This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json) Hash identifier: Gq3ClM3jSSCwwDqKMNUPf8xLE/8BJ32RaiFYL3EjX98= Subject key identifier: 2A:8E:C3:C8:87:0A:CC:9E:20:6E:90:27:42:5F:88:2C:CE:87:3D:CA Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Certificate serial: 019BF8080C775D259031EAF27F52B6587CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft Manifest number: 17FB Signing time: Mon 26 Jan 2026 02:00:35 +0000 Manifest this update: Mon 26 Jan 2026 02:00:35 +0000 Manifest next update: Tue 27 Jan 2026 02:00:35 +0000 Files and hashes: 1: 1-zqC4HhQSozydEfSsWMeVRvX4Ag.roa (hash: YCbMIIG2MrUDfBfXlLOUYihuI+nwLwGzroFonhJo9+c=) 2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: PzzozvgvKTsbzfs7xMAwoeoddpI2cu9lj/CYzLPkS/Q=) 3: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (hash: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:0c:77:5d:25:90:31:ea:f2:7f:52:b6:58:7c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Validity Not Before: Jan 26 02:00:35 2026 GMT Not After : Jan 27 02:00:35 2026 GMT Subject: CN=2a8ec3c8870acc9e206e9027425f882cce873dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:0e:75:51:20:a8:28:c2:6d:7d:ec:2f:37: 32:ff:71:41:45:0c:06:76:ba:0c:ec:22:03:79:c9: b6:13:c6:cf:06:7e:a6:f1:29:b3:82:df:de:64:9b: f7:18:ee:e2:a9:0e:8b:23:11:73:85:18:37:cc:7e: 35:5a:13:45:ee:65:25:0f:48:65:1c:52:ca:78:4f: 25:bc:5e:89:38:99:17:28:e2:7a:f2:8f:b6:92:04: 21:59:f4:91:3f:5b:c3:9a:d5:36:97:70:a8:a4:80: 4a:c4:06:ab:2c:6d:f2:04:5e:a8:eb:d6:63:a9:6f: 85:e4:41:46:3d:4d:6c:fc:aa:1b:ea:18:ff:78:7e: fd:61:ea:4c:5c:58:d9:9f:1f:58:23:a1:88:82:8b: 07:80:2c:e6:46:80:3b:37:53:88:66:6b:8d:43:cb: 23:b6:82:fc:aa:df:ee:5a:00:76:0e:51:1c:95:d8: 52:37:af:e2:c4:8d:24:cb:ab:17:7d:d1:c0:63:5f: 2e:aa:43:98:66:e9:48:28:29:09:dd:a1:4a:e5:91: ac:1d:ab:42:5b:5a:a6:e0:66:c1:58:ac:70:8d:07: de:ad:9c:c1:61:5e:cf:69:5b:5c:c0:d4:8c:c2:9c: fd:ab:16:02:58:11:11:08:ee:10:e9:48:6d:8b:b8: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:C3:C8:87:0A:CC:9E:20:6E:90:27:42:5F:88:2C:CE:87:3D:CA X509v3 Authority Key Identifier: keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:83:53:46:53:8e:25:f3:fc:a6:82:ca:b7:0c:83:66:5a:d9: 19:eb:e0:84:b1:d2:42:06:1a:a8:3a:e0:c8:75:00:9d:b4:64: 9f:a0:d1:f5:79:1c:46:6b:f1:d6:72:ee:73:72:b1:48:e4:ed: b1:37:18:29:19:50:89:ba:24:4f:a9:89:bc:20:58:bc:de:1e: ee:e8:f8:4e:01:98:e5:19:f3:b2:85:96:7c:16:8c:c8:7e:79: 7b:e2:1e:28:a1:84:b2:03:f3:b2:9b:80:e2:8c:dd:f0:8f:bf: 00:e5:d0:2c:a6:d6:69:29:f2:ac:25:c2:71:a6:24:d9:bd:12: f3:af:fc:00:79:77:8b:94:bc:ae:96:cf:bf:bd:24:93:3c:b8: ac:5a:f3:18:b0:ba:3b:6e:fb:1d:b0:05:60:ed:d5:08:87:4f: 50:04:73:6c:9b:74:5a:a0:42:cb:dc:b3:4d:28:e9:2f:e4:20: 93:3f:28:b9:ff:eb:45:d8:ed:ab:b1:df:03:4c:3b:58:31:7f: b8:3e:80:22:76:e2:4d:07:a9:70:fb:de:4d:ff:ba:cd:c8:5b: 0c:ab:a6:6e:36:c9:4a:2a:b8:de:10:c3:7d:55:2f:6f:b1:d4: 65:8e:41:9f:7b:a6:4f:30:85:32:a3:49:d3:a9:8a:1c:1b:c5: 1c:6d:ce:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CAx3XSWQMeryf1K2WHz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk Mjg0ZjAwHhcNMjYwMTI2MDIwMDM1WhcNMjYwMTI3MDIwMDM1WjAzMTEwLwYDVQQD EygyYThlYzNjODg3MGFjYzllMjA2ZTkwMjc0MjVmODgyY2NlODczZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWoOdVEgqCjCbX3sLzcy/3FBRQwG droM7CIDecm2E8bPBn6m8Smzgt/eZJv3GO7iqQ6LIxFzhRg3zH41WhNF7mUlD0hl HFLKeE8lvF6JOJkXKOJ68o+2kgQhWfSRP1vDmtU2l3CopIBKxAarLG3yBF6o69Zj qW+F5EFGPU1s/Kob6hj/eH79YepMXFjZnx9YI6GIgosHgCzmRoA7N1OIZmuNQ8sj toL8qt/uWgB2DlEcldhSN6/ixI0ky6sXfdHAY18uqkOYZulIKCkJ3aFK5ZGsHatC W1qm4GbBWKxwjQferZzBYV7PaVtcwNSMwpz9qxYCWBERCO4Q6Uhti7hVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqOw8iHCsyeIG6QJ0JfiCzOhz3KMB8GA1UdIwQY MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoNTRlOO JfP8poLKtwyDZlrZGevghLHSQgYaqDrgyHUAnbRkn6DR9XkcRmvx1nLuc3KxSOTt sTcYKRlQibokT6mJvCBYvN4e7uj4TgGY5RnzsoWWfBaMyH55e+IeKKGEsgPzspuA 4ozd8I+/AOXQLKbWaSnyrCXCcaYk2b0S86/8AHl3i5S8rpbPv70kkzy4rFrzGLC6 O277HbAFYO3VCIdPUARzbJt0WqBCy9yzTSjpL+Qgkz8ouf/rRdjtq7HfA0w7WDF/ uD6AInbiTQepcPveTf+6zchbDKumbjbJSiq43hDDfVUvb7HUZY5Bn3umTzCFMqNJ 06mKHBvFHG3OvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:42 2026 by rpki-client