This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json) Hash identifier: 9+Huk+UqwcP2JMf4VahP3EpEk07HY+3L13o9usdRqFE= Subject key identifier: C2:3C:61:DA:20:CE:B6:E1:E0:7D:32:91:88:1A:13:D2:F6:62:20:B2 Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Certificate serial: 019BF91B6E31364A4061765F07979B569199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 07:01:22 +0000 Manifest this update: Mon 26 Jan 2026 07:01:22 +0000 Manifest next update: Tue 27 Jan 2026 07:01:22 +0000 Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=) 2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: 31yMViOVjOaGeqdGDpbVSdGMo0/cqbC/rwiStII90a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:6e:31:36:4a:40:61:76:5f:07:97:9b:56:91:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Validity Not Before: Jan 26 07:01:22 2026 GMT Not After : Jan 27 07:01:22 2026 GMT Subject: CN=c23c61da20ceb6e1e07d3291881a13d2f66220b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:ab:cd:7a:03:2a:ea:13:cc:71:7c:fa:65: 48:11:01:8c:fe:5f:d8:56:ce:d0:43:da:30:a4:c0: ed:5d:1d:83:73:c6:b4:68:cb:93:42:2e:4b:37:ed: 05:6d:f7:17:97:64:8c:a3:53:fc:90:d1:dd:bd:6c: 8a:ff:da:00:12:52:c4:71:b0:dd:d6:79:bf:41:d3: 86:8d:f7:b2:44:e4:c0:02:e7:d7:bb:38:cc:64:fc: 9b:47:3b:3d:ce:62:79:db:4e:4c:e1:41:9a:1d:bf: b7:74:4b:b2:73:37:35:59:27:20:de:a9:50:8a:84: d8:b2:d9:c6:c6:b4:86:c9:8c:07:1b:7c:46:fe:6a: a6:81:74:88:5e:87:dd:c0:4f:7b:b2:61:62:99:f0: 70:5c:43:ec:44:d2:20:36:74:d7:ed:4b:92:23:18: d5:b8:78:44:24:c3:3c:d2:7c:0d:14:3b:06:e6:1f: a8:0d:6c:79:11:cc:53:3d:01:7a:6e:88:05:64:3d: e7:8b:6d:cb:ac:08:01:a3:72:98:b8:b3:65:70:90: 7e:b4:3c:84:98:32:ba:c0:d6:1d:ef:c4:30:2a:b2: 21:21:99:c6:ae:82:b6:b5:13:40:da:18:ca:b5:f2: 39:70:cf:45:a5:93:ef:39:37:b5:1f:23:4b:2e:91: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3C:61:DA:20:CE:B6:E1:E0:7D:32:91:88:1A:13:D2:F6:62:20:B2 X509v3 Authority Key Identifier: keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a0:c4:36:d3:07:24:2f:00:82:bb:92:93:c8:63:27:b9:e5: ef:cf:bf:5b:f9:20:58:97:2b:48:4b:51:e0:3d:ad:df:b3:82: a7:7f:9e:e5:db:0e:50:b1:74:86:d6:b2:b4:9e:ae:5a:63:c8: 5a:ca:70:41:bf:f4:63:c3:53:b8:ba:34:4f:f7:4a:91:74:87: d5:f4:b3:d5:65:08:1e:5d:fb:db:e2:3a:58:93:26:6a:3c:94: 3d:a9:9a:12:28:cf:85:2e:78:31:4f:9d:66:2f:f6:3a:2b:8d: d5:72:a4:b7:c7:93:af:12:14:bf:96:dc:a3:40:bd:ba:39:4c: 0c:db:f3:fc:c1:f3:e6:94:d8:f6:8f:42:72:f2:f1:54:95:e7: 99:e8:22:16:93:77:3a:70:c2:4e:11:d2:0f:1c:b3:4a:7d:3d: f4:8c:b7:a8:a6:e5:b0:1a:56:54:de:cc:17:2e:f2:e4:b1:98: 5f:b0:c8:42:a0:db:9f:4d:a0:77:ad:54:54:a8:2d:4e:dc:90: 4b:6a:44:b5:eb:ed:6e:72:7c:19:6b:d1:02:fb:e3:3b:d1:d2: 57:c3:9f:b6:dc:fd:9c:05:ec:35:2c:f0:18:64:a9:5a:60:53: b9:0b:21:e7:a1:60:f0:fa:59:fd:da:07:15:86:20:bd:c0:7d: d5:bf:ed:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G24xNkpAYXZfB5ebVpGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4 MzZjMWUwHhcNMjYwMTI2MDcwMTIyWhcNMjYwMTI3MDcwMTIyWjAzMTEwLwYDVQQD EyhjMjNjNjFkYTIwY2ViNmUxZTA3ZDMyOTE4ODFhMTNkMmY2NjIyMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttKrzXoDKuoTzHF8+mVIEQGM/l/Y Vs7QQ9owpMDtXR2Dc8a0aMuTQi5LN+0FbfcXl2SMo1P8kNHdvWyK/9oAElLEcbDd 1nm/QdOGjfeyROTAAufXuzjMZPybRzs9zmJ5205M4UGaHb+3dEuyczc1WScg3qlQ ioTYstnGxrSGyYwHG3xG/mqmgXSIXofdwE97smFimfBwXEPsRNIgNnTX7UuSIxjV uHhEJMM80nwNFDsG5h+oDWx5EcxTPQF6bogFZD3ni23LrAgBo3KYuLNlcJB+tDyE mDK6wNYd78QwKrIhIZnGroK2tRNA2hjKtfI5cM9FpZPvOTe1HyNLLpFwbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI8Ydogzrbh4H0ykYgaE9L2YiCyMB8GA1UdIwQY MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4 LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKDENtMH JC8AgruSk8hjJ7nl78+/W/kgWJcrSEtR4D2t37OCp3+e5dsOULF0htaytJ6uWmPI WspwQb/0Y8NTuLo0T/dKkXSH1fSz1WUIHl372+I6WJMmajyUPamaEijPhS54MU+d Zi/2OiuN1XKkt8eTrxIUv5bco0C9ujlMDNvz/MHz5pTY9o9CcvLxVJXnmegiFpN3 OnDCThHSDxyzSn099Iy3qKblsBpWVN7MFy7y5LGYX7DIQqDbn02gd61UVKgtTtyQ S2pEtevtbnJ8GWvRAvvjO9HSV8Ofttz9nAXsNSzwGGSpWmBTuQsh56Fg8PpZ/doH FYYgvcB91b/tmg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:08 2026 by rpki-client