This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json) Hash identifier: Iwq3oisj36Dnhh9kDAN730u2mpDmmx7FnH1fc2zQYtw= Subject key identifier: 50:78:6F:93:10:44:73:A1:EA:07:CE:E3:82:C1:B8:4C:1F:FA:B5:B4 Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Certificate serial: 019BF9C066C0BB406DE6C0D032B26A4B4345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft Manifest number: 175D Signing time: Mon 26 Jan 2026 10:01:34 +0000 Manifest this update: Mon 26 Jan 2026 10:01:34 +0000 Manifest next update: Tue 27 Jan 2026 10:01:34 +0000 Files and hashes: 1: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: QWuhlmRbgFyEVlSO6J+huxda43xbsWhAtomCirpuq7w=) 2: W_mPbXQdWoE3DWEm89aYtTyvXdM.roa (hash: Cuy5C/uLsNnCjQnpl1ezzAhceftWpl5e4uiEK2a9oas=) 3: kohaMOAFUb9m1qAoziqxSlDrzkI.roa (hash: zLdUfaZkNbzAb9CiXssBadeUcauoRp2vZNfyu16dqgA=) 4: oOubWaz2meS0_8Fp_zkutkVpQhY.roa (hash: pSmKXeOqsuxy538KjTVMIn4xkuzCLTfsM1rAsvfnG68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:66:c0:bb:40:6d:e6:c0:d0:32:b2:6a:4b:43:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Validity Not Before: Jan 26 10:01:34 2026 GMT Not After : Jan 27 10:01:34 2026 GMT Subject: CN=50786f93104473a1ea07cee382c1b84c1ffab5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5b:3b:dd:65:28:a0:d1:25:41:31:dc:50:b9: 15:b5:57:d9:c0:f7:82:0e:11:74:41:3f:44:39:3e: 4d:2f:9c:ff:e7:11:78:2f:a4:f6:17:b2:93:bb:36: 0a:9f:85:a0:3c:9e:7d:37:21:dc:5f:6b:9d:73:b0: 98:cb:3b:09:3b:06:b1:a5:35:88:b8:51:65:a4:ab: 4c:b2:55:03:61:d8:9d:f8:3b:33:d2:50:b6:ec:ab: fa:c9:71:a7:df:4e:e9:16:35:7d:40:64:a1:b5:a5: 52:82:bc:b2:36:33:bf:0a:a5:d2:0a:37:ab:d5:4c: ad:79:4c:0b:2b:13:0d:58:3e:e6:60:16:d9:04:7c: 00:5b:54:f1:0c:29:2e:6e:46:69:a0:c1:82:db:0b: b3:eb:c3:3c:86:81:ef:a9:4b:7b:06:86:04:c2:2d: f7:35:6d:14:39:14:d6:07:d7:40:13:35:44:73:e3: 34:7d:18:00:2a:68:87:17:21:53:c8:09:c8:be:65: 9f:f2:08:25:22:15:99:40:dc:27:c1:c2:1e:44:37: 83:1e:f8:a1:14:11:fb:7f:6b:b1:b2:1b:b6:50:a0: 35:c9:e1:41:e2:1a:5c:d9:0d:07:d1:bf:32:38:87: 73:79:4c:9a:00:16:d4:44:da:c8:ae:6b:25:e0:64: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:78:6F:93:10:44:73:A1:EA:07:CE:E3:82:C1:B8:4C:1F:FA:B5:B4 X509v3 Authority Key Identifier: keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:60:eb:3e:4f:23:2e:cf:79:15:fa:d1:be:7c:3b:da:a7:28: 09:e4:a5:55:8c:05:3a:48:33:d6:23:23:09:d9:92:d2:25:6a: 53:ba:c8:fd:80:74:1b:3c:1a:54:96:c3:1f:36:9f:55:96:eb: 04:e3:e4:82:76:c4:00:ee:3e:79:f9:a5:f3:69:85:0a:5e:00: 02:14:b1:8a:85:d1:d8:1c:ed:d3:83:a2:c2:c8:fb:79:f5:e9: a1:54:09:05:d1:a3:99:73:02:06:39:69:97:71:5f:0c:c3:39: 79:1c:59:d7:81:8f:56:ef:72:d8:18:ea:28:0c:1e:d8:36:db: ac:c6:72:70:e6:82:28:b1:51:ff:6a:61:78:07:f5:31:7b:38: ad:66:83:88:91:9e:df:81:33:3c:27:68:7d:18:cc:d0:27:80: 9f:1a:6f:34:28:4f:04:73:ae:c2:70:f4:5e:c9:6d:ee:63:4d: af:11:83:4c:35:60:ff:3e:4b:79:56:ab:00:ac:96:5e:ec:53: 67:ac:d7:8c:18:84:26:a6:68:79:d8:50:01:54:a9:9e:26:fb: d7:e1:85:02:58:7e:11:75:1d:65:e3:25:0c:67:f0:fb:b1:76: 9c:0d:3e:6e:99:aa:bf:47:6f:65:d0:9e:0f:70:0e:8b:f0:f9: 95:2a:6e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wGbAu0Bt5sDQMrJqS0NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj MDY3NTkwHhcNMjYwMTI2MTAwMTM0WhcNMjYwMTI3MTAwMTM0WjAzMTEwLwYDVQQD Eyg1MDc4NmY5MzEwNDQ3M2ExZWEwN2NlZTM4MmMxYjg0YzFmZmFiNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1s73WUooNElQTHcULkVtVfZwPeC DhF0QT9EOT5NL5z/5xF4L6T2F7KTuzYKn4WgPJ59NyHcX2udc7CYyzsJOwaxpTWI uFFlpKtMslUDYdid+Dsz0lC27Kv6yXGn307pFjV9QGShtaVSgryyNjO/CqXSCjer 1UyteUwLKxMNWD7mYBbZBHwAW1TxDCkubkZpoMGC2wuz68M8hoHvqUt7BoYEwi33 NW0UORTWB9dAEzVEc+M0fRgAKmiHFyFTyAnIvmWf8gglIhWZQNwnwcIeRDeDHvih FBH7f2uxshu2UKA1yeFB4hpc2Q0H0b8yOIdzeUyaABbURNrIrmsl4GTm9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB4b5MQRHOh6gfO44LBuEwf+rW0MB8GA1UdIwQY MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmDrPk8j Ls95FfrRvnw72qcoCeSlVYwFOkgz1iMjCdmS0iVqU7rI/YB0GzwaVJbDHzafVZbr BOPkgnbEAO4+efml82mFCl4AAhSxioXR2Bzt04Oiwsj7efXpoVQJBdGjmXMCBjlp l3FfDMM5eRxZ14GPVu9y2BjqKAwe2DbbrMZycOaCKLFR/2pheAf1MXs4rWaDiJGe 34EzPCdofRjM0CeAnxpvNChPBHOuwnD0Xslt7mNNrxGDTDVg/z5LeVarAKyWXuxT Z6zXjBiEJqZoedhQAVSpnib71+GFAlh+EXUdZeMlDGfw+7F2nA0+bpmqv0dvZdCe D3AOi/D5lSpuIw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:27 2026 by rpki-client