This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json) Hash identifier: K3kpq5M5gKENw+7uFwIUd91YagiXVnU2z2ArAdlKALI= Subject key identifier: 4C:04:F3:65:E8:46:DD:56:4F:A0:73:73:9A:07:AD:08:2E:DE:59:49 Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421 Certificate serial: 019BF8ACF58624266423ADAC5A33CDC36579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft Manifest number: 03B5 Signing time: Mon 26 Jan 2026 05:00:43 +0000 Manifest this update: Mon 26 Jan 2026 05:00:43 +0000 Manifest next update: Tue 27 Jan 2026 05:00:43 +0000 Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: 03gQL/TuANdfUrx3Cq3txmdnlr5b/3Czqe6c/S1P1Ao=) 2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:f5:86:24:26:64:23:ad:ac:5a:33:cd:c3:65:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421 Validity Not Before: Jan 26 05:00:43 2026 GMT Not After : Jan 27 05:00:43 2026 GMT Subject: CN=4c04f365e846dd564fa073739a07ad082ede5949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:1e:70:cd:99:72:c2:1e:f5:90:7c:f1:25: 15:fa:ff:9b:48:dd:19:bf:1e:ab:0d:c6:51:08:7e: df:aa:94:b7:d7:ca:ee:0c:aa:fc:6a:80:df:5a:1c: 0b:3e:f9:cf:57:d5:b7:e6:93:14:d7:eb:19:34:42: 86:b1:46:e7:d7:ec:c1:d7:10:ec:dd:b7:72:4c:7a: 59:c4:b6:0a:57:6b:91:3d:6f:ab:4c:95:bd:2d:03: 6f:05:75:6d:9e:12:4c:11:95:34:d3:4a:39:1c:82: b3:7a:85:e0:97:77:9b:8c:96:50:e9:1b:81:65:80: c2:f0:e4:57:7b:1f:a2:3c:66:b4:a2:2f:5b:42:6b: f3:be:b1:ee:0a:98:c0:7e:63:b2:83:99:3b:13:92: 6f:81:0c:f5:b2:90:0d:bd:2d:ef:e0:60:8e:dc:0b: d2:d3:e1:7f:4a:36:24:df:40:0d:11:51:ad:d2:bf: d1:db:35:7f:ee:f4:ea:49:10:c8:c4:55:35:85:31: 20:0a:fa:1e:5a:a4:8f:6f:57:0d:82:72:13:ff:80: fe:56:4c:52:73:66:85:43:bc:e3:01:46:1b:80:0f: 55:bb:81:cb:a8:4a:f6:66:f6:34:bc:38:da:df:fd: f7:af:fc:60:52:a5:c7:7d:08:d2:19:d8:60:59:76: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:F3:65:E8:46:DD:56:4F:A0:73:73:9A:07:AD:08:2E:DE:59:49 X509v3 Authority Key Identifier: keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dd:00:1a:4a:96:91:39:32:75:34:58:78:8f:07:7f:c1:38: 79:70:e7:67:e2:70:dc:d2:25:24:ef:7c:b6:1d:3b:ec:30:d1: 4b:8b:0c:2c:3b:ef:a7:78:b9:12:fd:76:fe:f6:19:4e:39:cf: 6f:b6:15:45:1b:03:c9:c9:a6:be:a1:2f:3c:53:61:9d:10:2b: bb:53:dc:7c:55:04:0f:cc:84:11:fd:17:2f:51:1a:e0:db:a3: 20:95:7c:56:f7:f1:14:6b:af:dd:b1:b6:af:1a:cd:4d:51:c4: 97:10:52:be:c9:8b:21:ea:42:81:c9:e1:14:d4:e5:a7:4c:fb: 7f:bc:4c:15:c2:07:a0:0f:3f:54:d3:10:ac:a9:0f:7c:5c:70: ce:43:50:7c:bc:d9:5c:10:26:0e:c7:c7:71:69:a3:dc:94:b6: fa:4c:ac:bd:11:86:04:d8:08:84:88:df:39:9b:b0:e8:74:5e: e5:ff:f0:29:e5:ae:2f:b4:87:a5:41:3f:75:c0:8b:7d:eb:f7: f8:10:15:d6:c1:3a:39:dc:d6:57:9f:77:c4:c3:cd:3b:cc:6f: a8:17:17:3e:76:f1:b4:f1:91:12:56:5a:b3:06:68:98:f6:c7: f2:ac:b4:a0:5a:7a:92:e3:74:1b:f3:2a:d4:f4:fc:04:d6:19: 28:8f:61:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rPWGJCZkI62sWjPNw2V5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw YWM0MjEwHhcNMjYwMTI2MDUwMDQzWhcNMjYwMTI3MDUwMDQzWjAzMTEwLwYDVQQD Eyg0YzA0ZjM2NWU4NDZkZDU2NGZhMDczNzM5YTA3YWQwODJlZGU1OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNoecM2ZcsIe9ZB88SUV+v+bSN0Z vx6rDcZRCH7fqpS318ruDKr8aoDfWhwLPvnPV9W35pMU1+sZNEKGsUbn1+zB1xDs 3bdyTHpZxLYKV2uRPW+rTJW9LQNvBXVtnhJMEZU000o5HIKzeoXgl3ebjJZQ6RuB ZYDC8ORXex+iPGa0oi9bQmvzvrHuCpjAfmOyg5k7E5JvgQz1spANvS3v4GCO3AvS 0+F/SjYk30ANEVGt0r/R2zV/7vTqSRDIxFU1hTEgCvoeWqSPb1cNgnIT/4D+VkxS c2aFQ7zjAUYbgA9Vu4HLqEr2ZvY0vDja3/33r/xgUqXHfQjSGdhgWXbKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwE82XoRt1WT6Bzc5oHrQgu3llJMB8GA1UdIwQY MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR90AGkqW kTkydTRYeI8Hf8E4eXDnZ+Jw3NIlJO98th077DDRS4sMLDvvp3i5Ev12/vYZTjnP b7YVRRsDycmmvqEvPFNhnRAru1PcfFUED8yEEf0XL1Ea4NujIJV8VvfxFGuv3bG2 rxrNTVHElxBSvsmLIepCgcnhFNTlp0z7f7xMFcIHoA8/VNMQrKkPfFxwzkNQfLzZ XBAmDsfHcWmj3JS2+kysvRGGBNgIhIjfOZuw6HRe5f/wKeWuL7SHpUE/dcCLfev3 +BAV1sE6OdzWV593xMPNO8xvqBcXPnbxtPGRElZaswZomPbH8qy0oFp6kuN0G/Mq 1PT8BNYZKI9hWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:42 2026 by rpki-client