This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json) Hash identifier: 4xgk2nDeq+Jegzufm0BLjcZs8tpixJwt3t1R0Dt1qAc= Subject key identifier: A7:CD:32:13:50:EC:85:48:D4:A6:A8:ED:5B:93:E4:B3:DA:DB:D9:71 Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Certificate serial: 019BFAD254AA7EEB3572E723CB91544B3B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 15:00:46 +0000 Manifest this update: Mon 26 Jan 2026 15:00:46 +0000 Manifest next update: Tue 27 Jan 2026 15:00:46 +0000 Files and hashes: 1: Cx3L6stT48ESFPU7dsSwev_71rM.roa (hash: qfJbE21IlMxNOU9ikBVG55ZmDtmkEW1ywFQa88RaFu0=) 2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: bAIicfhYnubRIb2jxFe+OL2OWcTH3ywp6YAtbgy/Ql4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:54:aa:7e:eb:35:72:e7:23:cb:91:54:4b:3b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Validity Not Before: Jan 26 15:00:46 2026 GMT Not After : Jan 27 15:00:46 2026 GMT Subject: CN=a7cd321350ec8548d4a6a8ed5b93e4b3dadbd971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:26:e1:f4:ce:07:53:d1:29:b3:0f:5d:16: b4:73:9d:30:6e:c7:7f:82:57:ca:c9:11:0b:41:67: 9e:d8:a8:0b:f8:a0:35:8e:07:83:f5:74:84:68:29: 30:f3:7e:9a:b8:fd:d1:55:ad:7a:a6:c6:2b:50:88: e3:ae:0f:fc:9a:ac:fd:a2:b8:e5:c5:3f:e4:eb:c3: f5:69:e8:73:13:76:ef:f9:2a:c0:30:d6:90:50:11: 11:3a:48:81:ed:32:ee:4a:70:c5:55:0d:1a:16:48: c3:c1:7c:86:62:a5:6b:b3:66:4e:fa:9a:9d:06:93: f9:b1:76:36:80:cc:e0:fd:4e:f3:ac:4a:d0:59:c5: ae:a6:92:34:22:a0:b0:58:15:1c:72:b1:d3:77:78: 97:6c:ed:5c:05:80:cf:cb:42:45:4a:b3:e4:6a:ab: 82:5f:17:dc:3f:1e:c8:74:c7:d6:f6:5e:bd:e1:1c: 0a:41:9b:b7:6d:e1:01:54:56:82:14:c6:a1:a6:65: 74:96:fb:81:98:1b:dd:5d:4f:fb:a4:b3:e1:a7:45: 9c:2f:10:c8:b8:fe:8d:16:f3:db:c3:8b:f7:c4:83: d6:df:eb:22:e2:a6:97:c2:61:ae:48:33:5d:4a:47: ee:63:0b:21:14:a6:51:69:97:8f:be:1b:56:62:ea: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CD:32:13:50:EC:85:48:D4:A6:A8:ED:5B:93:E4:B3:DA:DB:D9:71 X509v3 Authority Key Identifier: keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7d:98:d6:d1:76:0a:25:c3:32:fa:22:dd:66:ee:bd:70:8c: 65:ad:6a:f4:61:67:41:a5:d1:17:da:3b:c8:2e:c1:e7:8d:38: 43:c5:61:74:ff:eb:b3:34:0e:78:8c:89:8e:b4:bb:0a:77:3b: 05:6e:d2:a9:1f:be:7a:35:20:00:19:ee:68:23:5c:db:2c:82: 90:29:f8:b3:32:14:67:25:a8:31:77:73:7d:39:5d:43:38:1a: b2:a5:71:73:70:43:2f:c2:25:18:23:98:cb:a8:23:03:8d:49: dd:fc:5e:20:9d:7f:e2:f9:25:25:b0:ce:95:f2:f1:10:10:95: 5f:78:f2:0b:e7:db:39:bb:de:8d:67:69:4a:4b:d0:4e:0a:2c: a5:41:72:5f:b3:fb:fc:8c:e1:73:50:a8:ee:b3:5d:42:71:05: fc:da:49:a2:69:cf:f8:75:78:d9:3d:81:26:1b:15:75:6d:6a: 68:94:c0:aa:98:31:07:f1:70:a4:92:dc:05:5c:e9:ca:1d:b0: d2:7d:47:48:28:a0:2a:23:d4:43:42:9a:8f:d5:01:f2:39:23: 5e:bb:74:32:55:a6:c2:2d:91:a2:a3:f0:a9:0f:64:69:62:31: a3:26:0f:00:24:62:2d:c9:c6:0e:1c:a8:b5:36:7a:a1:d1:82: f6:06:e8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60lSqfus1cucjy5FUSzuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4 NzJmYzIwHhcNMjYwMTI2MTUwMDQ2WhcNMjYwMTI3MTUwMDQ2WjAzMTEwLwYDVQQD EyhhN2NkMzIxMzUwZWM4NTQ4ZDRhNmE4ZWQ1YjkzZTRiM2RhZGJkOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf4m4fTOB1PRKbMPXRa0c50wbsd/ glfKyRELQWee2KgL+KA1jgeD9XSEaCkw836auP3RVa16psYrUIjjrg/8mqz9orjl xT/k68P1aehzE3bv+SrAMNaQUBEROkiB7TLuSnDFVQ0aFkjDwXyGYqVrs2ZO+pqd BpP5sXY2gMzg/U7zrErQWcWuppI0IqCwWBUccrHTd3iXbO1cBYDPy0JFSrPkaquC XxfcPx7IdMfW9l694RwKQZu3beEBVFaCFMahpmV0lvuBmBvdXU/7pLPhp0WcLxDI uP6NFvPbw4v3xIPW3+si4qaXwmGuSDNdSkfuYwshFKZRaZePvhtWYupIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfNMhNQ7IVI1Kao7VuT5LPa29lxMB8GA1UdIwQY MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN32Y1tF2 CiXDMvoi3WbuvXCMZa1q9GFnQaXRF9o7yC7B5404Q8VhdP/rszQOeIyJjrS7Cnc7 BW7SqR++ejUgABnuaCNc2yyCkCn4szIUZyWoMXdzfTldQzgasqVxc3BDL8IlGCOY y6gjA41J3fxeIJ1/4vklJbDOlfLxEBCVX3jyC+fbObvejWdpSkvQTgospUFyX7P7 /Izhc1Co7rNdQnEF/NpJomnP+HV42T2BJhsVdW1qaJTAqpgxB/FwpJLcBVzpyh2w 0n1HSCigKiPUQ0Kaj9UB8jkjXrt0MlWmwi2RoqPwqQ9kaWIxoyYPACRiLcnGDhyo tTZ6odGC9gbozg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:28:39 2026 by rpki-client