This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json) Hash identifier: j6yuZ0iWFoY/jEM6VnYkllKO7yOR9KU0Rk+qW/a8CaY= Subject key identifier: 5F:BB:62:92:EB:78:A2:66:2D:D9:55:9B:28:E6:AE:B6:C6:CB:AE:AF Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Certificate serial: 019BAC81505A7E6B6A5C8991F7436A058139 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft Manifest number: 0278 Signing time: Sun 11 Jan 2026 10:01:54 +0000 Manifest this update: Sun 11 Jan 2026 10:01:54 +0000 Manifest next update: Mon 12 Jan 2026 10:01:54 +0000 Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: vyHRUAd9GcjLH9/pG3+eyLRSGbokwIJFnXuMnlicAtE=) 2: hVCMHbhbfZIv6_XEgHNxBb1iBTg.roa (hash: +BlQApbHjZb7f8RHAby22GvRQWprbhCIUcnRWldtZiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:50:5a:7e:6b:6a:5c:89:91:f7:43:6a:05:81:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Validity Not Before: Jan 11 10:01:54 2026 GMT Not After : Jan 12 10:01:54 2026 GMT Subject: CN=5fbb6292eb78a2662dd9559b28e6aeb6c6cbaeaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:7e:7d:cd:08:ac:8e:15:28:76:e7:58:25: 42:58:35:9a:cc:aa:d3:90:4e:93:18:5e:d5:91:82: c7:b5:ae:ab:70:54:98:cd:d9:cb:b4:88:30:a7:ab: 32:60:ab:5e:0e:63:90:19:33:2c:2d:35:ff:d3:3d: be:7f:be:7a:94:65:2f:91:12:f8:fb:e7:6b:f2:0a: 41:fc:d9:85:81:6a:e6:79:fe:cd:27:a8:27:16:82: 31:25:a6:90:c1:1a:99:0e:2e:c1:51:a3:49:4f:12: e6:00:6b:1e:36:14:a5:15:ed:82:5e:67:0c:d7:55: 14:65:79:ad:2a:7e:e2:74:8c:50:4a:3e:5d:5c:71: af:00:54:7b:61:33:7c:b9:1e:74:44:e2:33:b5:77: 2b:ca:44:65:e4:dd:87:56:02:eb:04:81:f9:0f:cb: fe:60:3c:72:8e:ad:51:14:5c:82:d9:98:59:bb:71: 65:d6:eb:11:97:d4:07:14:f8:75:75:c3:fd:7b:11: ef:43:12:b6:b2:fe:e4:20:83:c7:59:ab:6f:15:86: 54:1d:a0:d5:6c:78:c9:e2:9f:dd:b7:2f:2f:0c:a1: 2a:37:2e:d7:1c:4a:7f:66:31:f6:78:56:ac:46:02: fa:81:7f:5a:a9:64:03:91:78:62:9a:da:c3:93:df: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BB:62:92:EB:78:A2:66:2D:D9:55:9B:28:E6:AE:B6:C6:CB:AE:AF X509v3 Authority Key Identifier: keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5a:c9:e3:98:6d:c4:83:8b:07:f8:de:82:b8:7a:9c:2d:50: 24:64:35:1e:ce:07:54:81:a2:7d:92:34:48:36:50:d5:eb:34: 63:46:b1:ad:70:20:6f:96:1b:5f:f2:b4:4c:d3:a5:30:ad:6f: a4:00:8e:0b:1f:19:99:25:15:b0:ae:02:7e:1a:b1:13:e7:65: bc:8c:12:e3:79:66:0a:fd:36:0e:35:9e:52:5a:1f:a2:35:46: cc:83:d0:97:ae:b5:e4:b0:07:d2:9f:8a:bf:02:ce:53:a6:72: 27:b3:55:5d:49:61:df:37:1d:9a:88:b4:77:21:9f:ab:f3:ce: 55:5d:af:99:83:e3:20:0f:aa:05:cd:bd:f4:4e:e1:c8:17:81: 45:4f:27:9b:58:db:c0:4a:1e:04:8c:eb:3a:9a:2d:1d:e1:9b: f4:f5:a0:17:40:7a:6a:19:d6:86:7c:e4:bb:6c:f2:7b:8c:15: cd:b9:99:26:f8:26:6b:63:87:7c:27:aa:fb:a1:4a:6c:98:aa: 54:b7:90:80:b2:31:33:20:a1:fa:3c:29:a5:ec:2b:11:f6:28: 22:bd:05:0a:3c:72:db:d1:8e:57:a1:ad:9f:a2:32:1c:e6:88: f7:23:66:9d:d5:4a:d2:fc:2d:09:7b:14:b6:ae:27:60:a1:fb: 27:3a:c3:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgVBafmtqXImR90NqBYE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4 YmE2MTQwHhcNMjYwMTExMTAwMTU0WhcNMjYwMTEyMTAwMTU0WjAzMTEwLwYDVQQD Eyg1ZmJiNjI5MmViNzhhMjY2MmRkOTU1OWIyOGU2YWViNmM2Y2JhZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rx+fc0IrI4VKHbnWCVCWDWazKrT kE6TGF7VkYLHta6rcFSYzdnLtIgwp6syYKteDmOQGTMsLTX/0z2+f756lGUvkRL4 ++dr8gpB/NmFgWrmef7NJ6gnFoIxJaaQwRqZDi7BUaNJTxLmAGseNhSlFe2CXmcM 11UUZXmtKn7idIxQSj5dXHGvAFR7YTN8uR50ROIztXcrykRl5N2HVgLrBIH5D8v+ YDxyjq1RFFyC2ZhZu3Fl1usRl9QHFPh1dcP9exHvQxK2sv7kIIPHWatvFYZUHaDV bHjJ4p/dty8vDKEqNy7XHEp/ZjH2eFasRgL6gX9aqWQDkXhimtrDk99eFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+7YpLreKJmLdlVmyjmrrbGy66vMB8GA1UdIwQY MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFrJ45ht xIOLB/jegrh6nC1QJGQ1Hs4HVIGifZI0SDZQ1es0Y0axrXAgb5YbX/K0TNOlMK1v pACOCx8ZmSUVsK4CfhqxE+dlvIwS43lmCv02DjWeUlofojVGzIPQl6615LAH0p+K vwLOU6ZyJ7NVXUlh3zcdmoi0dyGfq/POVV2vmYPjIA+qBc299E7hyBeBRU8nm1jb wEoeBIzrOpotHeGb9PWgF0B6ahnWhnzku2zye4wVzbmZJvgma2OHfCeq+6FKbJiq VLeQgLIxMyCh+jwppewrEfYoIr0FCjxy29GOV6Gtn6IyHOaI9yNmndVK0vwtCXsU tq4nYKH7JzrDJA== -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:54 2026 by rpki-client