This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json) Hash identifier: ttxlrXpLHOFlpS/ZTzRSxyY6Q43KvWDJF3hdGdTsHgg= Subject key identifier: 30:CC:39:39:A2:61:99:68:64:3F:64:1D:43:92:F7:71:38:B4:39:2E Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019C0B8F9475AB4EED615D98F93997C662E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft Manifest number: 14CB Signing time: Thu 29 Jan 2026 21:01:24 +0000 Manifest this update: Thu 29 Jan 2026 21:01:24 +0000 Manifest next update: Fri 30 Jan 2026 21:01:24 +0000 Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=) 2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=) 3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=) 4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: h0C+8L8Vt4OzhxD2n5NKhdm0Hp27tcio6nFr/6znXpk=) 5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=) 6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=) 7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:8f:94:75:ab:4e:ed:61:5d:98:f9:39:97:c6:62:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 29 21:01:24 2026 GMT Not After : Jan 30 21:01:24 2026 GMT Subject: CN=30cc3939a2619968643f641d4392f77138b4392e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:df:57:cc:3e:f1:12:e7:82:26:86:61:e0: 4f:51:a6:f1:df:c5:20:3b:17:8a:b6:de:dd:cd:57: e7:9f:80:af:8a:96:fd:2e:2f:52:d7:06:20:2f:b6: 2c:d0:df:50:70:6a:7d:01:b6:ad:6a:dd:dc:82:c4: 3a:0c:a6:f8:c5:18:6b:16:fa:45:8f:b7:a6:96:8c: cc:91:68:e1:ea:d5:da:3c:55:2f:86:2c:71:dc:ba: 80:a7:17:cb:9e:7f:75:ee:b1:75:29:7d:63:f0:9e: 92:b3:13:c3:78:fa:43:5c:9b:29:56:89:b1:f4:30: 2b:de:db:6a:21:ed:f1:71:b6:da:3a:3d:d7:a4:45: bd:bf:d2:b5:f2:d6:a5:f1:fb:45:84:bc:b8:ba:73: 2b:7b:51:fe:4f:e2:ea:a9:db:3a:e1:b7:0a:fe:27: 12:41:f3:ea:ec:ca:fa:c4:bb:b7:2c:94:63:0e:6d: c1:f4:59:c4:e3:df:47:fc:1a:ef:ff:61:e0:5d:33: 40:ce:25:b2:1a:bb:c7:2b:e3:3f:66:5f:bc:bc:c7: b7:89:2c:73:b6:0a:c1:54:93:e6:61:b2:a2:12:00: 69:d5:f5:6b:a3:9f:28:ef:18:9d:59:d8:49:3c:91: c1:8e:62:f3:20:58:59:5a:2b:ca:61:a1:9f:4a:e8: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:39:39:A2:61:99:68:64:3F:64:1D:43:92:F7:71:38:B4:39:2E X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6b:e2:d4:c3:45:77:19:9d:a7:a5:b7:da:93:90:c1:4f:64: 1a:95:30:82:c2:41:be:63:86:c5:7d:43:b3:de:2e:70:4a:42: da:20:24:b1:27:41:2e:e2:c2:f9:b1:20:27:bd:f4:bb:5f:73: 84:5a:1d:41:5d:f8:f8:95:74:44:ed:2d:82:1b:2a:1f:55:b7: ab:c2:6d:6c:5c:ff:22:17:1c:22:59:ce:9b:a6:77:fe:5c:31: fa:13:f8:64:d1:93:89:87:01:51:1e:22:2b:1e:dc:7e:56:58: f0:8a:fd:3b:86:7b:ee:fa:ed:04:9f:b0:cc:50:21:59:bf:1c: 15:91:0a:ce:a8:58:0b:f1:3a:41:e2:34:99:ca:ab:5b:b3:9c: e4:44:88:9d:97:e5:3b:f4:90:bb:c9:4e:46:08:65:95:b8:34: c4:03:8b:d2:6b:0d:6a:0c:28:cf:da:6d:7c:24:b8:77:aa:d8: 45:e3:8b:c8:c5:11:ac:23:51:cf:32:cb:9d:97:3e:b3:5c:e7: 50:fa:a1:86:1d:77:2d:6a:f4:cf:f7:79:1b:be:7e:53:27:54: 7f:20:80:ad:7d:d4:f4:0c:7c:4d:7c:a9:f5:69:87:86:c5:2b: 33:52:c1:c6:3c:d1:bb:40:d2:8f:77:15:b0:a2:2d:4f:2b:46: 17:51:4b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwLj5R1q07tYV2Y+TmXxmLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTI5MjEwMTI0WhcNMjYwMTMwMjEwMTI0WjAzMTEwLwYDVQQD EygzMGNjMzkzOWEyNjE5OTY4NjQzZjY0MWQ0MzkyZjc3MTM4YjQzOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuHfV8w+8RLngiaGYeBPUabx38Ug OxeKtt7dzVfnn4Cvipb9Li9S1wYgL7Ys0N9QcGp9Abatat3cgsQ6DKb4xRhrFvpF j7emlozMkWjh6tXaPFUvhixx3LqApxfLnn917rF1KX1j8J6SsxPDePpDXJspVomx 9DAr3ttqIe3xcbbaOj3XpEW9v9K18tal8ftFhLy4unMre1H+T+Lqqds64bcK/icS QfPq7Mr6xLu3LJRjDm3B9FnE499H/Brv/2HgXTNAziWyGrvHK+M/Zl+8vMe3iSxz tgrBVJPmYbKiEgBp1fVro58o7xidWdhJPJHBjmLzIFhZWivKYaGfSujGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDMOTmiYZloZD9kHUOS93E4tDkuMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGvi1MNF dxmdp6W32pOQwU9kGpUwgsJBvmOGxX1Ds94ucEpC2iAksSdBLuLC+bEgJ730u19z hFodQV34+JV0RO0tghsqH1W3q8JtbFz/IhccIlnOm6Z3/lwx+hP4ZNGTiYcBUR4i Kx7cflZY8Ir9O4Z77vrtBJ+wzFAhWb8cFZEKzqhYC/E6QeI0mcqrW7Oc5ESInZfl O/SQu8lORghllbg0xAOL0msNagwoz9ptfCS4d6rYReOLyMURrCNRzzLLnZc+s1zn UPqhhh13LWr0z/d5G75+UydUfyCArX3U9Ax8TXyp9WmHhsUrM1LBxjzRu0DSj3cV sKItTytGF1FLag== -----END CERTIFICATE-----Generated at Fri Jan 30 06:20:32 2026 by rpki-client