This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json) Hash identifier: ZIMWO1IdB3VYjEFqvINkKbksS5AqbOP0tt0du7tennk= Subject key identifier: AB:EC:4E:E7:9E:8E:CC:97:C2:FA:AE:0E:FE:CA:BD:57:63:AD:04:6C Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f Certificate serial: 019BF619A31FB2D25ADBB50415C66F1F9805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 17:00:33 +0000 Manifest this update: Sun 25 Jan 2026 17:00:33 +0000 Manifest next update: Mon 26 Jan 2026 17:00:33 +0000 Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: Vc8z/9xZ8SN3ugrlKu6Kimk/aTT9KjNII8oOYtBkCFs=) 2: rgV_YHXJTzBMuCLXNvJrah_1fI4.roa (hash: zXS5BhZMEhE+70Rk0zddRLFewXhA36j+GXNP73VBI6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a3:1f:b2:d2:5a:db:b5:04:15:c6:6f:1f:98:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f Validity Not Before: Jan 25 17:00:33 2026 GMT Not After : Jan 26 17:00:33 2026 GMT Subject: CN=abec4ee79e8ecc97c2faae0efecabd5763ad046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:a2:70:43:d2:16:32:4e:03:c2:8f:bc:02: 87:2a:f3:3a:f6:9a:06:2e:d8:b0:92:1f:6f:11:37: c7:70:39:46:9e:47:dc:3f:ff:1a:92:11:3c:ca:91: 84:7a:9c:f9:2d:49:ac:2c:6e:73:e4:73:f8:9d:6d: f7:39:93:d0:17:a6:27:8d:58:9e:d5:46:c7:27:d8: fc:8a:c8:f6:cb:91:24:67:55:83:e4:41:2c:2e:45: 8b:9b:b9:98:c2:54:39:b5:ab:8d:02:96:4c:24:44: a4:0c:a9:1d:08:cc:1f:90:d1:90:90:7b:6d:cc:41: 0f:ba:b2:d7:e4:6e:35:e1:e0:84:2c:81:be:b9:2a: 5f:0c:59:3e:25:68:e6:6b:04:65:23:fe:b5:8b:e2: 87:0d:eb:a6:e4:60:e7:95:ce:b7:86:df:55:99:8a: 3a:79:19:a6:92:12:a9:e6:c2:71:51:4e:2c:4b:b0: 6b:d3:f6:df:3b:f2:92:f8:11:00:5f:45:58:c4:11: 37:c5:64:b8:7e:33:d4:2e:d8:42:82:18:f7:6e:aa: b4:bb:ed:5a:12:6c:ce:f0:d8:c3:0b:dc:cd:dd:03: 17:88:ca:dc:8b:31:78:e7:a9:86:58:56:eb:67:56: 42:eb:29:b6:81:d8:f4:32:79:10:78:4c:11:40:a5: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:4E:E7:9E:8E:CC:97:C2:FA:AE:0E:FE:CA:BD:57:63:AD:04:6C X509v3 Authority Key Identifier: keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5c:67:83:13:b0:16:cf:75:97:fd:cc:b6:54:a1:f8:b6:f4: 41:5f:15:03:61:48:20:41:09:f5:03:b5:69:b6:d3:8f:33:8e: 7e:eb:eb:21:c0:a7:2a:31:37:ca:ec:dc:94:36:94:d8:b0:91: 3c:6c:d3:fe:76:76:0d:f1:eb:d8:ce:36:a4:2d:2f:1d:11:ec: 26:00:7b:04:a4:64:43:1a:29:6f:9f:e6:19:a0:77:49:90:95: 40:f1:28:10:1d:72:ac:48:30:5d:bc:d1:0b:06:c3:9d:f2:06: 6c:1f:2f:fb:ad:96:d2:32:7b:4a:9b:47:0a:5e:1d:75:27:49: 99:04:58:33:b7:5a:25:00:60:27:ce:b1:0f:51:f0:9f:c1:41: 58:b0:a9:21:15:bd:c9:87:90:c9:b1:94:b0:ed:1d:cd:ca:9c: 40:c9:89:dd:41:1c:e1:20:ee:4e:a9:ec:69:04:bd:63:60:97: 15:b8:1e:88:19:fe:3f:84:36:2c:8d:57:01:5d:61:0a:db:fc: 86:9b:04:1a:4a:9e:44:5b:8b:18:86:76:d8:b3:9a:8b:d4:fb: 9b:fa:12:f9:9c:1c:5e:96:c3:68:84:62:2f:e9:ca:83:d0:79: 62:ac:f9:58:93:42:6f:42:90:d6:a2:1c:ec:a0:38:ca:c2:37: 7a:ed:73:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GaMfstJa27UEFcZvH5gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw OWIxN2YwHhcNMjYwMTI1MTcwMDMzWhcNMjYwMTI2MTcwMDMzWjAzMTEwLwYDVQQD EyhhYmVjNGVlNzllOGVjYzk3YzJmYWFlMGVmZWNhYmQ1NzYzYWQwNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9qicEPSFjJOA8KPvAKHKvM69poG Ltiwkh9vETfHcDlGnkfcP/8akhE8ypGEepz5LUmsLG5z5HP4nW33OZPQF6YnjVie 1UbHJ9j8isj2y5EkZ1WD5EEsLkWLm7mYwlQ5tauNApZMJESkDKkdCMwfkNGQkHtt zEEPurLX5G414eCELIG+uSpfDFk+JWjmawRlI/61i+KHDeum5GDnlc63ht9VmYo6 eRmmkhKp5sJxUU4sS7Br0/bfO/KS+BEAX0VYxBE3xWS4fjPULthCghj3bqq0u+1a EmzO8NjDC9zN3QMXiMrcizF456mGWFbrZ1ZC6ym2gdj0MnkQeEwRQKVSwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvsTueejsyXwvquDv7KvVdjrQRsMB8GA1UdIwQY MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFxngxOw Fs91l/3MtlSh+Lb0QV8VA2FIIEEJ9QO1abbTjzOOfuvrIcCnKjE3yuzclDaU2LCR PGzT/nZ2DfHr2M42pC0vHRHsJgB7BKRkQxopb5/mGaB3SZCVQPEoEB1yrEgwXbzR CwbDnfIGbB8v+62W0jJ7SptHCl4ddSdJmQRYM7daJQBgJ86xD1Hwn8FBWLCpIRW9 yYeQybGUsO0dzcqcQMmJ3UEc4SDuTqnsaQS9Y2CXFbgeiBn+P4Q2LI1XAV1hCtv8 hpsEGkqeRFuLGIZ22LOai9T7m/oS+ZwcXpbDaIRiL+nKg9B5Yqz5WJNCb0KQ1qIc 7KA4ysI3eu1z8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:38 2026 by rpki-client