This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json) Hash identifier: MmRb/Xw5Efo/SauEVLIWsHIQ7X1UqA1hfhYGc+KT9uk= Subject key identifier: 7C:FE:BE:B0:E8:84:BC:D1:B4:E2:57:BE:36:24:1D:32:AD:36:4A:52 Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Certificate serial: 019BF319311A206A5EA62B8F86D959AA3A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 03:01:12 +0000 Manifest this update: Sun 25 Jan 2026 03:01:12 +0000 Manifest next update: Mon 26 Jan 2026 03:01:12 +0000 Files and hashes: 1: 0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa (hash: pIY3J3TKdJieQx/4M129VemTVQ361aPzoM039AQ5uwg=) 2: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: SVIRpzFAl9dBZ/XKK7PhaR0ljliv+f1I0dVTnsZOiy0=) 3: kEw9rNT7b4WnmBTnJkhnSvQpmJU.roa (hash: 8ygbL45xfX44BSp7tVTrAniW2EqVVMi7g3VOHgdtiPg=) 4: p1SBAES1_gf6qDKrzWJOUPLiAnA.roa (hash: H/UDNhAVh0s/O2Wme8wDfM0n2+DjkR5j821NKKTliTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:31:1a:20:6a:5e:a6:2b:8f:86:d9:59:aa:3a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Validity Not Before: Jan 25 03:01:12 2026 GMT Not After : Jan 26 03:01:12 2026 GMT Subject: CN=7cfebeb0e884bcd1b4e257be36241d32ad364a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:0b:21:0d:3e:b0:6a:82:d7:38:59:b2:10: 0e:a8:7f:d9:9b:ec:36:bc:84:44:56:b8:87:37:81: d7:56:65:cc:b0:73:71:a1:1f:2e:6c:82:21:aa:00: 54:e4:4b:27:b9:bc:65:5c:1d:b0:ef:89:33:8e:1f: fd:f5:80:04:54:7d:87:da:ec:7e:f1:af:db:c6:37: 55:de:8b:27:14:31:fe:b0:ee:be:90:77:b8:37:b4: 35:1f:41:71:b1:43:d0:16:f9:ed:06:06:83:7a:20: 96:e1:dc:f8:e0:81:aa:f3:01:fa:b6:8e:8b:9c:4b: d7:6d:6e:6c:a4:3e:75:23:fd:8b:e7:14:38:a6:e1: 7d:73:27:34:8c:43:f7:f7:93:d5:ed:2f:87:45:98: e4:b0:b5:a7:8d:4b:66:7c:b7:6c:fa:23:6d:0b:70: 91:ec:26:f0:b0:6d:c9:24:a1:75:77:92:e3:73:30: e9:b3:31:b2:49:30:54:ab:01:45:87:32:7d:f2:88: 66:82:a6:a9:6b:21:74:25:85:5c:a6:28:1d:b7:f6: c1:63:98:5f:18:a7:b8:20:8c:e3:1a:9a:fd:2e:e1: d5:b8:f3:c3:99:c1:b9:b5:cf:40:0c:b5:7c:af:e6: cb:b3:67:da:c9:31:69:07:e2:f1:7b:4a:d3:45:e5: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FE:BE:B0:E8:84:BC:D1:B4:E2:57:BE:36:24:1D:32:AD:36:4A:52 X509v3 Authority Key Identifier: keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:04:1e:74:3e:64:5f:67:7d:d3:c7:0f:cb:af:28:b2:9f:9a: 02:86:30:d7:4a:12:81:1d:04:4f:47:0d:7c:30:66:66:ae:64: 3c:1a:c8:98:e6:d4:31:1a:bb:c9:75:a2:ec:11:07:56:23:c7: 37:62:78:8f:28:6f:d2:a6:ad:b5:49:1e:40:58:a0:38:60:9e: 31:fd:37:3f:23:ec:cd:31:9c:29:65:6c:4d:59:3e:1a:a6:0f: 0f:5a:bd:c4:2e:81:fd:33:a3:52:41:b9:12:7d:c3:85:ed:4d: bf:1b:69:87:e7:3f:e0:12:db:ed:66:59:ba:d3:a4:83:e3:50: 18:cf:19:c1:cb:22:d8:19:ae:94:e2:03:db:32:74:dd:bb:25: ce:de:31:bb:b6:c6:3f:14:0c:47:db:fe:89:7f:25:73:2e:8f: 8b:59:61:c7:13:80:8f:15:b7:bf:2d:a0:45:fb:f3:9f:a0:90: 1e:98:35:3c:0a:c5:7a:34:7e:df:a4:2e:39:57:2c:d4:38:e5: 08:73:04:d0:48:5e:23:e8:0d:2a:f3:85:cb:1c:1d:04:33:4f: 6b:ca:ff:12:65:89:93:5b:78:19:f4:d4:45:66:1e:e4:5c:3b: ec:f2:87:25:db:8e:c8:db:ca:01:26:4c:0c:11:ea:7f:6b:68: b8:ed:9c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGTEaIGpepiuPhtlZqjpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0 OTc1OWQwHhcNMjYwMTI1MDMwMTEyWhcNMjYwMTI2MDMwMTEyWjAzMTEwLwYDVQQD Eyg3Y2ZlYmViMGU4ODRiY2QxYjRlMjU3YmUzNjI0MWQzMmFkMzY0YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzecLIQ0+sGqC1zhZshAOqH/Zm+w2 vIREVriHN4HXVmXMsHNxoR8ubIIhqgBU5EsnubxlXB2w74kzjh/99YAEVH2H2ux+ 8a/bxjdV3osnFDH+sO6+kHe4N7Q1H0FxsUPQFvntBgaDeiCW4dz44IGq8wH6to6L nEvXbW5spD51I/2L5xQ4puF9cyc0jEP395PV7S+HRZjksLWnjUtmfLds+iNtC3CR 7CbwsG3JJKF1d5LjczDpszGySTBUqwFFhzJ98ohmgqapayF0JYVcpigdt/bBY5hf GKe4IIzjGpr9LuHVuPPDmcG5tc9ADLV8r+bLs2fayTFpB+Lxe0rTReWHQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz+vrDohLzRtOJXvjYkHTKtNkpSMB8GA1UdIwQY MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt MjVkNmU4NjEzZGM0LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0 LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwQedD5k X2d908cPy68osp+aAoYw10oSgR0ET0cNfDBmZq5kPBrImObUMRq7yXWi7BEHViPH N2J4jyhv0qattUkeQFigOGCeMf03PyPszTGcKWVsTVk+GqYPD1q9xC6B/TOjUkG5 En3Dhe1Nvxtph+c/4BLb7WZZutOkg+NQGM8Zwcsi2BmulOID2zJ03bslzt4xu7bG PxQMR9v+iX8lcy6Pi1lhxxOAjxW3vy2gRfvzn6CQHpg1PArFejR+36QuOVcs1Djl CHME0EheI+gNKvOFyxwdBDNPa8r/EmWJk1t4GfTURWYe5Fw77PKHJduOyNvKASZM DBHqf2touO2ceg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:37 2026 by rpki-client