This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json) Hash identifier: xNpgt5oCgtofLDyzyh7JT7mbeNu3O38osnuvJTrjZCg= Subject key identifier: CE:7F:E8:60:E8:E1:F4:7D:25:E7:4E:0E:D8:B1:E8:9E:1C:24:C4:23 Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Certificate serial: 019BF988A5A6FAB7FB237F7F6C377F99E8FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft Manifest number: 0D44 Signing time: Mon 26 Jan 2026 09:00:40 +0000 Manifest this update: Mon 26 Jan 2026 09:00:40 +0000 Manifest next update: Tue 27 Jan 2026 09:00:40 +0000 Files and hashes: 1: 9oyMDlFUMJCEeicvl7UFwOHgYsE.roa (hash: f8s6l8eBEajunCZ6gmMPJ0g+5TCwQ3SpFosYHbC5O4E=) 2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: 0lCxzIeeBJEvOsNaDx7rGA+/q8EYfELRceqyjc67rzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:a5:a6:fa:b7:fb:23:7f:7f:6c:37:7f:99:e8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Validity Not Before: Jan 26 09:00:40 2026 GMT Not After : Jan 27 09:00:40 2026 GMT Subject: CN=ce7fe860e8e1f47d25e74e0ed8b1e89e1c24c423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:4e:e6:16:19:1d:f0:71:07:c7:f0:a8:9d: e9:d4:21:dd:79:d8:57:d7:57:b0:e5:12:34:2c:90: 0f:88:91:12:4c:10:13:10:82:3d:62:29:02:9d:2c: 17:b9:de:64:3c:18:a8:cf:bf:2c:0f:b3:43:1b:d3: 1d:5a:86:e6:4e:f0:28:3d:c3:19:71:6e:7a:e4:be: 75:68:19:ac:e6:00:3e:af:be:26:f8:cf:02:7b:37: 5c:25:ab:5a:62:92:99:7e:fe:4c:42:06:38:ee:d4: 95:aa:83:e7:47:46:14:64:6c:e1:b5:ef:5b:22:6b: 17:a2:45:85:1a:7e:9b:7b:29:fc:83:d2:79:8f:af: 35:af:e3:30:bf:ae:52:1e:38:78:2b:6b:c1:6e:4d: 05:bc:6d:f8:80:12:e4:8e:78:ec:3a:04:8b:27:e7: 53:06:15:73:dc:85:94:ef:38:c8:e3:ae:6d:a5:bc: c7:94:b9:3b:83:79:2b:14:07:1d:5f:4b:2e:a1:70: e5:a2:40:40:54:76:7f:3d:21:45:55:1e:fb:b7:aa: 4c:9a:f0:8f:76:65:51:c5:38:03:ce:91:dc:35:09: c3:06:d8:53:f2:1d:7f:f9:7c:80:7c:04:92:99:46: 2a:4a:d9:4e:24:46:01:ab:79:eb:2e:55:35:35:dc: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7F:E8:60:E8:E1:F4:7D:25:E7:4E:0E:D8:B1:E8:9E:1C:24:C4:23 X509v3 Authority Key Identifier: keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:aa:ce:88:c1:09:dd:03:5d:a4:0f:92:50:c9:9f:99:6d:5a: 12:81:c1:94:61:40:05:fc:d0:5c:78:82:30:3b:82:61:96:e5: b8:e9:f2:b3:54:d3:04:40:a0:2a:54:0a:4c:ad:30:15:52:70: c1:1f:10:d7:b4:1a:b0:2c:1b:25:77:6f:82:89:44:97:7c:bd: 7b:49:7c:32:19:cc:3c:e8:0b:e1:a7:41:58:be:55:f2:ce:84: b7:59:e2:fb:66:32:a6:0e:fb:62:06:aa:be:bf:85:cd:67:e3: 31:34:0d:6f:02:70:e4:00:0f:fe:45:8b:b7:e3:03:28:94:26: 12:b8:e9:8a:d2:ae:42:98:22:32:3b:28:62:22:3c:1b:e6:00: de:dd:be:2d:b0:4a:e8:87:c3:7a:41:d6:cb:24:b7:e0:a8:ed: f8:5a:07:4f:04:a5:6b:6c:3e:76:07:11:70:61:8a:cc:04:92: d2:66:76:a4:8e:92:cc:1b:ad:71:f3:55:77:dc:5a:3e:ab:31: e3:e0:58:7d:fe:33:d1:51:c6:57:4b:b5:39:1f:ff:7a:29:34: d7:f3:b8:92:26:6c:32:9b:9e:28:37:8c:a4:88:85:4d:f1:33: f9:db:72:ac:f4:76:9a:00:84:0c:96:6a:97:82:84:c9:9e:ee: 5f:46:02:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iKWm+rf7I39/bDd/mej6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTVkYmMwYjYxMDQ4NWQwZjdlMjE5NGQ4ZjgxNmQ2YzE0 NDUzMjYwHhcNMjYwMTI2MDkwMDQwWhcNMjYwMTI3MDkwMDQwWjAzMTEwLwYDVQQD EyhjZTdmZTg2MGU4ZTFmNDdkMjVlNzRlMGVkOGIxZTg5ZTFjMjRjNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEdO5hYZHfBxB8fwqJ3p1CHdedhX 11ew5RI0LJAPiJESTBATEII9YikCnSwXud5kPBioz78sD7NDG9MdWobmTvAoPcMZ cW565L51aBms5gA+r74m+M8CezdcJataYpKZfv5MQgY47tSVqoPnR0YUZGzhte9b ImsXokWFGn6beyn8g9J5j681r+Mwv65SHjh4K2vBbk0FvG34gBLkjnjsOgSLJ+dT BhVz3IWU7zjI465tpbzHlLk7g3krFAcdX0suoXDlokBAVHZ/PSFFVR77t6pMmvCP dmVRxTgDzpHcNQnDBthT8h1/+XyAfASSmUYqStlOJEYBq3nrLlU1NdzQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5/6GDo4fR9JedODtix6J4cJMQjMB8GA1UdIwQY MBaAFB3l28C2EEhdD34hlNj4FtbBRFMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQt NjhlZWRmNWY2NmJjLzEvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQtNjhlZWRmNWY2NmJj LzEvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAParOiMEJ 3QNdpA+SUMmfmW1aEoHBlGFABfzQXHiCMDuCYZbluOnys1TTBECgKlQKTK0wFVJw wR8Q17QasCwbJXdvgolEl3y9e0l8MhnMPOgL4adBWL5V8s6Et1ni+2Yypg77Ygaq vr+FzWfjMTQNbwJw5AAP/kWLt+MDKJQmErjpitKuQpgiMjsoYiI8G+YA3t2+LbBK 6IfDekHWyyS34Kjt+FoHTwSla2w+dgcRcGGKzASS0mZ2pI6SzButcfNVd9xaPqsx 4+BYff4z0VHGV0u1OR//eik01/O4kiZsMpueKDeMpIiFTfEz+dtyrPR2mgCEDJZq l4KEyZ7uX0YC7w== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:31 2026 by rpki-client