This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json) Hash identifier: H01CSdWIWyUyaiuHvcBn0VQ2C8VQ5p096H/D7zXwt2o= Subject key identifier: 1F:00:F3:36:10:80:60:5D:57:0F:0C:ED:90:EB:4F:7F:A9:21:D5:54 Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019BF6F60EE80B91B88DCD73D9D2F7BBEBC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft Manifest number: BC Signing time: Sun 25 Jan 2026 21:01:19 +0000 Manifest this update: Sun 25 Jan 2026 21:01:19 +0000 Manifest next update: Mon 26 Jan 2026 21:01:19 +0000 Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: X3phFxxzf8cNRgkCBpMZCajpPRBSjfyKp0vsnxBZYk4=) 2: alFC4352ujfylmeJv44dIFDrX8I.roa (hash: EyvWXf/Mudgwkv08n9JwLU88K529FLdo5Jy2xLKZhDY=) 3: qYc1GDRHdMKB8iddli8zkMN3RVY.roa (hash: Raz+vndSPY3IPBLJicVFRGraRf1O/aOAmmwEA/V9D9U=) 4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:0e:e8:0b:91:b8:8d:cd:73:d9:d2:f7:bb:eb:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Jan 25 21:01:19 2026 GMT Not After : Jan 26 21:01:19 2026 GMT Subject: CN=1f00f3361080605d570f0ced90eb4f7fa921d554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:5f:7c:5f:d0:17:f1:21:fd:f1:a5:cf:50: 27:bf:0c:3c:48:f7:66:ad:19:76:f1:51:fd:4f:5a: 7c:5f:ab:e0:f8:96:04:66:37:b9:f1:6c:66:d0:d2: ae:79:43:13:80:06:b0:8c:6a:73:8d:b1:74:3d:c6: 46:85:b0:c2:79:e7:8b:79:2e:6b:7d:5c:38:db:95: 5c:17:fe:03:5c:cd:fc:bb:fa:58:3c:76:33:8c:a0: f3:46:48:8f:58:20:be:ba:2d:1b:2d:06:1e:50:96: 63:f0:47:34:5f:23:30:b3:fa:b1:7f:63:e7:be:96: 08:7e:52:32:2f:49:be:8a:33:2b:a0:5a:02:9f:07: 4a:d8:d7:29:28:e3:1b:e7:32:ab:37:a8:48:ef:04: 0b:38:40:d2:ac:f9:dc:a1:a0:ab:7e:c7:39:48:a9: e6:c2:e0:6f:d1:6d:51:ae:09:ee:e7:25:d3:f2:09: 7f:29:a0:08:88:ba:c0:b9:48:78:52:a8:c7:40:22: 4f:25:6d:25:8f:7b:52:5a:9a:91:3e:6e:6f:25:56: 71:a3:0e:3f:81:bc:1d:cf:8b:8f:d1:5f:54:30:bc: 30:e0:73:bd:68:16:21:74:07:db:5a:5f:92:60:a8: b0:d8:f4:fc:a1:94:63:cb:67:31:fc:e0:9e:c5:dd: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:F3:36:10:80:60:5D:57:0F:0C:ED:90:EB:4F:7F:A9:21:D5:54 X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:6f:64:ea:a5:5e:1a:b5:24:dd:f9:b3:7a:14:eb:c0:89:48: 77:45:57:08:a0:77:3a:f4:3f:5d:9b:68:e0:87:eb:f0:71:42: aa:4f:dd:55:6e:87:1f:8a:ef:a5:67:43:08:52:c8:a7:f8:cb: 50:fb:60:c4:f3:87:bc:f3:e5:11:2c:cd:e7:6e:53:6a:0c:ec: 73:4b:98:42:f1:51:8b:75:e5:6f:ba:78:85:60:23:2c:19:d0: 77:a4:4d:2e:8c:3b:5a:c0:17:7d:f9:89:2c:58:a7:70:39:27: 63:cf:a7:ac:06:4c:d6:14:3a:3d:df:6c:d0:23:25:78:37:c5: 86:63:2b:3d:6e:69:d3:f5:a4:40:d0:8d:9c:65:70:44:46:9b: f2:1c:a3:ab:d6:a1:91:a7:ef:44:9a:67:f9:0c:55:bf:44:f2: f3:f4:a6:44:10:20:a0:e8:cb:ba:86:1a:48:49:38:18:23:9f: 1c:20:9b:e2:b2:31:62:eb:2d:72:0f:5f:b0:43:82:b0:5c:98: c8:bc:1d:de:4b:26:9b:36:cb:13:d4:1d:3d:87:26:31:d7:45: c7:fd:4a:2e:91:e5:1b:39:ad:79:bb:34:15:40:6f:3a:91:b9: 06:4b:05:15:62:d6:22:31:75:17:17:20:5b:fb:1a:03:fc:63: 73:c7:87:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29g7oC5G4jc1z2dL3u+vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjYwMTI1MjEwMTE5WhcNMjYwMTI2MjEwMTE5WjAzMTEwLwYDVQQD EygxZjAwZjMzNjEwODA2MDVkNTcwZjBjZWQ5MGViNGY3ZmE5MjFkNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhJffF/QF/Eh/fGlz1Anvww8SPdm rRl28VH9T1p8X6vg+JYEZje58Wxm0NKueUMTgAawjGpzjbF0PcZGhbDCeeeLeS5r fVw425VcF/4DXM38u/pYPHYzjKDzRkiPWCC+ui0bLQYeUJZj8Ec0XyMws/qxf2Pn vpYIflIyL0m+ijMroFoCnwdK2NcpKOMb5zKrN6hI7wQLOEDSrPncoaCrfsc5SKnm wuBv0W1Rrgnu5yXT8gl/KaAIiLrAuUh4UqjHQCJPJW0lj3tSWpqRPm5vJVZxow4/ gbwdz4uP0V9UMLww4HO9aBYhdAfbWl+SYKiw2PT8oZRjy2cx/OCexd3OgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8A8zYQgGBdVw8M7ZDrT3+pIdVUMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAum9k6qVe GrUk3fmzehTrwIlId0VXCKB3OvQ/XZto4Ifr8HFCqk/dVW6HH4rvpWdDCFLIp/jL UPtgxPOHvPPlESzN525Tagzsc0uYQvFRi3Xlb7p4hWAjLBnQd6RNLow7WsAXffmJ LFincDknY8+nrAZM1hQ6Pd9s0CMleDfFhmMrPW5p0/WkQNCNnGVwREab8hyjq9ah kafvRJpn+QxVv0Ty8/SmRBAgoOjLuoYaSEk4GCOfHCCb4rIxYustcg9fsEOCsFyY yLwd3ksmmzbLE9QdPYcmMddFx/1KLpHlGzmtebs0FUBvOpG5BksFFWLWIjF1Fxcg W/saA/xjc8eHsg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:10:08 2026 by rpki-client