This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json) Hash identifier: XuA/TEEd1apoRj1mYf0Mo+tg/ku0wZmbvSD2cVlfKD0= Subject key identifier: 26:E8:3E:5E:9D:72:D0:A5:CF:82:36:3A:8D:3C:04:EF:DF:96:60:C2 Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Certificate serial: 019BF386D303F53150B5EFED6328C55AEE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft Manifest number: 1803 Signing time: Sun 25 Jan 2026 05:00:57 +0000 Manifest this update: Sun 25 Jan 2026 05:00:57 +0000 Manifest next update: Mon 26 Jan 2026 05:00:57 +0000 Files and hashes: 1: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (hash: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU=) 2: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: 5WcpdKP/szFOtjUxadsFbuNlmJNlkq2VWUDz8v4+sbQ=) 3: 5n_LJIXVhPPzdEHOUXNI628ingY.roa (hash: NQCHGHitMzomWbvAOfmN/9PVUkWlzv9zSoGTskUkpNQ=) 4: uhVewxHevpMHT9Vwqhs2oxQFyCs.roa (hash: wVttK0CYjEZiRPDjwBZLejNRTkNAN3AqB1UHgInSwjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:d3:03:f5:31:50:b5:ef:ed:63:28:c5:5a:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Validity Not Before: Jan 25 05:00:57 2026 GMT Not After : Jan 26 05:00:57 2026 GMT Subject: CN=26e83e5e9d72d0a5cf82363a8d3c04efdf9660c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:3c:59:5f:b7:25:c2:50:74:49:a0:d1:d8: 97:40:e9:86:38:0c:ff:94:4e:d4:54:62:f1:a5:8b: f3:37:f8:a4:40:35:36:d9:8b:f8:67:25:79:4f:c5: 56:c8:a5:af:49:7c:25:52:d5:18:ca:60:84:3f:a2: f7:5e:30:4b:c6:21:77:0b:4b:89:75:6e:20:c8:c4: c3:a6:95:fa:18:da:67:94:a2:cd:de:1c:3a:29:b7: 94:d3:f5:7a:95:89:94:96:8b:05:71:f2:07:47:49: 6e:5a:77:f2:d0:39:3f:68:f0:52:cf:01:86:4f:ab: 3d:a0:fc:fd:ea:42:51:8f:71:91:00:bd:45:4f:88: d4:78:7f:9c:5e:63:6a:47:fe:6d:cb:b2:4d:39:4b: 86:ef:44:ca:14:34:da:48:14:a3:a4:13:d0:b2:a4: 07:34:c1:91:b8:18:7a:f2:cf:af:fe:1a:10:41:ad: c9:2d:2e:de:cf:96:fe:c1:b7:5f:29:e1:b1:f3:2f: 59:5b:51:d6:13:76:14:3d:f0:ac:e7:10:a4:dc:ce: c2:f4:25:6a:75:4c:46:72:f7:2d:0c:ce:43:36:84: 64:c3:bc:02:57:59:de:c1:fd:ff:33:a0:4c:65:e2: 07:8d:72:d7:db:e4:ce:84:9b:28:0c:d4:1a:c2:2b: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:3E:5E:9D:72:D0:A5:CF:82:36:3A:8D:3C:04:EF:DF:96:60:C2 X509v3 Authority Key Identifier: keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4f:3a:9d:fb:2e:48:67:65:bc:ba:2f:75:83:ff:40:45:ae: 72:08:6a:bb:ff:85:11:49:16:0c:d7:eb:8f:b7:9d:a3:76:6b: d1:3d:40:3b:56:4f:63:ca:31:12:56:3a:38:82:fa:1c:e3:4c: ab:7c:39:f2:02:83:86:2d:cb:90:15:75:ef:e9:e9:0f:f1:2b: 6a:21:13:c4:e1:df:61:70:5f:98:d5:e0:28:44:45:95:c5:29: 23:8d:01:70:19:cb:a2:5a:8a:c7:74:c7:f9:bc:2b:fd:cf:d0: 5d:f3:33:bf:32:bf:0c:e6:4f:1e:6a:c9:c5:f1:61:bb:c8:62: 7e:0b:2d:26:d9:e4:a4:df:ef:4d:d1:77:1d:5b:30:6e:31:91: 4d:08:10:8f:53:11:70:11:54:08:04:0c:fa:5d:0b:3c:74:46: 9a:5f:38:dd:4a:4a:6a:bc:cd:ef:08:27:ee:4d:83:78:26:83: f3:d7:f5:bf:36:7a:2b:96:c0:77:90:0c:7e:54:df:fd:31:90: cb:fe:a6:63:d4:3a:59:21:88:12:46:63:9b:db:26:c5:eb:f7: 15:e2:91:0a:c1:0a:2b:33:d3:94:73:f3:78:43:04:96:08:45: ed:a1:d8:dc:06:09:e6:43:7a:f7:2e:70:60:ec:61:99:b9:48: 98:73:a2:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhtMD9TFQte/tYyjFWu6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk MzRlNTEwHhcNMjYwMTI1MDUwMDU3WhcNMjYwMTI2MDUwMDU3WjAzMTEwLwYDVQQD EygyNmU4M2U1ZTlkNzJkMGE1Y2Y4MjM2M2E4ZDNjMDRlZmRmOTY2MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsg8WV+3JcJQdEmg0diXQOmGOAz/ lE7UVGLxpYvzN/ikQDU22Yv4ZyV5T8VWyKWvSXwlUtUYymCEP6L3XjBLxiF3C0uJ dW4gyMTDppX6GNpnlKLN3hw6KbeU0/V6lYmUlosFcfIHR0luWnfy0Dk/aPBSzwGG T6s9oPz96kJRj3GRAL1FT4jUeH+cXmNqR/5ty7JNOUuG70TKFDTaSBSjpBPQsqQH NMGRuBh68s+v/hoQQa3JLS7ez5b+wbdfKeGx8y9ZW1HWE3YUPfCs5xCk3M7C9CVq dUxGcvctDM5DNoRkw7wCV1newf3/M6BMZeIHjXLX2+TOhJsoDNQawivBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCboPl6dctClz4I2Oo08BO/flmDCMB8GA1UdIwQY MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5 LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE86nfsu SGdlvLovdYP/QEWucghqu/+FEUkWDNfrj7edo3Zr0T1AO1ZPY8oxElY6OIL6HONM q3w58gKDhi3LkBV17+npD/EraiETxOHfYXBfmNXgKERFlcUpI40BcBnLolqKx3TH +bwr/c/QXfMzvzK/DOZPHmrJxfFhu8hifgstJtnkpN/vTdF3HVswbjGRTQgQj1MR cBFUCAQM+l0LPHRGml843UpKarzN7wgn7k2DeCaD89f1vzZ6K5bAd5AMflTf/TGQ y/6mY9Q6WSGIEkZjm9smxev3FeKRCsEKKzPTlHPzeEMElghF7aHY3AYJ5kN69y5w YOxhmblImHOibQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:26 2026 by rpki-client