This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json) Hash identifier: br8eM0DzfA35UQDL+jqzQcFvm8n/h8mebqrxtxKx/OE= Subject key identifier: 1A:18:14:00:4F:F2:48:DB:86:A9:59:8E:82:D2:8E:34:F5:DD:A7:C1 Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Certificate serial: 019BF72CEEB18428726D4C1D059227EA5009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft Manifest number: 0A27 Signing time: Sun 25 Jan 2026 22:01:15 +0000 Manifest this update: Sun 25 Jan 2026 22:01:15 +0000 Manifest next update: Mon 26 Jan 2026 22:01:15 +0000 Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: krYJph/ZU/4kb8Z7+2bOROn5W+0/6Vf8xOo+sSRkWxM=) 2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ee:b1:84:28:72:6d:4c:1d:05:92:27:ea:50:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Validity Not Before: Jan 25 22:01:15 2026 GMT Not After : Jan 26 22:01:15 2026 GMT Subject: CN=1a1814004ff248db86a9598e82d28e34f5dda7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:c5:82:c7:2d:2f:b3:e8:04:3f:d5:9e:f4: 78:72:19:26:da:4c:8e:02:d7:51:51:04:a1:fa:8c: 6c:be:a5:76:d2:a6:eb:62:7f:41:9c:e8:df:de:c3: db:63:c3:5a:b1:d9:e7:80:5a:61:58:22:98:b6:9f: 1c:f1:70:e3:57:96:c6:27:5a:f6:6c:f1:00:40:e9: 95:39:95:96:bc:d7:39:02:7f:e4:24:27:38:6e:0c: 11:a5:61:fb:0a:c1:8a:5d:07:2e:32:6d:e9:dd:0c: be:cb:93:4b:5f:08:56:ed:7b:0e:d8:03:93:a4:fe: 94:79:7b:d7:a5:ae:c6:68:75:6c:c4:ed:97:41:63: af:8f:36:05:8c:22:fe:10:d9:2e:53:3e:54:8c:2a: 58:a8:0f:0e:35:1d:2a:37:aa:94:b6:7a:9c:60:0f: 48:72:76:42:77:30:48:b1:63:df:65:c4:85:20:cc: 4c:d3:b5:1e:07:f3:a7:66:28:ed:fe:5b:c2:c0:52: 26:09:94:3f:cd:c1:bc:74:02:48:07:72:88:4a:b4: 2c:42:a3:80:14:36:8c:1d:6e:4e:9a:03:66:86:f0: 11:22:14:c4:23:42:d2:e8:b4:d3:38:19:5d:c5:b0: 8f:82:99:e4:7a:ac:5d:67:9f:b3:9f:f9:d7:1a:98: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:18:14:00:4F:F2:48:DB:86:A9:59:8E:82:D2:8E:34:F5:DD:A7:C1 X509v3 Authority Key Identifier: keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:64:a7:37:f6:c8:12:1e:b9:3c:02:5b:05:f6:9a:e7:53:1d: c8:8a:8b:18:a1:6e:d6:11:f1:39:c7:8b:e5:41:5d:82:10:2b: e9:96:77:81:ac:97:19:fe:bf:d5:fc:48:e1:7f:c9:29:0e:c0: c5:93:71:c5:9f:fb:42:e4:27:71:98:9e:22:31:37:40:01:dc: 7d:e7:8b:9d:44:43:b8:f4:8f:ad:fa:5f:56:56:30:a5:6a:89: 72:3a:04:d3:52:cc:c2:66:c5:d9:5d:6c:a4:77:54:cf:8b:93: 64:45:76:74:1b:f1:09:3e:86:63:79:ce:9d:6a:18:bc:95:62: 01:f6:8a:d7:f3:68:68:4d:e6:05:ae:34:54:0b:31:49:00:87: 73:3b:e7:1a:5f:75:f5:c5:0d:a3:63:ac:5a:79:9b:32:03:66: 90:a3:60:a2:78:e5:b2:51:8b:7f:e9:69:13:3f:af:da:2f:1b: 86:96:48:e6:2e:89:1f:fd:a2:69:ff:25:93:09:80:93:3e:b3: b4:ee:16:84:4d:2e:9f:4e:05:a1:eb:01:44:f3:29:4b:88:e3: d9:79:56:e4:4c:69:57:53:50:4d:be:28:c8:49:9b:45:2c:94: 33:56:9c:7b:f6:0a:c6:f9:1b:20:c1:f2:db:08:38:18:97:22: 66:f4:94:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LO6xhChybUwdBZIn6lAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk NWZmNWMwHhcNMjYwMTI1MjIwMTE1WhcNMjYwMTI2MjIwMTE1WjAzMTEwLwYDVQQD EygxYTE4MTQwMDRmZjI0OGRiODZhOTU5OGU4MmQyOGUzNGY1ZGRhN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9t/FgsctL7PoBD/VnvR4chkm2kyO AtdRUQSh+oxsvqV20qbrYn9BnOjf3sPbY8NasdnngFphWCKYtp8c8XDjV5bGJ1r2 bPEAQOmVOZWWvNc5An/kJCc4bgwRpWH7CsGKXQcuMm3p3Qy+y5NLXwhW7XsO2AOT pP6UeXvXpa7GaHVsxO2XQWOvjzYFjCL+ENkuUz5UjCpYqA8ONR0qN6qUtnqcYA9I cnZCdzBIsWPfZcSFIMxM07UeB/OnZijt/lvCwFImCZQ/zcG8dAJIB3KISrQsQqOA FDaMHW5OmgNmhvARIhTEI0LS6LTTOBldxbCPgpnkeqxdZ5+zn/nXGphPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoYFABP8kjbhqlZjoLSjjT13afBMB8GA1UdIwQY MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3 LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWSnN/bI Eh65PAJbBfaa51MdyIqLGKFu1hHxOceL5UFdghAr6ZZ3gayXGf6/1fxI4X/JKQ7A xZNxxZ/7QuQncZieIjE3QAHcfeeLnURDuPSPrfpfVlYwpWqJcjoE01LMwmbF2V1s pHdUz4uTZEV2dBvxCT6GY3nOnWoYvJViAfaK1/NoaE3mBa40VAsxSQCHczvnGl91 9cUNo2OsWnmbMgNmkKNgonjlslGLf+lpEz+v2i8bhpZI5i6JH/2iaf8lkwmAkz6z tO4WhE0un04FoesBRPMpS4jj2XlW5ExpV1NQTb4oyEmbRSyUM1ace/YKxvkbIMHy 2wg4GJciZvSUUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:33 2026 by rpki-client