This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json) Hash identifier: 0+hr6Bh3hGxj7OHnjpZKWmcSCnKi64gu0Mt8jLP6KxU= Subject key identifier: F2:78:E3:FA:8E:EE:98:0A:56:3F:06:E8:DE:2B:A0:5B:9D:8F:AB:6A Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e Certificate serial: 019BFC89A0B3E95B33FCE8FEC6BF62BA63ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft Manifest number: 024F Signing time: Mon 26 Jan 2026 23:00:36 +0000 Manifest this update: Mon 26 Jan 2026 23:00:36 +0000 Manifest next update: Tue 27 Jan 2026 23:00:36 +0000 Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=) 2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: fCKmWO4CpRiUV/E2bRAMsUM50GhRykayNTfMRxqKNP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:a0:b3:e9:5b:33:fc:e8:fe:c6:bf:62:ba:63:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e Validity Not Before: Jan 26 23:00:36 2026 GMT Not After : Jan 27 23:00:36 2026 GMT Subject: CN=f278e3fa8eee980a563f06e8de2ba05b9d8fab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:f9:82:a2:fd:63:24:a3:0d:f7:47:22:68: 47:f2:f5:a5:a4:de:6e:52:e7:18:85:31:0a:72:cd: 3c:1b:9f:74:4a:81:d7:51:eb:7c:9d:68:ed:1c:03: 30:9e:ac:ca:82:ec:b2:96:0d:6a:f5:03:a9:21:ab: 3a:1d:0c:83:73:09:20:0f:9a:d2:27:86:10:dd:52: ce:c0:5d:2f:9d:00:a3:43:e8:b8:3c:33:1e:70:da: 90:e5:0f:63:d4:1e:73:90:cd:4b:69:03:cf:3b:2b: 14:de:bf:64:99:16:14:9e:89:f3:5e:08:fa:40:ea: 85:4d:a9:c8:1c:41:8b:5f:c6:49:8c:16:24:59:f3: be:34:76:b4:20:81:f5:cd:a4:78:b2:64:75:43:ec: e4:17:b7:49:3d:f1:07:42:ce:4f:93:0f:0a:99:65: d8:d0:e4:48:96:45:bd:c4:e5:5a:06:03:29:50:ad: fb:a1:fc:67:1a:e7:46:c9:d0:1c:58:76:a6:6b:b6: ad:ff:91:b0:f0:90:42:4a:67:5f:fb:ef:0b:c0:ae: 95:ac:c4:8e:43:77:ae:6a:22:65:9a:6f:dc:71:c5: 00:55:d5:16:aa:50:ea:99:9b:82:32:b9:9b:1d:01: 85:c6:46:39:8a:43:9f:bd:8d:a7:f4:b2:0a:01:03: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:E3:FA:8E:EE:98:0A:56:3F:06:E8:DE:2B:A0:5B:9D:8F:AB:6A X509v3 Authority Key Identifier: keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c8:f0:79:5e:66:9a:3f:46:75:4a:72:30:d4:05:f5:ef:18: 54:d4:bb:74:77:7f:1a:a7:cb:e9:99:14:a3:02:66:b8:15:f2: f1:1d:9a:a1:23:d8:38:f9:79:1f:45:c1:93:3a:a2:07:e1:3a: 8c:67:1b:fa:5f:c4:47:b0:21:6c:8f:ac:3f:32:0f:14:7a:27: 84:23:3b:40:df:2b:12:78:fc:38:4a:65:2d:2c:ab:90:14:00: b5:fd:63:53:dd:74:03:3a:16:1b:51:b9:2b:4c:94:aa:a2:90: 3b:49:e0:6a:9f:ed:a5:ba:6b:9e:01:21:55:c1:33:52:3a:57: 86:4c:19:c3:6f:52:87:b0:58:cd:eb:eb:20:1d:77:58:11:90: f2:0e:de:ae:16:8f:8d:2b:8b:a9:3d:77:1a:2b:03:19:e2:0f: f4:80:b0:9b:b7:01:05:97:33:05:fb:bd:97:31:13:44:1f:fb: 55:e8:f7:ef:6e:bc:5e:71:13:93:ee:97:51:ad:d2:44:97:71: d6:ca:39:b0:1d:79:d4:a0:71:7d:87:22:7f:3b:89:f1:f4:2a: 51:be:92:6a:b7:71:6f:06:08:77:d1:b7:ae:99:f9:29:5b:82: da:a9:dc:bc:ec:c0:ed:67:71:cc:c8:c3:d1:3f:86:a4:91:2e: 9a:15:25:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iaCz6Vsz/Oj+xr9iumPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3 NDExMWUwHhcNMjYwMTI2MjMwMDM2WhcNMjYwMTI3MjMwMDM2WjAzMTEwLwYDVQQD EyhmMjc4ZTNmYThlZWU5ODBhNTYzZjA2ZThkZTJiYTA1YjlkOGZhYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lz5gqL9YySjDfdHImhH8vWlpN5u UucYhTEKcs08G590SoHXUet8nWjtHAMwnqzKguyylg1q9QOpIas6HQyDcwkgD5rS J4YQ3VLOwF0vnQCjQ+i4PDMecNqQ5Q9j1B5zkM1LaQPPOysU3r9kmRYUnonzXgj6 QOqFTanIHEGLX8ZJjBYkWfO+NHa0IIH1zaR4smR1Q+zkF7dJPfEHQs5Pkw8KmWXY 0ORIlkW9xOVaBgMpUK37ofxnGudGydAcWHama7at/5Gw8JBCSmdf++8LwK6VrMSO Q3euaiJlmm/cccUAVdUWqlDqmZuCMrmbHQGFxkY5ikOfvY2n9LIKAQOXDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJ44/qO7pgKVj8G6N4roFudj6tqMB8GA1UdIwQY MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8jweV5m mj9GdUpyMNQF9e8YVNS7dHd/GqfL6ZkUowJmuBXy8R2aoSPYOPl5H0XBkzqiB+E6 jGcb+l/ER7AhbI+sPzIPFHonhCM7QN8rEnj8OEplLSyrkBQAtf1jU910AzoWG1G5 K0yUqqKQO0ngap/tpbprngEhVcEzUjpXhkwZw29Sh7BYzevrIB13WBGQ8g7erhaP jSuLqT13GisDGeIP9ICwm7cBBZczBfu9lzETRB/7Vej37268XnETk+6XUa3SRJdx 1so5sB151KBxfYcifzuJ8fQqUb6SardxbwYId9G3rpn5KVuC2qncvOzA7WdxzMjD 0T+GpJEumhUlpg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:12:37 2026 by rpki-client