This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json) Hash identifier: M9RanvXtKhXNLWKEKMZndGU4tIPp5w9J1tsOsEe9a48= Subject key identifier: 67:85:FF:14:D5:F3:72:35:53:DC:15:15:74:92:77:FC:0D:42:FB:15 Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Certificate serial: 019BF6F56667C40C07162D06C10F38A13B46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft Manifest number: 0FAC Signing time: Sun 25 Jan 2026 21:00:36 +0000 Manifest this update: Sun 25 Jan 2026 21:00:36 +0000 Manifest next update: Mon 26 Jan 2026 21:00:36 +0000 Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: A/LmI05YSb/1Xl547iGq1ZaYCKw/hU85zP6d4XBjTns=) 2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:66:67:c4:0c:07:16:2d:06:c1:0f:38:a1:3b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Validity Not Before: Jan 25 21:00:36 2026 GMT Not After : Jan 26 21:00:36 2026 GMT Subject: CN=6785ff14d5f3723553dc1515749277fc0d42fb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:59:ec:8b:fb:72:f9:f1:4b:7e:28:3a:55: 25:d5:64:70:07:0b:4e:d5:1b:5e:3e:ea:b7:7d:36: 9f:78:c3:f0:a5:b2:b0:17:34:22:78:55:ba:48:45: cb:2f:b4:7a:bd:51:dd:fd:75:53:da:7d:7d:c6:6d: e7:8c:e8:59:7e:26:97:1b:cc:cf:e4:e3:f8:5c:e4: b6:e5:0d:0b:2e:52:08:c7:a2:c1:ad:44:43:2a:76: a5:fb:a7:21:77:b9:5c:d6:c0:45:e4:94:0a:0f:fc: fb:c7:cd:63:08:58:c9:9d:5b:a6:e5:09:72:4b:ef: e5:29:65:29:31:1b:8e:01:83:c4:3d:86:5d:dd:69: ab:fd:16:c7:be:ce:1b:a5:e8:eb:38:41:a6:f9:b0: 4a:e3:f2:e8:88:2a:c6:69:95:97:a0:e1:62:1f:da: 62:6a:73:59:bf:50:da:b3:93:7b:0a:59:96:05:36: 16:df:8f:0c:36:cb:43:fc:d5:d2:c2:e7:d5:41:d9: 76:1b:ac:ef:70:32:15:36:66:76:79:85:b6:1c:19: 17:41:ce:db:26:57:f3:2a:25:7d:fc:15:c6:0d:16: a2:3d:1b:f3:e4:7c:bd:98:e3:b8:4e:31:03:b0:29: f1:d3:65:bf:63:44:01:42:b2:86:a3:3f:f0:19:2b: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:85:FF:14:D5:F3:72:35:53:DC:15:15:74:92:77:FC:0D:42:FB:15 X509v3 Authority Key Identifier: keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:9d:08:d4:a1:25:aa:74:3c:e1:6b:be:d1:6f:a7:82:ee: 7b:d2:7e:c7:8f:ef:b3:6f:57:63:1b:a9:51:1f:fc:81:f3:96: 16:8c:9e:f1:54:8e:ce:66:7b:88:a6:6f:98:f9:50:92:12:63: c7:ee:13:5c:dd:58:33:d4:2f:41:63:58:72:04:30:7d:6b:ee: fc:37:9b:2b:77:d5:ab:51:42:20:bb:cd:51:3f:1a:36:dc:02: de:bd:ed:6b:55:5a:a0:4d:61:57:e9:23:58:49:d9:ce:21:85: 81:57:62:5d:66:1d:9b:81:c2:25:ad:2d:dd:a6:45:62:83:80: f1:43:7d:ec:8b:20:e8:08:1f:5a:68:13:5a:31:63:00:1e:ec: 83:c3:b7:50:b1:3c:32:46:d2:6d:dc:58:1a:6d:e4:8b:59:e7: 7c:6d:0c:fe:58:bd:c9:06:33:81:d9:ac:a0:ce:bc:fa:11:b5: f5:3f:f7:5f:c4:9c:56:ea:d0:86:e3:20:57:e2:8a:25:dc:38: ee:de:79:9c:91:b9:9a:1e:d1:5a:5e:48:f7:a7:77:58:43:cf: 7c:98:99:d4:bb:7c:3b:78:ff:f4:4c:0f:55:9e:a4:69:68:28: 31:95:50:28:ca:00:62:31:84:9e:c0:2b:b7:37:f2:5f:26:02: a7:4b:98:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WZnxAwHFi0GwQ84oTtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj OWVmMGMwHhcNMjYwMTI1MjEwMDM2WhcNMjYwMTI2MjEwMDM2WjAzMTEwLwYDVQQD Eyg2Nzg1ZmYxNGQ1ZjM3MjM1NTNkYzE1MTU3NDkyNzdmYzBkNDJmYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yNZ7Iv7cvnxS34oOlUl1WRwBwtO 1RtePuq3fTafeMPwpbKwFzQieFW6SEXLL7R6vVHd/XVT2n19xm3njOhZfiaXG8zP 5OP4XOS25Q0LLlIIx6LBrURDKnal+6chd7lc1sBF5JQKD/z7x81jCFjJnVum5Qly S+/lKWUpMRuOAYPEPYZd3Wmr/RbHvs4bpejrOEGm+bBK4/LoiCrGaZWXoOFiH9pi anNZv1Das5N7ClmWBTYW348MNstD/NXSwufVQdl2G6zvcDIVNmZ2eYW2HBkXQc7b JlfzKiV9/BXGDRaiPRvz5Hy9mOO4TjEDsCnx02W/Y0QBQrKGoz/wGSvzHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeF/xTV83I1U9wVFXSSd/wNQvsVMB8GA1UdIwQY MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt MzJkZDUzNjQwYjljLzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ6dCNSh Jap0POFrvtFvp4Lue9J+x4/vs29XYxupUR/8gfOWFoye8VSOzmZ7iKZvmPlQkhJj x+4TXN1YM9QvQWNYcgQwfWvu/DebK3fVq1FCILvNUT8aNtwC3r3ta1VaoE1hV+kj WEnZziGFgVdiXWYdm4HCJa0t3aZFYoOA8UN97Isg6AgfWmgTWjFjAB7sg8O3ULE8 MkbSbdxYGm3ki1nnfG0M/li9yQYzgdmsoM68+hG19T/3X8ScVurQhuMgV+KKJdw4 7t55nJG5mh7RWl5I96d3WEPPfJiZ1Lt8O3j/9EwPVZ6kaWgoMZVQKMoAYjGEnsAr tzfyXyYCp0uYrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:24 2026 by rpki-client