This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json) Hash identifier: UKEoqejGgeL9+sSYgrLtnBH8Zheb57i/AH1Ep4mni8Q= Subject key identifier: 2D:6F:7C:EC:A6:B0:B7:20:C0:A5:F7:DF:A4:17:C1:86:B1:DF:6F:01 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019B8A2C260F081FCA1CC32CB4F81D65B4F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft Manifest number: 1488 Signing time: Sun 04 Jan 2026 18:01:47 +0000 Manifest this update: Sun 04 Jan 2026 18:01:47 +0000 Manifest next update: Mon 05 Jan 2026 18:01:47 +0000 Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=) 2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=) 3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=) 4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: hz8pUEf+yqONzyQk85FHHKG9A4jMPs3cW3ApFsesYrc=) 5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=) 6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=) 7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:2c:26:0f:08:1f:ca:1c:c3:2c:b4:f8:1d:65:b4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 4 18:01:47 2026 GMT Not After : Jan 5 18:01:47 2026 GMT Subject: CN=2d6f7ceca6b0b720c0a5f7dfa417c186b1df6f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:d1:4b:3e:58:f1:88:17:08:21:3a:db:50: c3:7a:20:ab:23:13:7e:17:7b:88:b0:69:61:6d:6c: e6:64:f8:b3:90:e2:8e:83:3e:1e:d7:19:52:a0:cc: ef:3e:f9:6f:aa:cf:96:0e:ab:8d:fd:07:45:4d:5f: 9b:80:27:d9:a4:3d:c1:b6:57:b2:30:a0:40:e0:e6: d3:37:5f:9d:1c:dc:6a:b7:62:0f:07:25:3a:15:a5: b5:23:0b:f5:ff:7a:06:1b:53:62:46:ff:21:68:f2: b3:13:e4:73:2c:fd:44:65:6b:dd:b7:38:21:83:a7: 9b:2e:f9:17:61:11:ed:af:1a:e5:94:84:7d:bd:80: 9c:13:4f:bc:b4:93:62:fe:3d:24:93:5f:54:41:28: b9:80:25:ee:40:b9:54:18:4a:2e:3e:55:d7:f3:1d: 00:e4:71:35:4e:af:44:ed:48:d9:8b:d5:47:ac:ab: ca:f8:07:35:55:93:a5:b6:a0:45:e2:65:27:85:2c: ae:79:b6:2c:e6:ed:cb:3c:d9:9f:9b:d1:14:2f:af: 2e:83:64:1a:57:35:31:e1:1b:9d:f0:e1:5b:6d:8c: c1:91:0d:b3:1c:b4:50:60:93:db:40:9e:1f:78:79: 43:16:df:63:7e:15:3d:f3:c0:73:ab:b5:01:fb:dc: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6F:7C:EC:A6:B0:B7:20:C0:A5:F7:DF:A4:17:C1:86:B1:DF:6F:01 X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e3:d1:05:3a:eb:26:c0:33:ac:16:63:1c:38:1b:1d:7a:fc: b0:a6:25:05:59:75:3b:45:a7:c6:0b:f4:8b:01:0f:bd:82:57: 82:19:84:00:ce:5d:90:f8:da:80:b4:73:49:92:d2:47:32:61: c1:76:db:0d:9f:92:c3:cc:e3:ba:28:c6:e1:1f:76:1b:8a:5b: a7:35:12:46:b3:c8:75:d3:09:ab:4e:d3:b7:0e:66:ea:10:9b: f0:25:c1:d6:d9:e9:ed:60:57:4e:56:85:65:9e:b0:89:fd:84: cc:cb:d3:26:ea:ef:7f:1f:6f:9d:50:0a:40:e2:fd:d2:97:dc: 7c:37:d4:91:f1:96:c6:4e:b5:ee:15:db:62:69:58:f1:9d:40: 80:8f:4b:dd:1c:3b:91:da:0c:6f:1e:51:46:d8:6a:d5:71:ed: 33:d8:ca:3f:37:a3:83:17:50:3e:ab:8e:33:c4:3a:3e:c1:be: df:53:cc:13:ff:69:d3:13:76:3b:ee:4c:48:b4:f6:d1:0a:19: 13:b0:95:8c:41:a9:20:e0:34:dd:01:e5:98:e2:36:6c:17:1a: 69:04:92:86:f7:2d:3e:ca:3e:df:68:00:5a:11:43:d2:bf:a1: df:2a:41:3a:b2:c7:bb:1a:d8:39:3a:05:71:b0:d8:c9:e7:97: 60:3a:3b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKLCYPCB/KHMMstPgdZbTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTA0MTgwMTQ3WhcNMjYwMTA1MTgwMTQ3WjAzMTEwLwYDVQQD EygyZDZmN2NlY2E2YjBiNzIwYzBhNWY3ZGZhNDE3YzE4NmIxZGY2ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1bRSz5Y8YgXCCE621DDeiCrIxN+ F3uIsGlhbWzmZPizkOKOgz4e1xlSoMzvPvlvqs+WDquN/QdFTV+bgCfZpD3Btley MKBA4ObTN1+dHNxqt2IPByU6FaW1Iwv1/3oGG1NiRv8haPKzE+RzLP1EZWvdtzgh g6ebLvkXYRHtrxrllIR9vYCcE0+8tJNi/j0kk19UQSi5gCXuQLlUGEouPlXX8x0A 5HE1Tq9E7UjZi9VHrKvK+Ac1VZOltqBF4mUnhSyuebYs5u3LPNmfm9EUL68ug2Qa VzUx4Rud8OFbbYzBkQ2zHLRQYJPbQJ4feHlDFt9jfhU988Bzq7UB+9ydDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1vfOymsLcgwKX336QXwYax328BMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOPRBTrr JsAzrBZjHDgbHXr8sKYlBVl1O0Wnxgv0iwEPvYJXghmEAM5dkPjagLRzSZLSRzJh wXbbDZ+Sw8zjuijG4R92G4pbpzUSRrPIddMJq07Ttw5m6hCb8CXB1tnp7WBXTlaF ZZ6wif2EzMvTJurvfx9vnVAKQOL90pfcfDfUkfGWxk617hXbYmlY8Z1AgI9L3Rw7 kdoMbx5RRthq1XHtM9jKPzejgxdQPquOM8Q6PsG+31PME/9p0xN2O+5MSLT20QoZ E7CVjEGpIOA03QHlmOI2bBcaaQSShvctPso+32gAWhFD0r+h3ypBOrLHuxrYOToF cbDYyeeXYDo7hQ== -----END CERTIFICATE-----Generated at Mon Jan 5 01:44:36 2026 by rpki-client