This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json) Hash identifier: JQPOv1o8Gm75RVMTitSUPDh3tM22i4MXAfDfzlBwe9k= Subject key identifier: BF:4C:7C:53:86:36:2E:5A:F5:FF:82:F5:A0:56:7F:A0:52:D2:60:F6 Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Certificate serial: 019BF8089A821292D3E112ABA029BBD65102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 02:01:11 +0000 Manifest this update: Mon 26 Jan 2026 02:01:11 +0000 Manifest next update: Tue 27 Jan 2026 02:01:11 +0000 Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: O+LyN/R1AcRFCS0UVTMkQE9sXsJ4GGGoOKbql9MxO7E=) 2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:9a:82:12:92:d3:e1:12:ab:a0:29:bb:d6:51:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Validity Not Before: Jan 26 02:01:11 2026 GMT Not After : Jan 27 02:01:11 2026 GMT Subject: CN=bf4c7c5386362e5af5ff82f5a0567fa052d260f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:30:d0:09:ef:a5:3b:dd:e3:fd:6c:d5:96: 49:7c:54:29:3c:b0:82:2a:41:46:c8:84:e6:13:ed: d1:e4:1f:11:b3:67:d0:31:73:f3:42:a2:2a:5e:3d: bf:d7:75:fc:bc:30:bb:bf:d0:74:11:0d:82:0a:28: 40:17:47:23:d7:e8:0b:9f:0b:1a:f7:0f:dc:30:04: ad:3b:b1:76:80:de:0a:2c:27:46:0d:ea:1a:43:34: b8:4f:52:ef:51:98:3f:a0:81:bf:ed:ff:4e:27:c4: f7:10:57:93:45:7f:38:66:8a:59:2b:a2:9d:70:df: 64:14:91:1a:da:bf:38:24:4d:02:52:dd:7b:65:bf: 93:f6:10:e0:07:10:8f:ee:8b:94:22:52:2e:22:3a: ef:0f:1c:f1:10:45:5c:4f:f5:a4:1b:63:35:34:f5: 8f:1d:e0:d2:c8:42:97:e1:ec:99:85:9c:fe:90:66: 9b:6e:34:6b:85:4f:8a:bb:0e:30:9c:fb:87:09:aa: 1f:b9:9f:90:c3:ae:3d:0b:e1:23:eb:da:89:e4:8e: 72:21:1e:77:10:62:b6:82:57:83:26:a0:b4:90:73: 93:ad:a0:cd:3c:9f:6d:19:2d:5c:cd:00:05:61:07: de:6f:02:f9:a1:ce:24:d9:af:0e:7a:12:44:ab:ae: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4C:7C:53:86:36:2E:5A:F5:FF:82:F5:A0:56:7F:A0:52:D2:60:F6 X509v3 Authority Key Identifier: keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:41:9a:5a:79:89:c1:20:c4:20:b4:b9:39:74:2f:16:2f:ef: 41:95:91:12:c7:b3:70:67:68:92:69:3d:f4:60:65:75:4d:d9: 5c:9b:63:18:44:88:49:b8:b0:b7:f4:c7:db:66:b8:30:49:8d: e0:4d:52:4f:5d:af:a2:56:9d:1d:37:93:26:90:81:17:1d:55: 72:16:74:51:0f:c0:d8:42:dd:c5:2b:f9:3d:f1:1b:67:1f:69: a0:5b:bf:3b:2e:ec:1c:b1:32:52:59:42:19:c4:45:2a:8b:a9: e4:be:ff:b4:99:80:1d:f1:3b:ec:62:4d:d8:f6:77:e1:ad:b7: e6:37:d0:31:37:29:67:c9:c9:b3:59:d0:11:af:4c:b4:a8:90: e0:10:16:cd:01:85:ad:58:40:24:c3:59:55:9c:1c:0e:ce:c8: 74:64:34:93:d3:37:78:c8:8b:06:54:d5:07:32:bf:11:51:5e: 64:94:53:6b:6f:5a:d4:41:3c:ba:8c:4d:58:02:94:52:b0:1b: c6:54:b1:5d:e8:4a:b0:c5:47:07:dd:ff:c5:59:c9:42:a0:36: 5f:b5:da:61:9b:f8:f0:43:48:5d:29:a8:16:d7:cc:3f:6a:e8: aa:43:df:38:cc:10:e4:86:ea:3b:cf:99:e9:f5:80:02:7b:a2: a5:23:6c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJqCEpLT4RKroCm71lECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk OTlhYWIwHhcNMjYwMTI2MDIwMTExWhcNMjYwMTI3MDIwMTExWjAzMTEwLwYDVQQD EyhiZjRjN2M1Mzg2MzYyZTVhZjVmZjgyZjVhMDU2N2ZhMDUyZDI2MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvIw0AnvpTvd4/1s1ZZJfFQpPLCC KkFGyITmE+3R5B8Rs2fQMXPzQqIqXj2/13X8vDC7v9B0EQ2CCihAF0cj1+gLnwsa 9w/cMAStO7F2gN4KLCdGDeoaQzS4T1LvUZg/oIG/7f9OJ8T3EFeTRX84ZopZK6Kd cN9kFJEa2r84JE0CUt17Zb+T9hDgBxCP7ouUIlIuIjrvDxzxEEVcT/WkG2M1NPWP HeDSyEKX4eyZhZz+kGabbjRrhU+Kuw4wnPuHCaofuZ+Qw649C+Ej69qJ5I5yIR53 EGK2gleDJqC0kHOTraDNPJ9tGS1czQAFYQfebwL5oc4k2a8OehJEq647MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9MfFOGNi5a9f+C9aBWf6BS0mD2MB8GA1UdIwQY MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2 LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkGaWnmJ wSDEILS5OXQvFi/vQZWREsezcGdokmk99GBldU3ZXJtjGESISbiwt/TH22a4MEmN 4E1ST12voladHTeTJpCBFx1VchZ0UQ/A2ELdxSv5PfEbZx9poFu/Oy7sHLEyUllC GcRFKoup5L7/tJmAHfE77GJN2PZ34a235jfQMTcpZ8nJs1nQEa9MtKiQ4BAWzQGF rVhAJMNZVZwcDs7IdGQ0k9M3eMiLBlTVBzK/EVFeZJRTa29a1EE8uoxNWAKUUrAb xlSxXehKsMVHB93/xVnJQqA2X7XaYZv48ENIXSmoFtfMP2roqkPfOMwQ5IbqO8+Z 6fWAAnuipSNsNA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:22 2026 by rpki-client