This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json) Hash identifier: aVPqzbKwcLdUhE1mW+A79dyF33ZDEAHeJPAd8AK7vII= Subject key identifier: 78:70:E0:D3:52:BD:06:1D:9D:C0:A3:9E:BF:64:23:AD:85:48:9A:AC Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Certificate serial: 019BF65142D5E1A1E29CBF5A11492C7070E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft Manifest number: 10F5 Signing time: Sun 25 Jan 2026 18:01:18 +0000 Manifest this update: Sun 25 Jan 2026 18:01:18 +0000 Manifest next update: Mon 26 Jan 2026 18:01:18 +0000 Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=) 2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=) 3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=) 4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: 81tCQxtbi/540EWeQpjdK/45Kvne5RBvtPRhn2X1YbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:42:d5:e1:a1:e2:9c:bf:5a:11:49:2c:70:70:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Validity Not Before: Jan 25 18:01:18 2026 GMT Not After : Jan 26 18:01:18 2026 GMT Subject: CN=7870e0d352bd061d9dc0a39ebf6423ad85489aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:a6:d1:cd:78:bf:37:a2:ce:cb:72:96:5f: 93:cf:67:95:0e:a3:9f:9d:68:74:a1:b8:7d:b8:42: 81:b4:5f:9d:c4:2b:82:44:7b:2f:b3:ce:7c:9e:ca: 8f:18:d9:ad:e7:49:2f:76:d0:57:1b:88:a1:e6:7c: 9a:ae:60:66:1b:fd:98:3f:c8:d7:62:8c:8e:85:cd: 95:6f:55:0b:d8:28:3b:15:79:75:5b:48:41:89:e9: 9e:02:6c:7e:ed:4c:e3:3d:92:79:13:9b:2b:11:2e: 59:78:dd:cc:cd:cd:b8:56:bd:58:4b:4a:e5:6c:aa: 6c:dc:ae:ea:a8:7a:7f:48:c1:08:f4:41:9d:a3:dd: 03:76:41:8d:9b:38:d8:b0:08:24:d9:32:cc:a5:36: e3:6d:25:ae:58:b8:4b:ad:cc:6a:4b:45:44:79:e8: da:12:3c:d1:3f:64:68:97:9b:3f:5b:89:cd:7e:30: 27:66:93:75:72:c1:37:2e:83:2f:d9:87:86:25:07: c6:ff:3a:ef:f1:41:74:3d:f8:cf:ae:dd:86:fe:1a: a5:17:37:ba:eb:6a:de:e3:3a:55:e6:98:8b:a2:10: 69:f9:5b:2b:4e:8b:66:ae:2f:5a:13:49:22:14:78: 14:6a:50:08:1d:74:4f:08:ab:4a:53:7c:2c:e1:14: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:70:E0:D3:52:BD:06:1D:9D:C0:A3:9E:BF:64:23:AD:85:48:9A:AC X509v3 Authority Key Identifier: keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3b:af:80:84:53:fc:7b:22:dc:bb:a7:53:0b:2d:bd:43:7d: 8d:9c:4e:be:49:a6:78:52:8b:2b:d1:fb:ae:49:82:be:02:22: ff:a1:4c:35:31:80:a7:0f:fc:31:d3:30:c7:9e:42:28:54:10: da:b9:9e:3b:69:8b:af:f1:77:c2:db:3e:40:f8:2c:20:61:b0: 32:11:e0:aa:e2:e2:ef:93:2e:ef:08:30:5b:8f:1c:02:73:cb: 22:ea:1f:82:05:30:4c:91:a6:a8:ae:1b:b6:9d:c5:ff:d9:3f: b5:99:99:dd:e5:4d:43:85:84:2d:39:65:11:47:d7:c4:64:cd: 23:16:79:68:ff:57:a1:8b:80:c8:e7:9b:10:8b:eb:24:ce:db: 60:89:bb:df:9f:8a:a7:ac:d0:73:ca:89:c4:09:99:a9:66:52: 30:3f:4f:0b:cf:75:eb:51:38:e6:0e:44:a4:d7:dd:c4:d9:f0: 55:31:d4:16:75:4d:9d:a5:74:56:f9:fa:93:3e:91:c4:2a:1a: a6:06:4d:10:5c:6e:fd:c1:1b:3c:dd:f3:4a:ec:78:a2:75:13: 33:16:bb:f0:09:bb:84:bb:5c:a2:f3:cb:9f:b7:58:fc:cb:27: b4:14:00:fb:f6:b1:d6:c4:2f:a4:38:1f:6b:b6:42:b9:5c:55: 0e:b1:15:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UULV4aHinL9aEUkscHDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm Y2NkZjkwHhcNMjYwMTI1MTgwMTE4WhcNMjYwMTI2MTgwMTE4WjAzMTEwLwYDVQQD Eyg3ODcwZTBkMzUyYmQwNjFkOWRjMGEzOWViZjY0MjNhZDg1NDg5YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDKm0c14vzeizstyll+Tz2eVDqOf nWh0obh9uEKBtF+dxCuCRHsvs858nsqPGNmt50kvdtBXG4ih5nyarmBmG/2YP8jX YoyOhc2Vb1UL2Cg7FXl1W0hBiemeAmx+7UzjPZJ5E5srES5ZeN3Mzc24Vr1YS0rl bKps3K7qqHp/SMEI9EGdo90DdkGNmzjYsAgk2TLMpTbjbSWuWLhLrcxqS0VEeeja EjzRP2Rol5s/W4nNfjAnZpN1csE3LoMv2YeGJQfG/zrv8UF0PfjPrt2G/hqlFze6 62re4zpV5piLohBp+VsrTotmri9aE0kiFHgUalAIHXRPCKtKU3ws4RRGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhw4NNSvQYdncCjnr9kI62FSJqsMB8GA1UdIwQY MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3 LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzuvgIRT /Hsi3LunUwstvUN9jZxOvkmmeFKLK9H7rkmCvgIi/6FMNTGApw/8MdMwx55CKFQQ 2rmeO2mLr/F3wts+QPgsIGGwMhHgquLi75Mu7wgwW48cAnPLIuofggUwTJGmqK4b tp3F/9k/tZmZ3eVNQ4WELTllEUfXxGTNIxZ5aP9XoYuAyOebEIvrJM7bYIm735+K p6zQc8qJxAmZqWZSMD9PC89161E45g5EpNfdxNnwVTHUFnVNnaV0Vvn6kz6RxCoa pgZNEFxu/cEbPN3zSux4onUTMxa78Am7hLtcovPLn7dY/MsntBQA+/ax1sQvpDgf a7ZCuVxVDrEVqA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:37 2026 by rpki-client