This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json) Hash identifier: u+rzzVFE6/sR+oUuvlVo8fkLQm/UAHnnEItimn2U5uw= Subject key identifier: 28:19:23:48:74:2F:D5:79:BD:C6:E7:D9:C0:58:10:FE:28:B7:63:9D Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019C05563B44D1F4EDFE78515374D2614A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft Manifest number: 1550 Signing time: Wed 28 Jan 2026 16:01:03 +0000 Manifest this update: Wed 28 Jan 2026 16:01:03 +0000 Manifest next update: Thu 29 Jan 2026 16:01:03 +0000 Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=) 2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=) 3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: JCaUppN5HwLs/Os0Uj6+NYPr/iK2SBoagUmd0riv0WM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:3b:44:d1:f4:ed:fe:78:51:53:74:d2:61:4a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Jan 28 16:01:03 2026 GMT Not After : Jan 29 16:01:03 2026 GMT Subject: CN=28192348742fd579bdc6e7d9c05810fe28b7639d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:4d:de:7b:76:4d:c5:f6:1d:7c:91:96:1b: 7d:e8:81:86:7d:f1:cc:12:28:32:ab:ae:f6:ce:fc: b6:5c:cf:d2:82:f8:9e:03:e5:44:1f:cb:92:35:c4: 3b:2b:6d:76:69:b1:6f:c1:4a:b0:2d:07:15:57:27: 26:2d:24:1f:1f:bb:d2:53:14:b9:1b:86:fe:f9:a4: 6c:56:d8:b4:ee:62:2b:cc:1f:dd:7e:dd:e3:83:2a: 63:3a:cd:f7:89:b3:c2:8a:70:9c:f0:a9:be:49:94: 40:79:0d:b0:75:91:85:73:cd:f6:49:ca:be:26:6a: ae:3a:fd:e1:7d:79:23:66:43:2c:d0:99:66:ea:a5: 7c:49:59:71:70:13:50:da:2d:a9:58:03:eb:5a:61: 8f:46:a4:e4:e3:d5:c8:d2:cb:64:c1:a2:50:f7:8c: 92:01:14:f6:b9:68:7a:9a:3d:92:58:69:38:c3:e9: 13:d2:6c:f4:d8:86:54:48:5f:29:ea:3d:ec:76:1e: 47:c4:ab:90:c8:63:52:21:92:c5:b1:95:a1:74:a9: 1a:10:3e:4b:ce:eb:2b:75:2d:6a:e8:fc:b4:93:95: b8:1c:a6:c7:d7:3a:94:37:9f:04:90:3b:20:4d:e8: a7:83:e7:e3:8d:84:4f:22:b9:28:bd:a1:cb:f5:0f: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:23:48:74:2F:D5:79:BD:C6:E7:D9:C0:58:10:FE:28:B7:63:9D X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:11:2c:9e:68:08:be:64:3a:bc:b4:36:59:61:99:50:d4:e6: b1:f1:c7:e8:cb:00:e0:6d:88:0a:36:d0:4d:ea:63:0d:e8:e0: 0f:c8:9a:12:81:6d:2d:93:e1:4b:c2:c4:9d:4d:3e:a8:76:b6: e3:3c:63:3b:35:89:6c:19:34:c4:55:d4:74:ab:7c:37:35:90: 72:df:28:e2:47:ec:0e:f5:0a:c1:45:48:17:e6:03:81:cc:00: 6d:de:ee:e5:5e:c4:cb:80:32:37:ba:78:26:0c:1d:4b:d1:1c: e5:91:ce:7d:bf:c3:af:4d:a0:79:88:52:30:ec:c2:47:87:9e: 19:96:ed:e6:17:e6:d0:69:8b:0e:c3:78:f4:ba:fc:4f:d2:69: 5c:b0:c7:28:c8:a6:26:8f:43:85:cc:99:73:c4:a3:31:65:36: c1:76:60:48:e3:f0:38:2a:62:af:c9:d9:00:48:fa:3a:52:d5: e2:ba:a2:99:2d:4a:b1:50:27:09:40:d8:03:a6:6e:b0:76:25: 50:4b:c2:9c:3c:3a:b0:5b:2c:c2:8a:16:0e:d9:bb:1d:f0:68: 80:81:8b:73:f9:cf:fc:9d:a6:09:0a:9f:d8:d9:56:b4:38:06: 67:db:6d:9f:64:52:a0:a6:f8:56:cc:a2:86:0a:76:32:f9:2e: 8a:8a:48:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVjtE0fTt/nhRU3TSYUpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjYwMTI4MTYwMTAzWhcNMjYwMTI5MTYwMTAzWjAzMTEwLwYDVQQD EygyODE5MjM0ODc0MmZkNTc5YmRjNmU3ZDljMDU4MTBmZTI4Yjc2MzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JN3nt2TcX2HXyRlht96IGGffHM Eigyq672zvy2XM/SgvieA+VEH8uSNcQ7K212abFvwUqwLQcVVycmLSQfH7vSUxS5 G4b++aRsVti07mIrzB/dft3jgypjOs33ibPCinCc8Km+SZRAeQ2wdZGFc832Scq+ JmquOv3hfXkjZkMs0Jlm6qV8SVlxcBNQ2i2pWAPrWmGPRqTk49XI0stkwaJQ94yS ART2uWh6mj2SWGk4w+kT0mz02IZUSF8p6j3sdh5HxKuQyGNSIZLFsZWhdKkaED5L zusrdS1q6Py0k5W4HKbH1zqUN58EkDsgTeing+fjjYRPIrkovaHL9Q9NNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgZI0h0L9V5vcbn2cBYEP4ot2OdMB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihEsnmgI vmQ6vLQ2WWGZUNTmsfHH6MsA4G2ICjbQTepjDejgD8iaEoFtLZPhS8LEnU0+qHa2 4zxjOzWJbBk0xFXUdKt8NzWQct8o4kfsDvUKwUVIF+YDgcwAbd7u5V7Ey4AyN7p4 JgwdS9Ec5ZHOfb/Dr02geYhSMOzCR4eeGZbt5hfm0GmLDsN49Lr8T9JpXLDHKMim Jo9DhcyZc8SjMWU2wXZgSOPwOCpir8nZAEj6OlLV4rqimS1KsVAnCUDYA6ZusHYl UEvCnDw6sFsswooWDtm7HfBogIGLc/nP/J2mCQqf2NlWtDgGZ9ttn2RSoKb4Vsyi hgp2MvkuiopIRg== -----END CERTIFICATE-----Generated at Thu Jan 29 01:41:50 2026 by rpki-client