This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json) Hash identifier: kAYAipF81wKV/rkiDeVXWi8rtV91Bq2SHMKMXUNx4aI= Subject key identifier: 5E:2C:FE:3A:6E:B3:00:C7:C4:4A:D6:02:D7:9E:DC:4C:25:4F:BD:59 Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c Certificate serial: 019BAE3885B8684FA3C4A3E55F29418FD2FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft Manifest number: 17C7 Signing time: Sun 11 Jan 2026 18:01:38 +0000 Manifest this update: Sun 11 Jan 2026 18:01:38 +0000 Manifest next update: Mon 12 Jan 2026 18:01:38 +0000 Files and hashes: 1: GzWcoTtAUqi5IHJ21cRxIUTLGpc.roa (hash: AGr5HxX1J7ElW4g5zJTR1ojXT/07CVW4IMiNxRldrY4=) 2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: b1VJpYbTwMTH4pfE7F7C3J925nS9LDUNDy+ha2zPzF0=) 3: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (hash: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw=) 4: eHc6pv_nsOEvOj1b6H0UUy3Hz5g.roa (hash: 0jFiwjosF+a+C3GZzSfiQX91cGdMln4C3x+2DMdzk0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:85:b8:68:4f:a3:c4:a3:e5:5f:29:41:8f:d2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c Validity Not Before: Jan 11 18:01:38 2026 GMT Not After : Jan 12 18:01:38 2026 GMT Subject: CN=5e2cfe3a6eb300c7c44ad602d79edc4c254fbd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:ae:06:fa:5b:04:14:0f:a4:1c:da:1d:f8: 7f:9d:e4:e4:15:e6:86:13:4d:d4:df:cc:77:36:5d: ac:8f:e1:2d:30:34:72:ec:29:d9:85:89:25:88:99: 5a:e9:e1:f7:49:ce:9a:bb:d9:81:80:4f:d8:e5:37: c3:00:45:e5:57:80:ea:63:51:79:5b:8a:be:df:70: ce:43:ef:91:d8:41:e4:b8:a1:3d:30:8c:95:24:92: 9e:58:e9:09:f4:e0:8e:31:b1:11:01:e3:36:06:0c: af:85:1c:6f:e4:56:57:89:fd:6b:d0:b5:9c:9c:bc: e3:b5:5e:85:e8:b8:82:2a:32:b5:ba:9a:a6:71:2a: b1:ce:c2:01:84:cc:cd:33:06:fb:ca:f2:e6:10:3d: c4:70:5f:6d:9b:b3:8d:76:a4:70:6f:87:ff:fc:f9: d1:a6:f5:81:38:ce:ef:36:de:b5:ba:a3:7a:82:38: 6c:23:dd:8a:31:43:77:d3:30:9b:47:bc:6f:b4:d3: fe:2c:6b:d8:9d:cd:ad:0f:97:2c:29:1f:cb:c9:7c: a0:d1:ba:d0:88:2a:ab:23:af:d7:06:bb:a6:d7:43: d9:85:63:6a:90:eb:38:77:11:6e:cf:79:9b:b7:b1: 89:01:66:44:47:08:4f:96:de:19:90:19:2c:b3:13: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2C:FE:3A:6E:B3:00:C7:C4:4A:D6:02:D7:9E:DC:4C:25:4F:BD:59 X509v3 Authority Key Identifier: keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1c:33:43:aa:84:22:0e:8d:98:c7:71:84:7c:9b:10:b4:4e: 9a:13:14:ae:22:f6:32:41:9e:82:4d:61:90:a5:dd:9c:81:0d: 18:da:a7:29:36:40:a1:57:1c:ab:2a:0f:7f:3a:63:32:1b:ee: 37:ec:ec:c4:39:bd:72:50:ee:b2:0d:b9:87:b1:25:f9:75:8c: 76:65:c4:8c:8d:78:b4:68:8e:ff:c3:ae:28:b2:57:bc:4c:c0: e0:b1:ca:fb:8b:86:c3:03:42:87:0c:4e:e0:ec:f7:e9:15:de: 8a:c0:91:92:5a:c4:0c:87:e9:f4:ef:ca:0e:23:a4:77:e2:a3: 85:81:2f:b9:99:fc:bc:49:ca:87:33:07:0a:50:06:84:2e:16: b8:02:24:17:75:27:f6:38:ee:12:74:de:27:a6:e8:c6:9e:2b: d7:94:2c:c0:62:c0:15:7f:02:b0:5c:8c:c5:bb:6d:f3:5d:fd: 2e:c0:84:f1:d3:87:de:2c:e3:2d:fb:c6:7e:07:07:37:d8:fd: 1d:02:8e:2a:89:ab:3b:39:47:84:8d:7c:85:49:56:c9:b2:70: 64:22:24:6f:ae:3e:a6:40:c7:50:55:5f:74:1f:d0:90:aa:58: 91:72:89:da:6e:92:77:24:1c:d7:f0:7e:44:72:c3:97:0e:c2: 66:ee:2b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOIW4aE+jxKPlXylBj9L8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm YzA3MGMwHhcNMjYwMTExMTgwMTM4WhcNMjYwMTEyMTgwMTM4WjAzMTEwLwYDVQQD Eyg1ZTJjZmUzYTZlYjMwMGM3YzQ0YWQ2MDJkNzllZGM0YzI1NGZiZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCuBvpbBBQPpBzaHfh/neTkFeaG E03U38x3Nl2sj+EtMDRy7CnZhYkliJla6eH3Sc6au9mBgE/Y5TfDAEXlV4DqY1F5 W4q+33DOQ++R2EHkuKE9MIyVJJKeWOkJ9OCOMbERAeM2BgyvhRxv5FZXif1r0LWc nLzjtV6F6LiCKjK1upqmcSqxzsIBhMzNMwb7yvLmED3EcF9tm7ONdqRwb4f//PnR pvWBOM7vNt61uqN6gjhsI92KMUN30zCbR7xvtNP+LGvYnc2tD5csKR/LyXyg0brQ iCqrI6/XBrum10PZhWNqkOs4dxFuz3mbt7GJAWZERwhPlt4ZkBkssxME6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4s/jpuswDHxErWAtee3EwlT71ZMB8GA1UdIwQY MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct ZTU3NDQwMjYwYmUwLzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxwzQ6qE Ig6NmMdxhHybELROmhMUriL2MkGegk1hkKXdnIENGNqnKTZAoVccqyoPfzpjMhvu N+zsxDm9clDusg25h7El+XWMdmXEjI14tGiO/8OuKLJXvEzA4LHK+4uGwwNChwxO 4Oz36RXeisCRklrEDIfp9O/KDiOkd+KjhYEvuZn8vEnKhzMHClAGhC4WuAIkF3Un 9jjuEnTeJ6boxp4r15QswGLAFX8CsFyMxbtt8139LsCE8dOH3izjLfvGfgcHN9j9 HQKOKomrOzlHhI18hUlWybJwZCIkb64+pkDHUFVfdB/QkKpYkXKJ2m6SdyQc1/B+ RHLDlw7CZu4rgQ== -----END CERTIFICATE-----Generated at Sun Jan 11 21:03:46 2026 by rpki-client