This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json) Hash identifier: /Q5fCMndyV4L9NE2lOizxULxZFfWA745xyA8k7Dp7ns= Subject key identifier: B8:6A:01:78:8A:E1:D3:EA:1F:65:35:2D:7F:9D:55:CC:2D:EE:C6:75 Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054 Certificate serial: 019BF8768EB7CD62281137DA09536A5145A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:01:17 +0000 Manifest this update: Mon 26 Jan 2026 04:01:17 +0000 Manifest next update: Tue 27 Jan 2026 04:01:17 +0000 Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=) 2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 0XK8B4/SqqOIBmFAcdCMqm+yL07/CSSo9ZKHSZyK43s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:8e:b7:cd:62:28:11:37:da:09:53:6a:51:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054 Validity Not Before: Jan 26 04:01:17 2026 GMT Not After : Jan 27 04:01:17 2026 GMT Subject: CN=b86a01788ae1d3ea1f65352d7f9d55cc2deec675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:9c:e8:66:17:f3:b3:44:e0:e9:cd:f5:08: 9c:73:06:ba:b7:e0:0a:d6:6a:84:ee:0f:f1:00:9b: 5b:17:1e:a9:e9:a6:cb:eb:f6:5f:c8:2f:11:cd:5f: 7c:f7:10:dc:f6:43:49:ff:e2:30:0c:fa:22:b3:22: 18:34:5b:79:25:33:01:f9:c3:cb:45:38:59:97:86: a8:58:df:26:6f:52:aa:d3:33:4d:af:ce:c0:ac:62: 41:d4:eb:75:ec:88:80:45:9d:ba:79:67:91:c2:09: b4:b0:37:ca:e3:d4:c4:1d:51:03:f6:f0:72:af:4e: 9f:ea:b5:65:08:2d:ac:44:ea:0e:68:e5:41:7a:df: 01:4f:71:3c:a4:cb:c5:00:10:56:4f:7a:a6:10:be: c9:2e:0c:5d:88:9d:ba:0b:8c:82:55:17:09:37:d4: ac:9a:df:55:2e:32:df:60:2e:8c:88:60:1f:1d:3d: f3:5f:37:6b:a3:bf:7d:fc:0c:e3:43:44:cc:86:f3: 07:83:37:3c:41:9d:12:16:66:51:48:1e:61:3b:eb: cb:e0:a6:6d:5f:f7:1c:c2:d0:22:61:0a:2f:a0:28: a6:cd:66:78:f2:3c:3a:a7:d3:ff:f7:1c:a2:14:7f: 8e:86:f7:ec:be:e0:e6:8a:a0:81:0a:2f:e1:d4:d7: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6A:01:78:8A:E1:D3:EA:1F:65:35:2D:7F:9D:55:CC:2D:EE:C6:75 X509v3 Authority Key Identifier: keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8a:b4:86:80:2a:80:82:a2:6e:74:37:6c:eb:3b:13:dd:50: 91:31:de:e5:94:24:85:e5:0e:0f:76:03:8c:08:bb:28:8f:47: 32:67:eb:11:04:1f:bb:c8:1c:e2:f6:37:c4:61:d5:3a:5a:d4: f3:66:53:6e:dd:b4:ec:34:22:b1:cd:ff:e1:56:9e:8f:c2:c2: c0:67:8f:7b:2f:d2:1c:8e:29:5f:da:59:0f:f1:33:92:60:e3: a0:2c:97:a4:26:3b:27:26:66:e3:18:50:a1:cf:61:d4:bc:f5: 9b:db:f5:75:7d:47:34:0c:3c:42:64:34:0a:73:43:2a:d4:39: 5b:d4:a5:b8:8c:cf:ca:f2:78:6d:8b:84:a4:19:28:ab:83:9b: 95:d4:fa:c2:0c:8b:f9:f9:f2:ee:06:a3:f9:67:a6:4b:77:54: 95:18:0b:7d:18:c6:fe:d9:1e:75:54:13:c9:7f:c9:80:d5:8d: 77:ed:24:6f:ff:e4:de:b3:89:44:46:b8:84:b4:22:97:31:2c: ce:71:76:2e:09:9b:98:e4:68:4f:d8:8b:70:1d:b9:12:53:8d: 8a:90:71:4a:b3:42:21:7a:d3:08:1e:71:14:de:58:ca:a0:b1: fe:96:f4:e5:95:3a:4a:2a:7d:a6:d2:5c:92:98:c4:fb:74:d9: 4d:14:13:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4do63zWIoETfaCVNqUUWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx OTAwNTQwHhcNMjYwMTI2MDQwMTE3WhcNMjYwMTI3MDQwMTE3WjAzMTEwLwYDVQQD EyhiODZhMDE3ODhhZTFkM2VhMWY2NTM1MmQ3ZjlkNTVjYzJkZWVjNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP6c6GYX87NE4OnN9Qiccwa6t+AK 1mqE7g/xAJtbFx6p6abL6/ZfyC8RzV989xDc9kNJ/+IwDPoisyIYNFt5JTMB+cPL RThZl4aoWN8mb1Kq0zNNr87ArGJB1Ot17IiARZ26eWeRwgm0sDfK49TEHVED9vBy r06f6rVlCC2sROoOaOVBet8BT3E8pMvFABBWT3qmEL7JLgxdiJ26C4yCVRcJN9Ss mt9VLjLfYC6MiGAfHT3zXzdro799/AzjQ0TMhvMHgzc8QZ0SFmZRSB5hO+vL4KZt X/ccwtAiYQovoCimzWZ48jw6p9P/9xyiFH+OhvfsvuDmiqCBCi/h1NcoDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhqAXiK4dPqH2U1LX+dVcwt7sZ1MB8GA1UdIwQY MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1 LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoq0hoAq gIKibnQ3bOs7E91QkTHe5ZQkheUOD3YDjAi7KI9HMmfrEQQfu8gc4vY3xGHVOlrU 82ZTbt207DQisc3/4Vaej8LCwGePey/SHI4pX9pZD/EzkmDjoCyXpCY7JyZm4xhQ oc9h1Lz1m9v1dX1HNAw8QmQ0CnNDKtQ5W9SluIzPyvJ4bYuEpBkoq4ObldT6wgyL +fny7gaj+WemS3dUlRgLfRjG/tkedVQTyX/JgNWNd+0kb//k3rOJREa4hLQilzEs znF2LgmbmORoT9iLcB25ElONipBxSrNCIXrTCB5xFN5YyqCx/pb05ZU6Sip9ptJc kpjE+3TZTRQTfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:09 2026 by rpki-client