This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json) Hash identifier: FwuB6ZlPR7aF/ZSZP5aPsf2Vq9WPg3ycG2mImfkxOF8= Subject key identifier: 6E:34:AD:1F:BB:09:19:98:A4:3C:A0:B3:3F:60:C7:42:A3:56:2F:B8 Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63 Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763 Certificate serial: 019C04434D4AF976B11578864840294F92E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft Manifest number: 0BD8 Signing time: Wed 28 Jan 2026 11:00:45 +0000 Manifest this update: Wed 28 Jan 2026 11:00:45 +0000 Manifest next update: Thu 29 Jan 2026 11:00:45 +0000 Files and hashes: 1: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: HcfJQs2RHBoVEIJtjBYGRQMaqiAcMr/zivNi5xl7q/E=) 2: kGQeneiJZNT_BjB_XoReSyXguQ8.roa (hash: yt9dzzQfHrZsnLkuZ9r3U4v8elv0IkIyoER8sIW2HPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:43:4d:4a:f9:76:b1:15:78:86:48:40:29:4f:92:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87de085975de6588e07fed135513aa38acedb763 Validity Not Before: Jan 28 11:00:45 2026 GMT Not After : Jan 29 11:00:45 2026 GMT Subject: CN=6e34ad1fbb091998a43ca0b33f60c742a3562fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:b8:21:cc:a4:dd:5e:3b:6a:d5:12:99:0c: 9a:77:0a:f1:83:c1:e2:c2:02:c9:37:d4:63:db:09: 41:0b:63:4f:7b:bb:48:99:c6:da:c4:d0:cb:de:24: 34:f8:e3:c0:44:5a:55:e1:ee:dd:f7:89:27:2a:43: af:d5:69:db:ce:99:31:05:5e:85:ab:bb:86:6c:ab: 4e:50:d5:c0:4b:99:50:96:33:20:e4:6f:1b:94:f4: e9:e7:c6:9a:31:d3:cc:70:ce:02:87:ff:2e:43:0f: 34:40:67:22:1b:78:68:82:7e:1f:66:e2:0b:aa:30: fb:32:9f:b6:69:98:0a:41:c5:27:72:95:94:30:d4: 83:15:b3:10:df:db:72:0a:77:0e:ae:a7:97:c8:51: 50:2a:55:ec:9b:c8:8c:5a:af:54:7f:b1:df:3b:ab: 3c:62:52:0b:6d:3a:60:96:b9:8b:80:56:15:67:95: 1b:12:f7:76:fe:58:35:68:1a:a1:72:d8:79:06:a7: 12:12:be:79:0a:98:cc:0e:82:d4:84:e2:80:f2:76: 29:b5:27:25:50:96:10:e2:a4:a0:7d:a9:b0:a7:a6: 6a:d8:3b:d4:7a:1b:3f:e7:a2:b5:1d:30:c6:95:83: fc:4c:8b:a4:87:89:9a:ca:29:f9:0f:1a:b2:ca:a0: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:34:AD:1F:BB:09:19:98:A4:3C:A0:B3:3F:60:C7:42:A3:56:2F:B8 X509v3 Authority Key Identifier: keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:e1:59:19:46:e5:52:65:c3:fe:19:44:27:92:af:de:22: 55:52:c4:d2:f8:a8:73:aa:88:9f:79:d3:20:ce:68:e6:d8:f8: be:55:f0:84:5c:08:1d:82:b4:70:8f:02:95:7d:89:2a:35:2e: 5a:e4:7b:5d:af:28:5b:0d:a3:51:b7:89:e1:54:de:d2:a9:7b: a7:fb:9c:d4:83:0e:2e:02:0e:09:0e:f6:1e:d7:12:8e:06:aa: b3:87:19:41:2c:35:9b:01:08:dc:58:76:69:92:f6:b0:00:3b: 2d:5d:3c:fc:9b:00:8b:57:26:e4:0a:e9:b1:9e:7a:40:ff:08: c2:bd:41:74:e8:5f:2a:7d:41:a0:26:71:51:bd:43:50:17:77: ab:60:54:86:45:3c:16:68:bd:1c:03:3d:d7:91:d7:87:28:6f: c4:3f:9f:1a:9e:74:37:c3:22:8b:45:30:37:dc:ba:a2:4b:c4: b3:ca:74:66:9e:37:3e:de:7e:f9:0e:b1:f5:06:71:c0:2d:df: 02:12:90:a8:15:75:71:3d:e3:49:20:be:62:b9:22:cb:cc:69: ab:b2:3a:5f:56:be:02:bd:86:d5:fe:a6:3c:fb:64:55:3b:c3: 02:a0:42:3e:51:f9:4a:94:f8:c1:2b:40:be:e7:fe:99:50:c7: f9:8d:f3:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEQ01K+XaxFXiGSEApT5LiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGUwODU5NzVkZTY1ODhlMDdmZWQxMzU1MTNhYTM4YWNl ZGI3NjMwHhcNMjYwMTI4MTEwMDQ1WhcNMjYwMTI5MTEwMDQ1WjAzMTEwLwYDVQQD Eyg2ZTM0YWQxZmJiMDkxOTk4YTQzY2EwYjMzZjYwYzc0MmEzNTYyZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXG4Icyk3V47atUSmQyadwrxg8Hi wgLJN9Rj2wlBC2NPe7tImcbaxNDL3iQ0+OPARFpV4e7d94knKkOv1WnbzpkxBV6F q7uGbKtOUNXAS5lQljMg5G8blPTp58aaMdPMcM4Ch/8uQw80QGciG3hogn4fZuIL qjD7Mp+2aZgKQcUncpWUMNSDFbMQ39tyCncOrqeXyFFQKlXsm8iMWq9Uf7HfO6s8 YlILbTpglrmLgFYVZ5UbEvd2/lg1aBqhcth5BqcSEr55CpjMDoLUhOKA8nYptScl UJYQ4qSgfamwp6Zq2DvUehs/56K1HTDGlYP8TIukh4mayin5DxqyyqAC4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG40rR+7CRmYpDygsz9gx0KjVi+4MB8GA1UdIwQY MBaAFIfeCFl13mWI4H/tE1UTqjis7bdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNGVmNzEtZjEyMi00N2NlLThhNDAt Y2MwZjk3MDcxNDBlLzEvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNGVmNzEtZjEyMi00N2NlLThhNDAtY2MwZjk3MDcxNDBl LzEvaDk0SVdYWGVaWWpnZi0wVFZST3FPS3p0dDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZnhWRlG 5VJlw/4ZRCeSr94iVVLE0vioc6qIn3nTIM5o5tj4vlXwhFwIHYK0cI8ClX2JKjUu WuR7Xa8oWw2jUbeJ4VTe0ql7p/uc1IMOLgIOCQ72HtcSjgaqs4cZQSw1mwEI3Fh2 aZL2sAA7LV08/JsAi1cm5ArpsZ56QP8Iwr1BdOhfKn1BoCZxUb1DUBd3q2BUhkU8 Fmi9HAM915HXhyhvxD+fGp50N8Mii0UwN9y6okvEs8p0Zp43Pt5++Q6x9QZxwC3f AhKQqBV1cT3jSSC+Yrkiy8xpq7I6X1a+Ar2G1f6mPPtkVTvDAqBCPlH5SpT4wStA vuf+mVDH+Y3zgQ== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:52 2026 by rpki-client