This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json) Hash identifier: uhFIqYz4sVaRKtl+7p8/73QmhBIyja0oic5YJOc+ATY= Subject key identifier: 2C:D1:C7:BF:15:06:26:49:97:AF:DC:0A:3D:76:C3:FC:90:DF:2D:2F Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c Certificate serial: 019BF5E361F22815D59765826BE76A683B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft Manifest number: 04BC Signing time: Sun 25 Jan 2026 16:01:18 +0000 Manifest this update: Sun 25 Jan 2026 16:01:18 +0000 Manifest next update: Mon 26 Jan 2026 16:01:18 +0000 Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: qmqMPzf6+xMLBLtJ0x/EAaBa6drKSaf2N5ishKhmdL4=) 2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:61:f2:28:15:d5:97:65:82:6b:e7:6a:68:3b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c Validity Not Before: Jan 25 16:01:18 2026 GMT Not After : Jan 26 16:01:18 2026 GMT Subject: CN=2cd1c7bf1506264997afdc0a3d76c3fc90df2d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:bc:e3:fa:ab:01:b8:21:09:14:84:1c:b0: 6a:f9:5c:c0:56:7e:03:aa:be:cc:a8:29:5e:53:dd: 34:87:f6:f6:ad:10:50:bb:7c:f3:c5:5b:64:9f:24: f5:ea:aa:e0:d9:61:ce:b4:21:ef:55:e8:f7:0e:b0: f5:05:7c:61:e1:69:83:94:d8:7a:14:9d:c8:4d:f4: de:4b:df:73:fa:5b:38:cc:33:16:90:0e:b5:5c:c6: 58:bb:e6:d5:47:c8:9b:cc:69:49:57:9a:4b:73:c5: 2f:d1:b5:77:b8:0f:ee:9d:5f:42:29:8e:96:7d:4c: 97:8f:dd:c1:cc:5f:b0:38:cd:5e:f8:b3:02:fa:70: 96:36:b8:cc:75:1c:28:f3:e4:bb:8a:1d:42:aa:aa: 50:9d:e3:3a:05:60:3d:1a:32:fe:7a:70:52:d0:0c: c3:72:fe:44:fd:00:d6:2e:b8:7f:c7:c9:15:42:f2: 2f:87:34:07:24:d1:5d:53:a3:0e:07:f0:e5:b9:e7: 02:fe:c6:2e:ca:f8:28:7d:0b:85:f5:65:2f:15:03: 45:13:d8:3a:12:7d:1b:db:0e:1b:6e:86:de:fe:a3: 27:d6:a6:5a:44:be:5e:3d:10:95:bb:c0:93:95:13: de:a8:9b:27:57:fb:cd:65:25:09:18:07:bb:5e:b9: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:C7:BF:15:06:26:49:97:AF:DC:0A:3D:76:C3:FC:90:DF:2D:2F X509v3 Authority Key Identifier: keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:03:d4:f3:e1:6a:90:fb:41:1e:50:8a:da:93:52:02:e5:68: b2:26:ef:94:13:a9:1f:12:44:fb:27:ad:00:d6:fd:e5:ac:d1: b3:1e:6c:4a:a3:15:f9:f7:39:f0:91:e4:ba:56:0e:fa:cd:6f: 96:e7:e3:f6:de:dd:ce:59:97:4d:47:e4:f2:f2:de:27:6b:ea: fd:e7:53:73:c3:7c:3d:07:05:de:97:f5:87:c9:6e:cb:ca:89: f5:75:44:2e:a7:a4:34:9a:3b:71:bc:3c:ef:7b:d9:f6:1d:ad: c1:58:db:2a:e9:91:cf:a1:9e:43:9d:56:55:27:7d:c3:1b:ec: 7a:d7:63:ba:72:71:06:37:3d:c5:a8:5f:15:fa:1e:3f:e4:e4: ec:f1:73:d9:d4:74:9b:77:c5:78:f4:c3:3d:28:d4:e5:86:52: 9b:2b:b6:49:bc:50:70:a5:ad:62:07:e4:c8:63:e3:de:dd:f4: 83:6e:72:c2:15:2d:e8:df:d0:5c:59:d3:f9:83:50:53:05:7d: 65:77:3e:5e:2a:4f:00:d1:e8:1c:90:7b:4c:76:1c:27:6d:71: ce:d1:f0:1a:a8:3f:07:b5:c9:81:78:99:85:fd:a2:b7:0b:5c: 96:ed:b3:6c:56:79:96:c9:64:a7:7a:f8:ef:b3:a7:dc:1a:d3: 54:4c:80:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142HyKBXVl2WCa+dqaDszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm ODc3NGMwHhcNMjYwMTI1MTYwMTE4WhcNMjYwMTI2MTYwMTE4WjAzMTEwLwYDVQQD EygyY2QxYzdiZjE1MDYyNjQ5OTdhZmRjMGEzZDc2YzNmYzkwZGYyZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoke84/qrAbghCRSEHLBq+VzAVn4D qr7MqCleU900h/b2rRBQu3zzxVtknyT16qrg2WHOtCHvVej3DrD1BXxh4WmDlNh6 FJ3ITfTeS99z+ls4zDMWkA61XMZYu+bVR8ibzGlJV5pLc8Uv0bV3uA/unV9CKY6W fUyXj93BzF+wOM1e+LMC+nCWNrjMdRwo8+S7ih1CqqpQneM6BWA9GjL+enBS0AzD cv5E/QDWLrh/x8kVQvIvhzQHJNFdU6MOB/DluecC/sYuyvgofQuF9WUvFQNFE9g6 En0b2w4bbobe/qMn1qZaRL5ePRCVu8CTlRPeqJsnV/vNZSUJGAe7XrmQYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzRx78VBiZJl6/cCj12w/yQ3y0vMB8GA1UdIwQY MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAPU8+Fq kPtBHlCK2pNSAuVosibvlBOpHxJE+yetANb95azRsx5sSqMV+fc58JHkulYO+s1v lufj9t7dzlmXTUfk8vLeJ2vq/edTc8N8PQcF3pf1h8luy8qJ9XVELqekNJo7cbw8 73vZ9h2twVjbKumRz6GeQ51WVSd9wxvsetdjunJxBjc9xahfFfoeP+Tk7PFz2dR0 m3fFePTDPSjU5YZSmyu2SbxQcKWtYgfkyGPj3t30g25ywhUt6N/QXFnT+YNQUwV9 ZXc+XipPANHoHJB7THYcJ21xztHwGqg/B7XJgXiZhf2itwtclu2zbFZ5lslkp3r4 77On3BrTVEyApw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:36 2026 by rpki-client