This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json) Hash identifier: 5v2leT7Qufei8GeGxTq4MAshX4rQvfCMHAvdug/Fn2E= Subject key identifier: B0:42:54:6D:3C:74:DF:79:DB:3D:9A:1D:23:A7:A6:FC:BA:E3:82:BD Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91 Certificate serial: 019BF61A5282F432ECF611BBB9844B899F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 17:01:18 +0000 Manifest this update: Sun 25 Jan 2026 17:01:18 +0000 Manifest next update: Mon 26 Jan 2026 17:01:18 +0000 Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: HU9ZqvPK1QR9sKYZfoid5yDyT4lsRv15SgUm1jcgQsA=) 2: LPjmn9PolMemZlvU3gzZjHmr9fw.roa (hash: hJNmZuxOH01P3sPwMJ+PO3mkfbGrlehVtU6QgCrjEhc=) 3: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (hash: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY=) 4: lco6WDUn71zluEHfq5idlQ5WFJ0.roa (hash: S/GDmIIfLVIAhrpUagqamSs5aG9BVe2FNjExEfd2lVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:52:82:f4:32:ec:f6:11:bb:b9:84:4b:89:9f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91 Validity Not Before: Jan 25 17:01:18 2026 GMT Not After : Jan 26 17:01:18 2026 GMT Subject: CN=b042546d3c74df79db3d9a1d23a7a6fcbae382bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:74:4f:21:53:19:8e:38:9e:a5:9b:94:6f: e2:3f:a8:83:ac:de:d5:3b:ac:fb:b2:ac:d9:ad:89: 30:7b:1f:73:97:7f:20:fa:76:5b:4d:74:07:9c:85: 4f:2a:ce:38:6d:fa:5f:f8:06:4e:94:52:25:db:0c: de:ee:10:c1:bc:52:96:8d:66:e6:14:63:02:0c:f0: 39:08:c1:ed:eb:b0:67:c9:75:33:c0:d2:fa:eb:db: 95:83:cf:b3:cf:a9:0f:4e:fb:46:56:d9:e9:23:c8: 52:83:15:da:16:70:e8:d0:51:c1:b6:65:8d:92:90: c8:58:49:d6:e9:a4:43:5b:47:e7:06:bf:e3:a1:73: 72:48:49:7e:08:6a:bb:9f:1a:d3:0d:59:85:84:8c: 50:40:fb:00:c5:f0:46:9c:5d:b8:67:0d:28:e5:d9: 8b:3b:2a:ce:d8:79:8e:64:66:cb:91:bc:77:17:32: c5:66:ac:20:14:8c:b2:92:4b:26:a5:76:5d:fe:80: 6c:e2:ad:36:e0:44:99:51:e0:2d:e1:1d:a4:3c:6c: ff:1d:41:d4:04:e1:8c:0d:02:e7:b9:5d:e2:90:d0: c2:37:a8:00:93:55:65:4f:bc:37:91:cc:b7:07:dc: cc:52:ad:43:47:da:53:44:68:13:cd:ab:89:c0:98: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:54:6D:3C:74:DF:79:DB:3D:9A:1D:23:A7:A6:FC:BA:E3:82:BD X509v3 Authority Key Identifier: keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ab:7f:10:29:cf:af:48:8a:d4:81:79:23:c5:b3:18:aa:84: df:75:e8:b9:9a:90:ec:e8:21:39:35:ce:95:e3:d2:6a:e1:c5: 5d:95:9c:09:11:93:7b:ab:ff:71:53:c3:e7:7b:1a:58:66:37: 36:39:98:59:f3:68:49:28:4e:eb:59:29:6c:bd:82:5c:8e:a7: fe:76:6c:65:d7:15:2c:03:b2:0b:18:fd:fa:3f:b8:b5:32:bf: 51:28:e2:3b:f2:45:cf:82:2b:31:09:43:4e:56:77:b0:d0:68: 2d:fa:d4:b7:ee:3b:ae:e3:2f:1f:fb:f3:ff:73:b4:53:18:c9: 3a:73:a2:6c:88:ce:96:28:7b:97:f5:d4:0e:14:23:7d:71:5a: 6f:4a:93:8b:24:c5:5c:30:12:e9:b4:11:22:22:2b:e9:f7:4e: e9:b3:90:33:13:1e:8d:2d:71:0e:0d:8a:ba:ef:e6:19:c3:1d: f2:49:89:28:a3:d7:06:c5:84:77:fa:38:5d:d7:71:13:2e:73: 45:47:63:04:75:29:13:1c:6e:93:f8:02:67:1a:ae:4d:78:89: 16:5c:32:53:0f:d6:62:30:9e:8e:19:54:86:d7:5b:0a:59:62: 63:bd:9a:13:93:e7:ca:bf:24:af:ed:23:d7:ad:61:72:62:87: ea:27:3b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GlKC9DLs9hG7uYRLiZ+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5 MGFhOTEwHhcNMjYwMTI1MTcwMTE4WhcNMjYwMTI2MTcwMTE4WjAzMTEwLwYDVQQD EyhiMDQyNTQ2ZDNjNzRkZjc5ZGIzZDlhMWQyM2E3YTZmY2JhZTM4MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4np0TyFTGY44nqWblG/iP6iDrN7V O6z7sqzZrYkwex9zl38g+nZbTXQHnIVPKs44bfpf+AZOlFIl2wze7hDBvFKWjWbm FGMCDPA5CMHt67BnyXUzwNL669uVg8+zz6kPTvtGVtnpI8hSgxXaFnDo0FHBtmWN kpDIWEnW6aRDW0fnBr/joXNySEl+CGq7nxrTDVmFhIxQQPsAxfBGnF24Zw0o5dmL OyrO2HmOZGbLkbx3FzLFZqwgFIyykksmpXZd/oBs4q024ESZUeAt4R2kPGz/HUHU BOGMDQLnuV3ikNDCN6gAk1VlT7w3kcy3B9zMUq1DR9pTRGgTzauJwJjR1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBCVG08dN952z2aHSOnpvy644K9MB8GA1UdIwQY MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt ODU0MzgxNjg2YzdiLzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACat/ECnP r0iK1IF5I8WzGKqE33XouZqQ7OghOTXOlePSauHFXZWcCRGTe6v/cVPD53saWGY3 NjmYWfNoSShO61kpbL2CXI6n/nZsZdcVLAOyCxj9+j+4tTK/USjiO/JFz4IrMQlD TlZ3sNBoLfrUt+47ruMvH/vz/3O0UxjJOnOibIjOlih7l/XUDhQjfXFab0qTiyTF XDAS6bQRIiIr6fdO6bOQMxMejS1xDg2Kuu/mGcMd8kmJKKPXBsWEd/o4XddxEy5z RUdjBHUpExxuk/gCZxquTXiJFlwyUw/WYjCejhlUhtdbClliY72aE5Pnyr8kr+0j 161hcmKH6ic7WA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:52 2026 by rpki-client