This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json) Hash identifier: IMhFBIVK/YM8b4uoB1mYh2qd9DX6o9WguW6e6wKCgBY= Subject key identifier: 74:B3:AB:2A:80:FE:6F:B4:BD:7F:24:F0:B6:58:C4:F0:06:71:79:4C Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 019C2517AC7117A4B5E783882E48711EE810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft Manifest number: 06CC Signing time: Tue 03 Feb 2026 20:00:34 +0000 Manifest this update: Tue 03 Feb 2026 20:00:34 +0000 Manifest next update: Wed 04 Feb 2026 20:00:34 +0000 Files and hashes: 1: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (hash: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0=) 2: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: Fk6yUSVWeOauuJ5JCBFFjR91/LmH249CBzNOwzbuF7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:17:ac:71:17:a4:b5:e7:83:88:2e:48:71:1e:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Feb 3 20:00:34 2026 GMT Not After : Feb 4 20:00:34 2026 GMT Subject: CN=74b3ab2a80fe6fb4bd7f24f0b658c4f00671794c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:36:d2:7d:45:18:fe:2a:ea:d9:e5:93:72: 77:5d:30:77:99:bf:4c:49:86:55:e2:ca:8f:35:70: c7:f2:11:ad:57:0a:83:7f:02:7b:19:62:6d:36:54: a5:44:9e:89:ff:09:a9:78:d8:eb:fc:98:2f:eb:e9: c9:a4:76:56:94:e6:4b:a9:76:f8:17:08:2d:5f:c3: 08:29:bb:33:5b:6d:17:6b:8b:61:a6:5f:f9:81:11: dc:58:fc:75:15:87:7d:50:9b:4b:41:77:3a:81:f9: 47:aa:9c:1d:b1:3a:66:f1:9c:26:53:50:7b:c7:f1: a5:3d:bf:46:5f:91:3c:13:a1:f3:06:bd:a6:92:84: 1c:b4:95:0a:72:97:66:a1:f7:d6:a6:ae:67:68:a3: 38:8b:ed:85:35:ec:a2:40:9c:b1:90:ae:ca:ab:bd: a5:83:46:7c:f6:4a:b6:4b:07:10:3e:93:6c:86:63: 2f:d6:34:59:0b:95:49:ed:c3:c0:41:c6:fe:db:92: 64:b5:74:87:c4:3a:5a:14:57:1d:8a:f0:47:ee:50: 25:12:88:f3:23:aa:e1:62:2b:c4:0f:6c:aa:b8:66: 99:3a:e0:c2:b4:78:05:b2:d2:ca:ea:72:91:1a:16: 51:9c:fd:ec:3b:3b:2f:f0:ff:13:75:66:fc:80:a4: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:AB:2A:80:FE:6F:B4:BD:7F:24:F0:B6:58:C4:F0:06:71:79:4C X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:32:8b:cd:10:93:25:12:3a:b2:ca:f8:07:a0:75:a6:1e:54: 9b:72:d9:d5:a3:ba:28:35:65:57:b6:3d:24:00:83:88:d3:30: 80:b3:2b:be:23:23:aa:d1:38:93:67:c1:0d:18:27:c3:69:f7: 35:e7:f6:0c:23:60:9c:92:9a:fb:3f:8d:47:45:5c:ce:aa:4b: 1a:f8:d3:0d:66:1f:0e:98:f5:7c:03:d0:32:9a:17:92:c8:54: 6a:08:a6:05:f8:18:c2:ee:48:85:b3:17:5d:df:a9:38:d0:33: a2:5e:35:bb:5d:bc:c7:89:20:3f:1f:79:5b:76:50:75:7e:66: 1b:1e:32:3c:a6:64:ad:91:fc:8d:c9:a4:9a:23:e9:21:2f:61: 8e:0d:0d:44:36:ef:6c:7b:a9:25:7a:9e:93:b9:62:34:13:eb: 41:d3:ec:cd:0b:cc:6c:32:d3:56:8e:71:a0:53:d6:f3:10:1c: bf:be:59:ab:fb:ec:16:79:cf:d3:c6:f1:ac:de:4c:54:21:a9: 1d:e2:5d:aa:25:cc:c3:3f:f4:fa:53:47:1b:98:e3:49:05:a3: 50:a7:97:a3:0b:06:7a:84:74:13:02:ef:55:72:83:6e:7d:e2: d5:94:fa:33:e8:70:d6:c4:9b:37:b6:8e:14:47:a8:08:42:a0: 50:86:63:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlF6xxF6S154OILkhxHugQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjYwMjAzMjAwMDM0WhcNMjYwMjA0MjAwMDM0WjAzMTEwLwYDVQQD Eyg3NGIzYWIyYTgwZmU2ZmI0YmQ3ZjI0ZjBiNjU4YzRmMDA2NzE3OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYg20n1FGP4q6tnlk3J3XTB3mb9M SYZV4sqPNXDH8hGtVwqDfwJ7GWJtNlSlRJ6J/wmpeNjr/Jgv6+nJpHZWlOZLqXb4 FwgtX8MIKbszW20Xa4thpl/5gRHcWPx1FYd9UJtLQXc6gflHqpwdsTpm8ZwmU1B7 x/GlPb9GX5E8E6HzBr2mkoQctJUKcpdmoffWpq5naKM4i+2FNeyiQJyxkK7Kq72l g0Z89kq2SwcQPpNshmMv1jRZC5VJ7cPAQcb+25JktXSHxDpaFFcdivBH7lAlEojz I6rhYivED2yquGaZOuDCtHgFstLK6nKRGhZRnP3sOzsv8P8TdWb8gKRUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSzqyqA/m+0vX8k8LZYxPAGcXlMMB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjKLzRCT JRI6ssr4B6B1ph5Um3LZ1aO6KDVlV7Y9JACDiNMwgLMrviMjqtE4k2fBDRgnw2n3 Nef2DCNgnJKa+z+NR0VczqpLGvjTDWYfDpj1fAPQMpoXkshUagimBfgYwu5IhbMX Xd+pONAzol41u128x4kgPx95W3ZQdX5mGx4yPKZkrZH8jcmkmiPpIS9hjg0NRDbv bHupJXqek7liNBPrQdPszQvMbDLTVo5xoFPW8xAcv75Zq/vsFnnP08bxrN5MVCGp HeJdqiXMwz/0+lNHG5jjSQWjUKeXowsGeoR0EwLvVXKDbn3i1ZT6M+hw1sSbN7aO FEeoCEKgUIZjLw== -----END CERTIFICATE-----Generated at Tue Feb 3 22:53:36 2026 by rpki-client