This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json) Hash identifier: ZixjRpbj4NI7xSnlBtmfhi7m9oR7PF2tHJIrhJsBFsg= Subject key identifier: 6B:BB:71:80:93:43:03:04:80:AC:ED:3A:41:B4:D1:D6:B3:07:4B:B5 Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f Certificate serial: 019BF8AD08B408010C9CF41890370E4EF4FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft Manifest number: 093D Signing time: Mon 26 Jan 2026 05:00:48 +0000 Manifest this update: Mon 26 Jan 2026 05:00:48 +0000 Manifest next update: Tue 27 Jan 2026 05:00:48 +0000 Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=) 2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: fskKTARqe//jtw0ZTVPv06YwBxLabFDVJMN+xurERyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:08:b4:08:01:0c:9c:f4:18:90:37:0e:4e:f4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86623a8458eff347d424348588829ee137b45a3f Validity Not Before: Jan 26 05:00:48 2026 GMT Not After : Jan 27 05:00:48 2026 GMT Subject: CN=6bbb71809343030480aced3a41b4d1d6b3074bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:4f:fe:82:6c:32:44:96:67:18:a6:b1:cb: 88:37:6a:04:09:cb:97:15:54:21:e8:4d:1f:b6:2c: 96:79:22:14:53:87:09:db:f6:52:c7:a6:97:e6:ee: 56:ef:ab:2a:c5:89:a6:bd:58:aa:83:e9:72:e2:4a: bb:10:1f:66:b2:7a:4d:13:ec:26:bc:ab:3f:44:d1: 66:ae:92:f0:97:19:73:2a:05:0d:94:4a:bd:32:90: a8:c8:40:9a:67:19:c9:b4:7d:7a:2c:1c:9d:0c:6b: 99:fc:84:80:0e:f6:3b:fb:e6:fb:a9:1b:a9:28:d9: 7e:58:5f:23:92:40:c7:d3:ed:d6:77:f7:a9:8e:0f: be:c2:fa:8c:4f:2c:25:99:58:87:c6:2e:99:a7:33: 94:95:b1:dc:a4:65:89:ea:9f:d9:2b:ce:9c:18:3b: 89:a0:46:ce:6e:ae:32:0e:8d:2d:a6:5a:29:54:1b: 6e:ee:af:17:e8:7d:ae:b9:0f:8d:2e:88:76:f0:73: f6:3b:e2:e1:52:f8:f9:49:27:f0:2b:e5:6a:47:13: cf:4b:bf:07:ca:c4:7b:07:26:e9:de:0d:2a:ce:c9: 96:ed:77:8d:c7:e6:87:39:17:de:b3:65:36:c2:d9: 36:80:d3:a7:78:05:2f:b9:4d:cc:1e:a0:d2:d3:18: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:71:80:93:43:03:04:80:AC:ED:3A:41:B4:D1:D6:B3:07:4B:B5 X509v3 Authority Key Identifier: keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:39:52:3c:15:8a:31:13:79:fd:ae:bd:d3:a0:fb:58:f5:82: cc:7e:0f:74:9a:f7:d4:50:f2:d2:cb:db:e8:04:99:eb:cf:15: 03:cb:dc:67:5b:38:f8:cd:4a:7f:77:ac:0e:1f:fe:dc:ac:7c: 25:8c:32:34:1f:88:c9:6c:be:e6:8f:a9:75:4a:d8:fc:22:87: 86:7f:33:c1:34:77:bb:64:2b:f0:30:1d:f9:89:e7:66:73:c1: 25:08:ca:73:85:26:08:da:c5:3f:c9:88:89:f1:c8:5c:9e:6d: 05:79:44:6d:78:9d:5d:c7:44:5d:61:c4:0f:ee:18:86:ef:4e: 24:45:d2:ee:b5:dc:64:d4:b9:e4:96:37:a1:b9:5c:8e:72:73: d8:24:4c:f1:c0:f6:49:eb:1e:7f:2c:f9:13:ef:5b:0e:ed:72: 9e:72:3f:8f:34:e5:11:34:7a:0e:b5:dd:e5:10:44:cd:a8:62: 57:9b:32:43:cf:29:58:9d:8f:dc:58:08:61:bf:96:05:99:6f: c1:69:e4:67:d2:a7:65:f9:43:0a:39:bb:9a:a6:37:4e:20:a4: 3e:1e:69:23:37:81:64:0c:cb:b3:fe:cf:88:87:c7:cc:d1:10: 21:fe:21:17:c0:3a:b2:98:0c:3a:d5:cf:1f:ee:80:b2:85:de: f5:b4:d7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rQi0CAEMnPQYkDcOTvT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi NDVhM2YwHhcNMjYwMTI2MDUwMDQ4WhcNMjYwMTI3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg2YmJiNzE4MDkzNDMwMzA0ODBhY2VkM2E0MWI0ZDFkNmIzMDc0YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdhP/oJsMkSWZximscuIN2oECcuX FVQh6E0ftiyWeSIUU4cJ2/ZSx6aX5u5W76sqxYmmvViqg+ly4kq7EB9msnpNE+wm vKs/RNFmrpLwlxlzKgUNlEq9MpCoyECaZxnJtH16LBydDGuZ/ISADvY7++b7qRup KNl+WF8jkkDH0+3Wd/epjg++wvqMTywlmViHxi6ZpzOUlbHcpGWJ6p/ZK86cGDuJ oEbObq4yDo0tplopVBtu7q8X6H2uuQ+NLoh28HP2O+LhUvj5SSfwK+VqRxPPS78H ysR7Bybp3g0qzsmW7XeNx+aHORfes2U2wtk2gNOneAUvuU3MHqDS0xgdgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu7cYCTQwMEgKztOkG00dazB0u1MB8GA1UdIwQY MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzlSPBWK MRN5/a6906D7WPWCzH4PdJr31FDy0svb6ASZ688VA8vcZ1s4+M1Kf3esDh/+3Kx8 JYwyNB+IyWy+5o+pdUrY/CKHhn8zwTR3u2Qr8DAd+YnnZnPBJQjKc4UmCNrFP8mI ifHIXJ5tBXlEbXidXcdEXWHED+4Yhu9OJEXS7rXcZNS55JY3oblcjnJz2CRM8cD2 Sesefyz5E+9bDu1ynnI/jzTlETR6DrXd5RBEzahiV5syQ88pWJ2P3FgIYb+WBZlv wWnkZ9KnZflDCjm7mqY3TiCkPh5pIzeBZAzLs/7PiIfHzNEQIf4hF8A6spgMOtXP H+6AsoXe9bTXMA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:32 2026 by rpki-client