This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json) Hash identifier: cWuIreTSxlZ7yMnEH+ioyVEF/sjuf657xjzQHkFrh/Y= Subject key identifier: 3A:A5:AE:05:28:00:84:6A:AC:AF:96:98:F0:B4:09:68:68:B6:2D:7B Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Certificate serial: 019BDA6BAFD3B1BB2E22FCCFA0F62826DA39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft Manifest number: E2 Signing time: Tue 20 Jan 2026 08:00:48 +0000 Manifest this update: Tue 20 Jan 2026 08:00:48 +0000 Manifest next update: Wed 21 Jan 2026 08:00:48 +0000 Files and hashes: 1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=) 2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: isD9aSTWEBe9WeIlERT82DSI68T/gGORKN7mkAD+CT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:6b:af:d3:b1:bb:2e:22:fc:cf:a0:f6:28:26:da:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Validity Not Before: Jan 20 08:00:48 2026 GMT Not After : Jan 21 08:00:48 2026 GMT Subject: CN=3aa5ae052800846aacaf9698f0b4096868b62d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d4:9a:3d:10:ae:f5:98:ef:40:bb:fc:95:12: b3:8e:f5:84:d0:e9:23:ca:98:d3:67:99:9d:5c:3b: fb:42:44:d6:1d:ab:27:61:ad:6d:e4:b6:2e:d9:99: db:3d:e1:7d:90:4f:d8:91:d9:ce:8c:25:b0:17:91: 18:74:41:2d:43:16:a0:57:76:c6:97:28:42:0b:22: 8a:b3:b9:ae:b0:f7:a4:56:e7:15:c1:50:c4:35:f8: 7b:53:7e:69:da:90:c2:7d:b8:39:93:56:aa:5a:4e: f5:ae:f3:f5:14:0f:ad:01:df:e5:55:cc:eb:4b:4f: c4:37:01:80:8f:2d:d5:f0:14:26:43:12:36:c4:4d: df:4c:2c:c5:18:10:03:2c:29:45:23:cc:40:fe:05: 16:da:a9:18:0b:52:6b:e8:d3:be:76:36:f3:2b:9e: d2:35:8a:19:38:21:02:0a:9c:c2:4c:e8:28:69:03: 0f:d0:f3:2c:5f:cf:28:5c:be:91:9a:78:86:f0:80: da:e3:cf:9c:48:01:c9:9d:8a:04:d5:e0:49:83:a1: 9f:2a:a8:7e:d1:0a:1b:12:25:f0:5e:0f:d7:cb:66: 59:b7:8e:eb:4d:79:19:da:33:88:63:4d:c7:d5:3d: c4:8e:c5:cf:de:46:4d:88:39:bb:45:63:76:bb:db: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:AE:05:28:00:84:6A:AC:AF:96:98:F0:B4:09:68:68:B6:2D:7B X509v3 Authority Key Identifier: keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:de:ff:5b:6e:5a:2b:6f:e4:5f:40:d4:e8:80:bf:fd:29:11: c6:1a:46:5d:ee:53:2f:d1:45:a2:f8:e0:ba:e6:60:ed:d7:96: 1d:6f:07:32:4d:1c:7d:2b:6a:37:96:53:1b:86:1c:9c:b5:b4: 74:02:3c:a2:19:8b:76:e5:0b:52:09:eb:ca:0f:6b:0d:a3:eb: de:92:82:db:20:46:d1:13:24:09:7a:92:e7:ce:2e:41:b2:15: b1:e2:7f:e9:4e:8c:f8:04:a5:76:5d:28:54:d4:d8:a9:fa:e7: 67:b7:03:28:98:55:56:b7:68:61:cf:f8:57:08:3b:ee:30:da: 5b:86:6c:08:96:1b:4b:09:13:ad:53:ee:af:28:5d:4f:50:13: 10:44:1a:fb:fc:30:e5:c3:69:71:a5:df:b0:3f:bf:3a:49:30: 19:22:df:62:49:85:c9:8b:92:3d:86:16:fe:48:67:99:08:0c: 0f:69:e6:78:e8:01:d3:e0:5d:f1:fa:98:c2:8d:40:35:d6:5a: cc:8f:ef:93:1f:05:59:33:ef:59:dc:ca:6b:08:7e:3e:2e:07: 64:b2:3a:90:19:fb:7f:97:64:12:f3:9b:cb:3c:c9:da:0c:db: ce:8a:d6:ff:b8:5f:ee:c5:40:17:6a:d4:c8:37:ab:43:0c:7e: 06:00:e5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaa6/TsbsuIvzPoPYoJto5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj NmY0ZGMwHhcNMjYwMTIwMDgwMDQ4WhcNMjYwMTIxMDgwMDQ4WjAzMTEwLwYDVQQD EygzYWE1YWUwNTI4MDA4NDZhYWNhZjk2OThmMGI0MDk2ODY4YjYyZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dSaPRCu9ZjvQLv8lRKzjvWE0Okj ypjTZ5mdXDv7QkTWHasnYa1t5LYu2ZnbPeF9kE/YkdnOjCWwF5EYdEEtQxagV3bG lyhCCyKKs7musPekVucVwVDENfh7U35p2pDCfbg5k1aqWk71rvP1FA+tAd/lVczr S0/ENwGAjy3V8BQmQxI2xE3fTCzFGBADLClFI8xA/gUW2qkYC1Jr6NO+djbzK57S NYoZOCECCpzCTOgoaQMP0PMsX88oXL6RmniG8IDa48+cSAHJnYoE1eBJg6GfKqh+ 0QobEiXwXg/Xy2ZZt47rTXkZ2jOIY03H1T3EjsXP3kZNiDm7RWN2u9s/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqlrgUoAIRqrK+WmPC0CWhoti17MB8GA1UdIwQY MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt NjBhZTc2NjQ2ZGQ0LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0 LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd7/W25a K2/kX0DU6IC//SkRxhpGXe5TL9FFovjguuZg7deWHW8HMk0cfStqN5ZTG4YcnLW0 dAI8ohmLduULUgnryg9rDaPr3pKC2yBG0RMkCXqS584uQbIVseJ/6U6M+ASldl0o VNTYqfrnZ7cDKJhVVrdoYc/4Vwg77jDaW4ZsCJYbSwkTrVPuryhdT1ATEEQa+/ww 5cNpcaXfsD+/OkkwGSLfYkmFyYuSPYYW/khnmQgMD2nmeOgB0+Bd8fqYwo1ANdZa zI/vkx8FWTPvWdzKawh+Pi4HZLI6kBn7f5dkEvObyzzJ2gzbzorW/7hf7sVAF2rU yDerQwx+BgDlpA== -----END CERTIFICATE-----Generated at Tue Jan 20 13:52:43 2026 by rpki-client