This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json) Hash identifier: J3TSB58SjkRwW4Q7ekJMzmLYT6vFNnYw9COG1YB5hfg= Subject key identifier: EB:21:81:D6:99:07:BA:A5:B3:C4:9A:5C:76:95:CF:ED:C7:D4:2B:C5 Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb Certificate serial: 019BF808308982B5DA4AC7B42CA154B2E470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft Manifest number: 16AF Signing time: Mon 26 Jan 2026 02:00:44 +0000 Manifest this update: Mon 26 Jan 2026 02:00:44 +0000 Manifest next update: Tue 27 Jan 2026 02:00:44 +0000 Files and hashes: 1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=) 2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: IHo9AZD0Nj7IokaO8gMUBCb228/caCmFfyO/tJZPBx8=) 3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:30:89:82:b5:da:4a:c7:b4:2c:a1:54:b2:e4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb Validity Not Before: Jan 26 02:00:44 2026 GMT Not After : Jan 27 02:00:44 2026 GMT Subject: CN=eb2181d69907baa5b3c49a5c7695cfedc7d42bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:c1:61:4c:4f:e7:d8:a3:cd:dc:c5:70:08: 46:95:b1:8a:e7:a3:b4:c6:85:72:dc:93:49:c4:31: 95:de:95:d7:aa:e3:d2:66:82:4e:12:70:47:95:5a: 41:23:3e:43:5e:61:2d:b7:94:13:6b:98:7a:70:86: be:72:f3:42:0b:5c:50:da:87:c7:3b:e3:36:d5:04: b3:64:03:15:90:2a:fc:91:9b:38:26:25:97:63:7b: 58:3a:d7:8f:38:0a:88:6d:f9:c6:87:0f:b5:8a:6e: 00:32:69:5b:2b:e4:e2:f3:17:c8:d7:68:be:91:19: 3a:10:01:7d:04:94:17:ff:46:f5:f1:e7:95:9c:6a: 75:01:df:1f:b7:be:91:ce:e5:e2:01:9a:c9:6b:3b: 2e:c5:37:3f:8a:cf:65:fe:d8:27:4c:14:33:05:a6: ea:a6:c1:39:35:e1:01:9a:1b:17:e7:8c:21:1a:dd: c8:37:6f:ee:d4:06:a4:2b:95:1e:e6:c8:53:a1:a4: ea:2c:32:d8:01:0c:0e:17:00:2d:c9:0a:47:7f:ce: 50:29:9d:31:61:f4:da:f8:5d:5e:e9:50:4f:58:e0: 3c:88:99:a1:5d:1d:51:91:81:ae:90:02:9c:eb:2d: 67:a1:3c:98:31:d4:17:ac:7f:43:a0:16:77:ee:00: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:21:81:D6:99:07:BA:A5:B3:C4:9A:5C:76:95:CF:ED:C7:D4:2B:C5 X509v3 Authority Key Identifier: keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:3a:27:5c:08:ab:90:b2:98:2a:e2:05:c5:d9:c8:0d:1f: 36:39:d6:94:3f:05:85:5f:15:88:6b:ec:08:96:ee:29:31:7d: 34:63:bb:65:7d:5c:f1:81:91:9c:ed:2c:f9:63:8d:43:bb:ff: 38:7b:0b:df:63:43:aa:8e:e4:99:d6:b6:21:85:bc:8f:54:7c: d5:00:e7:e4:dc:b5:63:f5:25:c9:75:9b:7e:e5:91:ca:ce:ec: f0:61:1b:3c:07:8e:da:52:ae:b8:2b:57:72:0b:f0:58:22:e8: 18:4d:b7:96:62:a4:c2:55:77:56:74:69:2c:cc:93:c8:36:ae: 0f:fc:5d:e6:9a:0e:3f:ac:10:b7:00:93:d9:7a:a6:28:44:24: a5:5d:0d:2a:2f:a9:87:49:6e:a4:6f:f4:ad:06:34:a2:9e:40: 63:2b:c1:99:cc:46:f5:ba:fb:76:1a:2d:9e:e7:34:a1:c6:d6: bb:53:9c:08:9a:9e:8e:47:7b:ed:d2:85:cf:0f:a0:15:c1:10: 22:7b:46:73:d4:51:1d:c8:b4:0c:b0:e5:91:05:f2:6a:94:5d: 21:bb:e5:02:96:8b:c6:9b:2b:92:56:c9:10:24:c8:c5:7a:41: fd:dd:c9:53:46:ae:bb:75:fe:14:0f:18:02:9b:1d:df:c9:34: 10:f6:f1:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDCJgrXaSse0LKFUsuRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk MTg1Y2IwHhcNMjYwMTI2MDIwMDQ0WhcNMjYwMTI3MDIwMDQ0WjAzMTEwLwYDVQQD EyhlYjIxODFkNjk5MDdiYWE1YjNjNDlhNWM3Njk1Y2ZlZGM3ZDQyYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp7BYUxP59ijzdzFcAhGlbGK56O0 xoVy3JNJxDGV3pXXquPSZoJOEnBHlVpBIz5DXmEtt5QTa5h6cIa+cvNCC1xQ2ofH O+M21QSzZAMVkCr8kZs4JiWXY3tYOtePOAqIbfnGhw+1im4AMmlbK+Ti8xfI12i+ kRk6EAF9BJQX/0b18eeVnGp1Ad8ft76RzuXiAZrJazsuxTc/is9l/tgnTBQzBabq psE5NeEBmhsX54whGt3IN2/u1AakK5Ue5shToaTqLDLYAQwOFwAtyQpHf85QKZ0x YfTa+F1e6VBPWOA8iJmhXR1RkYGukAKc6y1noTyYMdQXrH9DoBZ37gB0NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOshgdaZB7qls8SaXHaVz+3H1CvFMB8GA1UdIwQY MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqk6J1wI q5CymCriBcXZyA0fNjnWlD8FhV8ViGvsCJbuKTF9NGO7ZX1c8YGRnO0s+WONQ7v/ OHsL32NDqo7kmda2IYW8j1R81QDn5Ny1Y/UlyXWbfuWRys7s8GEbPAeO2lKuuCtX cgvwWCLoGE23lmKkwlV3VnRpLMyTyDauD/xd5poOP6wQtwCT2XqmKEQkpV0NKi+p h0lupG/0rQY0op5AYyvBmcxG9br7dhotnuc0ocbWu1OcCJqejkd77dKFzw+gFcEQ IntGc9RRHci0DLDlkQXyapRdIbvlApaLxpsrklbJECTIxXpB/d3JU0auu3X+FA8Y Apsd38k0EPbxyw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:19 2026 by rpki-client