This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: UR14tABdrYnOEBiFRua8ema5EZcrtze7WC6n/b1juEM= Subject key identifier: 47:38:58:DC:4E:C8:2E:F9:F2:DC:CF:F6:42:5B:D9:77:1E:3C:E7:D5 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019BDB4869FABF79F998B435C5181E64CAA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 1236 Signing time: Tue 20 Jan 2026 12:01:54 +0000 Manifest this update: Tue 20 Jan 2026 12:01:54 +0000 Manifest next update: Wed 21 Jan 2026 12:01:54 +0000 Files and hashes: 1: 1-MgSf8s32BvOegxC89sSSrZDiVY.roa (hash: HK+3BwzCEPo64so/XTaGAItaVpJABzYRQHaD3V+1H0Y=) 2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=) 3: A0WL-QTaYCt0RnzYwBlw6geDuec.roa (hash: eJbUJCQy9MPFVnVp1tldprt4bPEJXS2yCm2kEOXkmxI=) 4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: RQRBOi6NnbAbP29JmhHzkq+KT6hrn/PDHXjS9/6l33M=) 6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=) 7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=) 8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=) 9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=) 10: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=) 11: nD76qOaHhN5VJ7aXM3PiCRoUMfM.roa (hash: hE0uCKeABKXQrvQ3fZ4O08qwvKYHJvR/t+fOUw/45bk=) 12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=) 13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=) 14: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=) 15: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=) 16: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=) 17: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:48:69:fa:bf:79:f9:98:b4:35:c5:18:1e:64:ca:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 20 12:01:54 2026 GMT Not After : Jan 21 12:01:54 2026 GMT Subject: CN=473858dc4ec82ef9f2dccff6425bd9771e3ce7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:80:c3:94:58:e6:5e:8e:7f:67:7c:c8:2d: f9:ca:6b:3b:99:88:a4:5c:1c:0d:e4:08:8a:c3:b3: 61:1f:b0:ee:d4:0b:89:6c:f0:25:bb:c3:82:3d:81: 87:ad:b0:3b:e2:ad:8e:20:c9:b4:42:52:3d:af:35: 0b:9b:a1:0c:62:e9:cf:9a:51:f4:06:47:96:bc:2d: 34:a1:8c:9d:c3:48:28:46:8f:38:0c:a8:b3:51:3f: 4c:77:9d:0e:5b:2a:ca:41:2a:0b:19:b3:98:39:25: e5:28:e3:b8:ef:69:3a:ae:1d:68:bb:3a:86:60:5f: 9f:e6:68:69:e8:0d:3d:bb:85:00:6c:b4:4c:f4:0b: 25:9e:29:9f:9f:07:c1:67:25:ae:7f:3b:7a:ef:41: 99:b7:91:a4:39:7e:91:47:09:ba:56:de:7f:b9:55: bc:42:67:9a:cb:5e:46:f2:f1:33:49:e9:0b:90:58: 8d:46:f8:6b:37:b3:7a:52:11:d6:72:8a:05:70:51: 38:65:d0:8e:4f:30:5c:a5:0d:f4:4b:03:82:87:d4: cc:61:e7:f3:47:b9:6e:f0:a6:a3:48:d9:95:b6:ab: ed:26:f1:d3:54:32:93:cb:0f:a2:7f:04:2d:09:b5: 34:ec:e6:d9:9d:6b:b3:c5:b6:c5:7f:d3:a5:35:0b: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:38:58:DC:4E:C8:2E:F9:F2:DC:CF:F6:42:5B:D9:77:1E:3C:E7:D5 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:68:fc:11:b0:89:17:a8:eb:f3:ee:64:2a:20:8b:3e:32:eb: e8:57:51:e7:ed:80:d5:81:8f:a5:bc:e4:c3:e7:9c:00:25:e3: cc:59:4f:7e:30:f9:85:0d:9b:72:7a:bd:3a:03:ec:ad:9a:64: a9:8b:bd:06:2f:02:66:df:31:90:56:3f:b4:be:26:7d:30:f2: cd:70:da:84:45:aa:72:fd:76:e5:91:8c:e3:9a:ce:eb:29:b0: 2c:2e:b7:b6:4b:23:63:4b:fd:ba:5b:6f:b8:c2:12:6e:c0:90: ee:33:25:91:61:e8:89:26:d0:4b:bb:5a:b9:a4:ac:ee:fe:f6: 47:99:53:4b:ec:14:e7:e4:10:12:9c:0f:fd:e3:d8:32:ac:31: 07:17:c2:b1:60:e3:ad:d4:44:e6:66:74:58:ae:c2:75:64:09: 1b:73:27:86:c2:2d:be:54:a5:c2:a8:ef:ee:84:28:6f:cc:cc: 20:ee:9e:4e:d6:2c:83:8d:d7:20:6a:35:5c:dd:66:4d:07:b1: 62:1b:c5:23:06:6e:05:b0:5e:b5:3a:3b:98:c3:44:06:b5:09: 5a:51:2a:95:89:ba:d3:ed:ef:4a:1b:c3:ac:10:9b:16:86:01: 3e:9e:eb:9a:0a:32:a5:99:bb:23:19:57:15:5d:8e:ec:e4:40: 0f:06:a0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvbSGn6v3n5mLQ1xRgeZMqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTIwMTIwMTU0WhcNMjYwMTIxMTIwMTU0WjAzMTEwLwYDVQQD Eyg0NzM4NThkYzRlYzgyZWY5ZjJkY2NmZjY0MjViZDk3NzFlM2NlN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr+Aw5RY5l6Of2d8yC35yms7mYik XBwN5AiKw7NhH7Du1AuJbPAlu8OCPYGHrbA74q2OIMm0QlI9rzULm6EMYunPmlH0 BkeWvC00oYydw0goRo84DKizUT9Md50OWyrKQSoLGbOYOSXlKOO472k6rh1ouzqG YF+f5mhp6A09u4UAbLRM9AslnimfnwfBZyWufzt670GZt5GkOX6RRwm6Vt5/uVW8 Qmeay15G8vEzSekLkFiNRvhrN7N6UhHWcooFcFE4ZdCOTzBcpQ30SwOCh9TMYefz R7lu8KajSNmVtqvtJvHTVDKTyw+ifwQtCbU07ObZnWuzxbbFf9OlNQuIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc4WNxOyC758tzP9kJb2XcePOfVMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWj8EbCJ F6jr8+5kKiCLPjLr6FdR5+2A1YGPpbzkw+ecACXjzFlPfjD5hQ2bcnq9OgPsrZpk qYu9Bi8CZt8xkFY/tL4mfTDyzXDahEWqcv125ZGM45rO6ymwLC63tksjY0v9ultv uMISbsCQ7jMlkWHoiSbQS7tauaSs7v72R5lTS+wU5+QQEpwP/ePYMqwxBxfCsWDj rdRE5mZ0WK7CdWQJG3MnhsItvlSlwqjv7oQob8zMIO6eTtYsg43XIGo1XN1mTQex YhvFIwZuBbBetTo7mMNEBrUJWlEqlYm60+3vShvDrBCbFoYBPp7rmgoypZm7IxlX FV2O7ORADwagIg== -----END CERTIFICATE-----Generated at Tue Jan 20 15:55:26 2026 by rpki-client