This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json) Hash identifier: LFYol+r7/hTJC/qI67/cKZZlGMSnvacIuVo8HHGRBwo= Subject key identifier: 1B:25:BE:9B:0A:55:F5:D8:F1:B3:49:F9:4F:0D:C4:1D:F1:B9:4A:E8 Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019BF8E43308660893FAE0B08AF67A038F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft Manifest number: 0671 Signing time: Mon 26 Jan 2026 06:01:03 +0000 Manifest this update: Mon 26 Jan 2026 06:01:03 +0000 Manifest next update: Tue 27 Jan 2026 06:01:03 +0000 Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=) 2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=) 3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: /2XaG+C0hvBQKh0+S+youWcXSU0Ty2xdDxwiL5RY3Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:33:08:66:08:93:fa:e0:b0:8a:f6:7a:03:8f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Jan 26 06:01:03 2026 GMT Not After : Jan 27 06:01:03 2026 GMT Subject: CN=1b25be9b0a55f5d8f1b349f94f0dc41df1b94ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:13:db:f3:5b:5b:c7:c5:9d:c7:85:54:dc: 09:2e:6f:32:1d:ee:a0:de:52:c1:95:c7:4c:1f:4e: bf:1a:22:b8:94:01:5c:af:05:b0:4a:12:77:73:64: c2:aa:45:81:40:02:e3:c4:45:67:53:4a:e5:c6:e0: 12:37:f2:a8:2d:06:c4:d1:ff:14:56:bc:e1:f5:04: 41:30:fc:55:3e:6f:1c:03:92:34:07:c6:34:81:e4: 6e:2b:8c:84:f9:ea:48:77:64:01:a1:fc:1c:81:bd: f3:7e:3c:9f:47:ec:0b:b3:d4:12:c3:ab:d6:e3:36: b8:3b:43:40:9b:ea:93:09:fd:b0:c8:ad:12:66:6e: 6a:49:61:00:fd:fb:24:6e:4c:a4:8a:ab:47:f5:af: fc:76:be:fd:70:a4:41:27:3d:8f:07:10:da:9f:e0: b0:b9:6e:da:8e:e8:ec:d9:72:15:86:a1:ea:35:cb: d1:84:af:aa:85:f7:26:b0:21:11:00:98:76:e8:4a: 1a:c9:0d:43:66:a0:de:5b:a0:3d:de:5f:25:0e:35: 36:f6:09:3c:bc:38:4a:dc:56:74:29:dc:7d:db:a4: 75:b3:ea:74:08:47:f2:8f:dd:97:b6:85:c1:5b:95: 76:11:ba:50:2d:65:6d:e9:0f:8e:ec:d0:97:43:d9: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:BE:9B:0A:55:F5:D8:F1:B3:49:F9:4F:0D:C4:1D:F1:B9:4A:E8 X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:f9:19:f4:7f:96:e9:7a:88:44:7f:53:48:1a:b1:21:71: f8:7d:bf:58:ef:03:f7:93:c9:91:10:5e:a2:7a:75:3c:05:dc: d8:e9:e6:5b:9f:4a:5d:12:8e:fd:a0:e5:4a:34:05:23:17:a4: 1e:c4:85:5f:2e:d4:3e:0f:36:00:22:04:f0:1a:a4:2f:e3:ee: a3:58:00:04:4b:cd:da:07:bd:41:a4:88:85:21:0c:c2:92:a2: 90:5f:d6:83:5b:fb:90:d3:98:2b:41:15:7c:93:58:96:c9:87: dd:f3:a7:2a:d3:d7:03:45:cc:55:79:f7:6d:a2:9b:51:83:b1: fb:b7:59:fa:f6:e8:c5:4a:e4:5e:31:96:10:07:98:56:2d:01: 5c:28:b4:33:e0:54:61:7a:3d:24:75:ad:d9:34:67:f3:1f:29: 45:5a:76:7a:61:31:65:37:ad:1f:47:75:d1:3e:94:96:e2:aa: bc:c3:6a:2e:8a:38:a1:81:54:05:92:49:80:e5:44:8d:5a:eb: fe:02:c2:60:8a:44:ca:31:6d:5c:ee:d0:b0:28:2c:91:4d:ed: 49:83:b9:3f:58:37:e1:bb:1a:05:0d:70:de:81:b8:d7:0d:85: ef:8c:67:89:16:26:1b:40:67:91:d0:d4:b9:8e:5b:a3:2f:19: 3b:d6:00:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45DMIZgiT+uCwivZ6A48nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjYwMTI2MDYwMTAzWhcNMjYwMTI3MDYwMTAzWjAzMTEwLwYDVQQD EygxYjI1YmU5YjBhNTVmNWQ4ZjFiMzQ5Zjk0ZjBkYzQxZGYxYjk0YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GQT2/NbW8fFnceFVNwJLm8yHe6g 3lLBlcdMH06/GiK4lAFcrwWwShJ3c2TCqkWBQALjxEVnU0rlxuASN/KoLQbE0f8U Vrzh9QRBMPxVPm8cA5I0B8Y0geRuK4yE+epId2QBofwcgb3zfjyfR+wLs9QSw6vW 4za4O0NAm+qTCf2wyK0SZm5qSWEA/fskbkykiqtH9a/8dr79cKRBJz2PBxDan+Cw uW7ajujs2XIVhqHqNcvRhK+qhfcmsCERAJh26EoayQ1DZqDeW6A93l8lDjU29gk8 vDhK3FZ0Kdx926R1s+p0CEfyj92XtoXBW5V2EbpQLWVt6Q+O7NCXQ9k7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBslvpsKVfXY8bNJ+U8NxB3xuUroMB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI/5GfR/ lul6iER/U0gasSFx+H2/WO8D95PJkRBeonp1PAXc2OnmW59KXRKO/aDlSjQFIxek HsSFXy7UPg82ACIE8BqkL+Puo1gABEvN2ge9QaSIhSEMwpKikF/Wg1v7kNOYK0EV fJNYlsmH3fOnKtPXA0XMVXn3baKbUYOx+7dZ+vboxUrkXjGWEAeYVi0BXCi0M+BU YXo9JHWt2TRn8x8pRVp2emExZTetH0d10T6UluKqvMNqLoo4oYFUBZJJgOVEjVrr /gLCYIpEyjFtXO7QsCgskU3tSYO5P1g34bsaBQ1w3oG41w2F74xniRYmG0BnkdDU uY5boy8ZO9YAQg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:29 2026 by rpki-client