This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json) Hash identifier: jPgo5b13bqN4lagmd+EVz1PLmhgyGjnrLzoC2V0/ufE= Subject key identifier: 5F:D5:58:53:F5:DE:E9:8E:AA:4A:9E:BE:65:3F:A3:E4:95:BD:94:F1 Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Certificate serial: 019BF7635F16A4B01DBC8BC11A83D9266E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft Manifest number: 0D2E Signing time: Sun 25 Jan 2026 23:00:43 +0000 Manifest this update: Sun 25 Jan 2026 23:00:43 +0000 Manifest next update: Mon 26 Jan 2026 23:00:43 +0000 Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: IzMWwzDVdnSY4WcEg3mRTrbDtv/k2yGysZSeeAAEOvQ=) 2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5f:16:a4:b0:1d:bc:8b:c1:1a:83:d9:26:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Validity Not Before: Jan 25 23:00:43 2026 GMT Not After : Jan 26 23:00:43 2026 GMT Subject: CN=5fd55853f5dee98eaa4a9ebe653fa3e495bd94f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:ad:a2:10:65:ce:53:40:f5:9c:33:2b:c5: 87:19:f6:e0:35:67:a1:e6:70:86:fa:08:f2:88:de: 9d:ae:8b:96:fb:56:1a:7d:ca:02:73:f8:26:62:b5: 64:da:43:94:2f:a9:ef:c9:c8:c4:f8:33:f4:67:dd: 40:c4:2d:19:ac:86:64:fb:a2:d5:ce:d7:ee:ad:0c: c3:e6:2f:bd:2c:23:96:4a:43:0f:32:e5:56:95:57: 3b:1c:86:0c:f5:5f:f5:63:66:8e:62:2a:12:35:de: 43:90:8a:87:c0:7b:93:d5:eb:76:37:26:f0:c5:15: cc:02:f6:27:70:d3:c5:aa:ff:d7:a8:58:dd:97:44: f5:03:f7:15:89:e0:d0:5e:ed:c8:e6:8d:bd:e0:81: 2e:6c:d8:72:95:d3:d9:c1:a2:a9:cd:41:6a:88:e6: e7:4a:f0:40:a2:f9:fb:3d:03:5e:b9:ba:7f:60:18: 3b:c8:25:9f:52:43:06:b3:e0:ff:9f:f9:24:1f:2f: 2e:54:e5:4d:37:a5:1b:1b:8f:7b:61:ba:b1:de:42: aa:0a:29:78:ad:05:d2:c4:37:65:f1:37:f6:2e:a9: e0:46:97:88:3d:8a:b7:c7:f0:e3:43:a2:a1:b6:b4: d7:78:9c:ec:e5:91:fe:a5:79:4f:00:14:1c:f7:ad: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:58:53:F5:DE:E9:8E:AA:4A:9E:BE:65:3F:A3:E4:95:BD:94:F1 X509v3 Authority Key Identifier: keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2a:a9:90:3a:88:dc:c6:b8:89:b5:04:e3:27:71:14:7a:c0: 5b:cf:72:fc:fb:3b:ce:56:fe:dd:e6:13:77:af:48:f6:0b:78: c9:0f:40:4c:41:d6:db:42:0b:c5:e0:ad:68:bd:ea:b2:dc:75: 2d:95:8e:15:68:b3:f0:4b:28:53:7a:4a:93:4f:8d:c1:28:9c: 8b:6f:ee:fe:8a:d3:17:34:21:05:e7:81:96:89:b7:3b:ec:b9: 4f:09:83:0a:28:e6:9e:5a:f4:13:3d:2c:03:b6:6e:42:1d:a2: 41:da:14:f9:89:80:42:5b:8d:4b:7e:25:43:b7:bf:8f:1c:e3: 2a:ef:c3:88:af:ae:02:b1:f1:04:be:c1:94:b9:3a:1d:62:f3: 0f:96:55:4a:40:ff:ac:ab:80:ee:ba:84:c5:08:f8:d7:23:b2: 3e:e5:53:51:7d:11:c5:64:d1:3a:b0:8b:2a:2d:8c:88:b0:f2: 05:52:df:23:2c:be:46:40:df:c6:22:37:19:29:d3:50:7b:3b: 00:c9:35:e8:a8:69:cf:be:a0:07:2b:96:3b:95:ae:1e:6f:e7: 02:1a:98:de:c3:50:ab:11:f7:e2:92:34:29:4d:7f:d1:58:b2: af:7e:82:22:95:07:44:6a:bb:3c:5f:c3:a6:5f:19:ce:f8:fe: 64:ba:39:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y18WpLAdvIvBGoPZJm51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk MzFiMGQwHhcNMjYwMTI1MjMwMDQzWhcNMjYwMTI2MjMwMDQzWjAzMTEwLwYDVQQD Eyg1ZmQ1NTg1M2Y1ZGVlOThlYWE0YTllYmU2NTNmYTNlNDk1YmQ5NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmWtohBlzlNA9ZwzK8WHGfbgNWeh 5nCG+gjyiN6drouW+1YafcoCc/gmYrVk2kOUL6nvycjE+DP0Z91AxC0ZrIZk+6LV ztfurQzD5i+9LCOWSkMPMuVWlVc7HIYM9V/1Y2aOYioSNd5DkIqHwHuT1et2Nybw xRXMAvYncNPFqv/XqFjdl0T1A/cVieDQXu3I5o294IEubNhyldPZwaKpzUFqiObn SvBAovn7PQNeubp/YBg7yCWfUkMGs+D/n/kkHy8uVOVNN6UbG497Ybqx3kKqCil4 rQXSxDdl8Tf2LqngRpeIPYq3x/DjQ6KhtrTXeJzs5ZH+pXlPABQc96368wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/VWFP13umOqkqevmU/o+SVvZTxMB8GA1UdIwQY MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiqpkDqI 3Ma4ibUE4ydxFHrAW89y/Ps7zlb+3eYTd69I9gt4yQ9ATEHW20ILxeCtaL3qstx1 LZWOFWiz8EsoU3pKk0+NwSici2/u/orTFzQhBeeBlom3O+y5TwmDCijmnlr0Ez0s A7ZuQh2iQdoU+YmAQluNS34lQ7e/jxzjKu/DiK+uArHxBL7BlLk6HWLzD5ZVSkD/ rKuA7rqExQj41yOyPuVTUX0RxWTROrCLKi2MiLDyBVLfIyy+RkDfxiI3GSnTUHs7 AMk16Khpz76gByuWO5WuHm/nAhqY3sNQqxH34pI0KU1/0Viyr36CIpUHRGq7PF/D pl8Zzvj+ZLo5Sw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:02 2026 by rpki-client