This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json) Hash identifier: ZktPI8Z5R2+ekTBvgxY1B0kVLQMZe7MiQWuLaMUVMpE= Subject key identifier: 72:B5:CB:A4:94:98:87:22:A3:CB:00:26:06:D8:24:92:A6:F1:A3:3A Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Certificate serial: 019BF5AC480C1944F4D11377DF18E77E1136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft Manifest number: 0912 Signing time: Sun 25 Jan 2026 15:01:07 +0000 Manifest this update: Sun 25 Jan 2026 15:01:07 +0000 Manifest next update: Mon 26 Jan 2026 15:01:07 +0000 Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 09PN3lfd+TA3Ueg+e6cx+tH1S02wEwEhDKJCo0Fc83E=) 2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=) 3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=) 4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:48:0c:19:44:f4:d1:13:77:df:18:e7:7e:11:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Validity Not Before: Jan 25 15:01:07 2026 GMT Not After : Jan 26 15:01:07 2026 GMT Subject: CN=72b5cba494988722a3cb002606d82492a6f1a33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:35:49:c4:93:85:e6:e8:5a:ad:f7:d5:9a:e7: 88:4b:05:f9:30:35:da:3f:39:b6:c0:81:ed:29:22: 23:ee:41:a6:47:b1:5a:ca:3b:81:a4:f4:1e:42:dd: 13:a9:2d:db:51:38:56:fb:97:a9:a9:b5:2c:51:c7: 21:b6:7f:f5:70:64:c6:a7:30:c6:52:a6:ae:44:eb: 84:e5:2f:a7:85:08:ec:d7:d3:8b:a1:14:ed:f2:fd: 80:3a:1e:36:c6:93:54:66:4d:c5:65:9e:fb:88:11: 37:74:e7:6c:10:9b:fc:c4:3b:39:15:54:02:68:67: 87:d0:bb:42:78:f8:be:cb:dc:12:6e:07:06:27:a4: 94:bf:7d:c2:46:1b:84:67:33:35:34:b3:17:ad:c7: c9:bf:6a:0e:bf:06:8f:34:0f:7e:4c:cf:71:c8:83: f7:0d:5f:98:d6:b7:c6:c3:93:fe:86:24:aa:6d:6f: fb:46:ce:dc:99:b7:50:a3:95:a4:ee:1b:e6:86:1b: d9:b4:5e:b9:e4:08:5e:3d:4d:66:f2:ab:09:21:21: 6a:da:0e:b9:7e:81:35:07:3b:4c:06:1c:52:89:f7: fa:d7:0b:9a:5c:b8:62:a7:05:06:85:4c:5e:3f:c0: 21:8d:49:38:37:04:b0:b3:72:72:50:9b:46:4b:7e: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B5:CB:A4:94:98:87:22:A3:CB:00:26:06:D8:24:92:A6:F1:A3:3A X509v3 Authority Key Identifier: keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6c:e6:3c:aa:92:4a:37:75:b1:42:f6:18:d6:7a:32:f1:1c: b0:53:4b:81:3b:12:3b:a8:b4:96:0d:43:4f:d3:45:1f:63:4d: 92:18:c1:a0:30:e5:08:68:94:c6:45:00:fe:ed:db:2d:1b:f8: 0f:37:8a:36:2a:ae:40:db:66:43:36:7c:f8:fd:77:fd:04:73: 50:19:ac:b5:71:73:00:47:83:9d:32:89:ea:59:5d:ee:b6:57: 08:62:40:44:34:48:e0:93:b5:b4:42:32:dd:f8:11:41:99:9b: ba:54:89:13:c6:70:01:64:01:80:53:39:16:7b:08:ed:d2:cb: 3e:81:29:80:8e:68:f9:e6:68:61:8c:de:09:1e:c9:1a:40:ad: 46:95:56:76:ca:42:5f:bd:fe:39:a9:cb:bc:58:8c:8f:a9:75: 26:a9:3e:ce:b8:00:51:85:ae:a0:45:08:24:a6:43:06:17:e3: 48:83:cc:d0:37:ef:1a:60:0c:1c:41:c8:48:ba:13:6b:68:e4: 6c:fd:3a:7e:c9:ad:ce:84:36:d0:8d:8c:4c:00:c2:6d:ae:6d: 19:c9:23:30:09:25:49:50:82:49:b9:cb:46:2a:4e:02:ed:40: 43:7a:42:17:b7:fd:ca:85:de:f3:f1:04:45:9f:be:5a:28:37: 83:82:a0:07 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv1rEgMGUT00RN33xjnfhE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2 Mzc4YTgwHhcNMjYwMTI1MTUwMTA3WhcNMjYwMTI2MTUwMTA3WjAzMTEwLwYDVQQD Eyg3MmI1Y2JhNDk0OTg4NzIyYTNjYjAwMjYwNmQ4MjQ5MmE2ZjFhMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjVJxJOF5uharffVmueISwX5MDXa Pzm2wIHtKSIj7kGmR7FayjuBpPQeQt0TqS3bUThW+5epqbUsUcchtn/1cGTGpzDG UqauROuE5S+nhQjs19OLoRTt8v2AOh42xpNUZk3FZZ77iBE3dOdsEJv8xDs5FVQC aGeH0LtCePi+y9wSbgcGJ6SUv33CRhuEZzM1NLMXrcfJv2oOvwaPNA9+TM9xyIP3 DV+Y1rfGw5P+hiSqbW/7Rs7cmbdQo5Wk7hvmhhvZtF655AhePU1m8qsJISFq2g65 foE1BztMBhxSiff61wuaXLhipwUGhUxeP8AhjUk4NwSws3JyUJtGS37/ZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHK1y6SUmIcio8sAJgbYJJKm8aM6MB8GA1UdIwQY MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmzm PKqSSjd1sUL2GNZ6MvEcsFNLgTsSO6i0lg1DT9NFH2NNkhjBoDDlCGiUxkUA/u3b LRv4DzeKNiquQNtmQzZ8+P13/QRzUBmstXFzAEeDnTKJ6lld7rZXCGJARDRI4JO1 tEIy3fgRQZmbulSJE8ZwAWQBgFM5FnsI7dLLPoEpgI5o+eZoYYzeCR7JGkCtRpVW dspCX73+OanLvFiMj6l1Jqk+zrgAUYWuoEUIJKZDBhfjSIPM0DfvGmAMHEHISLoT a2jkbP06fsmtzoQ20I2MTADCba5tGckjMAklSVCCSbnLRipOAu1AQ3pCF7f9yoXe 8/EERZ++Wig3g4KgBw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:51 2026 by rpki-client