This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json) Hash identifier: 0frZuYzOPb5cQNFC6qihPrrXlR0YVC4TWQHwk3Fd7oY= Subject key identifier: A3:93:C3:2A:8A:37:D8:3A:F8:8C:E0:A6:EE:A6:4C:F6:24:96:75:0F Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019BFC8A8607CA3FDAAEEBD8D517D848FC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft Manifest number: 13E8 Signing time: Mon 26 Jan 2026 23:01:35 +0000 Manifest this update: Mon 26 Jan 2026 23:01:35 +0000 Manifest next update: Tue 27 Jan 2026 23:01:35 +0000 Files and hashes: 1: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: 6ohK6ATc8+/Yqmf1AfX3S4izEYo2Xk0puCK/7Ab9aoE=) 2: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (hash: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM=) 3: TJCGzUQHxg4bwyTZRd9MjPgDFco.roa (hash: mDKYo4+PY4/xDJecNKQRG7i12NJwnq+4UMvwsAIjYeA=) 4: etcUvrpfPKP_RFS8q4I2oRGtIpU.roa (hash: QazyHRaqwRmfbynAWmgSgFTPgoxpLo3PBLZtnvBUmtQ=) 5: olVKrDWOXV-cZqa6YCvyS1EAmtw.roa (hash: DtRokaXbwlYUqcYONE6Ad45+vRoun3fYTMXSmpbmsOQ=) 6: pYGVbv4voC-r48uG-RyVLygkJXo.roa (hash: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:86:07:ca:3f:da:ae:eb:d8:d5:17:d8:48:fc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Jan 26 23:01:35 2026 GMT Not After : Jan 27 23:01:35 2026 GMT Subject: CN=a393c32a8a37d83af88ce0a6eea64cf62496750f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:76:fd:8e:37:2b:f8:34:4a:58:1d:89:7b: 5c:53:f2:95:8f:fb:20:55:68:90:91:1d:2a:c6:ea: 4e:b8:6e:b6:29:26:83:1b:5c:b2:78:12:4a:5b:55: 3e:c1:60:9e:66:bf:f8:0e:46:6a:59:71:f9:17:7b: 09:f1:cc:7d:56:aa:77:c9:9a:56:49:a6:ad:42:67: e0:9d:12:ca:e3:74:92:76:ed:48:fe:70:81:28:47: d2:ce:b1:bd:73:c8:0b:86:8f:9e:77:b9:08:d8:b7: bf:3b:2b:52:43:51:8d:75:78:10:54:8f:0d:7f:fb: d7:37:c1:ca:ed:09:65:b0:a3:40:54:13:cb:7b:47: ab:d6:1e:86:07:91:99:33:48:88:12:7b:2b:ac:fb: 7d:e4:58:2e:c5:5b:8e:48:6e:25:0a:54:40:a5:47: a4:a2:69:43:d7:fc:6d:ae:b7:9f:38:e4:1a:18:b4: b6:9f:02:77:0a:73:03:67:c4:62:80:e6:f8:69:f9: 28:36:96:bb:06:3e:46:82:bf:fa:39:9f:c4:dd:7f: 72:d0:51:7b:e2:dd:11:13:e8:0a:89:0d:24:f8:37: 0f:ce:75:03:8f:58:4e:27:55:76:0d:2b:b2:14:fa: 2c:d8:e3:03:30:4c:c3:80:78:66:51:f6:39:f6:96: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:93:C3:2A:8A:37:D8:3A:F8:8C:E0:A6:EE:A6:4C:F6:24:96:75:0F X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7e:52:94:86:15:58:a2:82:f9:7e:39:95:7c:9b:fe:5f:b8: 58:f0:5d:d7:d8:aa:91:4d:ee:d9:80:69:91:e8:ab:b0:60:48: fd:c3:4a:14:0f:d9:54:5b:b6:45:f7:9e:41:7d:e7:3f:50:a3: 46:82:d9:b9:3b:68:20:65:bb:fd:c2:2e:57:77:49:1a:e4:46: fd:90:46:59:a2:b9:68:c7:dd:88:de:8c:26:86:d1:15:da:15: 9d:08:0a:ea:e3:f6:bb:e5:9b:6b:ef:35:93:02:6e:0f:27:dd: f3:e2:f9:85:69:bd:e9:49:6d:0b:ff:f2:a5:48:56:e0:cb:ab: c3:bd:29:fe:ba:65:94:44:db:a5:3f:f9:47:1b:2f:71:e8:b0: 14:af:62:48:d4:db:c2:d6:75:ca:3a:8e:dc:92:2f:9b:18:d5: 05:2a:5c:14:5b:8e:f5:5c:cc:94:04:49:57:16:6e:0a:0e:39: cd:4e:90:38:b5:e2:a3:4b:b3:90:06:fc:53:99:0d:bf:7f:80: 85:54:9e:ad:88:54:02:79:14:70:77:5b:73:d0:78:74:af:09: ff:2c:90:90:57:84:3e:7a:d9:ca:f5:10:14:68:6b:ae:5a:7b: 6d:50:64:1e:12:46:87:03:45:74:b6:43:4b:cc:fd:5e:cc:79: d2:46:06:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ioYHyj/aruvY1RfYSPwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjYwMTI2MjMwMTM1WhcNMjYwMTI3MjMwMTM1WjAzMTEwLwYDVQQD EyhhMzkzYzMyYThhMzdkODNhZjg4Y2UwYTZlZWE2NGNmNjI0OTY3NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuux2/Y43K/g0SlgdiXtcU/KVj/sg VWiQkR0qxupOuG62KSaDG1yyeBJKW1U+wWCeZr/4DkZqWXH5F3sJ8cx9Vqp3yZpW SaatQmfgnRLK43SSdu1I/nCBKEfSzrG9c8gLho+ed7kI2Le/OytSQ1GNdXgQVI8N f/vXN8HK7QllsKNAVBPLe0er1h6GB5GZM0iIEnsrrPt95FguxVuOSG4lClRApUek omlD1/xtrrefOOQaGLS2nwJ3CnMDZ8RigOb4afkoNpa7Bj5Ggr/6OZ/E3X9y0FF7 4t0RE+gKiQ0k+DcPznUDj1hOJ1V2DSuyFPos2OMDMEzDgHhmUfY59pZEUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOTwyqKN9g6+Izgpu6mTPYklnUPMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ35SlIYV WKKC+X45lXyb/l+4WPBd19iqkU3u2YBpkeirsGBI/cNKFA/ZVFu2RfeeQX3nP1Cj RoLZuTtoIGW7/cIuV3dJGuRG/ZBGWaK5aMfdiN6MJobRFdoVnQgK6uP2u+Wba+81 kwJuDyfd8+L5hWm96UltC//ypUhW4Murw70p/rpllETbpT/5RxsvceiwFK9iSNTb wtZ1yjqO3JIvmxjVBSpcFFuO9VzMlARJVxZuCg45zU6QOLXio0uzkAb8U5kNv3+A hVSerYhUAnkUcHdbc9B4dK8J/yyQkFeEPnrZyvUQFGhrrlp7bVBkHhJGhwNFdLZD S8z9Xsx50kYGVg== -----END CERTIFICATE-----Generated at Tue Jan 27 01:39:25 2026 by rpki-client