This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json) Hash identifier: AjHw6VhQdB3QR6Sdz9q9vIqzdq9T9UMR4j9NJy+rqkA= Subject key identifier: 70:ED:7D:53:9F:72:E3:10:55:A4:24:7E:D5:96:25:35:D0:1F:17:0A Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Certificate serial: 019BD168A3BB8F44205C90C1EA05E0597AD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft Manifest number: 0FF3 Signing time: Sun 18 Jan 2026 14:00:54 +0000 Manifest this update: Sun 18 Jan 2026 14:00:54 +0000 Manifest next update: Mon 19 Jan 2026 14:00:54 +0000 Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: jDwdO0K81lHPL/gZZF4M0uBJwWCg0H6KlGZVLREo3Uk=) 2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:68:a3:bb:8f:44:20:5c:90:c1:ea:05:e0:59:7a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Validity Not Before: Jan 18 14:00:54 2026 GMT Not After : Jan 19 14:00:54 2026 GMT Subject: CN=70ed7d539f72e31055a4247ed5962535d01f170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:c6:37:39:77:94:f6:ff:33:95:a3:71:2f: 3f:3e:6f:cb:79:52:56:56:41:14:a3:84:bc:77:df: cb:1b:81:e6:70:ed:0b:05:89:d5:c4:f1:50:4a:69: 20:80:d9:6a:20:de:e9:a0:21:93:0d:89:4d:c2:41: 33:2b:1f:84:4e:d5:fd:1c:e3:24:c8:99:3d:2f:31: e8:b0:fb:38:13:09:be:5a:4b:e2:97:c9:3b:6a:44: d9:77:2c:96:6d:09:97:c0:f0:79:75:45:94:fd:f9: 73:d8:7e:a7:d0:77:13:7b:bc:65:29:3a:0f:ac:d7: 05:ae:d6:70:91:83:40:01:37:86:33:88:d7:26:f9: 87:ed:63:5d:27:b1:fd:5d:cd:2a:2c:06:9f:d1:6f: a6:95:36:82:46:16:9f:4e:aa:96:3a:6c:b0:e5:e6: 3d:6b:a2:20:fa:c2:d6:b2:1f:06:1b:d2:84:87:b7: 40:7e:81:aa:f4:49:a2:f7:fa:b6:14:ad:42:b0:41: f9:0d:8a:5b:d9:d7:e9:66:cb:3a:ce:68:81:57:3b: 7a:ac:c3:22:0c:bf:4c:49:d5:47:1a:86:7e:2f:fe: fd:34:fe:1a:df:10:49:c4:59:e8:23:24:e9:1c:5c: 7e:e6:3c:4e:31:ec:af:f1:7a:ba:55:8e:fc:0b:ff: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:ED:7D:53:9F:72:E3:10:55:A4:24:7E:D5:96:25:35:D0:1F:17:0A X509v3 Authority Key Identifier: keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8f:1e:82:07:c0:c2:2d:20:13:74:e2:3f:a4:3e:b1:f9:67: ef:35:ee:c7:c0:d1:af:59:c9:06:81:4b:ef:32:df:29:72:37: 82:04:ad:ab:0f:7b:3a:73:a0:4e:87:1d:59:04:f2:a8:4e:b3: 51:32:4a:95:6f:89:09:e4:3e:d6:5b:d9:0c:2e:0e:23:ac:43: 3c:d2:0a:0a:75:89:d2:65:b8:fc:c6:3e:c8:e5:bd:7a:dc:1c: 71:eb:78:76:29:b3:38:a1:96:5a:1f:d3:79:c8:7d:59:02:7b: 50:fe:99:c4:a5:3f:24:1d:25:3f:ad:3e:90:14:a3:bc:44:af: 2a:e3:52:4c:4a:c4:bb:a8:48:90:a9:95:7d:98:62:40:8f:6d: 3a:10:34:9d:57:df:64:12:08:bf:57:f6:ba:58:59:ee:1c:d4: a0:a1:1c:fb:65:a5:7d:89:aa:97:9d:2d:db:a8:06:a4:0e:3a: 49:09:2f:40:32:85:8c:8b:db:05:46:f0:2b:dd:25:47:99:f7: c6:c9:6c:9d:20:ee:cf:1c:b7:12:53:07:ef:cc:ba:b5:70:38: d5:63:f1:0e:32:00:ab:29:1b:8a:82:4a:50:9f:de:73:47:39: f0:30:83:ea:25:58:a8:04:65:5a:ed:f3:0e:43:63:aa:ea:ee: b3:b7:3c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRaKO7j0QgXJDB6gXgWXrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi ZjZhZjQwHhcNMjYwMTE4MTQwMDU0WhcNMjYwMTE5MTQwMDU0WjAzMTEwLwYDVQQD Eyg3MGVkN2Q1MzlmNzJlMzEwNTVhNDI0N2VkNTk2MjUzNWQwMWYxNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf7GNzl3lPb/M5WjcS8/Pm/LeVJW VkEUo4S8d9/LG4HmcO0LBYnVxPFQSmkggNlqIN7poCGTDYlNwkEzKx+ETtX9HOMk yJk9LzHosPs4Ewm+Wkvil8k7akTZdyyWbQmXwPB5dUWU/flz2H6n0HcTe7xlKToP rNcFrtZwkYNAATeGM4jXJvmH7WNdJ7H9Xc0qLAaf0W+mlTaCRhafTqqWOmyw5eY9 a6Ig+sLWsh8GG9KEh7dAfoGq9Emi9/q2FK1CsEH5DYpb2dfpZss6zmiBVzt6rMMi DL9MSdVHGoZ+L/79NP4a3xBJxFnoIyTpHFx+5jxOMeyv8Xq6VY78C//ssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDtfVOfcuMQVaQkftWWJTXQHxcKMB8GA1UdIwQY MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2 LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY8eggfA wi0gE3TiP6Q+sfln7zXux8DRr1nJBoFL7zLfKXI3ggStqw97OnOgTocdWQTyqE6z UTJKlW+JCeQ+1lvZDC4OI6xDPNIKCnWJ0mW4/MY+yOW9etwccet4dimzOKGWWh/T ech9WQJ7UP6ZxKU/JB0lP60+kBSjvESvKuNSTErEu6hIkKmVfZhiQI9tOhA0nVff ZBIIv1f2ulhZ7hzUoKEc+2WlfYmql50t26gGpA46SQkvQDKFjIvbBUbwK90lR5n3 xslsnSDuzxy3ElMH78y6tXA41WPxDjIAqykbioJKUJ/ec0c58DCD6iVYqARlWu3z DkNjqurus7c8Og== -----END CERTIFICATE-----Generated at Sun Jan 18 22:16:44 2026 by rpki-client