This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json) Hash identifier: EyAe90lvg9lc6BKbo7mcZISFXE6azxvaooPcaXSqWyU= Subject key identifier: 90:A2:CF:14:67:6F:43:07:08:29:3B:0C:27:FB:4C:E6:25:DC:0F:1E Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a Certificate serial: 019BF61A0752C9124EC369BDA0D497EE26AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft Manifest number: 177E Signing time: Sun 25 Jan 2026 17:00:59 +0000 Manifest this update: Sun 25 Jan 2026 17:00:59 +0000 Manifest next update: Mon 26 Jan 2026 17:00:59 +0000 Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: YHt7OiFRb++SP8xYH8Pg9peke4N7Za4tnyu9jnQEscE=) 2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:07:52:c9:12:4e:c3:69:bd:a0:d4:97:ee:26:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a Validity Not Before: Jan 25 17:00:59 2026 GMT Not After : Jan 26 17:00:59 2026 GMT Subject: CN=90a2cf14676f430708293b0c27fb4ce625dc0f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:af:3c:02:52:ef:fb:72:7c:ac:a4:45:4f: d8:8d:d1:0f:e0:19:13:fb:ad:d0:c4:76:7c:fd:0c: d2:a1:61:98:f6:b9:d7:d9:70:ad:d0:2a:78:4f:01: e4:f9:59:dd:03:cc:38:2e:e3:bc:f0:fc:62:ad:5c: 90:e7:04:d9:bd:00:df:e8:4d:69:db:5e:8d:01:e8: af:f1:73:74:31:0d:f0:71:4f:9d:26:97:c6:a1:6e: 30:59:18:8d:86:2e:84:77:ca:4e:53:99:80:13:ae: 6f:ba:2a:58:c7:c6:54:3c:83:9d:f9:68:bc:88:1e: 60:c9:cf:bc:31:d7:41:b0:81:82:db:52:f3:59:40: 26:c4:c6:b8:4e:64:3d:1e:26:db:e2:2b:aa:48:97: 36:72:58:ef:88:f6:95:b6:11:6d:06:47:12:d6:09: b7:b8:13:3c:e6:cc:2f:80:1a:4f:39:48:d3:7f:47: 4d:2d:e7:74:54:ed:23:d4:fc:e8:d5:be:30:83:19: fc:08:38:24:3f:4d:3e:cf:db:5d:34:4f:fc:1f:e0: e5:2f:2e:33:f2:ca:7c:3f:91:11:12:6f:74:4d:3b: ea:e9:96:c3:81:b2:11:68:39:b8:a1:e0:21:8f:8b: 6e:4d:93:de:a7:42:eb:52:5e:fe:87:c9:1a:ff:82: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A2:CF:14:67:6F:43:07:08:29:3B:0C:27:FB:4C:E6:25:DC:0F:1E X509v3 Authority Key Identifier: keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cc:73:dc:c5:d0:d0:58:91:26:75:c6:12:3e:c4:ae:61:54: a2:02:26:c3:7f:62:e0:15:2d:d5:db:a5:41:4d:b8:2e:b0:80: 39:d1:99:e8:0f:4d:1c:b2:c0:b3:41:d1:1b:40:78:1a:0b:d9: a4:b1:af:07:b4:e0:2d:71:8a:e4:f6:90:e2:d5:9b:c2:32:45: ce:39:cf:e0:58:6c:7b:7e:54:5d:66:b5:1b:e6:ac:fa:06:b8: 94:4c:ab:58:2f:65:c8:ab:39:7c:c5:bb:c3:98:ed:46:24:d3: fc:4a:79:2f:4f:e0:f8:82:de:47:2e:2c:86:81:60:3f:74:c5: 37:9e:d0:b7:8d:50:98:85:6a:f2:c5:94:67:ef:6a:bb:ac:21: f7:53:8e:1e:f6:dc:2c:ec:d5:05:39:67:b8:0b:00:46:5a:59: d3:28:6f:51:6d:72:2b:25:42:0d:ca:b7:ca:f7:1d:f0:75:1c: 21:36:22:40:60:a3:7a:f1:76:4b:74:6c:03:df:f9:30:5e:1b: 56:e1:eb:f7:15:16:bf:2e:83:95:2e:2d:dd:a6:3d:c3:fd:4a: 3b:40:7c:60:04:01:cc:02:21:04:ae:71:0e:3a:3a:73:a1:fc: 9a:e8:b2:2a:f5:e1:9b:ac:6f:df:7c:82:95:35:f7:58:4f:a1: c1:a3:2f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GgdSyRJOw2m9oNSX7iavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm Y2Q4NWEwHhcNMjYwMTI1MTcwMDU5WhcNMjYwMTI2MTcwMDU5WjAzMTEwLwYDVQQD Eyg5MGEyY2YxNDY3NmY0MzA3MDgyOTNiMGMyN2ZiNGNlNjI1ZGMwZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrSvPAJS7/tyfKykRU/YjdEP4BkT +63QxHZ8/QzSoWGY9rnX2XCt0Cp4TwHk+VndA8w4LuO88PxirVyQ5wTZvQDf6E1p 216NAeiv8XN0MQ3wcU+dJpfGoW4wWRiNhi6Ed8pOU5mAE65vuipYx8ZUPIOd+Wi8 iB5gyc+8MddBsIGC21LzWUAmxMa4TmQ9Hibb4iuqSJc2cljviPaVthFtBkcS1gm3 uBM85swvgBpPOUjTf0dNLed0VO0j1Pzo1b4wgxn8CDgkP00+z9tdNE/8H+DlLy4z 8sp8P5EREm90TTvq6ZbDgbIRaDm4oeAhj4tuTZPep0LrUl7+h8ka/4JWMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCizxRnb0MHCCk7DCf7TOYl3A8eMB8GA1UdIwQY MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8xz3MXQ 0FiRJnXGEj7ErmFUogImw39i4BUt1dulQU24LrCAOdGZ6A9NHLLAs0HRG0B4GgvZ pLGvB7TgLXGK5PaQ4tWbwjJFzjnP4Fhse35UXWa1G+as+ga4lEyrWC9lyKs5fMW7 w5jtRiTT/Ep5L0/g+ILeRy4shoFgP3TFN57Qt41QmIVq8sWUZ+9qu6wh91OOHvbc LOzVBTlnuAsARlpZ0yhvUW1yKyVCDcq3yvcd8HUcITYiQGCjevF2S3RsA9/5MF4b VuHr9xUWvy6DlS4t3aY9w/1KO0B8YAQBzAIhBK5xDjo6c6H8muiyKvXhm6xv33yC lTX3WE+hwaMvcA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:32 2026 by rpki-client