This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json) Hash identifier: 1kZZRhIlyUb2oOrkmsrEVTF5o/lnktcZjQp5+Gi7Mzw= Subject key identifier: F5:06:4C:A3:18:3D:B4:39:F6:09:C9:EE:A2:51:2B:BC:8A:4F:D7:5C Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Certificate serial: 019BF619ABC2B10890A25AED93E30E91FEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 17:00:36 +0000 Manifest this update: Sun 25 Jan 2026 17:00:36 +0000 Manifest next update: Mon 26 Jan 2026 17:00:36 +0000 Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: EkwLH0aIN0UFmJhZTvVsWDIJrGNMSA2CjT3aHr+cWmw=) 2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ab:c2:b1:08:90:a2:5a:ed:93:e3:0e:91:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Validity Not Before: Jan 25 17:00:36 2026 GMT Not After : Jan 26 17:00:36 2026 GMT Subject: CN=f5064ca3183db439f609c9eea2512bbc8a4fd75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:e8:a1:3e:61:a5:76:0a:72:0d:f1:d9:f2: f4:e5:46:cb:08:fb:94:9e:e5:12:40:06:3d:eb:f6: a1:96:86:fc:93:e3:85:e7:cf:bc:a6:f1:d0:df:61: 86:80:3a:bc:05:1b:f9:ac:07:a6:a9:74:a7:d6:62: 19:55:db:9b:e5:24:39:d2:de:aa:04:6b:ca:11:71: 83:95:0c:3f:f6:3a:12:9c:a5:a4:f6:2a:e2:27:bc: 2f:42:54:7c:68:85:a7:17:9d:da:1c:11:31:55:69: 1d:26:0b:2f:46:fb:7b:20:ab:a0:9f:e8:04:b3:bb: 12:48:cc:b2:16:a4:6e:a6:2f:fc:58:7b:4e:cf:8d: be:2b:06:e5:da:e2:07:97:72:b7:8b:ed:99:b4:18: 1d:02:57:7c:0d:98:db:34:1c:7b:67:13:bc:54:23: a9:83:2d:ef:48:ed:be:21:a9:0e:bc:ba:12:78:23: db:77:0d:b2:0d:d8:4e:f6:a1:8e:57:8d:d5:42:49: 66:ff:53:12:91:33:ae:af:c0:ab:35:76:cf:d9:3e: 05:66:b9:39:e0:72:b4:1e:f0:32:06:37:92:ad:22: be:b8:97:ec:4c:0f:92:a3:20:c9:a5:48:ed:eb:0e: 3e:db:fc:e1:7e:04:1d:77:88:15:36:fd:75:55:f3: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:4C:A3:18:3D:B4:39:F6:09:C9:EE:A2:51:2B:BC:8A:4F:D7:5C X509v3 Authority Key Identifier: keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:71:73:b4:04:8e:22:ad:3f:2a:56:02:65:a8:43:54:4c:fe: 21:7a:55:e4:62:df:0a:3e:91:1c:0b:13:ac:50:83:e7:65:09: 90:1b:06:1a:c9:e1:fe:67:d0:57:94:d1:00:e8:33:8c:98:47: 29:f6:d8:14:f3:7b:7b:c4:33:b6:f2:ab:d0:f5:63:1d:d4:ae: ec:e6:b4:b7:74:78:5a:c0:98:a5:37:fe:78:8d:4e:57:8f:ac: 89:65:5e:ed:ef:7b:02:ca:a5:4a:2e:f8:59:bf:79:bf:a3:4a: c5:63:67:06:1b:8d:8c:62:65:a2:3a:30:27:f4:57:2e:28:38: 97:bc:90:d0:0b:35:c6:d1:14:22:5c:71:05:76:a3:4c:27:a4: 3e:88:5e:0c:65:f2:e8:ba:33:44:b3:be:00:a8:ea:bb:ae:ce: 58:53:21:be:ba:b4:ac:26:b8:c4:ac:e1:cf:2d:e0:8c:0b:a3: 9a:ff:32:d5:0f:ab:9c:6e:1d:2d:a6:0d:e8:a8:d2:97:ab:1c: 7c:9e:66:f2:d1:72:f7:4d:01:d6:b4:8e:d5:5a:a2:d0:df:02: 29:4b:5b:ff:21:db:cc:87:26:54:3f:87:a2:59:cc:5a:50:c9: b2:27:7d:c5:91:0b:30:e5:ae:3a:52:4e:ec:d4:1c:09:48:22: 2b:d1:87:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GavCsQiQolrtk+MOkf64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2 NzRhNTQwHhcNMjYwMTI1MTcwMDM2WhcNMjYwMTI2MTcwMDM2WjAzMTEwLwYDVQQD EyhmNTA2NGNhMzE4M2RiNDM5ZjYwOWM5ZWVhMjUxMmJiYzhhNGZkNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M3ooT5hpXYKcg3x2fL05UbLCPuU nuUSQAY96/ahlob8k+OF58+8pvHQ32GGgDq8BRv5rAemqXSn1mIZVdub5SQ50t6q BGvKEXGDlQw/9joSnKWk9iriJ7wvQlR8aIWnF53aHBExVWkdJgsvRvt7IKugn+gE s7sSSMyyFqRupi/8WHtOz42+Kwbl2uIHl3K3i+2ZtBgdAld8DZjbNBx7ZxO8VCOp gy3vSO2+IakOvLoSeCPbdw2yDdhO9qGOV43VQklm/1MSkTOur8CrNXbP2T4FZrk5 4HK0HvAyBjeSrSK+uJfsTA+SoyDJpUjt6w4+2/zhfgQdd4gVNv11VfMdmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUGTKMYPbQ59gnJ7qJRK7yKT9dcMB8GA1UdIwQY MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnFztASO Iq0/KlYCZahDVEz+IXpV5GLfCj6RHAsTrFCD52UJkBsGGsnh/mfQV5TRAOgzjJhH KfbYFPN7e8QztvKr0PVjHdSu7Oa0t3R4WsCYpTf+eI1OV4+siWVe7e97AsqlSi74 Wb95v6NKxWNnBhuNjGJlojowJ/RXLig4l7yQ0As1xtEUIlxxBXajTCekPoheDGXy 6LozRLO+AKjqu67OWFMhvrq0rCa4xKzhzy3gjAujmv8y1Q+rnG4dLaYN6KjSl6sc fJ5m8tFy900B1rSO1Vqi0N8CKUtb/yHbzIcmVD+HolnMWlDJsid9xZELMOWuOlJO 7NQcCUgiK9GHUg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:06 2026 by rpki-client