This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json) Hash identifier: +MAfmLWH/U47JIeTJKHpgsKJL7+tpabNuvgSDNnvIko= Subject key identifier: 30:DC:8F:AC:1E:C2:8F:4F:BD:BD:34:B4:38:4B:59:6E:2B:4C:ED:C5 Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7 Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7 Certificate serial: 019BFC52B634A9E8896C51D26D17AD3D78A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 22:00:37 +0000 Manifest this update: Mon 26 Jan 2026 22:00:37 +0000 Manifest next update: Tue 27 Jan 2026 22:00:37 +0000 Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=) 2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: jwTI8fS9p/OSOhg4xMB7FQcmNKDRbN+/Avhsm1prGeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:b6:34:a9:e8:89:6c:51:d2:6d:17:ad:3d:78:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7 Validity Not Before: Jan 26 22:00:37 2026 GMT Not After : Jan 27 22:00:37 2026 GMT Subject: CN=30dc8fac1ec28f4fbdbd34b4384b596e2b4cedc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:ec:80:a3:48:62:d2:05:c3:eb:35:b3:21: 20:d8:d6:1b:a5:ee:7c:f2:a0:9f:90:18:bb:be:f3: cf:74:b2:7c:ca:5e:3c:ff:31:b4:4a:33:df:e1:21: b1:9a:2a:41:5c:98:4a:9e:43:fc:01:68:ca:6f:8c: ef:b5:5b:14:9d:03:0c:ae:82:33:5e:60:3e:f1:6e: 6b:5e:12:55:f9:77:05:83:3e:ee:28:57:5e:6e:43: 8b:00:f2:f0:8b:da:49:e3:05:2c:14:30:35:c3:a4: 8c:07:ac:ba:68:6e:e4:8a:cb:68:b2:3e:0f:10:1e: bd:33:ac:f7:6a:ad:93:c5:f4:e7:46:f0:12:55:71: 6c:cb:a8:0d:be:9a:fd:d5:39:c3:18:a6:63:a2:34: c3:5a:d9:f9:3c:c0:18:f9:ac:29:9a:ef:eb:58:0e: f1:ca:e1:00:37:17:b6:e2:e0:aa:6a:0f:1a:58:a2: ad:07:8f:40:2d:f4:af:c9:6a:cd:79:cb:9a:38:bf: 6c:44:af:af:06:d0:1f:09:88:d2:be:74:40:13:7e: 53:a7:b2:6e:79:94:a6:c3:46:e2:9b:94:ac:3e:c2: e6:79:86:aa:15:12:63:8a:49:27:72:83:17:50:1c: ad:91:0b:6e:45:3d:22:53:c5:2a:3c:b8:4b:38:e5: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DC:8F:AC:1E:C2:8F:4F:BD:BD:34:B4:38:4B:59:6E:2B:4C:ED:C5 X509v3 Authority Key Identifier: keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:f2:c2:9c:95:c2:c7:4b:b0:05:89:63:96:ce:27:bf:eb: 9b:61:aa:5d:d7:c9:a3:96:82:9f:d4:97:86:44:47:c4:b9:36: 68:fe:f7:f4:77:81:4d:7b:b0:28:02:c7:6c:c5:e6:3f:7e:14: 96:a1:2c:46:83:cc:29:46:aa:fa:c5:5c:94:4d:08:70:32:37: dd:d0:08:cf:98:92:5b:8c:b7:48:c5:59:65:4d:b9:6f:f7:9f: 2f:aa:6d:8a:52:06:f5:6a:bb:cc:27:92:13:47:6c:ee:55:4d: fa:6c:b4:b5:1a:e0:5b:ed:91:b2:b2:c5:c9:bb:73:29:2b:81: ff:bc:b6:8d:81:d3:a6:fa:2e:17:80:37:e5:fe:42:04:55:47: d4:43:2d:d7:ff:b4:7d:b9:a0:9c:16:6e:a0:56:da:3c:1b:93: d9:d7:a0:60:f7:28:53:23:9a:e0:f5:c8:c5:71:6d:d3:d5:78: 95:00:f6:f4:0a:0f:67:53:c4:ed:a3:03:e5:9f:c4:71:83:ce: 39:c1:7a:33:8c:42:1f:38:b3:2c:4d:1e:33:f5:be:7e:65:76: fe:39:0a:fc:31:38:cc:d5:21:5a:c0:1b:52:1c:f0:3e:1a:39: 75:55:05:fb:24:c8:51:30:34:a8:05:04:39:a3:f5:96:40:0d: c9:da:58:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UrY0qeiJbFHSbRetPXimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDFkYzYxM2Q3NGU2YzMyZGNiOTgxNGNlMTI2YmQ2MWI1 MmFhYTcwHhcNMjYwMTI2MjIwMDM3WhcNMjYwMTI3MjIwMDM3WjAzMTEwLwYDVQQD EygzMGRjOGZhYzFlYzI4ZjRmYmRiZDM0YjQzODRiNTk2ZTJiNGNlZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprsgKNIYtIFw+s1syEg2NYbpe58 8qCfkBi7vvPPdLJ8yl48/zG0SjPf4SGxmipBXJhKnkP8AWjKb4zvtVsUnQMMroIz XmA+8W5rXhJV+XcFgz7uKFdebkOLAPLwi9pJ4wUsFDA1w6SMB6y6aG7kistosj4P EB69M6z3aq2TxfTnRvASVXFsy6gNvpr91TnDGKZjojTDWtn5PMAY+awpmu/rWA7x yuEANxe24uCqag8aWKKtB49ALfSvyWrNecuaOL9sRK+vBtAfCYjSvnRAE35Tp7Ju eZSmw0bim5SsPsLmeYaqFRJjikkncoMXUBytkQtuRT0iU8UqPLhLOOWwlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDcj6wewo9Pvb00tDhLWW4rTO3FMB8GA1UdIwQY MBaAFITR3GE9dObDLcuYFM4Sa9YbUqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjIt ZjIxYjY2ZGU5YjU2LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjItZjIxYjY2ZGU5YjU2 LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdXywpyV wsdLsAWJY5bOJ7/rm2GqXdfJo5aCn9SXhkRHxLk2aP739HeBTXuwKALHbMXmP34U lqEsRoPMKUaq+sVclE0IcDI33dAIz5iSW4y3SMVZZU25b/efL6ptilIG9Wq7zCeS E0ds7lVN+my0tRrgW+2RsrLFybtzKSuB/7y2jYHTpvouF4A35f5CBFVH1EMt1/+0 fbmgnBZuoFbaPBuT2degYPcoUyOa4PXIxXFt09V4lQD29AoPZ1PE7aMD5Z/EcYPO OcF6M4xCHzizLE0eM/W+fmV2/jkK/DE4zNUhWsAbUhzwPho5dVUF+yTIUTA0qAUE OaP1lkANydpYVg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:24 2026 by rpki-client