk8Wii9l QEa57jVMB3+deOYiMrfg2ERWClCgaR7sjQS4O91sznEStZJYQEY/BGo/Bg/f+2dU 2we4nUGkd+M+i2pk1T2wlrvVFFcrHp7LW6N31ZMmbop2R8McEY0m2zhNqPGatJpI rxBSH8g/ydnd/5e92lbDbMT8qIpPyCwger5R2hvGj3tV+fviELD3gBLZBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzXOoRNyGTKNyFyn19NwygtkPlKMB8GA1UdIwQY MBaAFB65nBIOyZTztw2/xeAZouixh80MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQt YTliODhmZGFiNjY4LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQtYTliODhmZGFiNjY4 LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGmmXy+K 4WnUVpG1DIhcHCstvNAWpSJUDgdPx9TV5UsvFVNybFsRmnALW41CZoXee7FE0a1w 9wE2uxJEN57pNrIaIBxsexrUf6KnwcT07rH1AQY6KiL/F1V5dR2ySbXFy+juVZCA Y9vVENPk6sf10/B7xTM6J/9QZvcimxx07tzl/57y84ZuKIYgL9ph1T8yze/urM66 dwwq3Pe5aO+oI/Rrg7lFYQBjtuMjdaUKSLeHYzT1cGBsD5nlCyRd3jhIeAAGbxYx /pb4jWk3qaOUWxUtm5jlaGzfC7s0GVBmli9Ri5Bo6bNhkMQ1jIA7Xc80EHJcPHC1 g9Q1kiWLp1Uy7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:55 2026 by rpki-client