This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json) Hash identifier: d/y1APVjWUXEohqT6nosTFMPw67K8gXn0x2YWJRR7O0= Subject key identifier: 77:7D:43:B8:E4:7F:CB:51:39:2A:B0:AA:A9:3B:71:C4:65:8B:A6:70 Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019BFC8A05FC34B5E0BC1C06D7BADD251ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft Manifest number: 133D Signing time: Mon 26 Jan 2026 23:01:02 +0000 Manifest this update: Mon 26 Jan 2026 23:01:02 +0000 Manifest next update: Tue 27 Jan 2026 23:01:02 +0000 Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=) 2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: DIVE1Hx9bgcL3j2lXB7Uc7JEZ9B2UoZmyTqGOJGw4EA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:05:fc:34:b5:e0:bc:1c:06:d7:ba:dd:25:1a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Jan 26 23:01:02 2026 GMT Not After : Jan 27 23:01:02 2026 GMT Subject: CN=777d43b8e47fcb51392ab0aaa93b71c4658ba670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:a6:d9:25:90:45:86:1c:61:1a:94:91:33: 8b:99:9b:d5:4e:55:fd:15:57:e1:8f:ca:71:ff:ea: 28:84:47:d9:3f:1c:77:28:11:f9:9c:21:1d:03:8c: 6a:df:96:9d:13:71:5c:7b:fd:29:1a:7b:13:2f:72: ff:8a:20:35:96:a9:f3:23:27:c3:59:e5:1b:3f:36: 40:5a:06:81:0c:91:c9:5a:00:18:90:d4:d7:79:16: 5c:e8:c6:ec:b9:5b:84:89:59:da:26:86:56:73:e7: fa:13:ae:5b:d9:7f:ff:8c:89:a4:36:f3:9a:94:bd: d8:c5:34:3a:8f:b6:0f:56:70:a5:5f:99:20:04:13: 81:a5:8f:04:9b:d2:48:3f:89:51:be:ee:da:0e:d7: 05:94:6f:56:35:02:5d:1f:ce:d0:24:cc:fb:d4:e5: b2:e9:0f:fa:48:f8:50:b0:27:42:ee:b6:3f:b8:a8: 98:e5:b2:9e:93:21:37:a3:b2:06:64:2b:05:54:e8: 20:10:41:3b:23:61:55:1e:3c:39:5f:15:23:eb:44: 19:7d:ac:ba:d8:d6:5d:10:f9:23:ec:86:2b:20:8f: 85:40:1d:bd:e0:84:54:53:42:42:3c:db:f6:32:70: 2d:ad:fd:5d:f3:5c:98:6d:c5:0d:79:c9:42:52:89: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7D:43:B8:E4:7F:CB:51:39:2A:B0:AA:A9:3B:71:C4:65:8B:A6:70 X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a1:b4:aa:9f:ae:dc:0b:0e:f1:46:17:a5:78:04:3b:b6:5b: 21:50:71:0b:be:f8:33:9d:3b:24:d4:01:9b:19:90:c7:f6:bd: 99:8c:2a:32:de:d6:ce:76:29:e3:8a:e3:3c:d9:61:34:a7:71: 38:f5:3f:73:7f:14:30:a5:45:b9:97:cc:83:e4:73:b5:f2:39: ea:30:79:00:ec:5c:06:bf:be:71:67:db:d0:97:3e:16:24:62: e0:9e:d1:80:db:98:e0:0a:f9:a2:65:fc:e3:4f:fc:64:14:19: 1b:77:18:1d:f7:9a:b5:0c:81:6a:ac:b6:94:5b:50:83:94:67: 87:dd:e9:36:32:6b:6b:1f:1a:c9:19:28:ed:e0:31:a4:ce:da: a0:ad:26:6b:f8:c6:23:2f:9c:78:e0:bc:a5:09:16:44:50:13: 91:85:9c:ae:88:c0:03:a3:60:f6:10:16:54:ed:83:58:96:2a: c4:ab:ce:bb:bb:c9:d8:fb:bb:46:2b:04:3f:55:ba:78:26:d5: 3c:4b:8d:83:08:cd:6c:85:1d:65:93:51:c2:e2:b7:28:d6:ea: 4c:c4:e3:ff:1b:ab:a4:1b:11:aa:03:99:f3:0c:df:a3:af:f8: 9c:84:d3:65:2a:21:99:0a:3b:9b:d1:e5:b3:f5:4d:c5:1c:67: 76:08:76:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8igX8NLXgvBwG17rdJRrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjYwMTI2MjMwMTAyWhcNMjYwMTI3MjMwMTAyWjAzMTEwLwYDVQQD Eyg3NzdkNDNiOGU0N2ZjYjUxMzkyYWIwYWFhOTNiNzFjNDY1OGJhNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomym2SWQRYYcYRqUkTOLmZvVTlX9 FVfhj8px/+oohEfZPxx3KBH5nCEdA4xq35adE3Fce/0pGnsTL3L/iiA1lqnzIyfD WeUbPzZAWgaBDJHJWgAYkNTXeRZc6MbsuVuEiVnaJoZWc+f6E65b2X//jImkNvOa lL3YxTQ6j7YPVnClX5kgBBOBpY8Em9JIP4lRvu7aDtcFlG9WNQJdH87QJMz71OWy 6Q/6SPhQsCdC7rY/uKiY5bKekyE3o7IGZCsFVOggEEE7I2FVHjw5XxUj60QZfay6 2NZdEPkj7IYrII+FQB294IRUU0JCPNv2MnAtrf1d81yYbcUNeclCUomlJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd9Q7jkf8tROSqwqqk7ccRli6ZwMB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaG0qp+u 3AsO8UYXpXgEO7ZbIVBxC774M507JNQBmxmQx/a9mYwqMt7WznYp44rjPNlhNKdx OPU/c38UMKVFuZfMg+RztfI56jB5AOxcBr++cWfb0Jc+FiRi4J7RgNuY4Ar5omX8 40/8ZBQZG3cYHfeatQyBaqy2lFtQg5Rnh93pNjJrax8ayRko7eAxpM7aoK0ma/jG Iy+ceOC8pQkWRFATkYWcrojAA6Ng9hAWVO2DWJYqxKvOu7vJ2Pu7RisEP1W6eCbV PEuNgwjNbIUdZZNRwuK3KNbqTMTj/xurpBsRqgOZ8wzfo6/4nITTZSohmQo7m9Hl s/VNxRxndgh2zA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:47 2026 by rpki-client