This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json) Hash identifier: rYFs8Uzd51srsG/VdSf+c3OWxpm5oSBWboZFEnkeAoU= Subject key identifier: 2E:01:50:E1:A6:08:C0:38:85:45:FB:9E:A5:63:44:35:1C:43:20:6F Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Certificate serial: 019BF53E803A00CA8E75866E97EC16C304FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft Manifest number: A0 Signing time: Sun 25 Jan 2026 13:01:12 +0000 Manifest this update: Sun 25 Jan 2026 13:01:12 +0000 Manifest next update: Mon 26 Jan 2026 13:01:12 +0000 Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: y510xFYD2DnUFD3/kyBV0U++Z09q7YlTh6T8Ql0m87E=) 2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:80:3a:00:ca:8e:75:86:6e:97:ec:16:c3:04:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Validity Not Before: Jan 25 13:01:12 2026 GMT Not After : Jan 26 13:01:12 2026 GMT Subject: CN=2e0150e1a608c0388545fb9ea56344351c43206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:71:00:ec:b1:5d:4a:fd:e7:d3:16:c1:fc: 6c:58:bf:d7:d2:b7:60:06:2a:21:63:43:15:f3:69: ea:67:ab:6e:15:c3:cd:cb:22:ae:87:26:9c:9e:3f: 26:ea:66:24:af:97:c3:96:cf:85:69:1a:e0:8b:73: 52:d3:67:46:ee:1b:f6:c8:3c:38:32:5f:77:52:46: 71:59:ae:09:e9:82:4a:f3:57:b5:95:c0:fd:23:94: 26:a0:75:21:6a:55:65:8a:3f:c9:a8:24:53:3a:93: 38:57:75:26:84:d9:71:24:6e:8e:3e:fe:49:9d:87: 09:d6:08:84:eb:cf:dc:8c:6f:81:d1:83:35:a0:9a: b0:69:11:6b:b5:ec:14:2c:42:04:b1:b3:3a:4e:64: 5e:22:f0:52:25:e0:97:76:4e:fc:ca:c8:22:cc:ae: 09:68:b5:57:73:b2:51:a0:e2:84:60:42:31:07:fe: 29:f1:2b:a7:6f:30:c1:f9:83:05:c7:5a:8d:15:46: b2:81:f9:df:39:fe:6b:40:af:c5:5d:0c:73:35:c5: 75:74:e8:49:d6:7f:c0:ed:33:fe:47:ed:64:9a:0a: 7d:f7:c5:d5:54:a0:a4:7a:ea:f9:c3:a4:f2:33:e7: 09:f5:a3:3d:ce:78:28:29:eb:9f:c9:32:e3:8e:b0: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:50:E1:A6:08:C0:38:85:45:FB:9E:A5:63:44:35:1C:43:20:6F X509v3 Authority Key Identifier: keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c2:73:75:37:a4:37:b6:4f:94:9f:f6:e2:79:1c:38:8f:e4: 4b:ed:8d:38:11:df:62:89:4a:30:35:bb:f9:23:ae:9b:17:43: 60:2e:ae:73:e5:1c:8d:61:57:9d:02:ab:f3:91:7a:6d:29:27: e9:b6:72:37:91:b9:72:6f:fc:d1:b3:1b:09:44:48:c4:9c:92: 49:44:34:c4:01:bf:6c:93:f5:d7:f0:82:5f:57:07:2b:a3:a7: 92:67:9f:b3:95:61:86:e3:97:36:6a:21:af:58:d7:a6:bf:a7: 80:ab:c5:53:23:22:dd:90:09:c3:3c:2e:82:c9:c9:e0:5d:8f: 3d:2d:4e:9a:6f:3e:33:c0:e9:c9:e0:b7:2d:48:73:19:ff:9c: 09:4d:b9:94:be:c9:27:c6:3d:e9:d4:cf:63:81:0b:68:40:04: 31:a3:4b:1a:0d:87:4b:08:91:d1:db:1d:57:6e:5d:fc:04:44: eb:2b:e9:f2:e0:bc:53:c4:76:30:24:07:b8:d3:3d:f7:5f:2b: 65:72:4b:e2:c2:b7:17:a0:b5:b8:73:9e:1f:9a:7c:7f:99:09: ef:8c:2f:6c:4f:b3:ab:fd:66:70:08:8b:87:71:9d:4a:2c:04: 1c:3c:08:40:83:5c:aa:12:07:0c:fb:e3:44:b2:a1:79:c0:01: df:fd:62:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PoA6AMqOdYZul+wWwwT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm ZWE4OTIwHhcNMjYwMTI1MTMwMTEyWhcNMjYwMTI2MTMwMTEyWjAzMTEwLwYDVQQD EygyZTAxNTBlMWE2MDhjMDM4ODU0NWZiOWVhNTYzNDQzNTFjNDMyMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+9xAOyxXUr959MWwfxsWL/X0rdg BiohY0MV82nqZ6tuFcPNyyKuhyacnj8m6mYkr5fDls+FaRrgi3NS02dG7hv2yDw4 Ml93UkZxWa4J6YJK81e1lcD9I5QmoHUhalVlij/JqCRTOpM4V3UmhNlxJG6OPv5J nYcJ1giE68/cjG+B0YM1oJqwaRFrtewULEIEsbM6TmReIvBSJeCXdk78ysgizK4J aLVXc7JRoOKEYEIxB/4p8SunbzDB+YMFx1qNFUaygfnfOf5rQK/FXQxzNcV1dOhJ 1n/A7TP+R+1kmgp998XVVKCkeur5w6TyM+cJ9aM9zngoKeufyTLjjrBt7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4BUOGmCMA4hUX7nqVjRDUcQyBvMB8GA1UdIwQY MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsJzdTek N7ZPlJ/24nkcOI/kS+2NOBHfYolKMDW7+SOumxdDYC6uc+UcjWFXnQKr85F6bSkn 6bZyN5G5cm/80bMbCURIxJySSUQ0xAG/bJP11/CCX1cHK6Onkmefs5VhhuOXNmoh r1jXpr+ngKvFUyMi3ZAJwzwugsnJ4F2PPS1Omm8+M8DpyeC3LUhzGf+cCU25lL7J J8Y96dTPY4ELaEAEMaNLGg2HSwiR0dsdV25d/ARE6yvp8uC8U8R2MCQHuNM9918r ZXJL4sK3F6C1uHOeH5p8f5kJ74wvbE+zq/1mcAiLh3GdSiwEHDwIQINcqhIHDPvj RLKhecAB3/1itQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:58 2026 by rpki-client