This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json) Hash identifier: Ad/4BHV2tZTJ3J7k9ESlJgudPy/rpto74pdBct662tY= Subject key identifier: E3:16:C8:23:EB:F0:1B:0A:C9:CF:13:27:5B:45:C3:C3:6F:F3:6A:40 Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Certificate serial: 019BF8081186F8FB77B9EEEE17DA39916D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 02:00:36 +0000 Manifest this update: Mon 26 Jan 2026 02:00:36 +0000 Manifest next update: Tue 27 Jan 2026 02:00:36 +0000 Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: GXX5o2AG6OPH4GygBP4SufrII0EEE3cP1c7VcxB1KRo=) 2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:11:86:f8:fb:77:b9:ee:ee:17:da:39:91:6d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Validity Not Before: Jan 26 02:00:36 2026 GMT Not After : Jan 27 02:00:36 2026 GMT Subject: CN=e316c823ebf01b0ac9cf13275b45c3c36ff36a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:07:33:ea:0f:a6:25:e8:b9:b0:dc:e6:30: a5:b1:42:89:f2:cd:92:76:34:a8:e6:bc:a8:22:6d: c9:f5:74:8f:1f:11:25:7b:dd:5d:d1:9b:0d:f4:af: b8:fb:b1:06:17:3f:f9:15:d4:f3:71:6e:ff:c8:70: 85:50:f1:87:30:60:46:60:a9:e8:17:bd:27:a9:78: b3:a5:15:67:6f:69:84:89:36:e0:02:8c:d3:27:57: d3:2b:bb:bb:09:22:6a:1f:58:c8:33:77:9a:5d:12: f8:13:a2:6d:06:db:6e:a7:76:bc:50:68:86:5a:a0: 63:3a:24:64:92:9b:83:4c:66:43:0f:ba:7e:1e:ba: eb:3f:f0:b2:d4:a5:c9:ee:05:20:7d:de:67:e9:73: 78:ca:cb:ee:c6:ef:c7:cf:24:cf:7f:99:df:c0:c9: 22:32:c8:c7:06:55:56:dc:11:9d:20:16:45:8f:6d: 45:e3:b7:b8:10:ba:12:0d:32:22:87:ad:ef:53:1b: bd:4a:5f:8b:08:50:fa:b1:e2:41:5a:0e:dd:84:8b: e7:78:0b:17:f5:68:4e:d2:d0:aa:1b:4f:1e:5b:47: e1:04:94:a1:1e:12:a6:be:76:38:a7:3f:5d:d7:b9: b8:01:dc:2f:aa:80:46:ea:a5:6f:44:6f:b8:b2:e9: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:C8:23:EB:F0:1B:0A:C9:CF:13:27:5B:45:C3:C3:6F:F3:6A:40 X509v3 Authority Key Identifier: keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:89:32:26:bd:4c:f4:1f:6d:8b:26:64:23:1b:b0:52:8e:4a: 87:26:10:40:ab:f8:9e:52:6e:71:85:e3:d0:92:8f:a3:1b:ac: 1e:8f:c2:e3:10:69:83:21:1b:b7:58:0c:76:e6:a4:66:d1:dd: 96:ee:9b:f3:a2:72:ed:11:57:f8:9d:c1:0b:01:09:ef:e4:9f: 5e:cc:a4:96:ee:47:9e:35:5b:14:0e:27:63:ff:f1:39:a7:4f: e7:4a:4f:05:e4:d0:09:03:53:3a:11:68:45:bb:25:81:b6:ea: 58:a4:c2:9c:d2:c2:f6:90:2e:10:71:da:e9:c1:60:72:c0:47: 84:0b:1e:b0:89:7b:72:cc:f7:15:a9:60:5a:93:73:5e:7f:b0: 60:10:9c:a0:a9:17:8a:20:6b:89:39:7b:1b:a5:ed:8a:25:4b: 89:97:da:97:fa:2d:3a:60:2c:b7:b1:eb:7f:99:70:c3:02:f3: bd:39:16:9b:95:c3:00:65:42:47:95:0a:38:07:3a:48:a1:b8: 5f:47:89:b5:02:69:d2:cc:2f:1d:06:ca:49:ca:33:b2:32:2b: a7:a7:1e:cc:d2:6e:c9:5c:ff:3c:7e:bc:39:b3:fa:0d:4b:5c: cf:87:44:36:58:6b:3c:17:5d:09:57:13:c8:1a:0c:6d:5e:39: f8:d1:6e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBGG+Pt3ue7uF9o5kW11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3 OTc2YWMwHhcNMjYwMTI2MDIwMDM2WhcNMjYwMTI3MDIwMDM2WjAzMTEwLwYDVQQD EyhlMzE2YzgyM2ViZjAxYjBhYzljZjEzMjc1YjQ1YzNjMzZmZjM2YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs90HM+oPpiXoubDc5jClsUKJ8s2S djSo5ryoIm3J9XSPHxEle91d0ZsN9K+4+7EGFz/5FdTzcW7/yHCFUPGHMGBGYKno F70nqXizpRVnb2mEiTbgAozTJ1fTK7u7CSJqH1jIM3eaXRL4E6JtBttup3a8UGiG WqBjOiRkkpuDTGZDD7p+HrrrP/Cy1KXJ7gUgfd5n6XN4ysvuxu/HzyTPf5nfwMki MsjHBlVW3BGdIBZFj21F47e4ELoSDTIih63vUxu9Sl+LCFD6seJBWg7dhIvneAsX 9WhO0tCqG08eW0fhBJShHhKmvnY4pz9d17m4AdwvqoBG6qVvRG+4sulC5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMWyCPr8BsKyc8TJ1tFw8Nv82pAMB8GA1UdIwQY MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAokyJr1M 9B9tiyZkIxuwUo5KhyYQQKv4nlJucYXj0JKPoxusHo/C4xBpgyEbt1gMduakZtHd lu6b86Jy7RFX+J3BCwEJ7+SfXsyklu5HnjVbFA4nY//xOadP50pPBeTQCQNTOhFo RbslgbbqWKTCnNLC9pAuEHHa6cFgcsBHhAsesIl7csz3FalgWpNzXn+wYBCcoKkX iiBriTl7G6XtiiVLiZfal/otOmAst7Hrf5lwwwLzvTkWm5XDAGVCR5UKOAc6SKG4 X0eJtQJp0swvHQbKScozsjIrp6cezNJuyVz/PH68ObP6DUtcz4dENlhrPBddCVcT yBoMbV45+NFuug== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:36 2026 by rpki-client