This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json) Hash identifier: 13jbC/BiFiJreiS5/xl+vP7j9gUIee1ELKmCvyylz5A= Subject key identifier: B6:7A:F7:51:D8:D5:F4:C7:08:8A:4C:CF:B2:39:99:BC:81:B0:48:85 Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Certificate serial: 019BF951EBAED7CC7B3BCA05B6CF2D80CDE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 08:00:54 +0000 Manifest this update: Mon 26 Jan 2026 08:00:54 +0000 Manifest next update: Tue 27 Jan 2026 08:00:54 +0000 Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=) 2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: JEBXikhxk22hSt9Xm9TXEyeYKNgVG0zTvz2v95uBtW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:eb:ae:d7:cc:7b:3b:ca:05:b6:cf:2d:80:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Validity Not Before: Jan 26 08:00:54 2026 GMT Not After : Jan 27 08:00:54 2026 GMT Subject: CN=b67af751d8d5f4c7088a4ccfb23999bc81b04885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:3a:4f:b1:95:92:11:05:73:d2:07:98:52: 9b:d0:2e:f4:51:24:6a:74:59:ce:e8:04:0a:9b:71: 4b:cb:0b:39:6d:24:2e:fc:02:63:34:8e:ab:ce:39: 2a:8a:3b:17:9c:49:1f:1f:17:12:da:7d:49:9d:63: 5f:b5:f2:17:d9:59:e8:99:c5:78:7f:3e:69:02:57: 3c:bd:72:e4:cd:35:cf:83:f8:c7:76:db:8c:a4:76: 15:f8:55:04:ef:28:c1:2d:25:0f:79:67:b3:53:1a: 8c:38:ae:72:d0:27:0c:22:9a:88:bb:50:a4:7d:a1: b2:1d:0e:44:17:e5:a4:21:e7:0d:7d:72:09:a9:79: dd:65:09:cf:06:d3:f3:9e:a1:72:72:a1:61:80:fb: 90:2e:35:09:29:33:58:18:ed:86:f7:fd:bd:98:8d: 21:19:b1:16:54:ad:e0:51:9c:9b:c7:34:66:c6:78: a6:63:fa:2c:c7:10:46:2e:58:e6:80:26:19:dd:15: cd:28:74:54:bd:7f:38:5f:f3:fe:92:c9:75:ba:6b: 9c:c7:48:96:fa:4b:4a:80:81:bc:2d:91:d0:35:fa: 4a:63:19:91:0e:89:f2:1b:83:29:10:ce:8b:eb:c1: 06:07:d9:c1:47:e8:dd:af:c7:18:26:69:43:ec:7c: f0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7A:F7:51:D8:D5:F4:C7:08:8A:4C:CF:B2:39:99:BC:81:B0:48:85 X509v3 Authority Key Identifier: keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a9:0e:31:08:9c:f5:b1:96:43:bc:51:81:6f:7b:b3:da:d2: 2b:fa:d3:4c:26:b8:6d:20:37:4b:a0:67:10:4a:67:34:7b:04: 12:ac:36:03:5e:25:13:c2:7f:b5:62:09:4a:52:0e:ad:b1:ad: da:5a:4e:a2:88:22:ba:ce:25:aa:3b:bb:45:27:e8:4e:a0:8e: 4b:78:5c:9a:e5:7c:da:60:a3:c4:9c:f9:7a:c1:5b:0a:86:5f: 6e:8f:60:0d:74:26:c3:cc:e6:1c:d9:67:ec:b7:fa:c0:c2:11: 5e:02:5a:10:87:a9:c6:ab:9a:03:1b:b6:f2:a5:fd:3f:27:1c: 58:9f:e2:28:50:c8:05:84:27:49:01:43:b3:46:23:ab:82:fb: 36:05:f3:e9:84:84:a0:ed:71:22:78:48:d3:f9:ff:49:9d:f5: 48:b1:2d:34:38:69:d9:c5:38:f5:42:76:2d:a3:bb:c5:5a:99: f0:e5:91:ea:7b:55:7a:14:29:98:54:19:a6:13:66:ff:95:d0: 2a:c8:01:7f:da:70:39:30:c4:2c:09:1f:38:5c:0e:e0:41:64: a1:cd:c4:92:4c:7b:27:9c:9f:86:ee:0f:6f:cc:3c:b3:53:d1: de:62:13:4b:ff:af:a3:bf:f0:42:2c:30:0f:da:49:5a:59:dd: 6a:da:f1:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Ueuu18x7O8oFts8tgM3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx Y2ZhODAwHhcNMjYwMTI2MDgwMDU0WhcNMjYwMTI3MDgwMDU0WjAzMTEwLwYDVQQD EyhiNjdhZjc1MWQ4ZDVmNGM3MDg4YTRjY2ZiMjM5OTliYzgxYjA0ODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g46T7GVkhEFc9IHmFKb0C70USRq dFnO6AQKm3FLyws5bSQu/AJjNI6rzjkqijsXnEkfHxcS2n1JnWNftfIX2VnomcV4 fz5pAlc8vXLkzTXPg/jHdtuMpHYV+FUE7yjBLSUPeWezUxqMOK5y0CcMIpqIu1Ck faGyHQ5EF+WkIecNfXIJqXndZQnPBtPznqFycqFhgPuQLjUJKTNYGO2G9/29mI0h GbEWVK3gUZybxzRmxnimY/osxxBGLljmgCYZ3RXNKHRUvX84X/P+ksl1umucx0iW +ktKgIG8LZHQNfpKYxmRDonyG4MpEM6L68EGB9nBR+jdr8cYJmlD7HzwjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ691HY1fTHCIpMz7I5mbyBsEiFMB8GA1UdIwQY MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt OWMwMWRmN2I5ZTY2LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2 LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6kOMQic 9bGWQ7xRgW97s9rSK/rTTCa4bSA3S6BnEEpnNHsEEqw2A14lE8J/tWIJSlIOrbGt 2lpOoogius4lqju7RSfoTqCOS3hcmuV82mCjxJz5esFbCoZfbo9gDXQmw8zmHNln 7Lf6wMIRXgJaEIepxquaAxu28qX9PyccWJ/iKFDIBYQnSQFDs0Yjq4L7NgXz6YSE oO1xInhI0/n/SZ31SLEtNDhp2cU49UJ2LaO7xVqZ8OWR6ntVehQpmFQZphNm/5XQ KsgBf9pwOTDELAkfOFwO4EFkoc3Ekkx7J5yfhu4Pb8w8s1PR3mITS/+vo7/wQiww D9pJWlndatrxGA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:25 2026 by rpki-client