This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json) Hash identifier: SYinbmpYP41LSLlPZNLNQkZe7fthjFp6INdT7Lo5Ozg= Subject key identifier: D6:F0:36:70:E9:AB:77:EC:85:CF:C9:E9:F1:C2:7F:8D:DC:B3:62:55 Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019BF91B926DB281816769E666D2F4B1F50C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft Manifest number: 0B02 Signing time: Mon 26 Jan 2026 07:01:32 +0000 Manifest this update: Mon 26 Jan 2026 07:01:32 +0000 Manifest next update: Tue 27 Jan 2026 07:01:32 +0000 Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=) 2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: +XtKl2rqsiuplUtL3I8TRvrZsfoARBb3lYD095JRpdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:92:6d:b2:81:81:67:69:e6:66:d2:f4:b1:f5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Jan 26 07:01:32 2026 GMT Not After : Jan 27 07:01:32 2026 GMT Subject: CN=d6f03670e9ab77ec85cfc9e9f1c27f8ddcb36255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:c8:74:42:73:7d:c4:95:68:4f:16:86:70: 81:65:99:26:29:21:72:bd:97:d1:d6:1d:b7:48:cd: 2a:cd:36:7c:3c:b2:34:d1:ec:15:34:0c:5e:cd:96: a0:4b:69:47:dd:1a:00:6b:2a:06:ed:3c:c9:fc:f3: 86:03:97:55:2b:91:1d:68:c5:1b:f3:91:48:9d:88: 65:11:ad:e1:94:3e:ae:6e:96:80:23:87:bf:9c:1c: 8f:be:65:6c:25:6a:ab:f0:be:4a:51:93:7f:2a:36: 9d:0a:85:15:8c:ae:11:6b:64:23:7d:6a:47:b1:64: 3b:ee:68:9a:77:47:58:af:b1:73:02:d3:b8:5d:cd: e1:c4:36:ab:d8:3b:81:86:d6:5a:09:a2:9b:94:f9: 16:b2:51:44:d9:bb:ee:95:b8:f0:41:03:15:c5:10: 3a:d1:5e:4b:6f:f8:3d:79:28:f3:d9:9d:90:78:f1: 64:68:7b:09:7e:88:80:ec:51:93:42:b4:e2:87:d7: 59:0e:1f:85:2c:b8:b9:b4:21:aa:ad:34:c8:75:28: eb:23:6d:70:f3:77:a1:cd:d8:ef:08:a4:13:81:e3: dc:66:14:ef:ba:ae:98:d8:10:76:5f:a3:aa:c7:29: b2:9d:b3:6a:df:a7:49:e1:52:0e:50:dd:d6:31:b8: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F0:36:70:E9:AB:77:EC:85:CF:C9:E9:F1:C2:7F:8D:DC:B3:62:55 X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:6b:ba:5c:b3:5d:d7:c8:bc:5e:d6:97:32:31:79:d6:60: 51:90:7b:fe:d9:13:3a:d8:ae:64:20:d1:62:32:3c:0f:66:2e: 01:0c:05:6a:9d:2a:95:03:3f:66:8f:d0:74:bc:60:65:7b:5d: 0c:42:8a:93:cc:2b:00:57:ec:5e:3e:aa:1b:a0:45:d2:f5:47: cf:38:93:b2:8d:4e:2d:86:78:a9:b4:0a:28:d8:d2:f2:e9:f6: ad:a1:a6:97:52:96:23:c4:84:3d:78:1e:71:22:16:73:c5:69: 2b:4c:e1:bb:bc:3a:c1:ab:db:b1:14:a6:37:65:63:6c:e9:f2: 01:24:ee:cf:ca:cb:a3:b4:fd:c1:61:4f:e4:a1:e6:80:9d:37: f7:c3:9a:5f:c0:de:6b:75:b1:d1:35:b3:73:29:c3:d5:c0:74: 0d:ce:96:4d:1e:11:3a:a0:36:34:73:37:30:c2:99:09:b9:64: 3e:fd:75:4e:27:ad:43:ec:ca:42:a8:1c:9f:60:27:24:88:b7: f4:e4:fb:ff:74:91:0e:8e:f3:5f:27:5f:e8:37:90:38:83:99: 10:d4:9f:03:9d:a2:b4:1c:da:bb:70:94:31:79:3b:ce:26:50: 4b:3c:80:ef:7d:0b:a6:e3:18:10:62:15:bd:71:9a:09:50:21: 93:59:62:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G5JtsoGBZ2nmZtL0sfUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjYwMTI2MDcwMTMyWhcNMjYwMTI3MDcwMTMyWjAzMTEwLwYDVQQD EyhkNmYwMzY3MGU5YWI3N2VjODVjZmM5ZTlmMWMyN2Y4ZGRjYjM2MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5nIdEJzfcSVaE8WhnCBZZkmKSFy vZfR1h23SM0qzTZ8PLI00ewVNAxezZagS2lH3RoAayoG7TzJ/POGA5dVK5EdaMUb 85FInYhlEa3hlD6ubpaAI4e/nByPvmVsJWqr8L5KUZN/KjadCoUVjK4Ra2QjfWpH sWQ77miad0dYr7FzAtO4Xc3hxDar2DuBhtZaCaKblPkWslFE2bvulbjwQQMVxRA6 0V5Lb/g9eSjz2Z2QePFkaHsJfoiA7FGTQrTih9dZDh+FLLi5tCGqrTTIdSjrI21w 83ehzdjvCKQTgePcZhTvuq6Y2BB2X6OqxymynbNq36dJ4VIOUN3WMbiFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbwNnDpq3fshc/J6fHCf43cs2JVMB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej9rulyz XdfIvF7WlzIxedZgUZB7/tkTOtiuZCDRYjI8D2YuAQwFap0qlQM/Zo/QdLxgZXtd DEKKk8wrAFfsXj6qG6BF0vVHzziTso1OLYZ4qbQKKNjS8un2raGml1KWI8SEPXge cSIWc8VpK0zhu7w6wavbsRSmN2VjbOnyASTuz8rLo7T9wWFP5KHmgJ0398OaX8De a3Wx0TWzcynD1cB0Dc6WTR4ROqA2NHM3MMKZCblkPv11TietQ+zKQqgcn2AnJIi3 9OT7/3SRDo7zXydf6DeQOIOZENSfA52itBzau3CUMXk7ziZQSzyA730LpuMYEGIV vXGaCVAhk1liKg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:43 2026 by rpki-client