This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: Md6wMMWV0SOoPMZ9YhasElmL83z37W85yF+0ezi0Fq4= Subject key identifier: 33:BE:51:EF:5E:83:15:82:8F:A3:E8:A3:86:12:BF:51:5B:69:27:79 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019BF5E31216D42354A78BF307D4672AE00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: D7 Signing time: Sun 25 Jan 2026 16:00:57 +0000 Manifest this update: Sun 25 Jan 2026 16:00:57 +0000 Manifest next update: Mon 26 Jan 2026 16:00:57 +0000 Files and hashes: 1: 4B0Zz1zjw16kb7KhrwGqBb4UIyU.roa (hash: Mr81N7UlME4C7uxslLERYhfpPhur3VmUfbKu11vZgps=) 2: UTM1CR1pMYaFXHZzCtiduNbVB5s.roa (hash: v1x9VJ2yRV2qLCy6+vcnGUOTPUPi2aAkt7M842PxmE8=) 3: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: V9pmATVBYPQ1deS2OAGsyi1x+p/mYZBuxcQaQE+CSBI=) 4: q1QNm1HPH9NPpYHxo6dOJxZ8CEg.roa (hash: T61Ks0RxaruCy37gdj+R+3mq9ALV4w5YaetmHDahPKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:12:16:d4:23:54:a7:8b:f3:07:d4:67:2a:e0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Jan 25 16:00:57 2026 GMT Not After : Jan 26 16:00:57 2026 GMT Subject: CN=33be51ef5e8315828fa3e8a38612bf515b692779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:22:ea:1b:d6:c6:10:5b:46:bf:04:32:91: 33:00:03:37:e0:36:1f:16:69:f4:35:09:fa:83:1a: 3e:60:76:20:01:85:1e:01:eb:6b:23:98:06:2b:87: a5:7f:97:f2:73:77:a0:d0:6b:b6:1d:ba:ea:fe:e8: 06:b5:08:69:e1:2f:e3:e0:82:45:b2:c7:d5:4a:60: 3f:dd:b7:61:52:33:7a:09:49:19:e8:d5:03:28:9f: 67:0c:6d:72:7c:ba:17:c7:37:89:08:97:e6:7c:ef: 78:a3:07:45:da:c7:94:58:cb:79:16:11:8c:55:5f: 45:f9:20:2d:0e:43:ab:68:eb:91:78:0e:74:01:32: 40:dd:86:8f:db:f3:18:75:72:df:26:4b:aa:07:d3: fa:b1:b5:82:92:83:2c:e3:08:2c:c6:72:ab:8f:35: cd:b4:05:a3:34:f0:48:42:11:28:fb:4c:50:e7:91: 64:0c:cf:6b:e7:ad:8b:b8:19:2f:32:4c:95:ef:32: da:8f:e5:06:0b:22:f9:4e:be:1d:69:09:8b:c8:85: e1:b1:d2:eb:4f:2a:c2:bf:8c:2f:a2:35:92:c7:f7: 59:6a:37:da:be:c7:f2:25:a7:2b:96:79:10:27:9e: d8:ba:85:01:a7:ac:91:79:29:67:d9:39:80:15:79: 0b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BE:51:EF:5E:83:15:82:8F:A3:E8:A3:86:12:BF:51:5B:69:27:79 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:7e:8c:cc:f2:8d:9b:19:f7:5c:4a:64:a8:b6:4d:8f:42: 50:35:12:2a:e8:4f:96:4e:5a:ae:4e:89:41:4a:83:de:52:bb: 8e:2d:19:05:ad:29:b9:18:32:aa:a9:e3:d1:48:36:c2:c7:22: 3f:3a:fb:2d:fe:e6:6b:8f:07:34:94:d8:8f:9c:9f:96:39:02: e9:60:7b:ca:ce:0a:68:b9:d2:74:be:da:b3:39:a9:ab:8e:21: 62:89:67:a6:c7:21:58:ab:f2:c9:34:2c:b8:33:9a:e4:01:cf: 96:3e:35:e3:23:e5:41:06:26:1f:06:ff:c3:b2:03:d2:2b:44: 2e:5b:94:17:69:73:e8:88:d3:ef:a4:f5:63:24:23:38:40:46: 05:b0:72:68:d7:cc:4b:07:e0:83:db:53:aa:fd:12:9a:61:e4: f7:30:aa:56:fb:11:8e:20:cd:b2:7f:54:42:a2:91:7a:c2:e5: 3a:c7:f0:b8:78:3d:52:11:5d:96:32:03:60:3d:e6:14:76:96: 26:66:65:d6:62:cd:bd:98:6a:7d:98:d6:72:70:2d:1e:a8:a5: 84:5e:de:8c:59:3a:c5:f0:de:70:1d:1e:06:5d:ff:7a:03:ba: e8:67:5b:2d:db:45:74:e6:3e:be:80:d5:fa:fa:d7:f1:81:c7: 73:4e:a1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14xIW1CNUp4vzB9RnKuAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwMTI1MTYwMDU3WhcNMjYwMTI2MTYwMDU3WjAzMTEwLwYDVQQD EygzM2JlNTFlZjVlODMxNTgyOGZhM2U4YTM4NjEyYmY1MTViNjkyNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurwi6hvWxhBbRr8EMpEzAAM34DYf Fmn0NQn6gxo+YHYgAYUeAetrI5gGK4elf5fyc3eg0Gu2Hbrq/ugGtQhp4S/j4IJF ssfVSmA/3bdhUjN6CUkZ6NUDKJ9nDG1yfLoXxzeJCJfmfO94owdF2seUWMt5FhGM VV9F+SAtDkOraOuReA50ATJA3YaP2/MYdXLfJkuqB9P6sbWCkoMs4wgsxnKrjzXN tAWjNPBIQhEo+0xQ55FkDM9r562LuBkvMkyV7zLaj+UGCyL5Tr4daQmLyIXhsdLr TyrCv4wvojWSx/dZajfavsfyJacrlnkQJ57YuoUBp6yReSln2TmAFXkL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO+Ue9egxWCj6Poo4YSv1FbaSd5MB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDR+jMzy jZsZ91xKZKi2TY9CUDUSKuhPlk5ark6JQUqD3lK7ji0ZBa0puRgyqqnj0Ug2wsci Pzr7Lf7ma48HNJTYj5yfljkC6WB7ys4KaLnSdL7aszmpq44hYolnpschWKvyyTQs uDOa5AHPlj414yPlQQYmHwb/w7ID0itELluUF2lz6IjT76T1YyQjOEBGBbByaNfM Swfgg9tTqv0SmmHk9zCqVvsRjiDNsn9UQqKResLlOsfwuHg9UhFdljIDYD3mFHaW JmZl1mLNvZhqfZjWcnAtHqilhF7ejFk6xfDecB0eBl3/egO66GdbLdtFdOY+voDV +vrX8YHHc06hpw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:45 2026 by rpki-client