This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json) Hash identifier: MDUpkxeEMvDIlER9u+dYfmpPe9kF2mLL6qQjA98fkJw= Subject key identifier: 52:C9:C0:6C:9C:DF:5F:2D:33:09:F8:AA:B2:53:49:40:0D:DA:F6:EC Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Certificate serial: 019BFA64CC778F700DCA88DB4C598392AB44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 13:01:08 +0000 Manifest this update: Mon 26 Jan 2026 13:01:08 +0000 Manifest next update: Tue 27 Jan 2026 13:01:08 +0000 Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=) 2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: GAUJF+euUj9YKC41nvWlZptwXgQYEdLfjWzAb7CDfxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:cc:77:8f:70:0d:ca:88:db:4c:59:83:92:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Validity Not Before: Jan 26 13:01:08 2026 GMT Not After : Jan 27 13:01:08 2026 GMT Subject: CN=52c9c06c9cdf5f2d3309f8aab25349400ddaf6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:3c:e7:f8:9c:1a:e1:d3:e1:1d:9e:8f:a9: 18:d7:a9:87:8a:41:7e:b8:bf:22:96:5c:15:98:de: 00:1f:43:49:85:a4:05:8b:13:ed:83:0d:df:05:0a: 72:06:95:2b:95:ce:c6:9c:c2:1e:07:ed:18:b8:e7: 5e:b7:1a:1b:99:d4:c1:a5:62:58:30:6e:8a:62:f6: 18:5a:f2:e9:92:1e:a3:91:6b:1b:19:01:b9:04:17: f5:db:5c:61:c4:80:c5:12:58:fe:93:19:9c:79:f4: de:4c:91:16:c5:36:5a:79:aa:43:90:af:6b:4c:87: 44:b2:15:f3:e8:96:1d:89:0d:09:9b:a6:77:2d:47: 43:ba:b9:44:1f:87:64:e7:fa:f1:33:ea:76:ae:87: 4c:ca:9a:20:df:a1:34:36:24:96:a5:d6:ba:bc:e8: a6:62:05:13:f7:5b:66:1e:b1:3a:ce:97:a9:0a:83: c3:5f:be:de:5c:96:fb:5f:dc:00:cd:5c:94:12:e8: 2d:e5:25:52:5e:83:52:0e:1a:b8:7e:ad:37:1a:2d: 60:2b:6c:11:d5:63:a6:1f:f3:71:29:35:a8:72:a9: 3b:23:6d:61:d5:e7:a7:88:4b:e1:a4:92:b1:fa:0d: 70:af:6c:94:48:23:87:3d:83:53:6f:21:05:61:88: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:C0:6C:9C:DF:5F:2D:33:09:F8:AA:B2:53:49:40:0D:DA:F6:EC X509v3 Authority Key Identifier: keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6f:91:02:a3:9e:3f:f8:2c:9c:d9:ba:0a:a2:82:b6:6c:ce: 14:62:62:b9:99:70:13:2d:8e:63:af:4e:e7:55:57:a5:25:49: 6d:fa:a4:80:32:b0:c0:e3:dd:57:e2:99:b1:5a:23:47:71:0f: 13:39:15:b8:9f:3e:54:36:74:be:ea:8d:d1:85:cd:76:15:ef: 2e:ab:aa:16:ca:ca:6e:de:0a:e1:12:74:fe:cd:03:aa:7b:54: 47:ff:16:cc:76:a9:a4:9a:a0:3e:8a:32:92:48:c5:90:bd:9d: e5:5d:a3:f1:55:a0:b1:4e:17:6c:36:76:3c:3c:d8:34:7c:92: 39:85:74:c9:72:b0:06:48:08:98:63:8a:65:99:ca:29:a0:1d: be:78:63:e6:6d:0a:c9:eb:8e:41:6c:ce:52:85:21:57:59:09: 68:b6:4d:19:53:97:59:af:ac:e1:69:08:b7:9d:98:84:c0:7c: 3c:53:81:3b:9c:26:a5:95:0a:b2:d5:e5:9a:3e:00:32:3f:25: 07:0b:c5:3a:aa:f6:17:f4:59:9a:bc:4d:fc:6b:0f:12:92:1d: ef:94:9b:05:24:05:67:ee:59:22:b1:7b:73:ad:62:4c:5c:7d: 57:3e:5a:ee:0a:1f:73:3f:31:75:0f:f0:28:1e:d6:19:7b:b0: 62:ee:ad:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZMx3j3ANyojbTFmDkqtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl ZDMxMTYwHhcNMjYwMTI2MTMwMTA4WhcNMjYwMTI3MTMwMTA4WjAzMTEwLwYDVQQD Eyg1MmM5YzA2YzljZGY1ZjJkMzMwOWY4YWFiMjUzNDk0MDBkZGFmNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mU85/icGuHT4R2ej6kY16mHikF+ uL8illwVmN4AH0NJhaQFixPtgw3fBQpyBpUrlc7GnMIeB+0YuOdetxobmdTBpWJY MG6KYvYYWvLpkh6jkWsbGQG5BBf121xhxIDFElj+kxmcefTeTJEWxTZaeapDkK9r TIdEshXz6JYdiQ0Jm6Z3LUdDurlEH4dk5/rxM+p2rodMypog36E0NiSWpda6vOim YgUT91tmHrE6zpepCoPDX77eXJb7X9wAzVyUEugt5SVSXoNSDhq4fq03Gi1gK2wR 1WOmH/NxKTWocqk7I21h1eeniEvhpJKx+g1wr2yUSCOHPYNTbyEFYYjuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLJwGyc318tMwn4qrJTSUAN2vbsMB8GA1UdIwQY MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1 LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2+RAqOe P/gsnNm6CqKCtmzOFGJiuZlwEy2OY69O51VXpSVJbfqkgDKwwOPdV+KZsVojR3EP EzkVuJ8+VDZ0vuqN0YXNdhXvLquqFsrKbt4K4RJ0/s0DqntUR/8WzHappJqgPooy kkjFkL2d5V2j8VWgsU4XbDZ2PDzYNHySOYV0yXKwBkgImGOKZZnKKaAdvnhj5m0K yeuOQWzOUoUhV1kJaLZNGVOXWa+s4WkIt52YhMB8PFOBO5wmpZUKstXlmj4AMj8l BwvFOqr2F/RZmrxN/GsPEpId75SbBSQFZ+5ZIrF7c61iTFx9Vz5a7gofcz8xdQ/w KB7WGXuwYu6ttw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:28 2026 by rpki-client