This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: 5JYVObEnCMDehMtX7OWyOrQ0vZMitxO07zaf3mUOKXo= Subject key identifier: 50:93:DD:12:88:B9:80:6B:97:E7:24:17:D4:E6:F2:16:17:1E:15:2E Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019BF2E1BB014CE7681BD36377855B42A90B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1810 Signing time: Sun 25 Jan 2026 02:00:38 +0000 Manifest this update: Sun 25 Jan 2026 02:00:38 +0000 Manifest next update: Mon 26 Jan 2026 02:00:38 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 1iEYAutxUY8Sk1LUURodyK_769I.roa (hash: xYW7bvZXfmBgnKNsTynuusrlfWM99SgeNDEpVUkOteQ=) 4: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 5: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: bcy58LLWVaU11m4HzrKLDtRAxazIpLwrDyB8R6BXomU=) 6: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 7: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:bb:01:4c:e7:68:1b:d3:63:77:85:5b:42:a9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 25 02:00:38 2026 GMT Not After : Jan 26 02:00:38 2026 GMT Subject: CN=5093dd1288b9806b97e72417d4e6f216171e152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:37:0c:81:11:e6:a2:36:ff:c0:e7:80:95:4a: e2:a4:64:a2:b5:63:ff:01:e1:0a:6d:67:60:b2:16: 8f:e9:0a:25:4d:3c:26:49:68:31:eb:ba:51:21:b6: 6f:63:4d:a1:7a:b5:41:74:ce:98:1d:04:c2:27:97: 5d:22:b3:fd:0e:fd:96:6f:c1:53:51:75:ff:f0:89: 06:6e:1b:d8:86:fd:f9:cf:83:fc:52:06:cb:62:09: 05:ed:d0:bd:44:f9:88:b1:8a:a2:d7:ce:31:5b:9f: 94:08:3d:aa:f3:88:0b:eb:ac:72:37:ba:4a:fc:2f: 4e:94:3f:a1:b0:0b:16:ab:a7:b6:03:ef:43:e4:7a: 10:50:78:48:03:22:a6:9b:56:09:53:1f:99:67:da: a5:5b:a2:e4:aa:a3:62:87:8d:ba:ff:67:12:f5:ff: fb:24:05:33:8b:20:88:7f:39:b5:fa:a8:41:8f:95: 4f:a8:d9:ce:b1:37:7b:01:d9:1a:96:9f:e8:26:e2: 36:e5:6a:82:9b:c9:00:c4:7d:ed:9d:76:91:ac:e5: 57:15:3d:df:b1:a6:e7:eb:89:ad:75:7c:a2:30:4e: 67:96:5a:65:cf:11:dd:69:73:d2:b6:86:33:7f:98: b5:fa:c9:a1:06:9d:bb:bd:01:2b:63:b2:0a:2c:b9: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:DD:12:88:B9:80:6B:97:E7:24:17:D4:E6:F2:16:17:1E:15:2E X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:e8:2f:45:08:04:1e:47:95:9a:2f:03:63:cd:eb:ca:5a:2a: e5:07:9d:cb:66:c3:69:fe:36:58:5f:38:0a:82:6e:b1:72:33: 9b:4d:32:40:5e:82:f1:6a:86:67:8b:6d:1a:33:7b:56:2c:cd: d2:01:0e:68:b5:29:03:15:d1:5e:04:e6:ed:6d:b3:65:3d:ae: 4a:d3:7d:6b:33:f5:08:45:76:9c:25:a8:ec:e3:16:f2:5b:2b: c5:ec:25:8b:04:08:c4:ae:dd:93:f2:f8:2e:5b:af:5e:74:62: 27:c4:da:61:47:41:d7:87:f7:ee:54:0c:1c:cc:79:e3:60:7c: 40:56:a5:c7:97:c9:a3:9b:9c:23:07:02:ae:8b:cd:15:9a:e9: 8a:42:f4:a4:b6:a5:84:f1:23:8f:61:c4:ca:9d:64:3c:d3:19: 51:2d:d6:c7:6d:46:13:d8:27:1d:7a:06:77:2e:83:9a:af:2d: 7f:fe:38:09:79:95:af:c2:96:b8:47:b2:b9:b7:dc:97:3c:ec: 22:11:c6:53:6c:bc:7b:84:3f:6c:f8:f3:a1:63:54:40:90:c6: de:67:91:f6:37:70:44:2d:77:00:71:38:5a:ce:64:bb:eb:7f: 3b:2b:24:8b:90:8c:83:8d:6a:9c:ee:ab:fc:aa:95:83:6a:3d: ca:5b:82:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4bsBTOdoG9Njd4VbQqkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTI1MDIwMDM4WhcNMjYwMTI2MDIwMDM4WjAzMTEwLwYDVQQD Eyg1MDkzZGQxMjg4Yjk4MDZiOTdlNzI0MTdkNGU2ZjIxNjE3MWUxNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zcMgRHmojb/wOeAlUripGSitWP/ AeEKbWdgshaP6QolTTwmSWgx67pRIbZvY02herVBdM6YHQTCJ5ddIrP9Dv2Wb8FT UXX/8IkGbhvYhv35z4P8UgbLYgkF7dC9RPmIsYqi184xW5+UCD2q84gL66xyN7pK /C9OlD+hsAsWq6e2A+9D5HoQUHhIAyKmm1YJUx+ZZ9qlW6LkqqNih426/2cS9f/7 JAUziyCIfzm1+qhBj5VPqNnOsTd7Adkalp/oJuI25WqCm8kAxH3tnXaRrOVXFT3f sabn64mtdXyiME5nllplzxHdaXPStoYzf5i1+smhBp27vQErY7IKLLkYfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCT3RKIuYBrl+ckF9Tm8hYXHhUuMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ugvRQgE HkeVmi8DY83ryloq5Qedy2bDaf42WF84CoJusXIzm00yQF6C8WqGZ4ttGjN7VizN 0gEOaLUpAxXRXgTm7W2zZT2uStN9azP1CEV2nCWo7OMW8lsrxewliwQIxK7dk/L4 LluvXnRiJ8TaYUdB14f37lQMHMx542B8QFalx5fJo5ucIwcCrovNFZrpikL0pLal hPEjj2HEyp1kPNMZUS3Wx21GE9gnHXoGdy6Dmq8tf/44CXmVr8KWuEeyubfclzzs IhHGU2y8e4Q/bPjzoWNUQJDG3meR9jdwRC13AHE4Ws5ku+t/Oyski5CMg41qnO6r /KqVg2o9yluC5A== -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:38 2026 by rpki-client