This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json) Hash identifier: g3JgChRcyuzbX+KfJ875UyfYjwRPTijlwfMOQl5h2g8= Subject key identifier: 1D:F1:53:39:2D:FB:2A:C8:AF:69:56:11:7F:DA:5E:08:85:AD:3A:BA Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Certificate serial: 019C20CE7721D05128731BDB21A09EE2E75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft Manifest number: 1668 Signing time: Tue 03 Feb 2026 00:02:07 +0000 Manifest this update: Tue 03 Feb 2026 00:02:07 +0000 Manifest next update: Wed 04 Feb 2026 00:02:07 +0000 Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=) 2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: n/mANjyN0U2dTfNu2ji6a/6ijIanxXyzq49Fr9vGG0s=) 3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:ce:77:21:d0:51:28:73:1b:db:21:a0:9e:e2:e7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Validity Not Before: Feb 3 00:02:07 2026 GMT Not After : Feb 4 00:02:07 2026 GMT Subject: CN=1df153392dfb2ac8af6956117fda5e0885ad3aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:19:c5:5a:d4:5b:f6:b7:d0:d3:c0:d9:d6: e1:df:c7:e4:09:f6:b5:43:34:1c:c1:43:27:e8:c0: 4c:6d:9a:f7:9a:e3:9e:4d:16:78:f5:ec:a1:d9:63: e0:c5:26:5a:12:05:d4:86:5e:7a:93:76:bf:97:d8: 39:1d:04:35:7d:c6:b1:99:01:90:c6:9f:f3:7a:32: 50:41:fd:59:48:fd:f2:92:7e:af:f4:31:d1:e1:ff: ab:3a:e3:be:9b:47:28:d5:c7:ab:40:3a:08:77:3a: e9:34:3d:09:2a:9c:fb:59:ce:86:78:8d:73:33:39: 30:3c:a9:7d:6d:2c:9f:9e:73:8e:50:0f:cd:56:23: f6:8c:53:73:ce:71:2a:07:17:0f:94:81:f6:b1:bd: 0b:24:7e:67:c5:47:ff:f3:f5:bc:94:cd:1f:9a:78: 25:c6:eb:57:bf:1b:6a:ac:2c:16:4d:a9:be:eb:60: be:4f:7c:b6:0e:b2:dd:26:4f:3c:57:92:16:8e:07: cc:80:47:b8:3e:59:fa:4d:f2:82:32:00:39:a5:66: ac:4c:2a:27:25:e8:0d:bd:c4:ad:de:0b:91:8d:d2: 62:27:5b:6a:04:89:92:b5:0e:c8:df:e3:a2:93:b9: 9a:47:dc:b5:12:9d:7d:a4:be:ff:39:11:29:76:b6: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:53:39:2D:FB:2A:C8:AF:69:56:11:7F:DA:5E:08:85:AD:3A:BA X509v3 Authority Key Identifier: keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:36:93:d1:ce:c5:99:dc:aa:ad:4c:17:57:72:b8:48:3d: 27:77:9e:75:ee:d9:3f:b8:77:20:58:d1:43:98:3b:22:46:15: 89:28:53:14:64:41:0b:e1:4d:ad:71:c4:33:11:51:fa:d7:f3: 6c:1c:c1:2a:fa:a8:1c:12:34:be:3b:05:b6:80:27:54:51:a9: 1a:04:3d:dd:81:a1:42:9d:fb:df:4d:4f:70:fb:1a:64:32:9b: 89:95:62:10:3c:0b:03:f1:2e:32:4c:67:c1:8a:8e:9e:25:7e: 58:24:fc:16:b0:2e:a5:09:c0:e1:92:29:51:d2:9c:0b:7c:89: 52:6e:c5:59:38:9e:36:60:f0:58:66:ad:f4:02:be:a8:47:fc: 86:61:66:db:f7:d0:eb:82:0e:e4:47:58:7d:2b:5a:68:6b:09: f7:2b:83:e9:03:fd:d4:74:fc:67:55:d7:cc:cc:5a:15:58:fe: c0:23:20:e9:fc:a4:77:6f:fa:59:49:48:e6:25:ab:75:93:eb: 1c:17:c8:3b:59:22:28:17:96:d9:02:5f:af:11:36:44:9a:f5: e6:4e:e5:b1:f8:b7:f4:74:9a:ec:4e:a8:47:f6:d6:89:e4:b5: b2:69:87:b5:10:cc:3f:4a:91:91:96:09:8c:7e:be:93:19:59: 91:91:21:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgznch0FEocxvbIaCe4uddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh YzM0NWIwHhcNMjYwMjAzMDAwMjA3WhcNMjYwMjA0MDAwMjA3WjAzMTEwLwYDVQQD EygxZGYxNTMzOTJkZmIyYWM4YWY2OTU2MTE3ZmRhNWUwODg1YWQzYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ooZxVrUW/a30NPA2dbh38fkCfa1 QzQcwUMn6MBMbZr3muOeTRZ49eyh2WPgxSZaEgXUhl56k3a/l9g5HQQ1fcaxmQGQ xp/zejJQQf1ZSP3ykn6v9DHR4f+rOuO+m0co1cerQDoIdzrpND0JKpz7Wc6GeI1z MzkwPKl9bSyfnnOOUA/NViP2jFNzznEqBxcPlIH2sb0LJH5nxUf/8/W8lM0fmngl xutXvxtqrCwWTam+62C+T3y2DrLdJk88V5IWjgfMgEe4Pln6TfKCMgA5pWasTCon JegNvcSt3guRjdJiJ1tqBImStQ7I3+Oik7maR9y1Ep19pL7/OREpdrZ8GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3xUzkt+yrIr2lWEX/aXgiFrTq6MB8GA1UdIwQY MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4 LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDY2k9HO xZncqq1MF1dyuEg9J3eede7ZP7h3IFjRQ5g7IkYViShTFGRBC+FNrXHEMxFR+tfz bBzBKvqoHBI0vjsFtoAnVFGpGgQ93YGhQp37301PcPsaZDKbiZViEDwLA/EuMkxn wYqOniV+WCT8FrAupQnA4ZIpUdKcC3yJUm7FWTieNmDwWGat9AK+qEf8hmFm2/fQ 64IO5EdYfStaaGsJ9yuD6QP91HT8Z1XXzMxaFVj+wCMg6fykd2/6WUlI5iWrdZPr HBfIO1kiKBeW2QJfrxE2RJr15k7lsfi39HSa7E6oR/bWieS1smmHtRDMP0qRkZYJ jH6+kxlZkZEhaw== -----END CERTIFICATE-----Generated at Tue Feb 3 08:12:37 2026 by rpki-client