This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json) Hash identifier: ZnnrqJnMhNfYcm1Rro8nD9K+N+SvC0eNUQxlaQTNRpw= Subject key identifier: 18:10:3B:C1:3A:F2:83:23:D8:AC:6B:78:66:4A:6F:5A:12:87:A0:AC Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019BF5AC70CCF8696308F1731ABF6905F5EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft Manifest number: 066C Signing time: Sun 25 Jan 2026 15:01:17 +0000 Manifest this update: Sun 25 Jan 2026 15:01:17 +0000 Manifest next update: Mon 26 Jan 2026 15:01:17 +0000 Files and hashes: 1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=) 2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: spDgttdsJAyAPnyZ5hbGuaIb/R8qMoB/ApUBcXhFflQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:70:cc:f8:69:63:08:f1:73:1a:bf:69:05:f5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Jan 25 15:01:17 2026 GMT Not After : Jan 26 15:01:17 2026 GMT Subject: CN=18103bc13af28323d8ac6b78664a6f5a1287a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:b1:6c:d3:ba:a9:92:b0:8d:18:bd:bd:e7: 96:ff:7a:8f:e3:17:c1:6a:c5:b0:cb:07:e4:e9:68: e1:a1:53:1b:63:f2:9a:a3:18:1d:45:c2:57:e2:7a: 0a:17:b4:ee:fb:0e:b8:63:35:26:8f:d8:77:23:ed: 50:90:fd:c5:9f:7c:b8:e2:2e:32:71:35:98:1f:a1: 76:d9:0b:82:57:fe:f5:c9:e2:3e:2f:21:fc:b8:eb: 7f:c9:06:98:ac:6f:2a:74:7b:8c:af:db:1e:b6:52: d9:e4:79:66:d4:a2:0a:f8:b4:b4:e8:93:0c:d7:8a: 04:87:43:ad:c7:da:92:ed:5e:1d:4f:9b:2c:a3:0d: dd:cb:a0:7d:13:2c:cc:8f:19:d7:34:87:bb:9b:7f: ef:38:7f:c3:8a:45:48:4f:77:81:2c:b4:7e:dc:29: a3:cc:7c:3c:fc:9c:d1:c3:d0:47:75:d4:97:df:9c: a0:21:7f:f1:9e:7d:de:c9:67:b0:63:0f:2c:09:f0: 36:c4:f2:d2:07:02:f1:71:d3:0c:4e:f5:88:dc:66: 27:c1:94:c4:04:2b:8f:07:91:33:80:d5:99:dc:c3: f1:80:e4:87:04:97:f8:4b:ca:2b:cc:ef:34:6a:cc: 3f:34:41:5f:68:e8:69:9a:39:60:1f:cf:94:b8:ca: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:10:3B:C1:3A:F2:83:23:D8:AC:6B:78:66:4A:6F:5A:12:87:A0:AC X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:82:86:7b:77:2d:65:f1:39:53:e9:7a:c8:c2:8b:c5:7a:db: 6a:af:a2:16:71:96:be:c4:8b:d0:61:e1:13:71:1e:d9:50:19: d6:3c:0c:67:27:c8:22:87:b0:12:61:4e:d5:9b:ad:16:cb:42: 4f:8c:e1:30:4f:4b:03:ae:ec:4f:d1:65:6e:b7:a3:58:e8:0a: e9:e0:65:a4:ab:bc:ff:f8:ee:9a:e5:01:f9:c5:7f:ab:7e:d8: 54:e9:81:92:00:c6:d8:42:e4:f2:13:92:6a:97:22:0d:5b:3b: 95:38:19:f5:3a:3e:23:7c:13:34:e5:db:c1:36:10:41:e1:22: 08:ad:29:7b:8f:41:0e:8a:90:81:ed:7f:dd:12:5e:24:04:e3: 97:79:d2:f5:5e:4b:8c:ac:70:82:be:6a:5c:73:38:ad:9f:e9: 93:e8:00:f5:e5:8c:e3:8e:5d:44:6f:de:ef:ab:63:57:1f:c6: c5:c1:dc:f6:02:7a:24:5c:42:b1:52:36:7a:c9:55:6e:01:d4: 10:b2:1d:33:f5:0c:9e:3c:31:f0:33:b6:a3:3a:61:ab:31:cf: 37:9b:bc:f2:45:22:6e:e1:21:3a:97:1b:f9:26:a3:96:08:20: 6c:e4:08:9c:87:f0:9a:ac:9d:95:59:b5:99:f7:c6:94:df:bf: e3:52:9c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rHDM+GljCPFzGr9pBfXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjYwMTI1MTUwMTE3WhcNMjYwMTI2MTUwMTE3WjAzMTEwLwYDVQQD EygxODEwM2JjMTNhZjI4MzIzZDhhYzZiNzg2NjRhNmY1YTEyODdhMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pexbNO6qZKwjRi9veeW/3qP4xfB asWwywfk6WjhoVMbY/KaoxgdRcJX4noKF7Tu+w64YzUmj9h3I+1QkP3Fn3y44i4y cTWYH6F22QuCV/71yeI+LyH8uOt/yQaYrG8qdHuMr9setlLZ5Hlm1KIK+LS06JMM 14oEh0Otx9qS7V4dT5ssow3dy6B9EyzMjxnXNIe7m3/vOH/DikVIT3eBLLR+3Cmj zHw8/JzRw9BHddSX35ygIX/xnn3eyWewYw8sCfA2xPLSBwLxcdMMTvWI3GYnwZTE BCuPB5EzgNWZ3MPxgOSHBJf4S8orzO80asw/NEFfaOhpmjlgH8+UuMo1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgQO8E68oMj2KxreGZKb1oSh6CsMB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4KGe3ct ZfE5U+l6yMKLxXrbaq+iFnGWvsSL0GHhE3Ee2VAZ1jwMZyfIIoewEmFO1ZutFstC T4zhME9LA67sT9FlbrejWOgK6eBlpKu8//jumuUB+cV/q37YVOmBkgDG2ELk8hOS apciDVs7lTgZ9To+I3wTNOXbwTYQQeEiCK0pe49BDoqQge1/3RJeJATjl3nS9V5L jKxwgr5qXHM4rZ/pk+gA9eWM445dRG/e76tjVx/GxcHc9gJ6JFxCsVI2eslVbgHU ELIdM/UMnjwx8DO2ozphqzHPN5u88kUibuEhOpcb+SajlgggbOQInIfwmqydlVm1 mffGlN+/41Kc4w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:56 2026 by rpki-client