This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json) Hash identifier: U+2ZSYNISruuewAgCwiPtKfXnJErJpkhLYD4IMiiiL4= Subject key identifier: DC:E4:59:D4:72:A4:0C:5F:46:C8:32:B9:34:5C:ED:3A:8F:4A:F2:E5 Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Certificate serial: 019BFA9B321DFC7E9F7B667A3A55C93D8618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft Manifest number: 128C Signing time: Mon 26 Jan 2026 14:00:33 +0000 Manifest this update: Mon 26 Jan 2026 14:00:33 +0000 Manifest next update: Tue 27 Jan 2026 14:00:33 +0000 Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=) 2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: p6jW8PUJ01oOAs3WaA30Ge9xU2Nv81He9OQ+uGEQhM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:32:1d:fc:7e:9f:7b:66:7a:3a:55:c9:3d:86:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Validity Not Before: Jan 26 14:00:33 2026 GMT Not After : Jan 27 14:00:33 2026 GMT Subject: CN=dce459d472a40c5f46c832b9345ced3a8f4af2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:be:f4:ad:2d:79:23:6e:a9:b4:64:32:a9: 10:be:0e:5c:cc:87:4c:e4:19:df:33:05:6c:13:31: f4:e3:e1:b1:30:38:c8:f2:73:4c:1a:16:ad:50:ec: b5:0f:d4:87:19:da:d0:3e:e7:d2:13:97:4f:81:0d: 55:e2:f0:5d:0f:e4:33:69:2a:99:80:61:45:39:ec: 71:f1:7a:ed:ae:70:20:cc:46:ba:b3:b9:85:4a:64: d3:84:dc:75:f1:8c:43:75:c2:c5:aa:13:29:9e:8f: 8e:dc:ab:37:36:24:76:ce:d3:9e:87:6e:3e:01:f1: db:5a:fe:2b:27:bf:f0:7b:19:a2:51:47:04:60:aa: b6:5c:eb:47:d2:fe:df:3d:9e:ad:aa:e1:c1:c2:51: 77:16:bd:4c:47:09:80:71:08:43:1d:e7:8c:0b:e6: f3:f5:67:95:2f:bc:ef:a8:02:b2:30:13:09:a3:4a: cf:e6:35:54:f3:bf:a5:4e:a0:86:00:36:51:25:5e: 63:65:7b:30:bd:94:60:ce:16:ba:ae:73:bf:ff:3d: aa:87:75:5f:a1:e4:00:57:6b:ba:67:52:10:e0:44: 07:0b:cf:b2:d9:c8:46:08:a1:39:27:6e:2f:df:44: a3:41:61:f4:4f:a6:6b:c5:f7:3b:4c:85:72:76:f5: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:59:D4:72:A4:0C:5F:46:C8:32:B9:34:5C:ED:3A:8F:4A:F2:E5 X509v3 Authority Key Identifier: keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2f:95:e5:5d:57:21:d5:76:8e:80:89:85:69:9d:f3:dc:db: d5:89:08:06:f1:49:df:a0:55:cf:fc:4c:88:03:14:c5:25:68: 01:9a:20:c6:4e:94:0e:bc:63:43:e5:e0:37:20:f8:c1:cd:48: 61:dd:c0:48:60:3d:a8:1b:27:5c:21:94:85:e3:0c:22:e6:19: 62:84:a9:c9:28:72:88:71:7e:bf:67:c1:a3:4f:2d:4d:12:d2: 1a:a7:cf:31:e6:c2:21:e6:ed:bb:9b:a2:02:fd:07:d5:76:a7: 35:6b:6e:83:42:95:0e:20:47:aa:0e:2e:95:7e:0f:3c:7f:bf: d2:2e:a4:22:17:0c:68:8f:3c:30:e8:a7:da:e2:25:d7:a7:23: 66:66:9a:27:01:01:93:76:cf:65:a7:eb:be:e3:63:82:9d:d3: 6c:6a:b3:fb:80:7c:4c:69:01:b5:64:78:21:7c:26:1f:68:e9: 82:4f:a4:8a:2a:28:78:c8:36:4c:4e:67:1f:0a:41:1e:b2:12: 34:f3:31:f5:ad:17:36:ca:b2:df:58:ab:ba:ed:de:59:47:c0: ef:71:ca:49:6c:b3:76:66:b6:14:15:59:46:ee:1e:86:4d:0d: e4:b3:63:3a:cc:23:98:b4:99:72:cd:42:d5:ff:4c:27:f2:a4: 65:43:b2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6mzId/H6fe2Z6OlXJPYYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4 NTgxNjEwHhcNMjYwMTI2MTQwMDMzWhcNMjYwMTI3MTQwMDMzWjAzMTEwLwYDVQQD EyhkY2U0NTlkNDcyYTQwYzVmNDZjODMyYjkzNDVjZWQzYThmNGFmMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz62+9K0teSNuqbRkMqkQvg5czIdM 5BnfMwVsEzH04+GxMDjI8nNMGhatUOy1D9SHGdrQPufSE5dPgQ1V4vBdD+QzaSqZ gGFFOexx8XrtrnAgzEa6s7mFSmTThNx18YxDdcLFqhMpno+O3Ks3NiR2ztOeh24+ AfHbWv4rJ7/wexmiUUcEYKq2XOtH0v7fPZ6tquHBwlF3Fr1MRwmAcQhDHeeMC+bz 9WeVL7zvqAKyMBMJo0rP5jVU87+lTqCGADZRJV5jZXswvZRgzha6rnO//z2qh3Vf oeQAV2u6Z1IQ4EQHC8+y2chGCKE5J24v30SjQWH0T6Zrxfc7TIVydvWHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzkWdRypAxfRsgyuTRc7TqPSvLlMB8GA1UdIwQY MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2 LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS+V5V1X IdV2joCJhWmd89zb1YkIBvFJ36BVz/xMiAMUxSVoAZogxk6UDrxjQ+XgNyD4wc1I Yd3ASGA9qBsnXCGUheMMIuYZYoSpyShyiHF+v2fBo08tTRLSGqfPMebCIebtu5ui Av0H1XanNWtug0KVDiBHqg4ulX4PPH+/0i6kIhcMaI88MOin2uIl16cjZmaaJwEB k3bPZafrvuNjgp3TbGqz+4B8TGkBtWR4IXwmH2jpgk+kiiooeMg2TE5nHwpBHrIS NPMx9a0XNsqy31iruu3eWUfA73HKSWyzdma2FBVZRu4ehk0N5LNjOswjmLSZcs1C 1f9MJ/KkZUOyxg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:32 2026 by rpki-client