This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json) Hash identifier: PuSD9E6j9QdXjtKWZy4AnOoKVju/sD8535eOBy2x+zI= Subject key identifier: 85:10:9C:58:83:7E:BE:16:CD:1F:8A:E7:51:12:9C:1D:6F:84:40:88 Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Certificate serial: 019BF6510D8BA862A52B4B67E67EFEA97DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft Manifest number: 0F1F Signing time: Sun 25 Jan 2026 18:01:05 +0000 Manifest this update: Sun 25 Jan 2026 18:01:05 +0000 Manifest next update: Mon 26 Jan 2026 18:01:05 +0000 Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: DCcSoFOogZogEMt/xGi8Wno6p/T2SZu7M5LoJUzesyM=) 2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:0d:8b:a8:62:a5:2b:4b:67:e6:7e:fe:a9:7d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Validity Not Before: Jan 25 18:01:05 2026 GMT Not After : Jan 26 18:01:05 2026 GMT Subject: CN=85109c58837ebe16cd1f8ae751129c1d6f844088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:00:5c:92:6f:f7:24:a0:c0:3f:53:ae:66: 97:d0:13:a8:1c:f8:d9:03:62:fa:10:57:35:eb:fd: 2a:09:c4:34:c8:8d:bb:ad:03:27:e2:a0:a6:4b:fa: 4d:55:b4:e3:3a:8e:04:55:ef:34:13:94:ef:5c:1f: 2b:1c:d9:e0:fd:25:1c:65:95:73:30:f6:96:1b:1f: 0a:04:5d:ad:05:8f:54:d4:6d:24:e3:2b:6e:88:14: 46:0f:04:84:cf:41:22:7b:b9:eb:8f:84:97:06:b0: e6:87:7a:9a:2a:8e:71:f1:75:34:b6:60:5e:11:66: 4e:ec:fa:56:11:0c:2a:99:12:6f:56:27:7b:65:fb: 0b:c1:d4:a9:54:a9:c0:5e:f8:e5:83:fa:30:fd:dd: 11:bf:e8:fa:88:8f:11:ac:5e:11:c2:68:bb:4a:2b: 79:37:a3:3a:f0:4f:83:46:93:a9:6d:d6:48:2c:0e: 2b:b9:db:bb:44:e0:7f:2f:78:1d:f5:08:8a:7a:2a: 57:0a:cc:b0:0a:d6:ba:c4:6c:b2:26:78:1f:91:f4: 7e:ab:f0:cd:48:23:ff:17:12:44:ab:be:49:53:61: 7f:96:1b:0b:b4:68:19:41:47:2d:e5:8c:2c:6d:b4: 84:3a:95:c9:c8:33:a9:2b:e4:10:11:64:84:ac:31: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:9C:58:83:7E:BE:16:CD:1F:8A:E7:51:12:9C:1D:6F:84:40:88 X509v3 Authority Key Identifier: keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:b5:88:7e:f5:0d:9f:bd:a2:3e:23:98:71:aa:e7:81:71: 28:3a:1d:93:59:15:c2:06:e5:3a:97:a5:18:f5:a8:b1:8a:e2: e2:61:df:30:a7:31:34:e0:b5:95:cc:ed:e8:df:ee:6e:c5:02: 11:1e:47:f4:1b:e6:f0:8e:25:6a:f2:92:41:a8:c0:2a:98:ee: 33:ed:a6:d3:2e:a2:06:80:65:2d:55:c9:a1:f1:f3:0e:9a:dc: ca:35:90:01:57:4c:8e:dd:68:dd:2f:85:91:12:d8:4f:6f:6b: 48:11:1a:a0:c3:4c:56:91:48:a8:0f:17:4b:64:c0:da:c5:c8: 04:35:0f:b7:9e:d4:c3:9e:10:dd:7b:25:8a:42:80:7b:61:d6: 21:30:f2:58:8e:d3:b3:9f:62:5c:31:02:d4:f2:3f:3a:53:f2: eb:64:b3:f5:06:83:c6:cf:14:ce:16:ad:ee:8c:d4:44:df:64: ef:00:cb:cf:a2:76:92:b2:5e:e3:9a:a3:9d:32:53:ab:46:ec: f3:7a:97:38:59:fc:c6:7d:b9:44:3d:cb:47:25:be:88:83:bf: 5e:38:40:2b:26:48:13:01:a0:41:f7:64:ab:28:15:68:e3:7d: 82:9a:2b:e5:d9:ef:29:fa:5f:04:6b:8e:77:b4:49:7c:9b:c0: 8b:e7:dd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQ2LqGKlK0tn5n7+qX3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh NDhhYmEwHhcNMjYwMTI1MTgwMTA1WhcNMjYwMTI2MTgwMTA1WjAzMTEwLwYDVQQD Eyg4NTEwOWM1ODgzN2ViZTE2Y2QxZjhhZTc1MTEyOWMxZDZmODQ0MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn64AXJJv9ySgwD9TrmaX0BOoHPjZ A2L6EFc16/0qCcQ0yI27rQMn4qCmS/pNVbTjOo4EVe80E5TvXB8rHNng/SUcZZVz MPaWGx8KBF2tBY9U1G0k4ytuiBRGDwSEz0Eie7nrj4SXBrDmh3qaKo5x8XU0tmBe EWZO7PpWEQwqmRJvVid7ZfsLwdSpVKnAXvjlg/ow/d0Rv+j6iI8RrF4Rwmi7Sit5 N6M68E+DRpOpbdZILA4rudu7ROB/L3gd9QiKeipXCsywCta6xGyyJngfkfR+q/DN SCP/FxJEq75JU2F/lhsLtGgZQUct5YwsbbSEOpXJyDOpK+QQEWSErDGMtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUQnFiDfr4WzR+K51ESnB1vhECIMB8GA1UdIwQY MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeO1iH71 DZ+9oj4jmHGq54FxKDodk1kVwgblOpelGPWosYri4mHfMKcxNOC1lczt6N/ubsUC ER5H9Bvm8I4lavKSQajAKpjuM+2m0y6iBoBlLVXJofHzDprcyjWQAVdMjt1o3S+F kRLYT29rSBEaoMNMVpFIqA8XS2TA2sXIBDUPt57Uw54Q3XslikKAe2HWITDyWI7T s59iXDEC1PI/OlPy62Sz9QaDxs8Uzhat7ozURN9k7wDLz6J2krJe45qjnTJTq0bs 83qXOFn8xn25RD3LRyW+iIO/XjhAKyZIEwGgQfdkqygVaON9gpor5dnvKfpfBGuO d7RJfJvAi+fdAw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:12 2026 by rpki-client