This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: Rjdhd4s//00JnoLQH+JPnJuEZcE2jpazmOdLHWZkQWs= Subject key identifier: BB:A9:9A:9A:B0:AE:15:2B:F5:06:C6:AD:A0:30:31:06:2C:A1:9F:5B Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019BF8ACDD774ACE5A0BC17CB6854FDE4338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1813 Signing time: Mon 26 Jan 2026 05:00:36 +0000 Manifest this update: Mon 26 Jan 2026 05:00:36 +0000 Manifest next update: Tue 27 Jan 2026 05:00:36 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 1iEYAutxUY8Sk1LUURodyK_769I.roa (hash: xYW7bvZXfmBgnKNsTynuusrlfWM99SgeNDEpVUkOteQ=) 4: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 5: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: an7P/aS1nkq8bDvvd8v7DLdCY4l+uQMwBhOEGDsgyPs=) 6: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 7: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:dd:77:4a:ce:5a:0b:c1:7c:b6:85:4f:de:43:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jan 26 05:00:36 2026 GMT Not After : Jan 27 05:00:36 2026 GMT Subject: CN=bba99a9ab0ae152bf506c6ada03031062ca19f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:11:28:36:8a:6b:7b:97:9f:37:67:b3:49: 23:51:19:7f:7f:fa:33:6c:bc:46:f5:b1:d9:fe:01: 4b:f6:dd:48:60:16:8e:eb:d5:59:9f:15:03:8c:c8: 35:ce:5d:2f:dd:73:bd:fa:a3:d8:87:d1:d1:7c:43: 36:9b:78:05:27:c7:7c:72:65:e4:a5:d2:fd:ce:36: c3:51:bf:95:cd:06:c0:4e:6b:21:26:3b:2a:19:28: a0:ff:a2:3a:1e:4b:90:0d:97:a6:9c:6f:c6:25:6c: aa:a1:b2:70:9b:d7:15:22:c5:ba:4b:77:4c:ce:64: 29:40:e4:ec:c2:9f:5d:36:87:73:ac:da:4c:80:dd: a6:b8:3d:74:13:c7:76:0e:41:86:07:d2:4e:27:39: 4a:b6:64:ce:77:e4:06:b5:4e:0d:5c:9b:c4:a8:15: da:25:d3:09:38:8b:bb:20:c9:10:76:41:c3:5b:6d: 95:40:3e:6e:c2:d8:93:30:86:eb:61:86:b7:42:e3: 52:06:18:af:cb:42:2a:34:7f:3c:0f:0a:b2:07:ef: 4c:4d:8a:1e:32:ba:2a:4c:a4:ba:d1:b4:9f:a0:f7: c2:b1:49:f3:61:30:1e:91:9c:41:b7:f3:7c:50:d6: 7c:c8:c7:45:dc:eb:20:63:eb:79:05:01:e2:5c:74: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A9:9A:9A:B0:AE:15:2B:F5:06:C6:AD:A0:30:31:06:2C:A1:9F:5B X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6b:3c:63:9a:6b:e8:a9:7e:75:da:0f:d1:50:c0:e5:24:73: 36:0a:81:8d:bd:8f:e6:e2:95:7a:38:1f:69:b6:2c:cc:85:76: f0:1d:c9:38:21:7b:fc:2a:86:b4:a3:26:03:60:45:d0:90:95: f4:ce:e1:d5:5d:5a:a5:d0:50:17:4b:31:42:90:a6:01:b3:ca: 76:31:e6:84:ea:47:e9:cd:07:47:77:00:ac:d1:51:8b:6a:b3: 49:4f:8f:63:be:26:1a:c3:46:00:f5:28:96:31:62:4d:bd:37: b9:85:83:75:95:ec:c1:9f:47:7f:ac:cb:5b:53:a3:ed:41:f2: f7:06:56:8f:5e:fd:46:4f:52:e0:23:a8:0f:ff:d3:f3:8a:92: d9:fa:ab:be:e9:28:e1:99:28:93:4a:73:06:e1:b3:b6:6f:2a: 35:3e:7b:24:d0:87:08:ba:5a:b6:41:28:80:2c:fd:ce:da:5d: 1d:8d:d6:ac:fc:61:2e:7b:7b:5a:7b:8f:c8:42:81:13:d3:73: a8:d5:46:10:92:c5:db:c4:7d:93:31:00:25:e9:1a:a3:e7:70: 13:e1:97:f7:d5:92:99:61:6f:2e:d4:31:4f:92:4b:ac:ce:01: 05:75:43:34:89:86:91:3c:dc:32:2c:e9:ab:92:d7:93:4c:45: 5e:76:fb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rN13Ss5aC8F8toVP3kM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwMTI2MDUwMDM2WhcNMjYwMTI3MDUwMDM2WjAzMTEwLwYDVQQD EyhiYmE5OWE5YWIwYWUxNTJiZjUwNmM2YWRhMDMwMzEwNjJjYTE5ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6gRKDaKa3uXnzdns0kjURl/f/oz bLxG9bHZ/gFL9t1IYBaO69VZnxUDjMg1zl0v3XO9+qPYh9HRfEM2m3gFJ8d8cmXk pdL9zjbDUb+VzQbATmshJjsqGSig/6I6HkuQDZemnG/GJWyqobJwm9cVIsW6S3dM zmQpQOTswp9dNodzrNpMgN2muD10E8d2DkGGB9JOJzlKtmTOd+QGtU4NXJvEqBXa JdMJOIu7IMkQdkHDW22VQD5uwtiTMIbrYYa3QuNSBhivy0IqNH88DwqyB+9MTYoe MroqTKS60bSfoPfCsUnzYTAekZxBt/N8UNZ8yMdF3OsgY+t5BQHiXHTVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLupmpqwrhUr9QbGraAwMQYsoZ9bMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANms8Y5pr 6Kl+ddoP0VDA5SRzNgqBjb2P5uKVejgfabYszIV28B3JOCF7/CqGtKMmA2BF0JCV 9M7h1V1apdBQF0sxQpCmAbPKdjHmhOpH6c0HR3cArNFRi2qzSU+PY74mGsNGAPUo ljFiTb03uYWDdZXswZ9Hf6zLW1Oj7UHy9wZWj179Rk9S4COoD//T84qS2fqrvuko 4Zkok0pzBuGztm8qNT57JNCHCLpatkEogCz9ztpdHY3WrPxhLnt7WnuPyEKBE9Nz qNVGEJLF28R9kzEAJekao+dwE+GX99WSmWFvLtQxT5JLrM4BBXVDNImGkTzcMizp q5LXk0xFXnb7rA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:04:22 2026 by rpki-client