This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json) Hash identifier: f5uiJVn78oOQLdtAaVpnem2lhPpgLfcLjEXc8DHDXVA= Subject key identifier: AE:F0:18:C0:D5:67:41:99:09:22:68:18:01:94:24:5E:32:F0:FA:3A Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Certificate serial: 019BD27BE5619EDFAA79B7711F6D4D92A464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft Manifest number: 17D8 Signing time: Sun 18 Jan 2026 19:01:33 +0000 Manifest this update: Sun 18 Jan 2026 19:01:33 +0000 Manifest next update: Mon 19 Jan 2026 19:01:33 +0000 Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=) 2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: f03Xomrinf844QR/cEqnkFFUHcvjCtSDtQgdl4PMJdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:7b:e5:61:9e:df:aa:79:b7:71:1f:6d:4d:92:a4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Validity Not Before: Jan 18 19:01:33 2026 GMT Not After : Jan 19 19:01:33 2026 GMT Subject: CN=aef018c0d5674199092268180194245e32f0fa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:84:8e:87:e1:51:cc:ee:d5:1d:85:ec:5b: 7d:58:0e:41:95:59:2e:20:60:e8:30:3f:20:c2:c9: 5f:45:30:8a:46:a8:35:13:b5:93:0c:e0:66:7d:03: 9b:e3:50:bf:d2:fc:a9:9c:54:09:21:95:df:56:2a: 01:25:b5:81:51:83:56:f2:59:79:1f:0c:ca:6d:15: c4:75:66:94:de:77:0d:2a:28:68:e9:f9:8f:41:e1: d9:7e:9f:51:73:2a:25:b1:f1:78:b2:d1:40:4b:7d: 4e:ba:ef:b7:7d:98:e4:00:52:24:b5:24:da:59:8d: 51:fa:8f:40:72:97:92:e5:5c:69:8a:14:ba:f6:b2: ec:4e:16:c3:f2:07:de:67:76:66:b2:d9:13:29:ce: 56:07:8c:59:48:94:31:52:02:78:47:de:1e:09:79: e1:be:79:e8:20:91:14:f9:f0:d5:d3:02:3b:53:56: 3f:3d:51:57:36:29:17:42:3d:67:a4:09:cf:d3:49: c3:98:1a:7f:35:0e:0f:84:b1:09:c0:7d:00:7a:46: 4f:1d:84:46:8e:e3:1c:13:a6:58:b2:c0:1b:45:93: c7:77:de:46:f4:eb:ee:61:2d:aa:ac:3b:cf:30:02: bd:17:5e:ae:65:cd:ab:5e:1f:c0:9c:ad:5b:1b:52: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:18:C0:D5:67:41:99:09:22:68:18:01:94:24:5E:32:F0:FA:3A X509v3 Authority Key Identifier: keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b7:cd:55:0c:59:09:ee:26:41:35:87:02:e0:33:21:22:03: dd:19:aa:3d:9c:c6:9d:93:ab:6e:55:31:e4:0b:1d:8e:e6:9d: c7:6e:c2:0f:92:0e:5e:96:8d:c6:6a:c5:ad:84:96:2d:a5:cb: 15:63:bf:e2:cb:3d:b7:3f:b3:5f:e0:fd:9a:73:a6:3a:14:7e: b0:54:b4:83:31:ca:76:81:8c:1b:22:66:9a:66:1a:5a:43:af: e2:81:de:e1:a7:e9:7a:d2:27:69:5d:b9:b9:0f:3c:0d:0d:2a: ee:fc:2a:85:63:91:ba:bb:3d:8f:43:f0:15:88:42:19:c0:57: 88:8c:d7:2e:29:0e:6b:84:2d:0a:f2:21:5a:d0:b2:4f:30:68: 72:ba:8a:65:83:97:89:f8:ec:ab:75:02:0f:c7:c3:30:1e:55: 1c:a1:23:e5:79:ee:9b:b1:28:85:4f:88:42:5d:f5:54:a4:00: 9c:31:41:31:4d:05:56:87:59:bd:d9:91:17:0c:c8:6e:82:ad: 7a:8f:d9:9e:59:58:3c:c9:90:1c:3f:75:2c:6e:85:33:ca:3a: db:89:5b:dc:1f:ae:81:d2:ac:e7:d9:c1:9d:51:cc:4c:08:71: 69:69:8e:02:83:df:5b:d3:a7:b0:c1:2d:3a:be:fc:7a:f9:75: 57:77:93:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvSe+Vhnt+qebdxH21NkqRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl NDkzZjgwHhcNMjYwMTE4MTkwMTMzWhcNMjYwMTE5MTkwMTMzWjAzMTEwLwYDVQQD EyhhZWYwMThjMGQ1Njc0MTk5MDkyMjY4MTgwMTk0MjQ1ZTMyZjBmYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1weEjofhUczu1R2F7Ft9WA5BlVku IGDoMD8gwslfRTCKRqg1E7WTDOBmfQOb41C/0vypnFQJIZXfVioBJbWBUYNW8ll5 HwzKbRXEdWaU3ncNKiho6fmPQeHZfp9RcyolsfF4stFAS31Ouu+3fZjkAFIktSTa WY1R+o9AcpeS5VxpihS69rLsThbD8gfeZ3ZmstkTKc5WB4xZSJQxUgJ4R94eCXnh vnnoIJEU+fDV0wI7U1Y/PVFXNikXQj1npAnP00nDmBp/NQ4PhLEJwH0AekZPHYRG juMcE6ZYssAbRZPHd95G9OvuYS2qrDvPMAK9F16uZc2rXh/AnK1bG1JXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7wGMDVZ0GZCSJoGAGUJF4y8Po6MB8GA1UdIwQY MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5 LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrfNVQxZ Ce4mQTWHAuAzISID3RmqPZzGnZOrblUx5Asdjuadx27CD5IOXpaNxmrFrYSWLaXL FWO/4ss9tz+zX+D9mnOmOhR+sFS0gzHKdoGMGyJmmmYaWkOv4oHe4afpetInaV25 uQ88DQ0q7vwqhWORurs9j0PwFYhCGcBXiIzXLikOa4QtCvIhWtCyTzBocrqKZYOX ifjsq3UCD8fDMB5VHKEj5Xnum7EohU+IQl31VKQAnDFBMU0FVodZvdmRFwzIboKt eo/ZnllYPMmQHD91LG6FM8o624lb3B+ugdKs59nBnVHMTAhxaWmOAoPfW9OnsMEt Or78evl1V3eTqw== -----END CERTIFICATE-----Generated at Sun Jan 18 23:26:20 2026 by rpki-client