This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json) Hash identifier: FmT7Cko66aYsrdtdFIHjZmZ1/VMMnxSqFfThnxcm7/g= Subject key identifier: 19:75:49:DF:23:BC:7E:A0:29:2E:61:94:3F:D8:A0:03:A1:5F:28:42 Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019BFB775EECC022B630870AE9D171BABC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 18:01:02 +0000 Manifest this update: Mon 26 Jan 2026 18:01:02 +0000 Manifest next update: Tue 27 Jan 2026 18:01:02 +0000 Files and hashes: 1: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (hash: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg=) 2: TV9FCFt6e1dnf-iSSWSuDHOypxE.roa (hash: eTnEXv1cjRUFIKzObjOMIk9gL0dgP2p/Hxl6K0g+qZ0=) 3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: C3+6dPV24MDZLPxigRQtzeHA23jlwy+EYGROT6hmNGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:5e:ec:c0:22:b6:30:87:0a:e9:d1:71:ba:bc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Jan 26 18:01:02 2026 GMT Not After : Jan 27 18:01:02 2026 GMT Subject: CN=197549df23bc7ea0292e61943fd8a003a15f2842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:4c:a7:77:8e:84:27:49:c4:54:83:30:9e: 81:df:10:85:26:aa:f6:86:fb:38:c9:83:07:b6:a5: 2f:89:dc:4b:94:fc:e4:4a:a0:7b:d7:9e:20:e6:ce: 82:9e:7f:ed:55:bd:56:d0:d0:5d:82:3d:9e:a7:7a: d8:99:26:80:da:4f:4a:9a:2b:45:82:49:be:0f:2a: c0:3c:70:73:48:df:13:dc:26:63:d4:0e:1b:6a:27: d9:9b:40:6f:86:40:57:fb:96:0d:d3:7f:4d:5b:e1: 10:4a:e1:ad:4d:78:3d:35:80:b6:db:b4:bd:47:87: 21:a0:0e:ac:f6:f2:41:e7:32:6d:1b:96:c2:64:1d: aa:61:52:34:bd:d9:c5:8b:9b:b2:7b:fd:21:ca:5b: 8f:e5:c4:7d:5f:37:1a:62:0a:d5:03:95:7f:da:92: 1e:5c:08:5e:8b:7b:99:ff:5a:a8:ad:b4:a1:60:1b: 15:be:a4:3b:ed:47:fc:63:fe:08:dd:27:1f:99:65: 80:95:4a:60:f6:49:b3:6e:38:84:a7:74:52:3d:7f: c2:d4:38:bd:05:52:75:f9:df:87:94:af:1c:76:62: 8f:6b:ce:96:f3:d6:89:39:8f:fa:2e:bd:22:f5:93: 65:52:00:49:75:a6:4c:76:11:a4:8c:d2:7b:5d:ea: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:49:DF:23:BC:7E:A0:29:2E:61:94:3F:D8:A0:03:A1:5F:28:42 X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:69:86:7f:79:e0:30:22:c0:70:3e:4b:e6:db:fb:32:f8: 1d:54:0c:55:fa:94:f0:a9:04:56:dd:47:7c:b1:80:de:22:ef: a5:ab:13:56:13:5f:f9:fb:7f:f6:e5:20:a2:f6:15:ef:c6:07: 91:68:28:f0:bc:f3:08:78:54:69:71:30:05:68:56:66:05:c8: 76:2f:ee:4c:2d:b4:49:a6:af:c0:6b:0a:5e:54:db:f2:5d:c4: f5:4c:1d:ac:8d:23:b5:51:5b:ac:15:78:8e:a8:ac:0e:3e:6f: 4f:ce:44:39:87:63:52:3a:d3:82:01:90:b2:e2:36:9d:33:c7: 72:1e:d9:f6:2d:52:d5:e1:3d:3b:33:41:d9:20:54:78:30:00: 8b:fa:b5:c5:29:06:44:53:db:21:c3:90:04:ae:ba:63:8b:97: b5:fe:8a:6d:ac:35:d0:28:d5:49:d1:15:39:1c:72:6c:e4:ff: c3:57:54:85:ca:4d:ba:3d:41:d0:f2:da:d7:13:65:f5:95:1c: cd:4c:74:d4:b0:36:8c:1f:b2:7e:c1:15:d4:3d:35:87:fd:38: 2d:28:0f:b0:b1:d2:d2:5b:50:1f:48:eb:ad:53:ae:d7:50:d9: 70:71:37:42:40:6a:2f:13:7e:31:e8:b9:d8:d6:8a:99:7f:99: 31:1c:8e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d17swCK2MIcK6dFxurwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjYwMTI2MTgwMTAyWhcNMjYwMTI3MTgwMTAyWjAzMTEwLwYDVQQD EygxOTc1NDlkZjIzYmM3ZWEwMjkyZTYxOTQzZmQ4YTAwM2ExNWYyODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2BMp3eOhCdJxFSDMJ6B3xCFJqr2 hvs4yYMHtqUvidxLlPzkSqB7154g5s6Cnn/tVb1W0NBdgj2ep3rYmSaA2k9KmitF gkm+DyrAPHBzSN8T3CZj1A4baifZm0BvhkBX+5YN039NW+EQSuGtTXg9NYC227S9 R4choA6s9vJB5zJtG5bCZB2qYVI0vdnFi5uye/0hyluP5cR9XzcaYgrVA5V/2pIe XAhei3uZ/1qorbShYBsVvqQ77Uf8Y/4I3ScfmWWAlUpg9kmzbjiEp3RSPX/C1Di9 BVJ1+d+HlK8cdmKPa86W89aJOY/6Lr0i9ZNlUgBJdaZMdhGkjNJ7XepnOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl1Sd8jvH6gKS5hlD/YoAOhXyhCMB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA1phn95 4DAiwHA+S+bb+zL4HVQMVfqU8KkEVt1HfLGA3iLvpasTVhNf+ft/9uUgovYV78YH kWgo8LzzCHhUaXEwBWhWZgXIdi/uTC20SaavwGsKXlTb8l3E9UwdrI0jtVFbrBV4 jqisDj5vT85EOYdjUjrTggGQsuI2nTPHch7Z9i1S1eE9OzNB2SBUeDAAi/q1xSkG RFPbIcOQBK66Y4uXtf6Kbaw10CjVSdEVORxybOT/w1dUhcpNuj1B0PLa1xNl9ZUc zUx01LA2jB+yfsEV1D01h/04LSgPsLHS0ltQH0jrrVOu11DZcHE3QkBqLxN+Mei5 2NaKmX+ZMRyOag== -----END CERTIFICATE-----Generated at Tue Jan 27 04:46:21 2026 by rpki-client