This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: t/espGuwFfpEoX/yE9MBzVT4wA+b7HWXFSl7c9sFBGM= Subject key identifier: C6:31:5D:8F:AB:21:DA:3D:8F:0C:0D:2A:CE:06:CA:A9:92:FE:EC:DB Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019C25180EDAE6D4B0A9940DD8906A2F1CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 18B2 Signing time: Tue 03 Feb 2026 20:00:59 +0000 Manifest this update: Tue 03 Feb 2026 20:00:59 +0000 Manifest next update: Wed 04 Feb 2026 20:00:59 +0000 Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=) 2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=) 3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=) 4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=) 5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=) 6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=) 7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=) 8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=) 9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Yy8aeEoWGWY++JpL2gn5FCW+GKAFY+Kc3ahRFYY3RPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:18:0e:da:e6:d4:b0:a9:94:0d:d8:90:6a:2f:1c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Feb 3 20:00:59 2026 GMT Not After : Feb 4 20:00:59 2026 GMT Subject: CN=c6315d8fab21da3d8f0c0d2ace06caa992feecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:4f:26:32:8a:b1:b4:c8:2b:dc:20:50:0a: 0d:7c:c3:ea:4e:1a:87:bc:f0:08:2d:a5:87:f2:a1: 16:5d:aa:03:14:e9:30:76:3b:59:32:ae:cf:a9:31: fc:6c:17:2f:39:c7:6b:c9:ec:ae:a2:ca:63:7d:c3: 1a:04:b2:15:29:26:61:a4:17:8c:1e:a7:5b:48:1d: a6:26:cb:24:06:99:94:d2:00:ef:c9:4d:00:81:2d: 0b:e7:5a:27:ea:f0:64:9c:a1:ca:fc:5a:8d:16:01: 02:e1:93:26:75:ad:db:e9:a2:31:ce:5d:aa:8c:a1: 81:6a:7f:41:07:fe:f5:5a:84:7d:99:cc:e8:cb:bb: 11:64:cc:74:a6:aa:12:ee:a7:85:f8:30:33:8e:02: 18:fb:09:ea:c8:f8:04:c6:36:64:d5:87:c5:3f:1c: d4:1b:da:f0:0b:37:ae:ca:98:8d:52:3c:63:34:fd: 9a:f8:be:09:77:ee:22:96:e5:e0:fb:fc:f8:50:c9: e8:85:14:36:5f:0d:34:94:60:03:38:c8:8f:c2:03: 4c:7a:76:b1:e4:58:1d:ff:42:f0:39:9a:9d:8e:e6: 85:fe:f1:55:2c:d8:d7:ce:d3:bf:f3:be:a8:90:4e: 19:d0:b5:c1:bb:5d:5f:91:8b:59:0a:8e:29:30:c8: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:31:5D:8F:AB:21:DA:3D:8F:0C:0D:2A:CE:06:CA:A9:92:FE:EC:DB X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:36:cd:96:e6:00:32:15:9c:4f:2c:4a:4e:13:f7:60:6e:ee: 28:69:47:5a:76:39:3a:cb:40:39:da:40:42:bc:bc:fe:3a:aa: ac:44:8b:91:37:c4:f2:ff:17:e9:db:61:56:8a:c3:24:d5:38: f8:de:96:e6:08:e0:66:eb:92:bd:86:bf:fd:96:bf:30:26:de: c4:57:14:dc:a4:a2:69:d2:25:2c:76:a8:2c:e9:ec:e5:bf:76: 31:26:76:40:a8:58:f6:7a:6e:df:74:b9:39:71:03:8c:2b:fa: 2c:c3:41:a8:38:91:73:68:c6:12:a5:50:19:b7:2f:ed:cd:65: f4:01:6a:d7:ea:bf:4b:a9:37:89:bf:56:da:01:35:81:eb:de: 1b:4e:89:85:e1:94:b4:bb:b9:57:9f:96:73:a9:9a:d5:b0:b7: 0a:d5:b9:5d:f1:45:ba:f8:90:7e:df:51:ea:43:a0:19:7b:b0: 98:66:31:ec:6a:1a:d9:2a:d6:0b:ba:dc:b4:26:43:52:54:05: 24:e6:96:9f:95:5e:19:8e:b4:b4:a4:dc:6e:f8:d3:7a:7a:0c: 94:60:34:b3:59:75:58:7a:54:15:9d:a2:06:08:c0:b5:e6:40: ca:6a:3a:67:9a:24:02:c1:7f:ae:c1:31:94:6f:dd:65:52:0d: dd:54:10:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlGA7a5tSwqZQN2JBqLxyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjYwMjAzMjAwMDU5WhcNMjYwMjA0MjAwMDU5WjAzMTEwLwYDVQQD EyhjNjMxNWQ4ZmFiMjFkYTNkOGYwYzBkMmFjZTA2Y2FhOTkyZmVlY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthNPJjKKsbTIK9wgUAoNfMPqThqH vPAILaWH8qEWXaoDFOkwdjtZMq7PqTH8bBcvOcdryeyuospjfcMaBLIVKSZhpBeM HqdbSB2mJsskBpmU0gDvyU0AgS0L51on6vBknKHK/FqNFgEC4ZMmda3b6aIxzl2q jKGBan9BB/71WoR9mczoy7sRZMx0pqoS7qeF+DAzjgIY+wnqyPgExjZk1YfFPxzU G9rwCzeuypiNUjxjNP2a+L4Jd+4iluXg+/z4UMnohRQ2Xw00lGADOMiPwgNMenax 5Fgd/0LwOZqdjuaF/vFVLNjXztO/876okE4Z0LXBu11fkYtZCo4pMMiqIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYxXY+rIdo9jwwNKs4GyqmS/uzbMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATbNluYA MhWcTyxKThP3YG7uKGlHWnY5OstAOdpAQry8/jqqrESLkTfE8v8X6dthVorDJNU4 +N6W5gjgZuuSvYa//Za/MCbexFcU3KSiadIlLHaoLOns5b92MSZ2QKhY9npu33S5 OXEDjCv6LMNBqDiRc2jGEqVQGbcv7c1l9AFq1+q/S6k3ib9W2gE1geveG06JheGU tLu5V5+Wc6ma1bC3CtW5XfFFuviQft9R6kOgGXuwmGYx7Goa2SrWC7rctCZDUlQF JOaWn5VeGY60tKTcbvjTenoMlGA0s1l1WHpUFZ2iBgjAteZAymo6Z5okAsF/rsEx lG/dZVIN3VQQJA== -----END CERTIFICATE-----Generated at Wed Feb 4 02:18:08 2026 by rpki-client