This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json) Hash identifier: zcqXY0p7k9rSld1zkCBoK4ouRzeLY5qrGsCIZOqAqZI= Subject key identifier: DE:6F:B6:E3:DA:8A:2A:35:15:DD:DD:9B:15:AA:36:01:FD:5B:88:B7 Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Certificate serial: 019BF83F81437D7E6AB680A33A95E9C50BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft Manifest number: 177A Signing time: Mon 26 Jan 2026 03:01:09 +0000 Manifest this update: Mon 26 Jan 2026 03:01:09 +0000 Manifest next update: Tue 27 Jan 2026 03:01:09 +0000 Files and hashes: 1: Ao01yBlxvJ843s8rmXALqicuFL4.roa (hash: mObGzmDyz7K0J3EGcnRV4ZYxrkCBxp3ntfUTw3IpS/Y=) 2: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: erotqkOVwW/Gq+0tAzm80LAdkCNIGvVMIm2+c1kMlQQ=) 3: nMd-Xw4DDeNMARsDmT0tnDJOIKY.roa (hash: IL7Kn+tf2yZBt5W5A2bV1BTlZ8XATxRpIlXULrCuaRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:81:43:7d:7e:6a:b6:80:a3:3a:95:e9:c5:0b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Validity Not Before: Jan 26 03:01:09 2026 GMT Not After : Jan 27 03:01:09 2026 GMT Subject: CN=de6fb6e3da8a2a3515dddd9b15aa3601fd5b88b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:28:ac:30:61:27:69:4d:25:3b:8a:06:37: 41:15:3d:da:7a:54:25:9b:34:64:3a:ad:98:c5:ad: f9:6f:fc:8b:bc:2b:61:a9:12:7d:03:47:ac:d6:6d: f0:05:8a:b9:41:63:6c:dc:e2:9e:e8:c8:d8:f1:42: 8c:72:f7:84:16:0b:8b:9e:9e:d3:61:42:97:0f:94: ca:89:18:9a:24:41:63:ed:67:05:16:e9:fa:81:6e: c2:da:12:f2:c2:fb:e2:25:0d:82:e4:52:f9:4d:d4: 2e:04:f2:49:84:98:30:97:8d:a9:55:c9:af:0a:36: 6f:e9:2b:36:5f:23:45:c6:bc:f7:58:a1:e7:5e:59: 34:ad:11:b8:94:c7:c8:5f:ea:18:91:d2:0b:84:f1: 9f:e0:bd:e2:8d:7c:93:4b:b8:fa:e2:24:a8:2d:4a: 32:27:56:01:91:d3:4b:dd:88:12:2e:72:15:00:b6: 7d:21:3d:cf:57:8d:c1:13:2e:7f:01:90:8a:1e:62: 94:f6:2b:94:2a:8f:28:94:b1:64:cb:d0:9a:b6:c4: 6a:c2:18:ee:80:41:fb:a3:08:f7:ce:44:80:ec:0c: e8:27:00:c1:97:b0:74:be:f9:c7:77:a2:4b:33:84: 91:05:e2:18:ec:7a:09:9c:89:2f:27:61:fc:7e:82: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:B6:E3:DA:8A:2A:35:15:DD:DD:9B:15:AA:36:01:FD:5B:88:B7 X509v3 Authority Key Identifier: keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c7:93:d7:97:58:19:c6:da:63:77:31:cc:94:6e:0c:1e:ca: 2c:42:55:71:48:6b:12:2a:c9:90:25:78:78:3b:c4:7d:c7:6a: 82:bb:bf:96:fb:a0:fb:87:f3:53:11:35:e4:92:da:f4:2d:23: 38:63:6e:33:53:0e:97:7f:5e:9b:86:8c:25:67:f4:4e:aa:f4: bb:7c:72:9b:f3:d4:34:b6:f6:4f:eb:4b:7d:40:c1:f4:90:60: 4c:ca:47:19:17:5e:90:21:13:d1:16:ee:7e:70:00:8c:00:0a: bd:97:0d:22:21:bf:a2:06:02:27:ad:93:ac:33:34:cf:91:15: 28:1f:85:2f:c7:db:c1:77:a0:23:c8:ca:ee:d5:a4:7d:9d:29: b2:e8:40:a1:d0:51:fd:d9:bc:da:a3:ea:93:ea:62:b8:40:df: 83:f7:3f:f5:05:b6:02:13:19:67:75:cd:74:70:d7:d6:62:e4: e7:25:85:24:26:31:0b:91:dc:e4:32:f8:56:7a:89:c2:fa:a1: 38:30:3c:c2:20:14:50:28:ed:fe:ef:5a:34:09:55:4f:a1:61: 41:95:88:97:9a:16:a6:04:c5:fd:59:b9:b8:2c:7a:41:0f:41: 56:04:f8:5c:59:f1:41:73:a7:56:fc:b0:1f:ad:e1:c8:fb:ca: 42:6f:0a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P4FDfX5qtoCjOpXpxQvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj ODQ5MjcwHhcNMjYwMTI2MDMwMTA5WhcNMjYwMTI3MDMwMTA5WjAzMTEwLwYDVQQD EyhkZTZmYjZlM2RhOGEyYTM1MTVkZGRkOWIxNWFhMzYwMWZkNWI4OGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJgorDBhJ2lNJTuKBjdBFT3aelQl mzRkOq2Yxa35b/yLvCthqRJ9A0es1m3wBYq5QWNs3OKe6MjY8UKMcveEFguLnp7T YUKXD5TKiRiaJEFj7WcFFun6gW7C2hLywvviJQ2C5FL5TdQuBPJJhJgwl42pVcmv CjZv6Ss2XyNFxrz3WKHnXlk0rRG4lMfIX+oYkdILhPGf4L3ijXyTS7j64iSoLUoy J1YBkdNL3YgSLnIVALZ9IT3PV43BEy5/AZCKHmKU9iuUKo8olLFky9CatsRqwhju gEH7owj3zkSA7AzoJwDBl7B0vvnHd6JLM4SRBeIY7HoJnIkvJ2H8foIgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5vtuPaiio1Fd3dmxWqNgH9W4i3MB8GA1UdIwQY MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt ZDM1YjQzMGFmMjZkLzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8eT15dY GcbaY3cxzJRuDB7KLEJVcUhrEirJkCV4eDvEfcdqgru/lvug+4fzUxE15JLa9C0j OGNuM1MOl39em4aMJWf0Tqr0u3xym/PUNLb2T+tLfUDB9JBgTMpHGRdekCET0Rbu fnAAjAAKvZcNIiG/ogYCJ62TrDM0z5EVKB+FL8fbwXegI8jK7tWkfZ0psuhAodBR /dm82qPqk+piuEDfg/c/9QW2AhMZZ3XNdHDX1mLk5yWFJCYxC5Hc5DL4VnqJwvqh ODA8wiAUUCjt/u9aNAlVT6FhQZWIl5oWpgTF/Vm5uCx6QQ9BVgT4XFnxQXOnVvyw H63hyPvKQm8K7g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:07 2026 by rpki-client