This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json) Hash identifier: +2kZ4CNZMss+cNF65QJNny0DM031gRc48ULcq8y0XhU= Subject key identifier: D5:BF:DD:29:85:3B:54:4F:FA:2C:CF:BB:6A:8F:C8:17:45:8F:15:8D Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942 Certificate serial: 019BFB7711EED10E95D0DCEBFFBC39DB36C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft Manifest number: 1346 Signing time: Mon 26 Jan 2026 18:00:43 +0000 Manifest this update: Mon 26 Jan 2026 18:00:43 +0000 Manifest next update: Tue 27 Jan 2026 18:00:43 +0000 Files and hashes: 1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=) 2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: qdNAzAodeSB6fs9hjqZFY4fxBtc0xy842HibPxkKbuw=) 3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:11:ee:d1:0e:95:d0:dc:eb:ff:bc:39:db:36:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942 Validity Not Before: Jan 26 18:00:43 2026 GMT Not After : Jan 27 18:00:43 2026 GMT Subject: CN=d5bfdd29853b544ffa2ccfbb6a8fc817458f158d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:03:7c:b5:85:c8:f4:54:8d:61:12:98:3f: 91:20:a1:7c:ab:a2:70:c6:80:66:fe:1c:90:7d:fc: 1a:11:73:54:1b:f5:5b:ec:55:71:a4:c7:a4:c1:30: e4:26:22:37:36:04:09:b9:2f:c1:eb:8c:b2:a7:ed: dc:d2:6d:d4:e1:bf:c6:7d:f0:9e:59:43:11:a7:01: 1b:e2:0e:61:95:d3:bc:c0:26:68:cd:f8:8c:42:5b: 38:4d:55:da:d8:be:7d:b8:66:5a:3a:2e:fe:c5:9a: 37:ec:8f:76:f0:43:0c:13:3d:1c:9e:f5:b2:6f:ec: 2c:61:49:1b:0e:1f:00:84:77:6a:9b:c9:f8:1a:f2: 35:82:ef:2e:68:61:ce:c4:76:35:ef:62:18:0d:45: 93:5c:9f:0c:e1:2f:2f:50:09:1e:0f:a9:a9:bc:6f: 2b:52:02:41:cd:7f:34:da:81:81:c3:01:e7:78:f2: f6:be:c9:db:ff:bd:3d:9e:05:dd:da:b2:c5:7e:94: 63:05:a6:41:bb:14:83:7e:d8:a4:c8:79:59:78:c6: a7:40:aa:23:6f:59:79:b5:ba:98:1d:6f:28:fe:06: 4a:43:61:fb:ae:cf:60:3c:77:ee:4a:c0:52:22:61: 97:c1:f7:a8:4b:94:65:6b:44:9e:76:55:a6:ff:26: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:DD:29:85:3B:54:4F:FA:2C:CF:BB:6A:8F:C8:17:45:8F:15:8D X509v3 Authority Key Identifier: keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ab:48:91:7e:a5:aa:71:27:d2:c8:87:b6:6f:ed:bb:4f:3f: 68:d5:99:3c:9d:83:83:34:76:69:02:4b:20:eb:91:43:73:d6: 70:f8:14:67:31:a6:4b:5e:49:05:af:00:2a:ac:c6:9a:d7:ba: 1a:fe:a2:3e:46:fa:e6:77:64:e6:3f:d4:6b:4a:9f:f2:df:00: 66:4b:6f:6e:93:34:e4:f5:a9:af:89:6c:16:66:d4:cb:5f:0a: b1:0e:cb:0f:e5:97:a5:e7:b6:1d:45:b0:84:b4:68:b9:38:59: 4d:c4:4f:fd:c3:14:c7:7a:1d:cf:29:9c:c4:a7:ea:5f:9a:6f: 82:9f:48:f3:4d:55:be:d3:c8:c7:5d:d6:f5:d5:4c:23:ac:10: 30:19:31:75:10:86:46:e9:2b:2b:23:c1:41:53:9e:ce:78:98: 0d:f5:1c:f9:77:84:d2:e3:2d:b1:af:ca:00:9a:80:6a:b6:43: 19:66:37:d1:11:a7:55:40:d0:44:13:db:d3:5f:70:0a:5b:2f: 74:1f:e3:ca:88:a1:00:c5:bd:cc:61:d0:65:52:f7:21:b5:a5: d5:d8:7f:db:8d:c4:3d:e3:7d:c1:4b:dc:97:32:9e:ac:0d:a9: 3d:8e:9d:33:35:8d:a3:1b:97:44:12:31:01:e7:2a:34:75:65: b2:e4:da:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dxHu0Q6V0Nzr/7w52zbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3 NDY5NDIwHhcNMjYwMTI2MTgwMDQzWhcNMjYwMTI3MTgwMDQzWjAzMTEwLwYDVQQD EyhkNWJmZGQyOTg1M2I1NDRmZmEyY2NmYmI2YThmYzgxNzQ1OGYxNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3sDfLWFyPRUjWESmD+RIKF8q6Jw xoBm/hyQffwaEXNUG/Vb7FVxpMekwTDkJiI3NgQJuS/B64yyp+3c0m3U4b/GffCe WUMRpwEb4g5hldO8wCZozfiMQls4TVXa2L59uGZaOi7+xZo37I928EMMEz0cnvWy b+wsYUkbDh8AhHdqm8n4GvI1gu8uaGHOxHY172IYDUWTXJ8M4S8vUAkeD6mpvG8r UgJBzX802oGBwwHnePL2vsnb/709ngXd2rLFfpRjBaZBuxSDftikyHlZeManQKoj b1l5tbqYHW8o/gZKQ2H7rs9gPHfuSsBSImGXwfeoS5Rla0SedlWm/ybVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW/3SmFO1RP+izPu2qPyBdFjxWNMB8GA1UdIwQY MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6tIkX6l qnEn0siHtm/tu08/aNWZPJ2DgzR2aQJLIOuRQ3PWcPgUZzGmS15JBa8AKqzGmte6 Gv6iPkb65ndk5j/Ua0qf8t8AZktvbpM05PWpr4lsFmbUy18KsQ7LD+WXpee2HUWw hLRouThZTcRP/cMUx3odzymcxKfqX5pvgp9I801VvtPIx13W9dVMI6wQMBkxdRCG RukrKyPBQVOezniYDfUc+XeE0uMtsa/KAJqAarZDGWY30RGnVUDQRBPb019wClsv dB/jyoihAMW9zGHQZVL3IbWl1dh/243EPeN9wUvclzKerA2pPY6dMzWNoxuXRBIx AecqNHVlsuTa5A== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:16 2026 by rpki-client