This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json) Hash identifier: oVlo8c/s1U9k2cUyjaOret9KhBjFhP2AAvzcmZFTT6A= Subject key identifier: F7:89:B0:34:3E:2A:F0:31:E7:1A:7E:90:80:37:8D:06:B7:73:73:9C Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Certificate serial: 019BF91B0F7A380D189CF674B9F3489C4757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft Manifest number: 07AA Signing time: Mon 26 Jan 2026 07:00:58 +0000 Manifest this update: Mon 26 Jan 2026 07:00:58 +0000 Manifest next update: Tue 27 Jan 2026 07:00:58 +0000 Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: QuQG0lRCxmd/nDfJIzLn7GBwbsfJp5aJnmzamDfY0F8=) 2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:0f:7a:38:0d:18:9c:f6:74:b9:f3:48:9c:47:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Validity Not Before: Jan 26 07:00:58 2026 GMT Not After : Jan 27 07:00:58 2026 GMT Subject: CN=f789b0343e2af031e71a7e9080378d06b773739c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:f7:bb:20:4f:86:fb:fe:69:b6:99:8f:4f: be:4b:6c:d1:40:9e:a4:5f:f2:3b:78:df:e9:19:00: 0e:ca:51:32:2a:13:fa:68:bb:05:09:41:fe:98:cc: 57:6e:c2:9b:f7:a9:21:22:56:17:ae:5c:62:34:2a: 56:8b:05:52:e5:45:c6:20:3d:fa:a0:ef:a3:9c:7c: 44:e9:08:e5:8c:e1:08:34:66:64:bf:f8:7e:02:ad: d8:34:be:21:8c:46:34:f7:75:4e:3f:03:8f:86:c3: 21:36:2d:c5:86:eb:25:e6:84:74:a9:95:7f:cd:f7: 05:46:4b:02:1e:e8:c5:c4:62:e9:4f:af:6f:e7:e2: 98:d0:60:40:86:48:d9:58:c3:9d:43:85:be:d5:7b: 56:cf:bf:a9:a0:68:e7:88:bb:e5:4d:e6:35:e4:35: a1:6a:23:ed:35:df:ae:b8:c4:b9:87:c0:7c:16:92: 2d:ce:01:81:a6:b4:e8:da:3f:41:84:d3:25:e0:61: 4f:fd:c9:be:eb:91:8c:48:67:07:a6:99:9d:d9:1a: 3d:8f:fc:47:d2:ce:a6:77:2e:05:2d:9b:70:a5:9a: ae:fb:69:79:a2:70:d5:d2:5b:47:ed:1d:96:d8:2a: 55:28:ea:fa:ad:82:99:f0:54:8b:25:65:97:5d:f3: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:89:B0:34:3E:2A:F0:31:E7:1A:7E:90:80:37:8D:06:B7:73:73:9C X509v3 Authority Key Identifier: keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a4:02:dd:86:f4:ad:e4:94:e9:49:5d:ec:74:97:15:ad:13: 85:01:5d:e4:00:4f:43:06:2a:24:15:b8:4e:77:05:64:9e:0e: 79:d2:38:42:cd:0f:bc:37:74:71:56:f7:d8:cd:6e:30:3a:a7: a2:93:b8:4a:a2:0f:ef:8d:e4:f1:d0:ec:1d:60:bf:33:db:e9: 43:ba:ca:b1:8d:28:60:71:fa:54:ff:b7:89:74:dd:6d:b8:66: 1d:0c:72:58:aa:87:fe:2b:75:1e:a4:91:30:49:ab:29:4b:0f: 09:f6:9a:3b:70:70:8b:ab:3f:02:02:07:fe:bb:2e:3a:15:84: 38:ed:93:26:69:bd:60:9b:8f:1f:9c:e6:b9:f0:60:e4:c7:14: 7f:da:28:69:b6:9c:c6:9c:9d:ef:42:8b:03:bd:4e:d4:99:a2: 56:c1:60:27:3d:ad:9a:63:d7:49:45:b0:54:ac:bb:c9:f5:d0: 2c:f4:16:c5:ec:51:96:54:44:c5:fd:5b:ea:6b:f8:5d:4b:f1: 50:2e:91:81:ec:02:dd:c3:d1:06:3e:ca:6a:70:d5:ca:1c:63: bf:05:da:e5:83:04:ba:11:58:34:2b:30:d6:13:25:12:e3:cd: de:70:47:c2:1b:29:b1:df:86:f4:0c:5b:0c:df:3f:06:84:c6: 9f:59:a8:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gw96OA0YnPZ0ufNInEdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh NzY2OTMwHhcNMjYwMTI2MDcwMDU4WhcNMjYwMTI3MDcwMDU4WjAzMTEwLwYDVQQD EyhmNzg5YjAzNDNlMmFmMDMxZTcxYTdlOTA4MDM3OGQwNmI3NzM3MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE/3uyBPhvv+abaZj0++S2zRQJ6k X/I7eN/pGQAOylEyKhP6aLsFCUH+mMxXbsKb96khIlYXrlxiNCpWiwVS5UXGID36 oO+jnHxE6QjljOEINGZkv/h+Aq3YNL4hjEY093VOPwOPhsMhNi3Fhusl5oR0qZV/ zfcFRksCHujFxGLpT69v5+KY0GBAhkjZWMOdQ4W+1XtWz7+poGjniLvlTeY15DWh aiPtNd+uuMS5h8B8FpItzgGBprTo2j9BhNMl4GFP/cm+65GMSGcHppmd2Ro9j/xH 0s6mdy4FLZtwpZqu+2l5onDV0ltH7R2W2CpVKOr6rYKZ8FSLJWWXXfOGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeJsDQ+KvAx5xp+kIA3jQa3c3OcMB8GA1UdIwQY MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKQC3Yb0 reSU6Uld7HSXFa0ThQFd5ABPQwYqJBW4TncFZJ4OedI4Qs0PvDd0cVb32M1uMDqn opO4SqIP743k8dDsHWC/M9vpQ7rKsY0oYHH6VP+3iXTdbbhmHQxyWKqH/it1HqSR MEmrKUsPCfaaO3Bwi6s/AgIH/rsuOhWEOO2TJmm9YJuPH5zmufBg5McUf9ooabac xpyd70KLA71O1JmiVsFgJz2tmmPXSUWwVKy7yfXQLPQWxexRllRExf1b6mv4XUvx UC6RgewC3cPRBj7KanDVyhxjvwXa5YMEuhFYNCsw1hMlEuPN3nBHwhspsd+G9Axb DN8/BoTGn1moMg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:22 2026 by rpki-client