This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json) Hash identifier: 0hvmc/s/wsyiCso/hpa/yms77PgkN0YuDw4B5SS2kB8= Subject key identifier: DD:32:91:64:6B:A3:D8:BA:4D:38:EA:D0:48:0A:2F:52:0E:13:4E:4D Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019BF46293B120A93AA8093B581D0BBD35E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft Manifest number: 14BF Signing time: Sun 25 Jan 2026 09:00:59 +0000 Manifest this update: Sun 25 Jan 2026 09:00:59 +0000 Manifest next update: Mon 26 Jan 2026 09:00:59 +0000 Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=) 2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=) 3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=) 4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: UW2s8XGISQLvqR41K2oH3yI79INYvWJb+ZGy+ZtTNNg=) 5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=) 6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=) 7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:93:b1:20:a9:3a:a8:09:3b:58:1d:0b:bd:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 25 09:00:59 2026 GMT Not After : Jan 26 09:00:59 2026 GMT Subject: CN=dd3291646ba3d8ba4d38ead0480a2f520e134e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:e0:83:ce:e1:2b:b8:3e:81:fd:89:dc:32: c5:a6:ea:5d:81:31:a8:ab:ec:b2:39:36:9c:2f:31: 75:0b:5d:74:1f:59:cb:04:a6:7b:46:2e:7b:1f:84: 74:27:cd:8a:f2:26:c0:6e:03:23:7d:99:68:88:22: 9d:c2:d1:01:54:5b:72:02:e3:29:1a:7e:89:77:b0: b1:d0:4f:4f:da:2f:b4:f5:82:4d:9e:0b:1c:ea:95: f9:6c:4b:14:58:44:f9:af:4a:4c:98:d1:c6:59:d6: bc:0a:47:1f:c6:cd:cb:e1:53:cc:7a:e3:8f:e1:6e: 67:b2:60:76:1e:b9:58:4c:25:07:55:58:1e:32:38: c8:c0:8c:20:b1:ad:bc:5f:76:cd:bd:93:21:19:e7: 97:27:15:57:42:de:13:1f:45:f1:f8:bc:6f:4e:77: b3:29:00:3d:69:a4:62:e3:55:2e:26:5f:98:d1:a9: aa:b6:80:28:a2:e7:d8:fa:75:ed:2f:d9:b0:5f:af: a9:be:a2:b2:22:56:47:63:ef:df:16:40:f7:d9:67: 60:83:66:7b:2a:c1:27:b6:90:fd:64:fb:cf:64:c8: a3:a1:e0:72:61:3c:45:ab:7e:c9:87:23:a2:81:7a: d0:f2:8b:b5:b8:74:2a:ed:40:ce:e5:ee:37:5f:c3: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:32:91:64:6B:A3:D8:BA:4D:38:EA:D0:48:0A:2F:52:0E:13:4E:4D X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:60:35:5e:1c:7a:34:27:6f:53:08:7b:b1:5f:dc:fb:12:da: 0d:44:a4:d0:92:8a:ad:e7:9d:9f:ee:f7:c9:db:9e:32:2c:37: e8:1a:45:62:3b:c0:26:f2:42:f4:90:1f:f3:35:22:66:c7:af: 7a:a6:12:62:b4:98:29:54:bb:69:4b:a9:60:4f:7d:86:e5:87: c0:1c:cb:c9:e2:9d:90:59:85:cf:e8:41:70:27:32:0d:de:f6: 05:a2:6c:7e:11:95:5a:ef:ad:3e:8d:27:02:21:18:f3:29:91: dc:02:91:e7:6e:85:5f:cf:fd:fc:da:e7:82:7a:4f:c4:6d:05: 52:78:27:75:24:5a:f6:e8:6c:f7:18:42:75:ac:a8:12:95:ba: cf:75:20:b2:95:3e:cf:32:1d:36:03:a3:ed:86:ee:20:9d:c8: 5b:31:c7:3f:bf:f5:8f:51:1f:8d:b0:6c:96:91:6d:ef:5a:e8: 31:e8:cd:b9:84:1f:93:c1:9e:d0:eb:d9:08:20:90:eb:c7:f8: 3e:4c:e1:3a:e8:ca:0d:69:01:b4:2b:e1:5f:2a:bb:79:2f:28: c2:c4:05:25:ab:85:10:d0:c2:06:00:1a:1c:33:f8:92:41:a0: 86:41:5f:2b:78:85:16:ad:bc:89:07:de:1f:09:8f:e3:ba:ea: ae:5c:fa:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YpOxIKk6qAk7WB0LvTXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTI1MDkwMDU5WhcNMjYwMTI2MDkwMDU5WjAzMTEwLwYDVQQD EyhkZDMyOTE2NDZiYTNkOGJhNGQzOGVhZDA0ODBhMmY1MjBlMTM0ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Srgg87hK7g+gf2J3DLFpupdgTGo q+yyOTacLzF1C110H1nLBKZ7Ri57H4R0J82K8ibAbgMjfZloiCKdwtEBVFtyAuMp Gn6Jd7Cx0E9P2i+09YJNngsc6pX5bEsUWET5r0pMmNHGWda8Ckcfxs3L4VPMeuOP 4W5nsmB2HrlYTCUHVVgeMjjIwIwgsa28X3bNvZMhGeeXJxVXQt4TH0Xx+LxvTnez KQA9aaRi41UuJl+Y0amqtoAooufY+nXtL9mwX6+pvqKyIlZHY+/fFkD32Wdgg2Z7 KsEntpD9ZPvPZMijoeByYTxFq37JhyOigXrQ8ou1uHQq7UDO5e43X8PFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0ykWRro9i6TTjq0EgKL1IOE05NMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2A1Xhx6 NCdvUwh7sV/c+xLaDUSk0JKKreedn+73ydueMiw36BpFYjvAJvJC9JAf8zUiZsev eqYSYrSYKVS7aUupYE99huWHwBzLyeKdkFmFz+hBcCcyDd72BaJsfhGVWu+tPo0n AiEY8ymR3AKR526FX8/9/NrngnpPxG0FUngndSRa9uhs9xhCdayoEpW6z3UgspU+ zzIdNgOj7YbuIJ3IWzHHP7/1j1EfjbBslpFt71roMejNuYQfk8Ge0OvZCCCQ68f4 PkzhOujKDWkBtCvhXyq7eS8owsQFJauFENDCBgAaHDP4kkGghkFfK3iFFq28iQfe HwmP47rqrlz6PA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:51 2026 by rpki-client