This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft File: hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json) Hash identifier: Dv0za2PibrMCBqbOpr24n16ZwoTTjgahguXaAAJWzQk= Subject key identifier: C3:ED:D8:1A:6E:BE:B4:8C:75:72:38:50:51:73:02:5F:B8:07:43:C6 Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Certificate serial: 019BF651C37CC7FACC81E3A22AA34DAFE118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft Manifest number: 163D Signing time: Sun 25 Jan 2026 18:01:52 +0000 Manifest this update: Sun 25 Jan 2026 18:01:52 +0000 Manifest next update: Mon 26 Jan 2026 18:01:52 +0000 Files and hashes: 1: 6JHRudMQv1ts55_v1uK9-5jgVw8.roa (hash: 8w4nPzLYmF84ovTkRJjHxfMW9Rc6qNpNxfP833exyBk=) 2: dhlvPCZXb2EkhMlEiuEIkVAgyec.roa (hash: 8F9BXDtvGEBkwGg2A4bRIhZ8Kc7R53vk/fY6rvM59Ro=) 3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: Qjo93zLl6hjatD9+7y4cOX6KM56fAVrS8FuIx5qyn3o=) 4: mMfA_Od6bVQoe9XLziP1BQjaefk.roa (hash: sybseYJpXfIXWEJrTC3jNcJjadRJhSifMo8BV1Ei+q0=) 5: ybwCxgYuP6yL02aaO7mZuOTMAE8.roa (hash: TVTGU5or9DtUlyZroM126ho51dpCPSF51pljBNSRFfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:c3:7c:c7:fa:cc:81:e3:a2:2a:a3:4d:af:e1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Validity Not Before: Jan 25 18:01:52 2026 GMT Not After : Jan 26 18:01:52 2026 GMT Subject: CN=c3edd81a6ebeb48c757238505173025fb80743c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:37:5e:7a:f0:18:e7:73:7b:83:58:cb:99: b6:8e:e2:1a:5c:de:e9:37:b7:a5:83:86:c5:a4:40: 25:09:28:87:c9:91:8a:24:c5:d0:32:78:d5:44:56: 65:26:5c:ef:a4:17:a4:9f:29:4e:6c:0f:55:35:16: 70:e0:61:10:fc:88:da:c6:5b:73:ca:71:27:db:19: 18:26:f2:bd:21:5e:04:35:c9:3f:ea:5f:ec:dd:10: ee:ad:6f:33:a3:44:44:cb:55:79:97:fd:f3:79:40: 09:a9:0d:49:a6:d4:77:3a:bd:83:68:49:c0:d3:e5: b4:0e:15:1b:28:4c:95:de:5f:26:7a:ee:a1:0d:75: e1:f7:84:8c:8d:7e:20:88:d9:37:df:73:3f:fb:a6: 7f:38:22:7d:db:7b:21:0c:7b:41:94:50:5b:ed:f2: 04:e9:c9:7c:cb:0d:b8:e7:43:03:b1:c4:f4:54:76: 84:07:e7:89:ca:2e:77:e4:34:80:9e:7e:ca:d8:91: 57:17:fc:07:d9:d7:44:c1:99:39:e0:00:da:39:dc: dc:23:d0:06:20:ce:09:91:56:d2:16:af:9c:4b:ce: f2:7f:65:fc:c8:13:cb:57:6c:05:45:a1:4d:d8:be: 49:ff:0a:9b:0b:b1:fc:ca:e7:e2:61:ad:1d:60:c2: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:ED:D8:1A:6E:BE:B4:8C:75:72:38:50:51:73:02:5F:B8:07:43:C6 X509v3 Authority Key Identifier: keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:c9:37:eb:94:42:7d:8b:d0:9e:c3:ca:03:ee:b2:a5:07: 2b:6f:86:64:ff:b9:69:38:3f:c9:29:e6:76:f6:a6:9d:c9:87: 4f:4c:8d:35:eb:25:08:96:24:5e:79:18:89:07:c1:1c:3d:4f: 0c:79:02:11:60:de:d0:7d:06:91:2f:2f:21:20:91:64:d7:38: 38:1d:ee:2c:ab:0f:02:ca:5d:84:6a:04:4f:02:1a:4c:9e:5f: 43:b4:99:9a:dd:39:95:ec:ac:ba:09:74:2a:f9:07:2e:e6:5e: 58:d2:8f:45:cc:70:41:f9:88:d1:7c:84:90:a8:04:ad:78:c0: 22:a9:90:3e:4f:d6:14:bd:8a:0d:03:ec:cc:5a:6e:af:54:79: e0:12:44:36:35:f1:ba:84:7d:b6:f5:4a:11:13:34:75:c5:a6: 04:42:23:8a:8e:f3:32:16:57:1a:00:26:d9:e9:28:f1:9b:ae: 4c:1b:5f:1d:98:e6:ac:25:12:18:39:e2:a4:8e:3d:09:75:a3: c1:91:4a:7d:20:44:51:c9:f0:2d:0a:63:d7:dc:fe:95:6c:a7: 91:97:39:0a:56:a3:f8:bf:57:b8:ef:88:33:96:09:9a:3a:74: c4:09:5e:93:2b:ca:8d:5d:23:5e:e5:aa:ae:78:50:f9:61:b3: 21:53:f7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UcN8x/rMgeOiKqNNr+EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2 ZTg5OTYwHhcNMjYwMTI1MTgwMTUyWhcNMjYwMTI2MTgwMTUyWjAzMTEwLwYDVQQD EyhjM2VkZDgxYTZlYmViNDhjNzU3MjM4NTA1MTczMDI1ZmI4MDc0M2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO03XnrwGOdze4NYy5m2juIaXN7p N7elg4bFpEAlCSiHyZGKJMXQMnjVRFZlJlzvpBeknylObA9VNRZw4GEQ/Ijaxltz ynEn2xkYJvK9IV4ENck/6l/s3RDurW8zo0REy1V5l/3zeUAJqQ1JptR3Or2DaEnA 0+W0DhUbKEyV3l8meu6hDXXh94SMjX4giNk333M/+6Z/OCJ923shDHtBlFBb7fIE 6cl8yw2450MDscT0VHaEB+eJyi535DSAnn7K2JFXF/wH2ddEwZk54ADaOdzcI9AG IM4JkVbSFq+cS87yf2X8yBPLV2wFRaFN2L5J/wqbC7H8yufiYa0dYMLk8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPt2BpuvrSMdXI4UFFzAl+4B0PGMB8GA1UdIwQY MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt ZjY2MzE3OTc3OTY4LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4 LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8vJN+uU Qn2L0J7DygPusqUHK2+GZP+5aTg/ySnmdvamncmHT0yNNeslCJYkXnkYiQfBHD1P DHkCEWDe0H0GkS8vISCRZNc4OB3uLKsPAspdhGoETwIaTJ5fQ7SZmt05leysugl0 KvkHLuZeWNKPRcxwQfmI0XyEkKgErXjAIqmQPk/WFL2KDQPszFpur1R54BJENjXx uoR9tvVKERM0dcWmBEIjio7zMhZXGgAm2eko8ZuuTBtfHZjmrCUSGDnipI49CXWj wZFKfSBEUcnwLQpj19z+lWynkZc5Claj+L9XuO+IM5YJmjp0xAlekyvKjV0jXuWq rnhQ+WGzIVP3Sg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:23 2026 by rpki-client