This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json) Hash identifier: 6HbB+y95QBqfJEgYtXDh4yYENKzcgJ9D64h248a9NfQ= Subject key identifier: 0F:31:24:46:1C:F6:A0:A4:62:CC:92:28:70:DC:AC:56:A9:2F:E0:61 Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Certificate serial: 019BF951C91217DC408AF05FD5D79B2C8A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft Manifest number: 1157 Signing time: Mon 26 Jan 2026 08:00:45 +0000 Manifest this update: Mon 26 Jan 2026 08:00:45 +0000 Manifest next update: Tue 27 Jan 2026 08:00:45 +0000 Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: xJi6/JWYK2QqCGtzIQZ4IO25QMhfiMLYbnBrYOZK8eM=) 2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:c9:12:17:dc:40:8a:f0:5f:d5:d7:9b:2c:8a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Validity Not Before: Jan 26 08:00:45 2026 GMT Not After : Jan 27 08:00:45 2026 GMT Subject: CN=0f3124461cf6a0a462cc922870dcac56a92fe061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:7f:02:e1:18:46:17:13:40:f5:70:f1:85: aa:ad:0a:7c:ca:2f:3a:3e:5d:44:50:cb:8c:8c:ac: a5:54:a3:79:ef:ee:d5:86:9c:e2:49:ff:a8:22:da: 22:df:a4:0c:6c:d4:8d:ca:4f:9a:34:03:3c:ad:c5: c8:dd:84:64:36:0b:b0:09:58:5a:66:8c:a6:a3:0d: e9:3a:ca:32:6c:30:e9:f6:65:f6:08:c8:bd:6d:7e: c1:12:a1:e0:fd:73:d4:93:3f:ad:11:20:37:74:6f: a1:cc:6d:48:c3:2c:5f:14:e8:25:5e:0c:70:a4:17: 55:d6:60:62:9b:c3:1d:91:fa:b5:e6:ef:56:3b:86: 6f:b9:ff:c2:55:b2:c6:f4:4c:63:f9:11:7a:de:41: f6:dd:78:23:c7:34:e9:7f:d5:95:3a:15:43:c5:59: 76:1a:4a:fb:29:7c:26:23:53:9f:37:05:7b:09:43: 4c:f0:7e:80:58:8b:7a:43:e9:db:1e:65:a7:3d:5a: 16:35:78:22:b9:55:b8:0a:8a:dc:2b:19:55:33:57: 2c:93:31:98:9b:af:93:a8:27:e2:e5:db:72:ba:82: 28:d3:39:89:ec:bf:84:0e:c2:61:33:4f:14:ef:fd: 19:21:3f:fb:7e:2d:48:87:38:41:c0:07:64:72:45: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:31:24:46:1C:F6:A0:A4:62:CC:92:28:70:DC:AC:56:A9:2F:E0:61 X509v3 Authority Key Identifier: keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:79:fd:06:3c:66:af:64:18:db:b5:52:4c:12:93:89:95:51: d4:5b:7f:28:e9:03:f8:ea:e3:e4:ab:8a:56:ff:81:7f:d2:6d: 9f:d5:46:66:97:49:9f:fb:12:41:f3:71:02:87:41:df:3f:c9: 4f:e4:f7:ba:b4:43:5d:cc:6e:a7:52:88:9b:4d:7f:d5:55:06: f1:fd:dc:49:91:da:c4:7f:c1:7a:e5:6f:d6:25:a2:39:bd:1b: eb:4a:3a:22:28:0a:ab:fd:29:6b:2b:11:6e:bf:b9:ea:64:e2: 0d:1b:c9:89:cf:ab:09:47:01:9b:a3:44:b4:4b:b0:05:fe:5c: a9:8d:a5:da:e3:77:ec:96:6b:d8:f0:9d:e3:35:e5:21:e0:a5: a6:36:19:26:86:6e:8a:4f:91:c1:ae:3f:00:dd:d6:90:d7:ec: 98:69:62:04:04:72:16:37:26:25:40:de:b7:2a:0a:88:25:45: 1b:d2:f6:07:61:51:5f:2a:a5:4e:10:b4:51:40:b6:70:00:8d: 9c:84:96:e2:83:8f:29:e3:0a:48:cb:5e:73:36:61:e8:de:8c: d1:a2:42:77:84:d4:4e:e1:b1:2c:b5:51:bf:80:8e:ac:96:c4: 78:3d:53:61:4c:b0:d5:11:d1:72:de:94:84:1a:b9:00:88:06: cb:4d:93:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UckSF9xAivBf1debLIoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2 MGNkMGUwHhcNMjYwMTI2MDgwMDQ1WhcNMjYwMTI3MDgwMDQ1WjAzMTEwLwYDVQQD EygwZjMxMjQ0NjFjZjZhMGE0NjJjYzkyMjg3MGRjYWM1NmE5MmZlMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosV/AuEYRhcTQPVw8YWqrQp8yi86 Pl1EUMuMjKylVKN57+7VhpziSf+oItoi36QMbNSNyk+aNAM8rcXI3YRkNguwCVha Zoymow3pOsoybDDp9mX2CMi9bX7BEqHg/XPUkz+tESA3dG+hzG1IwyxfFOglXgxw pBdV1mBim8Mdkfq15u9WO4Zvuf/CVbLG9Exj+RF63kH23XgjxzTpf9WVOhVDxVl2 Gkr7KXwmI1OfNwV7CUNM8H6AWIt6Q+nbHmWnPVoWNXgiuVW4CorcKxlVM1cskzGY m6+TqCfi5dtyuoIo0zmJ7L+EDsJhM08U7/0ZIT/7fi1IhzhBwAdkckV+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8xJEYc9qCkYsySKHDcrFapL+BhMB8GA1UdIwQY MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3 LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXn9Bjxm r2QY27VSTBKTiZVR1Ft/KOkD+Orj5KuKVv+Bf9Jtn9VGZpdJn/sSQfNxAodB3z/J T+T3urRDXcxup1KIm01/1VUG8f3cSZHaxH/BeuVv1iWiOb0b60o6IigKq/0paysR br+56mTiDRvJic+rCUcBm6NEtEuwBf5cqY2l2uN37JZr2PCd4zXlIeClpjYZJoZu ik+Rwa4/AN3WkNfsmGliBARyFjcmJUDetyoKiCVFG9L2B2FRXyqlThC0UUC2cACN nISW4oOPKeMKSMteczZh6N6M0aJCd4TUTuGxLLVRv4COrJbEeD1TYUyw1RHRct6U hBq5AIgGy02ToA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:23 2026 by rpki-client