This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json) Hash identifier: atfUaLaOUEBQPAwXp8zBcupgVKTPwObwPJuEt1JY6k0= Subject key identifier: 26:3A:2F:6D:72:FF:5A:7F:C5:38:20:47:E4:13:D2:43:75:54:DB:64 Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Certificate serial: 019BF6BF769F48BACB34123C7DCBA2C8B4BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft Manifest number: 030F Signing time: Sun 25 Jan 2026 20:01:41 +0000 Manifest this update: Sun 25 Jan 2026 20:01:41 +0000 Manifest next update: Mon 26 Jan 2026 20:01:41 +0000 Files and hashes: 1: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: VVKlnScDKO+oulpf4jHClnnDD231O3RP9M0exGo3XOU=) 2: Z5oga0vgbQ3IfY7AuGU9kvMREF8.roa (hash: S/HDTLw/C2HlzUoz5QYaSY1KLwcsf1KpKUZ68xZPy3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:76:9f:48:ba:cb:34:12:3c:7d:cb:a2:c8:b4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Validity Not Before: Jan 25 20:01:41 2026 GMT Not After : Jan 26 20:01:41 2026 GMT Subject: CN=263a2f6d72ff5a7fc5382047e413d2437554db64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:bb:e3:3f:8e:49:d4:ce:5a:3e:81:a7:24: 4d:bf:a9:83:b1:6a:57:4d:b8:c1:38:22:5e:e9:a8: dd:7a:eb:e4:a0:b4:fb:ae:54:b2:49:c7:26:09:22: bf:28:f7:02:81:13:4b:26:d6:a3:68:fe:a0:f3:9c: a3:9a:5d:56:6f:a4:27:e5:96:cb:a7:41:be:ee:2c: 72:48:e6:ef:32:1b:95:e5:1f:b5:66:0b:0c:6f:c1: 79:f9:e1:d3:b3:43:24:92:e5:9c:ca:2a:38:d4:0a: ba:53:79:a2:b7:d2:ac:27:cf:1f:2b:9c:ae:7d:47: fc:81:fd:24:72:55:41:1b:c6:52:61:01:c8:5e:73: 75:a8:fb:cf:5f:27:42:bc:ed:0b:77:1a:65:55:18: d0:24:b8:32:e3:f4:4e:f9:7a:ed:99:a5:1b:50:f0: ec:3f:86:80:da:15:f0:da:6d:bd:48:29:b3:64:1f: 84:66:13:cd:30:4c:7b:47:f0:b9:78:05:87:f1:7e: fa:85:e3:79:10:f1:83:40:0a:ac:08:c3:e3:95:38: c4:db:84:54:f0:48:f7:d8:2e:70:ac:12:2a:6a:42: 01:1d:38:cf:94:5c:e4:62:73:10:09:40:33:51:f4: e7:a8:8c:0d:cd:48:ae:a1:58:95:61:f7:9b:ec:cf: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3A:2F:6D:72:FF:5A:7F:C5:38:20:47:E4:13:D2:43:75:54:DB:64 X509v3 Authority Key Identifier: keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:9d:d4:f3:6c:b8:27:71:cb:6a:7d:14:18:d6:43:be:93: 4c:98:1c:32:fd:fa:0a:ff:11:55:37:48:4e:0e:16:12:61:dd: 95:27:3e:c4:b4:f7:23:64:47:96:46:8c:51:9c:19:a2:03:41: f4:8c:09:c8:1e:04:b3:3b:d1:4a:f9:a9:32:d6:ec:4e:16:5a: 07:00:bd:66:05:d4:f0:69:97:2e:09:b0:f8:f6:b2:91:53:cb: 12:4c:cc:20:e6:42:9b:85:11:65:4b:62:14:39:8a:8e:7f:dd: e2:ac:66:23:b8:61:3a:11:f6:6a:fe:a4:10:d4:e1:58:4d:0d: ba:c7:08:00:98:df:0b:f3:7c:54:1e:f8:a3:df:1c:ed:32:55: 2e:db:3a:0d:ef:45:99:4b:34:82:8a:05:40:8f:a1:bf:4e:d0: 29:6a:5e:7b:e7:66:84:e6:89:df:99:67:27:5e:8f:61:82:43: 0e:db:a8:39:bf:8d:25:f3:5b:de:60:14:51:ee:63:b6:96:97: 49:ea:9b:56:1d:be:b2:bd:8a:b4:83:35:50:70:fa:6c:cc:0e: b4:e3:4c:ca:65:ba:53:1c:8a:19:b8:1c:ef:91:51:5b:1e:4c: a6:5c:0c:1e:15:3b:2d:cf:02:5b:b0:c7:20:7d:e5:29:ad:c7: ca:ee:dd:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v3afSLrLNBI8fcuiyLS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk ZTNjODEwHhcNMjYwMTI1MjAwMTQxWhcNMjYwMTI2MjAwMTQxWjAzMTEwLwYDVQQD EygyNjNhMmY2ZDcyZmY1YTdmYzUzODIwNDdlNDEzZDI0Mzc1NTRkYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAe74z+OSdTOWj6BpyRNv6mDsWpX TbjBOCJe6ajdeuvkoLT7rlSySccmCSK/KPcCgRNLJtajaP6g85yjml1Wb6Qn5ZbL p0G+7ixySObvMhuV5R+1ZgsMb8F5+eHTs0MkkuWcyio41Aq6U3mit9KsJ88fK5yu fUf8gf0kclVBG8ZSYQHIXnN1qPvPXydCvO0LdxplVRjQJLgy4/RO+XrtmaUbUPDs P4aA2hXw2m29SCmzZB+EZhPNMEx7R/C5eAWH8X76heN5EPGDQAqsCMPjlTjE24RU 8Ej32C5wrBIqakIBHTjPlFzkYnMQCUAzUfTnqIwNzUiuoViVYfeb7M+reQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY6L21y/1p/xTggR+QT0kN1VNtkMB8GA1UdIwQY MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt ZjM0YjMxZDNiNDNjLzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuud1PNs uCdxy2p9FBjWQ76TTJgcMv36Cv8RVTdITg4WEmHdlSc+xLT3I2RHlkaMUZwZogNB 9IwJyB4EszvRSvmpMtbsThZaBwC9ZgXU8GmXLgmw+PaykVPLEkzMIOZCm4URZUti FDmKjn/d4qxmI7hhOhH2av6kENThWE0NuscIAJjfC/N8VB74o98c7TJVLts6De9F mUs0gooFQI+hv07QKWpee+dmhOaJ35lnJ16PYYJDDtuoOb+NJfNb3mAUUe5jtpaX SeqbVh2+sr2KtIM1UHD6bMwOtONMymW6UxyKGbgc75FRWx5MplwMHhU7Lc8CW7DH IH3lKa3Hyu7dpw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:15 2026 by rpki-client