This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json) Hash identifier: 3ieaHVltws7y9g+d965CqmvzgjGdx6pXE7VdZY6eVhI= Subject key identifier: A3:9E:F5:69:A8:A1:56:A6:03:35:9C:AE:50:9C:0D:D3:C5:CF:7F:41 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019BFE78133A9E12C594C2A4593097B01E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft Manifest number: 1702 Signing time: Tue 27 Jan 2026 08:00:40 +0000 Manifest this update: Tue 27 Jan 2026 08:00:40 +0000 Manifest next update: Wed 28 Jan 2026 08:00:40 +0000 Files and hashes: 1: AM5ErPXEiMWsS6Ae1m7Tslc6XbE.roa (hash: bjQPug2v0rNOIw/ni5VI2hHRrE9nXwVPApu1cIBClbQ=) 2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: pXxel9uHqgA0+d2HOSf66c1RVQ3YSAifAnKFrnv3dkU=) 3: sscLEeP0ItNFFLLG-5gvreCdoWE.roa (hash: Ja+SzihPXfZaNmQF5Sydb9JlbsLFGRyUZqIr3rPTkfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:13:3a:9e:12:c5:94:c2:a4:59:30:97:b0:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Jan 27 08:00:40 2026 GMT Not After : Jan 28 08:00:40 2026 GMT Subject: CN=a39ef569a8a156a603359cae509c0dd3c5cf7f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:90:bb:38:8b:0d:ef:d1:48:13:a8:96:d4: 5e:13:08:b0:d2:5f:85:e5:d1:94:22:3d:07:67:06: b7:7d:1e:11:a9:7f:a5:85:53:c6:a1:94:3d:a6:82: 6e:9e:5a:42:d1:f6:35:2b:4a:e1:8c:6f:43:e3:17: 6d:aa:5d:7a:10:da:3d:d5:20:ef:b3:ad:f7:dd:f5: 9b:e4:8a:da:1f:d2:98:ba:19:63:bc:c7:8a:a3:25: 3e:4b:34:3a:bb:33:ca:5d:95:9d:ea:c0:87:e5:ed: e6:c1:ac:cd:0e:2d:9f:2e:f6:a0:9d:f0:e1:ac:8c: f7:57:dc:d6:3a:82:08:84:71:56:fb:d6:ea:a4:a8: a4:fd:83:e6:a6:11:7d:02:63:57:e0:1a:4c:66:ef: 1a:e8:ce:b2:74:1d:aa:e9:0f:d0:dc:34:6b:bb:91: 56:6d:34:7d:0e:f1:85:35:92:08:a7:23:f4:1e:9c: 66:5e:08:4c:38:80:74:95:90:28:34:77:c3:02:3b: 78:52:75:57:be:67:4d:7f:a3:bf:f9:01:76:a1:91: c5:f0:89:d9:04:60:46:8d:e8:96:f1:4f:00:18:2d: 19:c7:72:ad:24:41:7c:74:40:81:ec:ba:52:ab:e0: 86:a6:44:b0:d0:80:44:fb:97:cb:1f:40:a2:7f:f0: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:F5:69:A8:A1:56:A6:03:35:9C:AE:50:9C:0D:D3:C5:CF:7F:41 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:aa:8e:ed:57:a0:38:f3:d8:41:b1:29:34:61:52:9c:0c:72: 9a:78:9f:3a:84:5d:60:24:a2:c3:a0:46:7c:77:6c:14:d9:78: 6a:41:db:8e:83:91:21:1f:fa:ee:f9:5f:c1:1d:57:51:24:93: c9:8f:84:29:00:1d:de:c4:5c:36:97:55:e9:29:ab:11:22:ae: a3:e9:d6:ed:77:0d:1b:9a:86:c7:35:77:4a:7d:aa:c2:e3:af: 93:8d:78:95:bd:27:13:1e:12:d8:7f:eb:ed:a6:9d:23:a1:8b: 0b:fb:4b:17:59:0d:8c:df:a7:50:db:56:87:88:c4:81:52:8a: 71:e4:8c:92:75:0d:ba:47:c1:b5:8d:99:2c:f7:c3:4d:1a:3d: 10:e2:cd:bb:aa:a9:3f:60:f8:78:cd:f1:1f:0b:4b:14:0c:d3: 45:43:3d:07:9c:0e:4b:67:ad:58:39:31:01:ce:ba:57:00:f3: be:af:81:09:0b:32:d9:42:1c:b8:43:0e:83:3e:93:c4:65:a9: 87:87:1b:0a:d1:cf:c5:c4:d7:22:97:14:c0:c8:94:bd:4b:6a: 48:38:bb:e5:80:30:25:6a:ad:3e:b1:96:98:78:54:3f:18:dc: c5:5c:0e:4c:b7:0b:94:d6:f8:95:2b:d9:51:d6:3e:ee:19:85: 11:64:0c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eBM6nhLFlMKkWTCXsB4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjYwMTI3MDgwMDQwWhcNMjYwMTI4MDgwMDQwWjAzMTEwLwYDVQQD EyhhMzllZjU2OWE4YTE1NmE2MDMzNTljYWU1MDljMGRkM2M1Y2Y3ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4iQuziLDe/RSBOoltReEwiw0l+F 5dGUIj0HZwa3fR4RqX+lhVPGoZQ9poJunlpC0fY1K0rhjG9D4xdtql16ENo91SDv s6333fWb5IraH9KYuhljvMeKoyU+SzQ6uzPKXZWd6sCH5e3mwazNDi2fLvagnfDh rIz3V9zWOoIIhHFW+9bqpKik/YPmphF9AmNX4BpMZu8a6M6ydB2q6Q/Q3DRru5FW bTR9DvGFNZIIpyP0HpxmXghMOIB0lZAoNHfDAjt4UnVXvmdNf6O/+QF2oZHF8InZ BGBGjeiW8U8AGC0Zx3KtJEF8dECB7LpSq+CGpkSw0IBE+5fLH0Cif/AKTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOe9WmooVamAzWcrlCcDdPFz39BMB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKqO7Veg OPPYQbEpNGFSnAxymnifOoRdYCSiw6BGfHdsFNl4akHbjoORIR/67vlfwR1XUSST yY+EKQAd3sRcNpdV6SmrESKuo+nW7XcNG5qGxzV3Sn2qwuOvk414lb0nEx4S2H/r 7aadI6GLC/tLF1kNjN+nUNtWh4jEgVKKceSMknUNukfBtY2ZLPfDTRo9EOLNu6qp P2D4eM3xHwtLFAzTRUM9B5wOS2etWDkxAc66VwDzvq+BCQsy2UIcuEMOgz6TxGWp h4cbCtHPxcTXIpcUwMiUvUtqSDi75YAwJWqtPrGWmHhUPxjcxVwOTLcLlNb4lSvZ UdY+7hmFEWQMDg== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:50 2026 by rpki-client