This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json) Hash identifier: zC4b+hCULQRYpdLbBDMuJmfTAYKunL9m8OGwcSs4SMo= Subject key identifier: 3D:23:E8:20:84:D4:F0:10:3D:02:FF:64:9E:9C:46:AA:1C:B1:BC:30 Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Certificate serial: 019BF8080D4194BB1C8393EBADCC5DC2B264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 02:00:35 +0000 Manifest this update: Mon 26 Jan 2026 02:00:35 +0000 Manifest next update: Tue 27 Jan 2026 02:00:35 +0000 Files and hashes: 1: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: +jKlEVGitp/vnkyefEu2kYUD93mLOkAMh/M3Qy60E90=) 2: vFI_szTdwGut2KUofHDh3zwoi1k.roa (hash: MxrZSZTPx1kjzcHF3plautdDk7QOfOy+oz7wimPfgjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:0d:41:94:bb:1c:83:93:eb:ad:cc:5d:c2:b2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Validity Not Before: Jan 26 02:00:35 2026 GMT Not After : Jan 27 02:00:35 2026 GMT Subject: CN=3d23e82084d4f0103d02ff649e9c46aa1cb1bc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:79:34:79:bd:3b:3a:8a:ec:33:4a:9a:16: 0a:3e:57:dc:93:41:ba:93:53:49:26:44:2a:d5:1b: b6:ce:4c:53:8a:5c:20:ce:3d:65:ef:76:0c:c2:a2: f1:e6:48:03:59:2f:4d:70:f5:71:ee:52:94:4f:d7: 3e:42:8a:cb:c5:eb:6f:ca:de:90:76:47:db:b2:31: a6:3f:92:e0:87:62:68:6c:57:f9:ef:4a:48:2f:09: 2a:75:1e:22:b9:b7:4a:e9:41:1f:85:1e:90:27:9a: 79:ef:9a:50:e1:79:7a:77:67:e3:fc:00:f4:e3:2c: 55:76:cd:39:33:01:ed:a4:d6:e0:33:ab:67:0c:fc: e5:c0:9b:ed:df:3b:d0:32:9e:67:f8:5f:b2:43:7a: ce:f3:63:da:ca:ed:c3:0e:35:a3:5c:2b:ee:ac:e1: ce:51:5e:69:5a:cd:44:37:c4:c7:d5:68:b0:2b:9d: 25:e4:ef:94:f7:ff:23:f4:ee:0a:7c:11:05:c9:9b: 50:27:18:bd:ff:10:05:67:3d:3e:7f:72:f4:32:3e: 8b:a7:c6:d6:d3:66:0d:0e:4e:53:d3:ff:34:e7:bc: a6:c4:34:21:c1:4e:71:b8:f1:80:89:d2:08:28:c5: 03:25:3a:34:e0:aa:63:56:3a:5b:60:04:b2:5f:c2: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:23:E8:20:84:D4:F0:10:3D:02:FF:64:9E:9C:46:AA:1C:B1:BC:30 X509v3 Authority Key Identifier: keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e4:ac:48:43:42:1f:96:e0:95:11:62:6b:9b:82:45:67:51: f8:09:30:b4:9d:31:75:82:ab:b8:96:04:9f:1d:b2:87:33:30: ac:49:00:ab:72:80:20:9b:21:23:ad:15:0f:d3:70:b8:79:12: 47:5f:92:97:71:43:45:8f:f5:f4:eb:f0:9d:73:50:0d:ed:7b: 01:b0:b6:61:89:1d:f9:d5:ca:2c:4f:85:fd:97:5d:9f:41:04: 32:eb:dc:a0:d2:ca:a3:e3:b9:70:38:f5:68:55:de:d3:da:d6: 0c:b2:68:7d:28:84:60:85:18:c6:d2:f9:31:de:ac:19:04:71: 6d:f2:ed:a4:c4:8a:2d:96:c9:7f:c4:a2:9d:84:63:b1:c4:3d: f2:05:3f:2a:86:f2:dd:d2:48:bb:23:74:8b:18:9d:9d:a2:15: cb:7a:a3:35:39:c8:c5:16:c9:6c:92:96:a6:03:11:6a:89:14: ca:16:57:ea:2a:b9:54:9f:f6:cc:90:a7:71:38:f7:13:30:eb: e7:23:88:46:8e:a1:8c:cf:f3:64:62:3a:8c:d1:e5:9d:4f:75: 78:b2:96:1b:b2:80:44:a5:14:ad:c1:a1:3e:04:e4:28:02:a9: fa:b6:90:59:8a:22:83:84:20:d8:27:a4:2d:09:dc:d6:ea:58: 2b:23:7c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CA1BlLscg5PrrcxdwrJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2 NzRhNTQwHhcNMjYwMTI2MDIwMDM1WhcNMjYwMTI3MDIwMDM1WjAzMTEwLwYDVQQD EygzZDIzZTgyMDg0ZDRmMDEwM2QwMmZmNjQ5ZTljNDZhYTFjYjFiYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeN5NHm9OzqK7DNKmhYKPlfck0G6 k1NJJkQq1Ru2zkxTilwgzj1l73YMwqLx5kgDWS9NcPVx7lKUT9c+QorLxetvyt6Q dkfbsjGmP5Lgh2JobFf570pILwkqdR4iubdK6UEfhR6QJ5p575pQ4Xl6d2fj/AD0 4yxVds05MwHtpNbgM6tnDPzlwJvt3zvQMp5n+F+yQ3rO82Payu3DDjWjXCvurOHO UV5pWs1EN8TH1WiwK50l5O+U9/8j9O4KfBEFyZtQJxi9/xAFZz0+f3L0Mj6Lp8bW 02YNDk5T0/8057ymxDQhwU5xuPGAidIIKMUDJTo04KpjVjpbYASyX8IsLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0j6CCE1PAQPQL/ZJ6cRqocsbwwMB8GA1UdIwQY MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+SsSENC H5bglRFia5uCRWdR+AkwtJ0xdYKruJYEnx2yhzMwrEkAq3KAIJshI60VD9NwuHkS R1+Sl3FDRY/19OvwnXNQDe17AbC2YYkd+dXKLE+F/Zddn0EEMuvcoNLKo+O5cDj1 aFXe09rWDLJofSiEYIUYxtL5Md6sGQRxbfLtpMSKLZbJf8SinYRjscQ98gU/Koby 3dJIuyN0ixidnaIVy3qjNTnIxRbJbJKWpgMRaokUyhZX6iq5VJ/2zJCncTj3EzDr 5yOIRo6hjM/zZGI6jNHlnU91eLKWG7KARKUUrcGhPgTkKAKp+raQWYoig4Qg2Cek LQnc1upYKyN8Bw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:20 2026 by rpki-client