This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json) Hash identifier: cGR2KbI2dp6fjMgBD5xWsNIis5OX5FLzbIzm1PI+G74= Subject key identifier: 8E:CD:37:0D:23:85:A0:15:5A:06:9C:AB:4A:64:35:D7:4E:3C:EC:69 Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019BFAD24AD898368E4CA044876FAAA256F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 15:00:44 +0000 Manifest this update: Mon 26 Jan 2026 15:00:44 +0000 Manifest next update: Tue 27 Jan 2026 15:00:44 +0000 Files and hashes: 1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=) 2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: 1EJklJYUD2YRFlJ8SAT5Blx6MoghkV8erU8fGzkvAWc=) 3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=) 4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=) 5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:4a:d8:98:36:8e:4c:a0:44:87:6f:aa:a2:56:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Jan 26 15:00:44 2026 GMT Not After : Jan 27 15:00:44 2026 GMT Subject: CN=8ecd370d2385a0155a069cab4a6435d74e3cec69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:69:b9:21:28:39:c9:d1:cc:1f:ed:47:9e: 65:8b:ef:af:64:d3:be:01:99:4b:05:ed:04:a9:be: 51:73:ff:0d:b7:0f:7a:be:89:09:41:73:3d:94:bd: 5d:d3:7f:c2:05:0c:ab:51:d9:2e:e3:a2:40:d8:de: 1b:7f:3d:44:04:79:25:70:8d:c4:22:95:1e:3c:0f: f4:4c:f0:0d:56:ac:17:81:13:e9:c8:72:f7:0b:a7: d4:3d:98:e7:25:d5:13:7b:11:47:32:94:2b:8b:cc: a8:df:ed:ad:95:ea:2b:f0:97:55:1b:a8:36:77:8c: e3:61:09:83:a4:ff:33:fb:2d:5f:21:6a:76:06:6e: 56:4e:cb:f3:68:7e:44:c2:b0:88:b6:8b:50:3e:32: 58:8c:0d:6e:96:49:18:20:3e:35:3a:40:50:68:04: c5:b7:8c:88:8d:80:79:75:c9:5f:77:33:00:0e:1b: 61:dd:15:c3:8f:e6:9d:8a:d3:a8:cc:1d:d3:bc:6e: 02:4a:64:b1:79:45:60:a5:73:af:36:f9:38:d5:31: 1a:ce:e1:d1:c5:f9:69:df:50:2c:48:9c:5c:46:a3: f4:c1:b6:c9:0c:94:a7:ad:1d:9b:80:4b:9a:e4:5c: 7e:e1:44:25:90:cc:5f:4e:c5:73:15:ea:17:dc:3a: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:37:0D:23:85:A0:15:5A:06:9C:AB:4A:64:35:D7:4E:3C:EC:69 X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0b:18:ca:e3:22:a3:cc:91:65:96:da:ca:70:97:b7:f4:b3: d2:14:dc:68:ea:45:48:28:a0:b9:dd:af:6f:86:f2:c9:33:c4: 5b:cd:16:a2:bb:53:bb:4c:57:1d:3f:8d:54:11:3b:7c:c0:51: 24:97:0c:ac:a0:46:61:e3:f7:f4:7f:81:e4:1b:21:c1:80:7a: d9:a4:f0:03:62:40:76:53:90:05:b3:ba:ba:d6:c3:f0:81:95: e1:98:05:95:66:86:c3:b0:91:fa:03:c9:26:5b:ee:99:37:7b: 54:c1:93:38:39:3a:45:5d:9c:3c:b9:bb:47:09:e7:23:8d:45: bc:49:d4:4c:e3:2d:ba:7a:fa:d1:22:b9:f2:79:ad:d1:70:21: ac:8d:51:3e:51:eb:62:a5:aa:9c:70:7c:b1:d5:5e:f9:4c:2b: 6b:56:7a:ac:91:99:83:f7:ff:e7:3c:3e:47:5e:41:43:e6:e5: 8f:91:a3:de:fc:c2:4a:ac:a5:7a:c4:68:ea:92:a0:b3:7d:d4: 0d:b5:bf:23:e4:5e:3f:c5:f8:7e:c5:e0:65:81:60:56:c5:67: 92:86:56:9d:05:62:43:b8:f6:f6:75:75:a3:a7:b4:15:8c:f3: 2a:d1:ac:77:e8:16:44:3d:12:a0:ad:1b:99:39:1a:fa:c4:5c: 31:85:f6:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60krYmDaOTKBEh2+qolb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjYwMTI2MTUwMDQ0WhcNMjYwMTI3MTUwMDQ0WjAzMTEwLwYDVQQD Eyg4ZWNkMzcwZDIzODVhMDE1NWEwNjljYWI0YTY0MzVkNzRlM2NlYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1tpuSEoOcnRzB/tR55li++vZNO+ AZlLBe0Eqb5Rc/8Ntw96vokJQXM9lL1d03/CBQyrUdku46JA2N4bfz1EBHklcI3E IpUePA/0TPANVqwXgRPpyHL3C6fUPZjnJdUTexFHMpQri8yo3+2tleor8JdVG6g2 d4zjYQmDpP8z+y1fIWp2Bm5WTsvzaH5EwrCItotQPjJYjA1ulkkYID41OkBQaATF t4yIjYB5dclfdzMADhth3RXDj+aditOozB3TvG4CSmSxeUVgpXOvNvk41TEazuHR xflp31AsSJxcRqP0wbbJDJSnrR2bgEua5Fx+4UQlkMxfTsVzFeoX3Dp+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7NNw0jhaAVWgacq0pkNddOPOxpMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgsYyuMi o8yRZZbaynCXt/Sz0hTcaOpFSCigud2vb4byyTPEW80WortTu0xXHT+NVBE7fMBR JJcMrKBGYeP39H+B5BshwYB62aTwA2JAdlOQBbO6utbD8IGV4ZgFlWaGw7CR+gPJ JlvumTd7VMGTODk6RV2cPLm7RwnnI41FvEnUTOMtunr60SK58nmt0XAhrI1RPlHr YqWqnHB8sdVe+Uwra1Z6rJGZg/f/5zw+R15BQ+blj5Gj3vzCSqylesRo6pKgs33U DbW/I+ReP8X4fsXgZYFgVsVnkoZWnQViQ7j29nV1o6e0FYzzKtGsd+gWRD0SoK0b mTka+sRcMYX2VQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:04 2026 by rpki-client