This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json) Hash identifier: UtqcfE4VGyGd/1EuwV5XrAzDY49nAtkeQ9HynI3rkcg= Subject key identifier: 06:5A:90:31:C8:0D:CB:18:0E:D1:F1:8D:7B:53:87:3C:50:65:52:D3 Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Certificate serial: 019BDEB75B44BDE7A9BAFDD2815600488B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft Manifest number: 1471 Signing time: Wed 21 Jan 2026 04:01:56 +0000 Manifest this update: Wed 21 Jan 2026 04:01:56 +0000 Manifest next update: Thu 22 Jan 2026 04:01:56 +0000 Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: A7B6rolnWeZwwEVKi05es9HkfDemPGIgr1rAgopvv/s=) 2: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (hash: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b7:5b:44:bd:e7:a9:ba:fd:d2:81:56:00:48:8b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Validity Not Before: Jan 21 04:01:56 2026 GMT Not After : Jan 22 04:01:56 2026 GMT Subject: CN=065a9031c80dcb180ed1f18d7b53873c506552d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:9d:2b:a2:6a:7d:e5:69:9e:43:ae:e7:4b: 6a:91:6b:68:6f:0d:e6:f6:99:16:6f:c8:d7:ed:7a: f1:87:56:01:02:23:2b:2b:eb:cc:73:e8:f2:64:30: ac:e4:2f:ff:51:dd:2d:62:db:c2:3a:5f:59:77:23: af:fd:56:37:f9:8b:09:40:08:e5:20:2a:9d:5b:a0: a4:8b:75:09:a6:a0:45:2d:6f:17:ea:34:09:7e:25: ff:d7:df:18:9c:80:d8:33:c4:b0:bd:91:bf:f4:0e: 26:ae:43:4f:cc:32:80:a4:72:f1:ec:b2:de:0c:3e: 6d:06:73:85:d3:e1:4e:11:7c:32:63:c2:3f:0c:5a: 01:05:d9:b1:95:5c:01:86:96:68:0c:c2:d0:0c:25: 1d:57:42:2d:84:b6:8c:0d:24:7c:8e:92:77:00:b6: bf:79:5e:75:0e:5f:1d:e5:70:f8:e9:77:2d:7d:42: d7:dd:be:dd:fb:d2:cc:f9:d6:23:04:96:35:d4:9e: 60:ba:cf:c5:e7:9b:6f:65:e6:f1:99:b1:d9:04:9a: 53:00:9e:9e:8a:61:66:b7:e5:92:81:d6:70:69:ec: 6a:2a:84:1d:35:c9:55:7e:69:2a:48:d3:2b:8b:90: a4:38:03:23:25:ed:44:df:8c:f6:ce:2a:2d:9e:ec: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5A:90:31:C8:0D:CB:18:0E:D1:F1:8D:7B:53:87:3C:50:65:52:D3 X509v3 Authority Key Identifier: keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cb:64:3b:ae:e5:6f:a6:f2:1c:ea:d7:c8:d2:b3:dd:b2:9d: ca:cf:17:8c:9a:15:5b:44:5d:f7:ca:0d:9a:2e:64:b7:65:94: d4:df:89:42:29:9c:f3:49:0a:1d:e8:8c:7a:e9:3d:35:08:d1: 68:f9:a1:17:ac:66:ff:06:54:cb:7b:15:ab:e1:5b:06:f6:a7: 0f:5a:b6:3a:f4:22:f2:89:62:84:ad:bf:6e:d3:e8:10:7f:ef: 8b:e6:8b:d0:d5:f5:ce:63:5f:f8:9c:cb:c2:5a:0f:89:d5:8c: 9a:66:67:e2:6c:45:98:4e:d0:9e:43:a6:95:b1:12:8c:a8:c0: 42:4c:d8:3b:53:b1:36:cd:eb:48:61:aa:43:07:82:d4:ed:ec: 3c:9d:5c:f7:63:ad:98:f3:08:a3:aa:ae:e2:77:2a:27:d5:5d: e3:8d:06:cc:b7:79:b6:ef:cf:80:2e:14:a0:c1:c2:1c:8e:38: 2f:a4:9b:94:1e:e3:a1:3b:14:7d:6f:59:05:10:ac:15:52:07: c0:5b:de:99:10:ca:b7:cb:4f:ee:6e:aa:f3:7e:61:20:1e:db: f2:f6:01:14:eb:02:fa:a9:3e:66:18:fe:68:a5:7d:cb:b2:46: 08:09:0f:85:63:7f:04:78:8e:0a:04:bf:4f:e6:fd:a0:e2:6a: dd:9e:32:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvet1tEveepuv3SgVYASIsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0 OTk0MGYwHhcNMjYwMTIxMDQwMTU2WhcNMjYwMTIyMDQwMTU2WjAzMTEwLwYDVQQD EygwNjVhOTAzMWM4MGRjYjE4MGVkMWYxOGQ3YjUzODczYzUwNjU1MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu6dK6JqfeVpnkOu50tqkWtobw3m 9pkWb8jX7Xrxh1YBAiMrK+vMc+jyZDCs5C//Ud0tYtvCOl9ZdyOv/VY3+YsJQAjl ICqdW6Cki3UJpqBFLW8X6jQJfiX/198YnIDYM8SwvZG/9A4mrkNPzDKApHLx7LLe DD5tBnOF0+FOEXwyY8I/DFoBBdmxlVwBhpZoDMLQDCUdV0IthLaMDSR8jpJ3ALa/ eV51Dl8d5XD46XctfULX3b7d+9LM+dYjBJY11J5gus/F55tvZebxmbHZBJpTAJ6e imFmt+WSgdZwaexqKoQdNclVfmkqSNMri5CkOAMjJe1E34z2ziotnuwGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZakDHIDcsYDtHxjXtThzxQZVLTMB8GA1UdIwQY MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMtkO67l b6byHOrXyNKz3bKdys8XjJoVW0Rd98oNmi5kt2WU1N+JQimc80kKHeiMeuk9NQjR aPmhF6xm/wZUy3sVq+FbBvanD1q2OvQi8olihK2/btPoEH/vi+aL0NX1zmNf+JzL wloPidWMmmZn4mxFmE7QnkOmlbESjKjAQkzYO1OxNs3rSGGqQweC1O3sPJ1c92Ot mPMIo6qu4ncqJ9Vd440GzLd5tu/PgC4UoMHCHI44L6SblB7joTsUfW9ZBRCsFVIH wFvemRDKt8tP7m6q835hIB7b8vYBFOsC+qk+Zhj+aKV9y7JGCAkPhWN/BHiOCgS/ T+b9oOJq3Z4y9g== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:28 2026 by rpki-client