This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: pDU80QGGVo6F2VLxYqmxk5NIG/8y3EKkOBMIoEAC74k= Subject key identifier: 03:10:1C:D1:20:66:73:A1:25:6D:16:40:7D:12:68:81:25:D9:A2:AA Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019BFA2D965CC8A176CAFB19A106E1CC5250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0FB0 Signing time: Mon 26 Jan 2026 12:00:50 +0000 Manifest this update: Mon 26 Jan 2026 12:00:50 +0000 Manifest next update: Tue 27 Jan 2026 12:00:50 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: wYf2ExIsjHubup2XRTb7vBZYu7tWVMIagYlDkEiIDiw=) 2: ON6EBf7h3jg96SfAW19mTfuOUo8.roa (hash: 2IenMofuWYmy5x036TGoX+iZoQ/mV5068cUX7eikQWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:96:5c:c8:a1:76:ca:fb:19:a1:06:e1:cc:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Jan 26 12:00:50 2026 GMT Not After : Jan 27 12:00:50 2026 GMT Subject: CN=03101cd1206673a1256d16407d12688125d9a2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:3b:9a:6e:d9:d5:7e:6c:db:27:c4:b4:f8: c0:b3:a1:83:fa:e4:7f:de:6a:bd:6c:31:a9:33:3b: bd:34:bb:06:de:de:78:8c:fa:dc:0e:07:94:b1:63: f4:a2:64:09:5a:37:0c:b0:2b:0d:d1:96:17:4e:2a: 52:17:cf:b2:ad:34:3c:3e:93:a3:27:2b:1d:0b:c9: 06:77:48:7e:f0:f2:8b:01:14:f4:c4:91:7e:f8:7a: 46:a7:25:25:55:8d:35:d6:ee:ba:f5:02:85:be:ae: e6:00:7b:e6:51:59:5d:b6:c4:dc:2d:87:2c:c9:ee: 61:8d:12:a3:c5:79:a9:26:92:6a:6e:28:3b:17:fc: 78:52:73:4f:45:1b:b4:f8:ce:3a:02:1e:ca:20:a4: 30:c4:55:2a:63:5a:86:3c:d6:7f:69:b7:36:43:07: 97:c3:06:d1:6a:69:73:44:b3:1a:ab:02:02:37:b9: bd:0d:ac:11:c8:f5:fd:06:af:95:de:27:1f:07:50: 7a:6e:f5:fb:f2:48:52:06:1d:82:e1:12:05:83:5d: ed:31:db:e8:7f:cf:bd:ce:74:94:00:f3:9c:f6:6f: 03:97:36:f7:7d:bc:6a:fd:af:f9:04:24:56:ba:a6: af:d3:e9:bf:48:57:8c:2a:13:be:83:21:4c:d5:99: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:10:1C:D1:20:66:73:A1:25:6D:16:40:7D:12:68:81:25:D9:A2:AA X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5a:b2:11:4e:61:15:a6:a6:3f:5f:a4:62:4f:9c:a0:e0:f1: e4:31:d0:2f:66:97:c0:47:4a:16:7b:3d:41:19:50:5e:cc:1e: 14:6a:d1:a2:5c:4a:4a:13:6e:c6:2d:e8:f7:03:42:f1:1b:d5: f4:d8:72:a3:f7:9d:1e:e5:8a:e3:8e:df:70:eb:eb:05:ae:9e: e6:07:f8:fa:5c:41:0e:f4:8c:78:7f:77:4f:bd:b8:42:ad:19: 74:cc:22:90:5f:e5:1e:8f:ba:6e:60:29:30:5f:c8:ed:fb:7f: bd:95:71:de:02:0c:54:f5:53:68:a4:b9:c7:a8:3f:1c:9f:ab: 98:6f:d5:51:d4:cf:4d:59:4a:45:9d:17:e6:57:9e:3d:fc:73: f2:71:c0:78:12:dd:7d:fa:3e:61:ac:2d:cd:e7:1f:08:59:54: 2b:85:63:12:61:06:9b:4e:40:a5:e3:fd:aa:12:ab:07:82:19: 6b:72:8f:a1:1a:4a:3f:0c:ce:7a:2f:a6:a5:68:1a:85:74:6b: 68:88:b7:5d:07:74:5f:42:6d:b8:c1:f1:50:54:8f:2d:f1:c3: 2d:41:8a:d5:d1:15:e1:36:9e:34:a4:dc:69:82:0f:df:b7:40: a0:b2:16:0e:de:8a:31:8e:65:27:b6:a7:29:8e:3f:90:ae:28: 36:5b:97:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZZcyKF2yvsZoQbhzFJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjYwMTI2MTIwMDUwWhcNMjYwMTI3MTIwMDUwWjAzMTEwLwYDVQQD EygwMzEwMWNkMTIwNjY3M2ExMjU2ZDE2NDA3ZDEyNjg4MTI1ZDlhMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuak7mm7Z1X5s2yfEtPjAs6GD+uR/ 3mq9bDGpMzu9NLsG3t54jPrcDgeUsWP0omQJWjcMsCsN0ZYXTipSF8+yrTQ8PpOj JysdC8kGd0h+8PKLART0xJF++HpGpyUlVY011u669QKFvq7mAHvmUVldtsTcLYcs ye5hjRKjxXmpJpJqbig7F/x4UnNPRRu0+M46Ah7KIKQwxFUqY1qGPNZ/abc2QweX wwbRamlzRLMaqwICN7m9DawRyPX9Bq+V3icfB1B6bvX78khSBh2C4RIFg13tMdvo f8+9znSUAPOc9m8Dlzb3fbxq/a/5BCRWuqav0+m/SFeMKhO+gyFM1ZmkkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMQHNEgZnOhJW0WQH0SaIEl2aKqMB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVqyEU5h FaamP1+kYk+coODx5DHQL2aXwEdKFns9QRlQXsweFGrRolxKShNuxi3o9wNC8RvV 9Nhyo/edHuWK447fcOvrBa6e5gf4+lxBDvSMeH93T724Qq0ZdMwikF/lHo+6bmAp MF/I7ft/vZVx3gIMVPVTaKS5x6g/HJ+rmG/VUdTPTVlKRZ0X5leePfxz8nHAeBLd ffo+YawtzecfCFlUK4VjEmEGm05ApeP9qhKrB4IZa3KPoRpKPwzOei+mpWgahXRr aIi3XQd0X0JtuMHxUFSPLfHDLUGK1dEV4TaeNKTcaYIP37dAoLIWDt6KMY5lJ7an KY4/kK4oNluX6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:01 2026 by rpki-client