This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json) Hash identifier: bcy0hxSaHeLu/GiMDaSqaDb543p1PzW3Ik9zFLX8adY= Subject key identifier: 32:BF:09:6C:B7:DF:59:E2:E3:5E:1F:5A:F7:52:2F:7D:FF:12:60:80 Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Certificate serial: 019C1BDE37F3A0DE7C15BE14F374B73AC34E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft Manifest number: B4 Signing time: Mon 02 Feb 2026 01:01:13 +0000 Manifest this update: Mon 02 Feb 2026 01:01:13 +0000 Manifest next update: Tue 03 Feb 2026 01:01:13 +0000 Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: Ff3iffQGL5iACwrODmTxctqxRxbXWeoX46W+uiq9tJk=) 2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:37:f3:a0:de:7c:15:be:14:f3:74:b7:3a:c3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Validity Not Before: Feb 2 01:01:13 2026 GMT Not After : Feb 3 01:01:13 2026 GMT Subject: CN=32bf096cb7df59e2e35e1f5af7522f7dff126080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:29:57:2c:cc:b5:cb:c8:d1:28:21:79:2c: 48:1d:89:36:d0:1a:be:29:0b:55:a2:30:2d:12:42: 2d:fb:33:e8:ec:17:f8:0e:e0:87:ef:c9:76:2e:9f: 1c:ed:09:c2:8b:e5:6b:72:39:c5:74:e9:75:ff:23: 92:37:2c:89:c1:df:3c:89:f2:58:59:52:c3:56:56: 92:21:03:bd:1f:b1:0e:9d:c1:c7:54:d4:ac:45:7e: 0f:b0:8e:94:5b:81:de:bb:81:69:c2:29:e1:e7:0e: e2:9d:aa:3b:8f:86:b6:69:81:e3:eb:31:28:46:d4: 13:e0:36:ad:26:f8:93:15:35:e2:0c:20:bf:c0:03: 3f:64:73:8d:f5:27:72:65:cf:49:dd:8b:8c:28:e3: 1f:27:0f:b7:62:c9:37:33:42:18:7c:87:83:a4:a4: 5e:b4:96:08:5f:1f:2f:7c:93:82:3d:41:4a:75:50: 90:54:ab:08:8d:db:7c:47:2c:a1:d7:85:54:37:01: 0d:bc:ca:65:b6:d9:08:80:48:67:e9:19:ec:05:87: f3:b5:ba:b1:74:8f:18:8d:9e:b0:d7:a3:e8:32:47: 2f:85:41:2e:c7:ae:89:00:c1:22:e6:d0:43:8e:11: 62:f1:28:cd:03:72:15:e8:66:ae:d2:4a:8d:bb:95: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:09:6C:B7:DF:59:E2:E3:5E:1F:5A:F7:52:2F:7D:FF:12:60:80 X509v3 Authority Key Identifier: keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3f:b5:e1:2f:e7:65:8d:c2:83:03:9d:57:09:5a:df:44:b9: 29:56:71:ae:86:9d:9e:68:de:9f:30:b1:54:ee:6c:5f:c4:34: b6:6d:83:36:03:d8:b4:fa:cb:64:b3:1b:7c:7f:b3:62:8e:b0: a0:ec:3b:4a:23:1b:93:ab:09:23:b6:3f:55:4b:97:76:29:94: cd:1b:e4:ab:aa:21:7d:5c:f3:f2:ee:3c:a4:78:d0:f3:ba:52: 32:f8:0c:51:2f:c0:38:b0:37:3f:ae:b7:92:f3:5c:82:5a:69: f6:be:cb:31:3a:10:07:98:eb:e0:52:96:db:76:64:26:4c:83: 78:26:3b:39:31:99:fc:99:6f:07:92:31:3a:06:33:00:de:2b: c6:d3:b4:5b:ae:45:cb:91:8b:76:5e:03:ed:79:8c:f8:ea:89: 20:b8:c0:bb:6d:37:68:37:2e:fc:97:55:70:eb:d2:13:5b:5f: 00:d4:81:58:a6:a9:6e:59:80:c1:59:86:ca:96:99:1d:e1:66: f9:61:26:4b:3b:3b:66:e4:fa:96:7c:69:fc:32:58:ed:8f:a6: 6e:63:31:89:3c:18:f0:37:7b:7d:bf:d3:6f:14:e5:7f:0c:01: 7c:4a:87:7b:ac:3b:0b:0e:ba:7c:a4:79:f5:21:3c:bb:a9:bb: 14:3e:9e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3jfzoN58Fb4U83S3OsNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm ZWE4OTIwHhcNMjYwMjAyMDEwMTEzWhcNMjYwMjAzMDEwMTEzWjAzMTEwLwYDVQQD EygzMmJmMDk2Y2I3ZGY1OWUyZTM1ZTFmNWFmNzUyMmY3ZGZmMTI2MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5spVyzMtcvI0SgheSxIHYk20Bq+ KQtVojAtEkIt+zPo7Bf4DuCH78l2Lp8c7QnCi+VrcjnFdOl1/yOSNyyJwd88ifJY WVLDVlaSIQO9H7EOncHHVNSsRX4PsI6UW4Heu4Fpwinh5w7inao7j4a2aYHj6zEo RtQT4DatJviTFTXiDCC/wAM/ZHON9SdyZc9J3YuMKOMfJw+3Ysk3M0IYfIeDpKRe tJYIXx8vfJOCPUFKdVCQVKsIjdt8Ryyh14VUNwENvMplttkIgEhn6RnsBYfztbqx dI8YjZ6w16PoMkcvhUEux66JAMEi5tBDjhFi8SjNA3IV6Gau0kqNu5WCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK/CWy331ni414fWvdSL33/EmCAMB8GA1UdIwQY MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj+14S/n ZY3CgwOdVwla30S5KVZxroadnmjenzCxVO5sX8Q0tm2DNgPYtPrLZLMbfH+zYo6w oOw7SiMbk6sJI7Y/VUuXdimUzRvkq6ohfVzz8u48pHjQ87pSMvgMUS/AOLA3P663 kvNcglpp9r7LMToQB5jr4FKW23ZkJkyDeCY7OTGZ/JlvB5IxOgYzAN4rxtO0W65F y5GLdl4D7XmM+OqJILjAu203aDcu/JdVcOvSE1tfANSBWKapblmAwVmGypaZHeFm +WEmSzs7ZuT6lnxp/DJY7Y+mbmMxiTwY8Dd7fb/TbxTlfwwBfEqHe6w7Cw66fKR5 9SE8u6m7FD6eXw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:31 2026 by rpki-client