This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json) Hash identifier: xgblH2kIMjLjEYe5M43yPifipmnZgCGKrU1tXqhaMPo= Subject key identifier: 05:A9:98:5A:A5:0F:BE:B7:6E:BA:B1:22:7D:D5:37:DD:51:60:AC:1A Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019BF7635F63418EFF41141F422E046D77BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft Manifest number: 146F Signing time: Sun 25 Jan 2026 23:00:43 +0000 Manifest this update: Sun 25 Jan 2026 23:00:43 +0000 Manifest next update: Mon 26 Jan 2026 23:00:43 +0000 Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=) 2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=) 3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: lUF2BwLhmit2uY8ahrPcCR+KXN7R2qBHnzl7U8CelPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5f:63:41:8e:ff:41:14:1f:42:2e:04:6d:77:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Jan 25 23:00:43 2026 GMT Not After : Jan 26 23:00:43 2026 GMT Subject: CN=05a9985aa50fbeb76ebab1227dd537dd5160ac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:dc:9a:1b:9f:c5:58:35:da:79:d5:f1:2a: 1a:4e:83:72:d2:c1:50:fe:d9:74:f6:25:d6:5b:17: a7:8c:a0:54:5e:aa:ed:87:4f:f2:a4:c1:c9:2e:df: 22:e5:c6:84:48:45:1a:cb:0d:3c:c0:8c:03:d5:01: 6e:35:95:45:3a:04:5a:a4:e1:f9:01:7b:1d:1f:7f: 65:4b:13:be:82:28:dc:9c:cd:36:5d:dd:4d:92:8b: fc:53:ff:30:0c:0d:ce:08:10:51:32:7d:06:8a:74: d6:1b:fa:9a:66:59:22:74:b9:da:25:3b:6d:b4:d3: 40:ff:25:39:c7:8c:08:74:15:78:83:b2:bf:24:65: 79:bf:c4:3e:4f:3b:2d:2a:01:71:b1:e6:53:0c:3a: 5d:77:d7:cf:00:f5:b6:d4:45:fe:8a:c5:4b:1f:d8: 75:1c:94:08:3e:a6:03:ab:de:dd:88:54:62:d4:59: 7e:6d:21:4c:34:92:56:ad:25:5b:2f:49:59:b5:6e: 39:7a:b1:35:39:05:cf:99:99:bd:34:7b:e0:6b:7a: b9:b6:02:fb:62:88:3e:76:f6:87:cd:00:2e:f2:45: 26:73:fd:8a:42:91:13:d5:80:bb:00:ee:21:d9:02: 09:a1:6f:6e:72:0a:ea:3a:6e:d7:d8:8f:95:bf:1f: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:98:5A:A5:0F:BE:B7:6E:BA:B1:22:7D:D5:37:DD:51:60:AC:1A X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:bf:23:0a:d8:a7:7a:61:09:a4:ab:95:ab:cb:d6:63:1c:cd: 1f:77:10:04:8f:28:43:77:95:42:13:97:e4:1a:ea:fb:86:07: 52:c2:87:33:cd:52:e7:57:69:18:e7:f0:23:41:07:33:4e:ba: 78:11:3a:f1:83:13:66:e1:54:28:a4:ef:5c:2a:a3:d3:ad:10: b5:17:f2:74:bf:0f:4e:b1:61:6d:bc:7f:ce:55:f0:17:69:db: 25:1f:f8:27:eb:42:cc:8d:c3:58:6a:85:a9:d3:78:37:1f:d0: 28:88:f7:53:2a:59:e4:ea:89:25:62:38:32:37:c5:a9:5c:44: 5a:6e:57:17:d9:61:31:9e:cd:e7:c9:90:01:48:03:1d:d9:ed: c5:e7:1e:b1:81:5d:90:f6:9e:6c:e8:71:b7:da:d0:f5:80:2a: 01:76:42:5b:ab:8f:39:3b:da:24:17:2a:57:f5:9d:22:c6:00: 03:4e:2c:a3:7a:ba:fc:6d:05:e2:b6:ac:2f:cc:75:86:4d:1b: 1f:6e:42:36:33:65:7c:35:ca:26:f1:a0:e7:f1:47:2a:26:a6: 09:38:23:b2:cc:3a:92:ce:ee:16:16:fb:b8:e3:de:f9:26:c1: ab:4a:53:83:d0:ca:8e:f0:3f:28:a2:25:a6:5d:53:be:32:f2: 9f:05:95:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y19jQY7/QRQfQi4EbXe+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjYwMTI1MjMwMDQzWhcNMjYwMTI2MjMwMDQzWjAzMTEwLwYDVQQD EygwNWE5OTg1YWE1MGZiZWI3NmViYWIxMjI3ZGQ1MzdkZDUxNjBhYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4rcmhufxVg12nnV8SoaToNy0sFQ /tl09iXWWxenjKBUXqrth0/ypMHJLt8i5caESEUayw08wIwD1QFuNZVFOgRapOH5 AXsdH39lSxO+gijcnM02Xd1Nkov8U/8wDA3OCBBRMn0GinTWG/qaZlkidLnaJTtt tNNA/yU5x4wIdBV4g7K/JGV5v8Q+TzstKgFxseZTDDpdd9fPAPW21EX+isVLH9h1 HJQIPqYDq97diFRi1Fl+bSFMNJJWrSVbL0lZtW45erE1OQXPmZm9NHvga3q5tgL7 Yog+dvaHzQAu8kUmc/2KQpET1YC7AO4h2QIJoW9ucgrqOm7X2I+Vvx92oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWpmFqlD763brqxIn3VN91RYKwaMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr8jCtin emEJpKuVq8vWYxzNH3cQBI8oQ3eVQhOX5Brq+4YHUsKHM81S51dpGOfwI0EHM066 eBE68YMTZuFUKKTvXCqj060QtRfydL8PTrFhbbx/zlXwF2nbJR/4J+tCzI3DWGqF qdN4Nx/QKIj3UypZ5OqJJWI4MjfFqVxEWm5XF9lhMZ7N58mQAUgDHdntxecesYFd kPaebOhxt9rQ9YAqAXZCW6uPOTvaJBcqV/WdIsYAA04so3q6/G0F4rasL8x1hk0b H25CNjNlfDXKJvGg5/FHKiamCTgjssw6ks7uFhb7uOPe+SbBq0pTg9DKjvA/KKIl pl1TvjLynwWVpw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:23:03 2026 by rpki-client