This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json) Hash identifier: 8xqjCDupnde3QQqb1ScqdRGvrGyYRoKhXWjse+9aV7s= Subject key identifier: 8E:6C:8D:A7:7C:9B:3E:95:64:EE:CE:71:0B:E8:4C:32:D8:CD:D0:36 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019BF651C9B6B831052A9D0F8BB1943E0295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft Manifest number: 14C0 Signing time: Sun 25 Jan 2026 18:01:53 +0000 Manifest this update: Sun 25 Jan 2026 18:01:53 +0000 Manifest next update: Mon 26 Jan 2026 18:01:53 +0000 Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=) 2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=) 3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=) 4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: Ez5OGcBnGGzV8E+4hpvW0MUy0q+C/0d1VFqsSVW5EG4=) 5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=) 6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=) 7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:c9:b6:b8:31:05:2a:9d:0f:8b:b1:94:3e:02:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 25 18:01:53 2026 GMT Not After : Jan 26 18:01:53 2026 GMT Subject: CN=8e6c8da77c9b3e9564eece710be84c32d8cdd036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:df:5f:c2:b5:e4:74:09:3d:ab:19:8c:4f: 0f:19:ff:27:64:63:d4:20:26:ec:c9:26:97:e6:88: 0e:8f:ea:a7:8e:43:5d:95:10:39:2f:b1:9f:fe:37: 5d:2f:f4:15:b8:be:1d:37:00:7f:11:e0:bf:a2:b1: a3:ad:30:c3:43:7f:b5:0e:e4:1f:1b:f5:37:2c:a5: 31:cf:43:e9:13:c6:a9:16:b1:e0:0d:bd:00:f5:50: 5e:a5:ff:42:6b:2b:63:e8:a6:fa:2e:60:2a:f5:e9: 54:ad:74:92:c1:39:c3:db:71:cd:c3:3f:84:0b:17: 90:4a:2d:f3:52:a0:e2:56:d4:a4:62:29:11:2c:ca: bf:46:0f:ac:9d:7e:12:c6:71:ee:cf:f6:6b:0e:eb: 54:e5:c8:53:a4:3a:c3:bc:93:07:50:ce:f4:3d:0a: 80:9e:6f:00:bc:91:c1:0c:d2:88:7c:d9:98:e2:99: 13:4c:0c:f5:52:05:bf:c2:32:a5:02:0d:96:fb:78: 98:b0:e2:0d:fe:95:1f:57:92:d0:f1:ac:a0:98:00: 52:19:47:2c:e6:f4:6b:d8:c4:3f:97:51:5e:17:2a: f6:a2:f3:0b:ff:cc:01:ff:9f:bd:fb:29:18:74:3f: 13:a9:af:85:b6:c4:72:a9:d5:d8:13:51:61:81:54: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:8D:A7:7C:9B:3E:95:64:EE:CE:71:0B:E8:4C:32:D8:CD:D0:36 X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:84:c1:0f:80:1c:d3:8b:5f:a5:cf:d7:ea:c6:33:ef:a2:0a: c3:23:1f:0f:3e:ae:46:d0:09:78:e3:76:31:d8:1c:58:97:2d: f0:05:7d:5c:0c:af:2b:69:12:5a:27:71:0e:e4:3c:5d:a5:36: 39:6a:b5:a4:ff:de:03:6e:1b:a8:b7:c6:a4:e1:14:d0:82:79: 1d:5b:90:a6:3c:d8:65:ea:23:61:22:b4:64:70:a6:e7:08:cb: 03:a1:bf:d3:39:98:bf:5c:37:ad:44:06:b9:a5:99:e8:fb:81: e8:fd:08:31:3e:34:97:f9:55:53:42:f5:30:ae:5b:fa:84:1c: 89:7f:b5:7a:5d:47:54:2f:00:03:33:45:dc:a8:4e:5b:f1:eb: a8:1c:cc:c4:ad:9a:d3:c2:f3:17:f9:be:e9:89:16:bc:f8:8f: 02:9c:60:00:1f:5e:53:fd:c3:75:b1:c8:92:c1:93:43:17:e9: 3a:bd:92:26:8b:7e:6d:11:63:26:fc:47:55:af:2d:9e:1a:a9: 3e:e6:28:62:dc:c1:ed:15:0d:41:4d:bb:b7:bb:3a:7b:50:6e: 2e:a5:1d:00:69:54:de:83:72:f0:99:46:96:68:79:6f:3a:01: 95:f1:6d:a6:1e:82:9a:c9:00:4e:79:be:60:6c:68:03:fc:2d: 1b:48:30:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ucm2uDEFKp0Pi7GUPgKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTI1MTgwMTUzWhcNMjYwMTI2MTgwMTUzWjAzMTEwLwYDVQQD Eyg4ZTZjOGRhNzdjOWIzZTk1NjRlZWNlNzEwYmU4NGMzMmQ4Y2RkMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J/fX8K15HQJPasZjE8PGf8nZGPU ICbsySaX5ogOj+qnjkNdlRA5L7Gf/jddL/QVuL4dNwB/EeC/orGjrTDDQ3+1DuQf G/U3LKUxz0PpE8apFrHgDb0A9VBepf9Caytj6Kb6LmAq9elUrXSSwTnD23HNwz+E CxeQSi3zUqDiVtSkYikRLMq/Rg+snX4SxnHuz/ZrDutU5chTpDrDvJMHUM70PQqA nm8AvJHBDNKIfNmY4pkTTAz1UgW/wjKlAg2W+3iYsOIN/pUfV5LQ8aygmABSGUcs 5vRr2MQ/l1FeFyr2ovML/8wB/5+9+ykYdD8Tqa+FtsRyqdXYE1FhgVSnIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5sjad8mz6VZO7OcQvoTDLYzdA2MB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoTBD4Ac 04tfpc/X6sYz76IKwyMfDz6uRtAJeON2MdgcWJct8AV9XAyvK2kSWidxDuQ8XaU2 OWq1pP/eA24bqLfGpOEU0IJ5HVuQpjzYZeojYSK0ZHCm5wjLA6G/0zmYv1w3rUQG uaWZ6PuB6P0IMT40l/lVU0L1MK5b+oQciX+1el1HVC8AAzNF3KhOW/HrqBzMxK2a 08LzF/m+6YkWvPiPApxgAB9eU/3DdbHIksGTQxfpOr2SJot+bRFjJvxHVa8tnhqp PuYoYtzB7RUNQU27t7s6e1BuLqUdAGlU3oNy8JlGlmh5bzoBlfFtph6CmskATnm+ YGxoA/wtG0gwAg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:36 2026 by rpki-client