This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json) Hash identifier: DdQF88lA5Itnh8ZvioopaX3w4loJPz/y3cKdtxaC+II= Subject key identifier: 18:FB:DA:4D:F8:F8:58:AC:B4:CE:07:58:2C:E9:1D:35:CE:A6:A5:5D Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Certificate serial: 019BFCF830AF9ED76BF1205483168EED386C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft Manifest number: 07AC Signing time: Tue 27 Jan 2026 01:01:22 +0000 Manifest this update: Tue 27 Jan 2026 01:01:22 +0000 Manifest next update: Wed 28 Jan 2026 01:01:22 +0000 Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: A7ilKQWw8YJVQXJxVrmXUqFh2Tps27U5tXoUgqPUpMw=) 2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:30:af:9e:d7:6b:f1:20:54:83:16:8e:ed:38:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Validity Not Before: Jan 27 01:01:22 2026 GMT Not After : Jan 28 01:01:22 2026 GMT Subject: CN=18fbda4df8f858acb4ce07582ce91d35cea6a55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:be:df:af:1a:4d:a5:3b:8f:90:ce:c2:b9: 61:ef:ae:19:83:09:34:6b:f1:49:9e:69:67:d2:da: 49:1f:71:94:cf:89:03:d1:a2:cb:0a:79:e9:00:78: 0d:74:c3:1f:92:05:38:48:2d:72:45:48:fd:89:79: 94:9e:c7:6d:0c:9b:ee:81:0a:a5:e8:63:8f:05:9e: 00:1d:90:2f:7d:78:85:99:5e:22:28:3d:8d:76:20: 1f:0c:70:ae:30:73:d7:28:0e:a0:1e:71:62:55:5c: a9:0f:87:3a:3f:91:39:12:30:74:f6:20:9d:f8:fa: 6f:92:bf:ba:18:ae:59:4c:12:26:7f:ca:78:90:eb: 9d:dd:0b:43:19:c7:ad:02:7e:99:87:5c:c2:21:50: f9:56:61:c0:e8:80:a3:00:33:90:3c:4d:8d:6f:e4: 3e:95:04:52:e7:45:e1:d5:c7:cb:89:d4:45:4d:32: f7:a2:20:3a:1f:d0:57:dc:ae:b8:00:ec:12:8d:4e: 6d:84:ec:55:9b:71:40:3a:65:b8:ab:c1:cc:5a:54: e8:7f:fe:8f:a4:8e:97:30:21:4f:8e:39:3e:9a:14: 16:fc:ab:78:45:03:34:97:eb:9d:68:ac:13:f4:ab: 15:17:d3:94:f7:e3:39:c9:da:f0:a0:ec:64:7b:10: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FB:DA:4D:F8:F8:58:AC:B4:CE:07:58:2C:E9:1D:35:CE:A6:A5:5D X509v3 Authority Key Identifier: keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6f:a5:59:de:96:8e:38:dc:44:97:b7:46:dd:43:ac:41:88: fe:cd:e0:82:1e:48:e6:d6:d4:10:3f:b9:1b:cb:18:29:9c:57: 1e:2d:bb:a1:87:f5:ec:8a:62:4e:ff:72:ad:82:78:54:ff:72: c0:86:4d:0e:39:e7:80:90:3c:ad:6b:9a:1d:68:54:3a:4c:57: ba:60:1c:35:a8:ad:4e:fe:a7:aa:b6:64:7a:8d:20:a0:63:02: d8:39:37:07:8b:5a:51:0d:c1:47:81:c3:4a:52:63:6a:91:44: 14:a7:cc:f7:2f:04:5c:55:43:f9:fa:52:3e:d6:d5:ec:8b:0c: 12:0d:31:f1:da:71:fb:f3:2a:61:58:bb:48:9e:bb:09:f7:87: 1c:1f:2d:77:ed:a3:ee:c8:24:6d:83:d8:da:2d:55:fc:5c:c2: 85:23:ff:c7:89:15:5d:c2:4a:48:cb:33:4d:80:da:22:15:95: 81:3b:1c:7b:04:12:e5:9c:b8:3a:94:e0:ff:75:0b:fe:57:c7: e3:08:0d:8a:77:bb:41:75:9d:df:a1:13:94:fd:df:67:8e:aa: 6f:35:e0:59:30:0d:06:ff:21:26:ed:38:b8:cf:91:ba:e7:84: a5:9a:bb:43:ee:c9:4f:91:d7:96:53:e0:ff:89:5b:a1:91:f0: 84:c2:1f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+DCvntdr8SBUgxaO7ThsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh NzY2OTMwHhcNMjYwMTI3MDEwMTIyWhcNMjYwMTI4MDEwMTIyWjAzMTEwLwYDVQQD EygxOGZiZGE0ZGY4Zjg1OGFjYjRjZTA3NTgyY2U5MWQzNWNlYTZhNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfO+368aTaU7j5DOwrlh764Zgwk0 a/FJnmln0tpJH3GUz4kD0aLLCnnpAHgNdMMfkgU4SC1yRUj9iXmUnsdtDJvugQql 6GOPBZ4AHZAvfXiFmV4iKD2NdiAfDHCuMHPXKA6gHnFiVVypD4c6P5E5EjB09iCd +Ppvkr+6GK5ZTBImf8p4kOud3QtDGcetAn6Zh1zCIVD5VmHA6ICjADOQPE2Nb+Q+ lQRS50Xh1cfLidRFTTL3oiA6H9BX3K64AOwSjU5thOxVm3FAOmW4q8HMWlTof/6P pI6XMCFPjjk+mhQW/Kt4RQM0l+udaKwT9KsVF9OU9+M5ydrwoOxkexDIsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBj72k34+FistM4HWCzpHTXOpqVdMB8GA1UdIwQY MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2+lWd6W jjjcRJe3Rt1DrEGI/s3ggh5I5tbUED+5G8sYKZxXHi27oYf17IpiTv9yrYJ4VP9y wIZNDjnngJA8rWuaHWhUOkxXumAcNaitTv6nqrZkeo0goGMC2Dk3B4taUQ3BR4HD SlJjapFEFKfM9y8EXFVD+fpSPtbV7IsMEg0x8dpx+/MqYVi7SJ67CfeHHB8td+2j 7sgkbYPY2i1V/FzChSP/x4kVXcJKSMszTYDaIhWVgTscewQS5Zy4OpTg/3UL/lfH 4wgNine7QXWd36ETlP3fZ46qbzXgWTANBv8hJu04uM+RuueEpZq7Q+7JT5HXllPg /4lboZHwhMIfoQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:11 2026 by rpki-client