This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json) Hash identifier: QK2XNivRYm74UHVZp73DySB3hsbJltIEBfVvadzwQP8= Subject key identifier: 60:2E:6F:A7:5E:E8:7D:F2:0C:AA:F2:76:3C:99:00:27:07:8F:63:24 Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a Certificate serial: 019C0254CD94DEC2814B4DC49B86DE0B2660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft Manifest number: 0A7F Signing time: Wed 28 Jan 2026 02:00:37 +0000 Manifest this update: Wed 28 Jan 2026 02:00:37 +0000 Manifest next update: Thu 29 Jan 2026 02:00:37 +0000 Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=) 2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=) 3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: wGy7EhtdvagGAP181ptPcZ4cN1u7KcvcAYrm1iSGyPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:02:54:cd:94:de:c2:81:4b:4d:c4:9b:86:de:0b:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a Validity Not Before: Jan 28 02:00:37 2026 GMT Not After : Jan 29 02:00:37 2026 GMT Subject: CN=602e6fa75ee87df20caaf2763c990027078f6324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:fa:d0:f9:30:b7:7e:6d:35:54:ce:f9:24: 7e:89:a5:34:fa:88:5b:50:a6:c0:f7:47:d8:ad:10: 9e:97:3f:3a:4d:db:b8:11:c1:bd:c8:e9:e5:16:9f: 95:01:18:10:a9:16:bc:9d:e4:f5:73:54:7f:0c:47: f3:e0:f5:88:d0:8f:93:f6:3d:2c:2b:b3:f8:0b:38: a9:c1:5f:8a:e9:2c:bc:ba:57:a3:62:56:f7:35:64: bd:a8:4a:4e:cb:4e:fa:29:4c:10:f0:ae:88:d8:84: bf:1d:f8:ed:33:54:38:24:f6:bb:9a:b8:b5:72:90: 93:32:e5:9a:78:30:22:d3:b9:74:2a:fb:cc:c3:70: 59:ac:99:cb:b5:6d:93:92:a7:4e:29:d3:6b:a6:8a: c3:7b:06:da:59:22:ed:28:81:f5:0f:64:f6:1c:d6: 6d:33:f3:05:97:f5:87:36:32:53:18:68:0a:47:f0: 4a:db:92:45:b5:3e:8e:b0:7a:0c:0c:2c:16:b0:f6: 1b:41:0e:2a:89:d5:b8:e3:58:1c:12:3b:4a:fd:80: 28:56:3c:14:59:99:d6:88:de:6b:ca:f7:07:73:d3: f3:35:20:17:d9:68:ec:9b:41:53:08:a3:31:0d:ee: 95:5b:f9:03:3c:4e:6f:df:77:c1:29:94:81:5f:37: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2E:6F:A7:5E:E8:7D:F2:0C:AA:F2:76:3C:99:00:27:07:8F:63:24 X509v3 Authority Key Identifier: keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:aa:a7:4b:97:8f:d5:cd:e7:e7:d2:84:46:ec:46:2c:05: 5a:06:3d:54:59:13:f5:5e:33:57:1d:e2:52:a4:17:e1:45:11: 59:11:ee:aa:c8:54:d3:8b:57:e3:02:3b:53:bd:2d:6d:a7:ba: fe:df:aa:f0:d4:46:fc:e7:f2:d8:55:73:63:c7:55:2d:23:4d: fe:d8:28:a4:b4:f9:b9:84:11:c2:71:41:b6:e8:db:12:d5:58: f8:8f:34:83:d0:0b:11:96:67:5f:20:c5:80:e0:0a:fe:9c:da: b4:e4:a0:b8:b7:6c:77:be:07:84:92:f0:95:8c:f7:fd:b8:ce: db:54:b7:01:b9:63:9f:2b:80:32:80:64:4e:7a:7c:28:fe:c3: 1d:f5:51:eb:32:a2:b8:86:6d:2d:65:f6:92:98:46:cf:75:c4: d6:49:79:75:71:1b:1b:40:25:2c:81:be:ff:ac:9e:b7:f8:17: 9e:90:8f:53:e0:05:f8:99:47:e3:6a:aa:05:53:9a:90:f7:7f: 1f:dc:65:75:e4:80:74:f7:8f:fd:1a:0b:d9:f9:c1:4f:cb:c0: de:69:d8:a8:f8:0e:7b:a7:97:01:e6:39:a2:c3:6f:3b:bb:cc: 3c:72:77:30:b8:fd:f9:6e:d7:f9:0c:c9:da:fa:ac:46:36:6e: 14:10:1d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwCVM2U3sKBS03Em4beCyZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni NmIxMGEwHhcNMjYwMTI4MDIwMDM3WhcNMjYwMTI5MDIwMDM3WjAzMTEwLwYDVQQD Eyg2MDJlNmZhNzVlZTg3ZGYyMGNhYWYyNzYzYzk5MDAyNzA3OGY2MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4/60Pkwt35tNVTO+SR+iaU0+ohb UKbA90fYrRCelz86Tdu4EcG9yOnlFp+VARgQqRa8neT1c1R/DEfz4PWI0I+T9j0s K7P4CzipwV+K6Sy8ulejYlb3NWS9qEpOy076KUwQ8K6I2IS/HfjtM1Q4JPa7mri1 cpCTMuWaeDAi07l0KvvMw3BZrJnLtW2TkqdOKdNrporDewbaWSLtKIH1D2T2HNZt M/MFl/WHNjJTGGgKR/BK25JFtT6OsHoMDCwWsPYbQQ4qidW441gcEjtK/YAoVjwU WZnWiN5ryvcHc9PzNSAX2Wjsm0FTCKMxDe6VW/kDPE5v33fBKZSBXzfRXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAub6de6H3yDKrydjyZACcHj2MkMB8GA1UdIwQY MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It YzYxNjFjZTM5NWFmLzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQluqp0uX j9XN5+fShEbsRiwFWgY9VFkT9V4zVx3iUqQX4UURWRHuqshU04tX4wI7U70tbae6 /t+q8NRG/Ofy2FVzY8dVLSNN/tgopLT5uYQRwnFBtujbEtVY+I80g9ALEZZnXyDF gOAK/pzatOSguLdsd74HhJLwlYz3/bjO21S3AbljnyuAMoBkTnp8KP7DHfVR6zKi uIZtLWX2kphGz3XE1kl5dXEbG0AlLIG+/6yet/gXnpCPU+AF+JlH42qqBVOakPd/ H9xldeSAdPeP/RoL2fnBT8vA3mnYqPgOe6eXAeY5osNvO7vMPHJ3MLj9+W7X+QzJ 2vqsRjZuFBAd4g== -----END CERTIFICATE-----Generated at Wed Jan 28 06:25:30 2026 by rpki-client