This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json) Hash identifier: NWvzI2nyR+Ftqxaq4GXAbJmAW5FOJ/+MYMpVIdvzHOM= Subject key identifier: 73:84:2F:85:A7:E5:6F:3F:9D:DD:E6:89:13:83:EE:79:54:8C:03:33 Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Certificate serial: 019BF72CDE744BA78BA29EA96E5F10297F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 22:01:11 +0000 Manifest this update: Sun 25 Jan 2026 22:01:11 +0000 Manifest next update: Mon 26 Jan 2026 22:01:11 +0000 Files and hashes: 1: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: jKWgtjz+V023069qBX0NSRGio00ywd2txgYjV0ZN/44=) 2: SGnXZI2wBGGgOMoFkCn0KEhQOhY.roa (hash: mbdEWIWJGZgetI2dmxbnmVMbh+ZiM0nKtH+zd0JUeVI=) 3: lEa7f0eLXgjArF1LEaeojBKXxKA.roa (hash: lYkiwAvw6j6fNlAACyFWw/jZm7zIocbJ2aVwtdy9bz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:de:74:4b:a7:8b:a2:9e:a9:6e:5f:10:29:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Validity Not Before: Jan 25 22:01:11 2026 GMT Not After : Jan 26 22:01:11 2026 GMT Subject: CN=73842f85a7e56f3f9ddde6891383ee79548c0333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:cd:81:f0:f4:2f:7a:8c:f2:0c:1b:92:da: 63:2d:1a:ff:f0:fe:e2:a2:45:84:cd:57:86:02:30: f1:4f:2b:ec:a3:db:66:7b:3a:dd:3b:48:fa:25:bd: c6:0d:d8:6c:0d:6b:98:13:29:9b:f8:45:5e:f4:be: b1:c8:01:f8:e2:2a:e7:1e:e7:6e:0a:14:47:d3:9e: eb:95:ea:1f:a1:64:3d:58:0b:ad:1a:5c:48:03:2e: fa:99:c6:b4:ac:00:e4:7c:84:2e:4d:c8:03:82:12: 15:27:5b:f1:36:df:7f:d5:67:38:53:92:e6:40:59: a1:94:e5:06:80:a6:c1:26:b3:0c:28:73:41:b8:35: 98:ee:81:16:44:fa:c1:e2:a4:bd:66:73:8c:ff:c7: e7:84:08:6d:d7:a3:31:1c:af:b9:43:7d:93:53:57: 90:44:77:13:39:1b:10:17:5c:46:c6:a9:1c:4a:5d: 9e:9b:1e:ab:d6:4b:2e:45:d9:be:01:e1:10:94:7d: c3:ae:67:2a:e0:20:2c:c5:7d:53:19:73:b5:07:ad: 5a:ee:72:15:41:96:ab:ce:46:8e:d5:e2:62:ef:fd: 5f:65:8a:a5:68:f3:00:9a:b2:4f:bd:80:66:ca:05: 25:99:29:e3:78:f7:9a:56:e5:5c:06:5a:e7:7a:d1: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:2F:85:A7:E5:6F:3F:9D:DD:E6:89:13:83:EE:79:54:8C:03:33 X509v3 Authority Key Identifier: keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e1:2a:88:5c:86:07:02:c8:cc:6f:5b:e1:e7:a6:06:9e:4f: ee:4d:f1:e4:44:0a:28:26:4e:6b:66:2f:a2:40:d1:8a:c9:16: 1a:43:9c:06:fc:48:4c:dc:9a:71:f4:91:24:59:35:04:2b:4e: 36:b4:52:59:5f:92:e8:3f:4c:ec:0b:cc:c6:d8:3d:cf:5e:40: 36:b7:2a:61:d9:46:23:b3:4f:d6:4b:c1:bc:6a:20:08:8f:0b: b0:bb:6a:04:9f:03:8c:45:d6:f1:76:32:a8:4b:96:2b:5d:f7: 22:f7:f7:a0:6f:79:ce:d2:78:43:22:7b:89:4f:fa:0a:da:d7: 50:4c:65:bc:d4:04:ae:08:11:fa:d3:1f:48:6f:e8:61:60:9d: 39:45:99:d5:0c:23:03:7d:da:1e:c0:7f:11:9d:09:fd:b8:6c: fa:1c:85:eb:e9:96:09:c4:12:7e:9a:98:35:23:e2:b4:9f:1e: fb:3c:26:09:a1:18:c8:da:de:58:00:b4:1c:fe:0a:d3:40:df: 3c:dd:fa:89:7b:cf:82:80:24:f7:63:a0:f8:fe:76:9d:6e:c6: 4d:0d:42:2f:c0:13:57:aa:4b:de:29:63:48:4d:f3:45:db:a3: e6:21:af:c4:b3:71:b5:53:34:be:5a:90:f0:ab:09:15:d9:c3: bc:1e:74:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LN50S6eLop6pbl8QKX9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky OWY0OWEwHhcNMjYwMTI1MjIwMTExWhcNMjYwMTI2MjIwMTExWjAzMTEwLwYDVQQD Eyg3Mzg0MmY4NWE3ZTU2ZjNmOWRkZGU2ODkxMzgzZWU3OTU0OGMwMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FvNgfD0L3qM8gwbktpjLRr/8P7i okWEzVeGAjDxTyvso9tmezrdO0j6Jb3GDdhsDWuYEymb+EVe9L6xyAH44irnHudu ChRH057rleofoWQ9WAutGlxIAy76mca0rADkfIQuTcgDghIVJ1vxNt9/1Wc4U5Lm QFmhlOUGgKbBJrMMKHNBuDWY7oEWRPrB4qS9ZnOM/8fnhAht16MxHK+5Q32TU1eQ RHcTORsQF1xGxqkcSl2emx6r1ksuRdm+AeEQlH3Drmcq4CAsxX1TGXO1B61a7nIV QZarzkaO1eJi7/1fZYqlaPMAmrJPvYBmygUlmSnjePeaVuVcBlrnetEW+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOEL4Wn5W8/nd3miROD7nlUjAMzMB8GA1UdIwQY MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3 LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuEqiFyG BwLIzG9b4eemBp5P7k3x5EQKKCZOa2YvokDRiskWGkOcBvxITNyacfSRJFk1BCtO NrRSWV+S6D9M7AvMxtg9z15ANrcqYdlGI7NP1kvBvGogCI8LsLtqBJ8DjEXW8XYy qEuWK133Ivf3oG95ztJ4QyJ7iU/6CtrXUExlvNQErggR+tMfSG/oYWCdOUWZ1Qwj A33aHsB/EZ0J/bhs+hyF6+mWCcQSfpqYNSPitJ8e+zwmCaEYyNreWAC0HP4K00Df PN36iXvPgoAk92Og+P52nW7GTQ1CL8ATV6pL3iljSE3zRduj5iGvxLNxtVM0vlqQ 8KsJFdnDvB50IA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:42 2026 by rpki-client