This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: zlPPmVuC7osPB+8pQB2phm+YBI7LyKubGPNbFfBq1GY= Subject key identifier: FE:4F:9D:F9:19:02:84:91:46:C7:2D:F6:7C:30:65:EB:0A:8B:C9:52 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019BF8087AF0A77012D03E5259AF3BB05D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1885 Signing time: Mon 26 Jan 2026 02:01:03 +0000 Manifest this update: Mon 26 Jan 2026 02:01:03 +0000 Manifest next update: Tue 27 Jan 2026 02:01:03 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: t/tRZ4M4e6HmRqs594HsBs0+WlU250CKCWlquIAMx98=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 15: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 16: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=) 17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 19: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 20: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 21: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 22: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 23: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 24: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 25: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 26: e7ZRCUtIh9dNd1c2dQgbzZ1PkIE.roa (hash: ola1jxgSJVggUzsMIQQgKUN+JxfJCKNy5d2i98vKYBs=) 27: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=) 28: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 29: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 30: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 31: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 32: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 33: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) 34: t4VzSYm8jZxHXra8a1gQU_oCZrg.roa (hash: nhJnac8mfQfMue/8D0r8n0jxVEck6bnRlVwo/77WvNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:7a:f0:a7:70:12:d0:3e:52:59:af:3b:b0:5d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 26 02:01:03 2026 GMT Not After : Jan 27 02:01:03 2026 GMT Subject: CN=fe4f9df91902849146c72df67c3065eb0a8bc952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:45:03:9e:dc:0e:73:46:6c:27:d4:e1:81: 05:59:c0:31:34:6f:a7:29:cf:12:fd:9e:b8:82:75: b3:df:48:59:53:21:cf:34:a7:e4:85:1a:71:30:da: c9:cb:99:3e:fd:d0:fb:07:1a:53:c4:1f:6c:65:c5: 52:05:68:f0:42:74:53:47:15:7a:1a:a4:84:07:a3: d3:ae:59:75:b1:18:1f:b3:72:cc:63:06:42:a8:7d: 23:10:0a:bd:4b:7c:10:dc:4b:c7:f3:ab:87:2c:87: 67:5b:e3:bb:54:40:0d:56:28:0e:45:f6:ad:7c:30: 1d:4f:c4:b7:20:bd:72:4e:fa:e1:23:e5:e0:7a:d6: 56:7f:24:bd:c3:00:db:57:a1:19:03:10:71:d0:3c: 51:f5:71:6b:54:19:c2:b1:a2:cc:91:2d:94:ab:d1: 72:29:75:74:de:ef:ad:d1:f8:d5:79:a9:c9:5e:39: bf:dc:09:fa:07:ce:1d:3a:a3:b7:7e:0d:f5:dd:18: ca:6b:05:4f:5a:85:35:c1:5f:1e:de:e5:a6:49:01: 03:ba:c1:6e:94:cc:a3:ce:4b:43:2d:13:53:03:40: 32:4a:46:08:7e:4d:59:45:db:ae:61:0d:41:6d:eb: 32:5b:74:8b:ca:73:90:d6:d7:cc:c5:53:6c:41:7b: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4F:9D:F9:19:02:84:91:46:C7:2D:F6:7C:30:65:EB:0A:8B:C9:52 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:45:2b:0d:81:ac:fb:9d:d7:20:10:77:fd:78:38:fe:7b:c0: dc:4d:74:7e:c0:ac:96:cf:90:4a:8e:4f:59:37:53:54:37:98: 38:7b:97:fd:ef:0d:ba:92:0a:49:f2:17:fb:21:95:17:48:36: 2b:04:bc:37:87:05:af:aa:7e:2b:7f:b3:46:da:85:f3:11:cb: 49:2a:60:f6:8d:09:24:8f:fc:65:58:57:08:33:b5:22:c0:44: 0a:e8:d0:75:7c:72:1a:99:b1:b7:6b:8c:d5:2f:7a:c9:17:18: 96:e0:17:0a:3c:70:3f:5f:80:65:ca:84:af:46:7e:71:0c:1f: 7a:ae:da:80:44:3d:23:51:77:3b:a7:bd:b6:ee:0b:59:c3:af: b7:56:46:b7:57:32:52:97:eb:90:13:76:e7:b6:a1:a5:ef:bf: a4:8e:7c:bd:13:53:30:b4:52:52:aa:88:48:a6:22:a7:87:51: ec:e8:82:bc:a6:db:a4:45:e6:c9:e5:70:73:09:ac:36:fa:33: f5:5b:34:6d:18:91:af:1b:33:e9:37:1a:a4:85:4e:b0:c3:41: 3a:d5:51:e3:b7:d5:1d:81:00:09:66:e2:5e:90:0c:2f:bf:46: 14:53:54:5e:4d:e8:37:47:b3:be:35:c2:46:f1:cb:32:eb:5d: 93:69:21:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHrwp3AS0D5SWa87sF1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTI2MDIwMTAzWhcNMjYwMTI3MDIwMTAzWjAzMTEwLwYDVQQD EyhmZTRmOWRmOTE5MDI4NDkxNDZjNzJkZjY3YzMwNjVlYjBhOGJjOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy1FA57cDnNGbCfU4YEFWcAxNG+n Kc8S/Z64gnWz30hZUyHPNKfkhRpxMNrJy5k+/dD7BxpTxB9sZcVSBWjwQnRTRxV6 GqSEB6PTrll1sRgfs3LMYwZCqH0jEAq9S3wQ3EvH86uHLIdnW+O7VEANVigORfat fDAdT8S3IL1yTvrhI+XgetZWfyS9wwDbV6EZAxBx0DxR9XFrVBnCsaLMkS2Uq9Fy KXV03u+t0fjVeanJXjm/3An6B84dOqO3fg313RjKawVPWoU1wV8e3uWmSQEDusFu lMyjzktDLRNTA0AySkYIfk1ZRduuYQ1BbesyW3SLynOQ1tfMxVNsQXucyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5PnfkZAoSRRsct9nwwZesKi8lSMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUUrDYGs +53XIBB3/Xg4/nvA3E10fsCsls+QSo5PWTdTVDeYOHuX/e8NupIKSfIX+yGVF0g2 KwS8N4cFr6p+K3+zRtqF8xHLSSpg9o0JJI/8ZVhXCDO1IsBECujQdXxyGpmxt2uM 1S96yRcYluAXCjxwP1+AZcqEr0Z+cQwfeq7agEQ9I1F3O6e9tu4LWcOvt1ZGt1cy UpfrkBN257ahpe+/pI58vRNTMLRSUqqISKYip4dR7OiCvKbbpEXmyeVwcwmsNvoz 9Vs0bRiRrxsz6TcapIVOsMNBOtVR47fVHYEACWbiXpAML79GFFNUXk3oN0ezvjXC RvHLMutdk2khLw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:49 2026 by rpki-client