This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json) Hash identifier: Pw8r0ca8kmcvkHlwKPwXuCyk7DzsclVJ7KuTdxsrpyI= Subject key identifier: C2:84:96:19:16:BA:46:9E:08:FE:86:E6:86:B0:D8:17:20:D9:AF:C5 Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Certificate serial: 019BF7635BD11CBD44BB3C9628C9FB26EF6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft Manifest number: 075A Signing time: Sun 25 Jan 2026 23:00:42 +0000 Manifest this update: Sun 25 Jan 2026 23:00:42 +0000 Manifest next update: Mon 26 Jan 2026 23:00:42 +0000 Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: v33qu0G+ozj/Pn4M4M7RNSeFovEZHrHqdg3dkVamV7s=) 2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5b:d1:1c:bd:44:bb:3c:96:28:c9:fb:26:ef:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Validity Not Before: Jan 25 23:00:42 2026 GMT Not After : Jan 26 23:00:42 2026 GMT Subject: CN=c284961916ba469e08fe86e686b0d81720d9afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:74:94:62:04:d3:08:7d:7e:96:2d:8d:b1: 12:cd:de:b7:60:da:90:56:cd:1e:53:7f:33:c2:a0: ad:c0:18:9c:8c:38:1e:3a:c7:50:6f:69:8e:da:26: f1:e2:8f:ca:46:c3:8a:d3:ca:f4:ae:e2:56:d9:db: ef:2e:74:51:6f:27:99:bb:75:3d:f2:94:9b:39:23: 05:b1:1c:ff:0f:bd:54:06:a6:27:08:29:73:06:92: aa:cd:92:2d:87:12:55:66:9b:78:23:c8:9d:58:16: 95:66:34:68:68:0a:45:aa:32:a9:e5:20:d2:aa:10: 3c:a2:55:cc:29:85:38:f5:02:2b:10:58:52:32:ed: 59:3e:36:03:a6:40:b9:8b:d8:f1:77:9f:4d:d0:42: 75:9b:2d:ca:b4:09:43:5f:54:fd:73:94:d3:c6:f6: 0f:4b:cb:a9:b5:9a:b9:a6:b4:64:5d:41:d0:4d:14: 24:0e:c0:a5:57:a8:0b:de:17:f1:85:a7:8d:8c:f2: e7:6a:aa:7a:03:b6:2e:29:c1:02:7f:58:84:c9:25: 08:4e:6f:f1:2f:07:7f:49:3f:90:8b:c3:a6:6a:cc: e2:2d:bf:43:d5:3a:20:5d:5e:56:6c:8d:0a:ff:d9: 83:79:e5:e2:b1:5f:b6:ff:4c:b8:71:f3:ec:1b:f2: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:96:19:16:BA:46:9E:08:FE:86:E6:86:B0:D8:17:20:D9:AF:C5 X509v3 Authority Key Identifier: keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:fd:98:08:c3:83:a2:72:7a:d3:8c:12:29:c8:bb:ec:4b: f9:2a:b8:bf:6f:24:b2:a4:97:7c:83:07:e5:5a:0d:61:29:21: 10:f8:2d:d1:fc:b2:42:cb:7a:9f:c1:c3:16:f6:b2:9d:19:b9: 92:6e:df:bb:b7:5b:dc:ae:fa:19:20:af:b3:68:c0:6c:eb:f0: 73:8c:25:69:f3:eb:d2:16:94:4d:39:77:ea:24:11:7d:b0:d3: 52:da:1e:3d:86:4d:b0:cd:2c:5d:2b:1c:ad:4b:cc:1a:1c:81: e0:9e:cb:fa:06:61:21:06:c6:94:c9:7b:2e:e1:68:e2:83:15: 6d:83:6f:e6:c4:08:01:f3:eb:d7:45:e1:b3:8e:83:a6:fc:14: f0:4f:d4:ce:27:c3:76:92:0c:90:d0:c1:1f:05:0a:48:16:1d: 96:15:39:7b:f2:0e:15:f1:d4:cb:75:ea:66:de:f5:3a:36:44: 07:2e:77:28:2f:6f:8d:d7:41:0a:f7:73:6b:73:2a:93:af:45: a0:24:eb:2d:7d:72:39:3c:dd:4d:d9:bb:d0:d8:b6:e5:1f:12: 27:1e:ed:25:6a:77:34:20:50:aa:0f:14:6b:65:d9:c4:87:14: e0:49:22:6e:27:41:1f:d5:10:d5:d1:28:ac:2f:ad:59:cf:35: bf:c3:24:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1vRHL1EuzyWKMn7Ju9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw YTFjNzIwHhcNMjYwMTI1MjMwMDQyWhcNMjYwMTI2MjMwMDQyWjAzMTEwLwYDVQQD EyhjMjg0OTYxOTE2YmE0NjllMDhmZTg2ZTY4NmIwZDgxNzIwZDlhZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDd0lGIE0wh9fpYtjbESzd63YNqQ Vs0eU38zwqCtwBicjDgeOsdQb2mO2ibx4o/KRsOK08r0ruJW2dvvLnRRbyeZu3U9 8pSbOSMFsRz/D71UBqYnCClzBpKqzZIthxJVZpt4I8idWBaVZjRoaApFqjKp5SDS qhA8olXMKYU49QIrEFhSMu1ZPjYDpkC5i9jxd59N0EJ1my3KtAlDX1T9c5TTxvYP S8uptZq5prRkXUHQTRQkDsClV6gL3hfxhaeNjPLnaqp6A7YuKcECf1iEySUITm/x Lwd/ST+Qi8OmasziLb9D1TogXV5WbI0K/9mDeeXisV+2/0y4cfPsG/LzdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKElhkWukaeCP6G5oaw2Bcg2a/FMB8GA1UdIwQY MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdur9mAjD g6JyetOMEinIu+xL+Sq4v28ksqSXfIMH5VoNYSkhEPgt0fyyQst6n8HDFvaynRm5 km7fu7db3K76GSCvs2jAbOvwc4wlafPr0haUTTl36iQRfbDTUtoePYZNsM0sXSsc rUvMGhyB4J7L+gZhIQbGlMl7LuFo4oMVbYNv5sQIAfPr10Xhs46DpvwU8E/UzifD dpIMkNDBHwUKSBYdlhU5e/IOFfHUy3XqZt71OjZEBy53KC9vjddBCvdza3Mqk69F oCTrLX1yOTzdTdm70Ni25R8SJx7tJWp3NCBQqg8Ua2XZxIcU4EkibidBH9UQ1dEo rC+tWc81v8MkjA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:42 2026 by rpki-client