This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json) Hash identifier: tgxay8Vuv8SO5FlunbbbHaDwFzTEmUHwLqLMAOSOkUM= Subject key identifier: 7D:2D:95:C6:33:DA:58:2B:37:20:F3:22:95:A2:42:F3:D7:79:8A:29 Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Certificate serial: 019BF9F6AE950EC9337F1FA789086750D20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 11:00:51 +0000 Manifest this update: Mon 26 Jan 2026 11:00:51 +0000 Manifest next update: Tue 27 Jan 2026 11:00:51 +0000 Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: Tw0BqfKf6ymQIL5MUjGI87dy9WiRwuGNE5Z7TGd3f+I=) 2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:ae:95:0e:c9:33:7f:1f:a7:89:08:67:50:d2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Validity Not Before: Jan 26 11:00:51 2026 GMT Not After : Jan 27 11:00:51 2026 GMT Subject: CN=7d2d95c633da582b3720f32295a242f3d7798a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:82:6f:49:6d:f4:75:36:90:e3:a4:28:e3: 37:e7:d7:0a:92:2c:20:ec:72:35:de:7d:8c:a7:0d: 3e:c0:59:81:7a:65:13:3e:6f:9e:98:38:b8:a7:2c: dd:bc:a2:77:3e:fd:e7:76:30:61:3e:ef:85:c6:c8: e7:57:aa:e2:eb:d0:41:bc:b0:78:61:ce:bf:cb:d0: 0f:85:a5:44:69:fc:e7:a2:c6:e5:02:b4:9a:72:1d: c5:60:1b:94:24:d3:db:df:63:a8:d1:db:c3:64:87: 79:a7:61:d5:e4:b8:3f:24:7a:b2:ae:be:14:98:89: f7:f8:a5:16:07:f9:a5:d3:5c:b6:dd:58:e6:65:e7: 7a:5f:77:dd:61:90:16:5c:78:2b:cc:6c:3b:10:7c: 80:44:9e:21:2d:3d:41:99:b2:b5:7a:11:f8:f1:73: 27:c6:32:ef:83:8d:d3:38:b3:10:5a:06:0c:37:27: be:0b:d5:da:05:8e:24:98:21:88:ce:71:ab:68:97: 76:0a:f1:3f:44:09:0a:61:a4:6f:1e:0b:08:de:00: d6:d7:21:fb:7d:06:e9:93:14:9f:4d:35:3b:e8:9f: 6d:5c:e9:69:29:ef:46:c3:7d:d8:53:4d:f3:57:55: ee:41:5b:3a:df:29:d3:75:e4:94:e6:b0:b0:84:98: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2D:95:C6:33:DA:58:2B:37:20:F3:22:95:A2:42:F3:D7:79:8A:29 X509v3 Authority Key Identifier: keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b5:53:9c:50:5e:ea:fa:3b:b9:e9:86:8e:22:9b:1c:72:00: 90:51:89:4a:b3:45:ba:0e:80:a3:2f:64:82:53:f2:e6:cf:61: cc:64:6a:0e:58:a1:4e:2d:7d:fa:90:12:43:03:5b:24:7c:89: 7e:11:ee:ca:36:1e:79:40:d0:74:cd:5a:08:16:88:26:7f:f1: 30:07:b3:48:59:47:30:fa:a5:ee:18:e8:af:e2:25:35:92:5b: f9:29:7d:28:a7:b1:8a:e7:b0:97:ed:67:f7:e1:05:24:03:64: 42:fb:09:38:d4:43:d8:bf:17:1a:b5:83:67:3b:12:17:1f:0a: a5:e1:2c:4b:0e:ee:45:9c:a3:c2:a5:71:e7:50:95:28:27:be: fb:f4:10:65:39:7a:eb:ea:61:ad:c1:7d:84:19:b4:60:db:9e: cb:35:4e:8a:1d:08:b0:0d:60:8c:93:1e:82:72:7a:f3:9a:af: 40:41:d0:b0:4b:e8:39:0f:bf:b7:df:e9:5d:f9:08:21:4b:19: b3:84:f6:11:f7:04:00:8a:08:54:d6:3d:b7:0d:23:82:72:fb: 8b:57:a6:3a:77:09:8a:59:53:be:13:eb:e4:37:bf:80:38:a5: a4:41:00:a4:c1:7b:1d:e5:6b:f9:15:01:82:4d:94:86:95:ed: a7:b9:31:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59q6VDskzfx+niQhnUNIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3 OTc2YWMwHhcNMjYwMTI2MTEwMDUxWhcNMjYwMTI3MTEwMDUxWjAzMTEwLwYDVQQD Eyg3ZDJkOTVjNjMzZGE1ODJiMzcyMGYzMjI5NWEyNDJmM2Q3Nzk4YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSGCb0lt9HU2kOOkKOM359cKkiwg 7HI13n2Mpw0+wFmBemUTPm+emDi4pyzdvKJ3Pv3ndjBhPu+FxsjnV6ri69BBvLB4 Yc6/y9APhaVEafznosblArSach3FYBuUJNPb32Oo0dvDZId5p2HV5Lg/JHqyrr4U mIn3+KUWB/ml01y23VjmZed6X3fdYZAWXHgrzGw7EHyARJ4hLT1BmbK1ehH48XMn xjLvg43TOLMQWgYMNye+C9XaBY4kmCGIznGraJd2CvE/RAkKYaRvHgsI3gDW1yH7 fQbpkxSfTTU76J9tXOlpKe9Gw33YU03zV1XuQVs63ynTdeSU5rCwhJglywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0tlcYz2lgrNyDzIpWiQvPXeYopMB8GA1UdIwQY MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7VTnFBe 6vo7uemGjiKbHHIAkFGJSrNFug6Aoy9kglPy5s9hzGRqDlihTi19+pASQwNbJHyJ fhHuyjYeeUDQdM1aCBaIJn/xMAezSFlHMPql7hjor+IlNZJb+Sl9KKexiuewl+1n 9+EFJANkQvsJONRD2L8XGrWDZzsSFx8KpeEsSw7uRZyjwqVx51CVKCe++/QQZTl6 6+phrcF9hBm0YNueyzVOih0IsA1gjJMegnJ685qvQEHQsEvoOQ+/t9/pXfkIIUsZ s4T2EfcEAIoIVNY9tw0jgnL7i1emOncJillTvhPr5De/gDilpEEApMF7HeVr+RUB gk2UhpXtp7kxuA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:26 2026 by rpki-client