This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json) Hash identifier: 9JCKzxl304HogD3g/U8qhiKk5VhBgRGL7TcrI50UmxY= Subject key identifier: 61:24:CD:4B:29:4D:C4:56:86:0A:2B:FC:BD:28:28:0B:4F:0F:22:C1 Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617 Certificate serial: 019BF6F58A744A0F53018B4779C784848934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft Manifest number: 106B Signing time: Sun 25 Jan 2026 21:00:45 +0000 Manifest this update: Sun 25 Jan 2026 21:00:45 +0000 Manifest next update: Mon 26 Jan 2026 21:00:45 +0000 Files and hashes: 1: 7MqIqmbLOZCvYlEMG9u9KyE6Ytk.roa (hash: zRxcr077zFRaZAIgIWm+iYU3FdaVL/l6dLqFNAGhIKM=) 2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: V2Q6XozWEeTzotsO2FjNp1mXvChWsJxvb7ORC3F9pSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:8a:74:4a:0f:53:01:8b:47:79:c7:84:84:89:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617 Validity Not Before: Jan 25 21:00:45 2026 GMT Not After : Jan 26 21:00:45 2026 GMT Subject: CN=6124cd4b294dc456860a2bfcbd28280b4f0f22c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:d1:dd:31:f1:e6:9a:fa:6e:1f:f2:47:cb: 9e:3f:ba:89:d4:fc:8e:4c:ad:21:06:4a:84:8e:6f: 59:75:60:dc:2e:92:83:3b:77:bf:ea:99:b5:23:82: bb:76:f8:7c:d9:eb:23:f1:96:88:d0:fd:bd:8d:f7: c7:f0:05:f1:d6:c1:41:1b:66:6f:e1:be:90:9a:83: 63:5c:30:4f:ac:b9:b0:e6:6b:59:69:60:b6:0a:8f: 2d:86:29:cd:4b:68:bc:f4:a0:d4:08:87:15:fd:03: 2e:39:50:6d:ad:89:03:0d:4f:c9:fe:d7:6c:e2:f8: 31:3a:0b:17:df:56:09:15:ac:ee:bc:e0:be:c0:0f: 06:22:12:7c:af:4a:9c:aa:dd:76:da:9b:be:f6:a5: 7e:59:e0:86:11:7a:32:ba:9d:b0:ca:87:79:f2:5e: be:ac:23:41:d8:64:45:50:34:3d:fc:25:25:52:8b: 45:c8:e9:c9:bf:9f:98:ae:b6:24:c7:56:74:33:3f: 45:d5:75:79:e2:29:20:37:94:e2:de:81:db:cd:b5: 13:b3:cb:11:0e:50:6f:02:46:4b:5d:4c:38:11:b8: 5e:ba:6a:18:da:f6:48:e5:b6:01:fc:52:9c:9d:11: 2d:1c:25:1c:43:8e:86:8b:b9:7f:b2:2a:3e:7e:19: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:CD:4B:29:4D:C4:56:86:0A:2B:FC:BD:28:28:0B:4F:0F:22:C1 X509v3 Authority Key Identifier: keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c6:7c:17:a7:52:c1:5e:a0:99:84:ec:3d:b4:8c:fd:9a:68: 9b:d2:a7:e7:07:84:d6:e4:0a:4f:9c:c0:4c:0e:dc:f6:bd:ad: f8:03:14:8d:54:9e:e4:82:5b:47:45:30:00:c4:29:07:54:f1: 14:ee:32:a8:88:2d:2c:df:c4:b1:6b:fd:32:fd:89:7d:0e:7b: 55:b0:8e:b1:1e:85:aa:b3:c2:66:41:13:ff:48:53:40:5d:1b: 59:bb:50:ba:87:26:4d:a4:72:7b:9d:81:61:81:7f:db:78:d6: b6:44:6f:96:79:5a:66:60:61:1a:39:1a:96:85:99:89:ca:6f: a5:29:2e:27:9b:c2:0b:85:75:09:0a:bf:4c:c7:6e:3b:b8:cc: 28:96:b1:6f:ba:0e:d4:d5:4f:e1:54:13:27:b3:00:6d:5f:c1: 75:f7:19:b8:26:bd:1f:46:ac:41:31:77:11:d7:34:59:73:7e: 71:80:fa:27:2f:23:35:fd:08:72:8d:5a:85:c5:55:41:26:fc: 61:d2:29:0a:45:ea:3b:0b:90:ae:e8:65:ce:8c:e5:2b:dc:90: e1:62:96:e6:af:c5:12:58:a4:d0:ca:99:12:89:3c:76:8f:ea: 3d:1b:a7:44:4f:ef:2a:93:5e:70:73:a0:94:a9:cb:f9:1f:ca: e8:2a:35:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Yp0Sg9TAYtHeceEhIk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1 OTI2MTcwHhcNMjYwMTI1MjEwMDQ1WhcNMjYwMTI2MjEwMDQ1WjAzMTEwLwYDVQQD Eyg2MTI0Y2Q0YjI5NGRjNDU2ODYwYTJiZmNiZDI4MjgwYjRmMGYyMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4DR3THx5pr6bh/yR8ueP7qJ1PyO TK0hBkqEjm9ZdWDcLpKDO3e/6pm1I4K7dvh82esj8ZaI0P29jffH8AXx1sFBG2Zv 4b6QmoNjXDBPrLmw5mtZaWC2Co8thinNS2i89KDUCIcV/QMuOVBtrYkDDU/J/tds 4vgxOgsX31YJFazuvOC+wA8GIhJ8r0qcqt122pu+9qV+WeCGEXoyup2wyod58l6+ rCNB2GRFUDQ9/CUlUotFyOnJv5+YrrYkx1Z0Mz9F1XV54ikgN5Ti3oHbzbUTs8sR DlBvAkZLXUw4EbheumoY2vZI5bYB/FKcnREtHCUcQ46Gi7l/sio+fhmTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEkzUspTcRWhgor/L0oKAtPDyLBMB8GA1UdIwQY MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et NjRlNTJiOWRkOGQxLzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScZ8F6dS wV6gmYTsPbSM/Zpom9Kn5weE1uQKT5zATA7c9r2t+AMUjVSe5IJbR0UwAMQpB1Tx FO4yqIgtLN/EsWv9Mv2JfQ57VbCOsR6FqrPCZkET/0hTQF0bWbtQuocmTaRye52B YYF/23jWtkRvlnlaZmBhGjkaloWZicpvpSkuJ5vCC4V1CQq/TMduO7jMKJaxb7oO 1NVP4VQTJ7MAbV/BdfcZuCa9H0asQTF3Edc0WXN+cYD6Jy8jNf0Ico1ahcVVQSb8 YdIpCkXqOwuQruhlzozlK9yQ4WKW5q/FElik0MqZEok8do/qPRunRE/vKpNecHOg lKnL+R/K6Co1XQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:04 2026 by rpki-client