This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json) Hash identifier: I6uAT4SGpve/OCNDVrttbvEfQtOdI8EqhSlBk4Nm60c= Subject key identifier: 30:5B:4E:55:EA:0B:28:62:0F:7F:94:16:20:1E:FA:FD:57:48:5F:C5 Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Certificate serial: 019BF7D1F3776B7C3B0E7F419CD743A68B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft Manifest number: 175C Signing time: Mon 26 Jan 2026 01:01:30 +0000 Manifest this update: Mon 26 Jan 2026 01:01:30 +0000 Manifest next update: Tue 27 Jan 2026 01:01:30 +0000 Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: Bx48Q5zp4+SGlmJj6V2gaKmAEV7J6XrxogtFdk5rJxg=) 2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=) 3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=) 4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:f3:77:6b:7c:3b:0e:7f:41:9c:d7:43:a6:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Validity Not Before: Jan 26 01:01:30 2026 GMT Not After : Jan 27 01:01:30 2026 GMT Subject: CN=305b4e55ea0b28620f7f9416201efafd57485fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ef:4a:25:61:8e:0a:8d:2a:7b:28:06:9c:00: be:51:e7:8d:c1:94:d9:85:e6:b5:24:1e:eb:11:0e: 3a:a2:0a:13:6f:0b:31:12:1c:c7:50:9b:ea:e8:fb: f2:6c:de:88:d8:08:8b:0c:0c:e8:4b:d1:ab:0b:7c: 67:51:c4:73:c1:e4:dc:27:ec:1b:9f:a1:24:1b:5f: 07:52:03:1b:d7:e5:11:96:15:36:ea:c5:ce:84:c3: 60:d2:49:1f:dd:dc:93:45:20:16:f8:27:e4:61:0b: de:f6:f2:7c:85:cb:7c:cd:a8:c5:e7:6d:a6:7f:ed: 17:33:08:70:68:a1:48:35:8f:11:57:16:55:cb:47: ee:d6:16:73:9c:99:3b:74:9b:ec:fb:14:22:d1:99: 8f:61:87:61:27:78:7b:e2:17:c2:20:38:13:61:16: 4f:97:8c:f2:c2:86:33:47:87:fe:b3:2b:58:e5:70: 3a:6b:c8:02:eb:76:32:6e:6c:db:67:bb:94:ac:a8: fa:90:6a:f1:49:3b:83:f5:5b:53:86:44:af:7a:bb: 8b:11:6b:b4:63:9a:43:0d:50:dd:8b:d8:65:e9:df: 5c:df:e9:c4:49:43:c2:8c:7d:1d:d4:06:a6:b8:88: 50:b7:ac:2d:95:0e:7c:0e:0c:20:bd:d6:e7:c6:74: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:4E:55:EA:0B:28:62:0F:7F:94:16:20:1E:FA:FD:57:48:5F:C5 X509v3 Authority Key Identifier: keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:25:47:79:7c:43:78:ec:89:25:ac:e7:ab:be:09:94:04:03: a2:9d:85:75:8f:ae:dd:7c:67:20:54:39:1f:72:e7:1a:5d:9a: 47:0d:db:75:01:ea:5a:76:9e:cf:cc:db:5d:1e:0f:e8:79:44: 3a:2f:1b:b5:1b:c6:c9:09:3e:77:ac:82:25:52:47:fe:a4:cd: 47:39:ce:6b:24:a0:e5:75:1c:01:44:e4:a6:33:e5:27:b8:96: 2b:ab:cf:7e:8a:61:96:b0:d4:2f:50:b0:ff:2e:12:e8:68:4d: 5a:6f:b8:57:83:4d:4c:33:1f:6f:4f:78:97:85:6f:36:1d:40: ef:9c:bf:12:63:cf:8b:b3:b5:b0:62:26:47:17:36:df:bb:f9: 21:10:ad:eb:dd:e4:df:f9:06:2d:a8:92:2e:fb:d4:39:c5:19: c9:fd:ab:20:f2:8c:86:9a:88:42:69:36:e2:c3:95:5d:ed:af: 66:41:b2:44:ee:98:6b:d1:23:a7:61:40:2d:c3:92:2d:62:6d: eb:7f:53:9a:9f:d2:97:fb:5e:99:87:08:c6:36:57:a4:bb:99: 0e:c4:29:08:83:71:c9:ab:12:92:bb:e2:23:91:b0:9b:01:fc: ae:46:71:fb:f9:8c:7f:ba:f1:05:15:b0:26:79:64:13:36:e3: 10:68:0c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30fN3a3w7Dn9BnNdDpotAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj MDY3NTkwHhcNMjYwMTI2MDEwMTMwWhcNMjYwMTI3MDEwMTMwWjAzMTEwLwYDVQQD EygzMDViNGU1NWVhMGIyODYyMGY3Zjk0MTYyMDFlZmFmZDU3NDg1ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u9KJWGOCo0qeygGnAC+UeeNwZTZ hea1JB7rEQ46ogoTbwsxEhzHUJvq6PvybN6I2AiLDAzoS9GrC3xnUcRzweTcJ+wb n6EkG18HUgMb1+URlhU26sXOhMNg0kkf3dyTRSAW+CfkYQve9vJ8hct8zajF522m f+0XMwhwaKFINY8RVxZVy0fu1hZznJk7dJvs+xQi0ZmPYYdhJ3h74hfCIDgTYRZP l4zywoYzR4f+sytY5XA6a8gC63YybmzbZ7uUrKj6kGrxSTuD9VtThkSveruLEWu0 Y5pDDVDdi9hl6d9c3+nESUPCjH0d1AamuIhQt6wtlQ58DgwgvdbnxnQVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBbTlXqCyhiD3+UFiAe+v1XSF/FMB8GA1UdIwQY MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiVHeXxD eOyJJaznq74JlAQDop2FdY+u3XxnIFQ5H3LnGl2aRw3bdQHqWnaez8zbXR4P6HlE Oi8btRvGyQk+d6yCJVJH/qTNRznOaySg5XUcAUTkpjPlJ7iWK6vPfophlrDUL1Cw /y4S6GhNWm+4V4NNTDMfb094l4VvNh1A75y/EmPPi7O1sGImRxc237v5IRCt693k 3/kGLaiSLvvUOcUZyf2rIPKMhpqIQmk24sOVXe2vZkGyRO6Ya9Ejp2FALcOSLWJt 639Tmp/Sl/temYcIxjZXpLuZDsQpCINxyasSkrviI5GwmwH8rkZx+/mMf7rxBRWw JnlkEzbjEGgM8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:56 2026 by rpki-client