This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json) Hash identifier: hfvYtD/Ps7kGbTgvkzG32DtGuM9eBSLppOvttTTxhl0= Subject key identifier: 9D:A5:5A:8E:10:0F:99:63:70:B7:9F:9F:EB:93:66:03:BB:CD:5E:5B Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f Certificate serial: 019BDA3528D8E41B88C514FD40F447751146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft Manifest number: 0829 Signing time: Tue 20 Jan 2026 07:01:15 +0000 Manifest this update: Tue 20 Jan 2026 07:01:15 +0000 Manifest next update: Wed 21 Jan 2026 07:01:15 +0000 Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=) 2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: foTGbBkZrRqnPpNG7knwtMMVuVZLEvjvHCOWSytt9QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:35:28:d8:e4:1b:88:c5:14:fd:40:f4:47:75:11:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f Validity Not Before: Jan 20 07:01:15 2026 GMT Not After : Jan 21 07:01:15 2026 GMT Subject: CN=9da55a8e100f996370b79f9feb936603bbcd5e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:96:3c:38:c8:fa:e8:65:c7:c8:75:57:47: d6:64:71:a3:3f:b5:d4:ed:89:be:3d:2d:10:d4:6f: 81:9c:cd:59:83:39:51:63:06:d8:3c:f9:78:f7:b9: 0e:38:e4:07:94:ba:00:0f:f3:2c:12:a8:72:aa:12: 2b:9e:41:82:6d:32:a8:ee:18:15:94:a5:98:af:57: 4c:e9:04:91:60:48:24:05:01:ae:75:af:de:c0:92: f7:54:57:b1:6e:77:77:88:0e:f4:21:0d:48:58:a7: 5e:88:84:6c:e2:0b:81:54:b1:1b:56:08:8b:9c:e0: 5c:38:e9:56:5b:a9:e3:5f:3d:09:aa:4c:35:f1:e0: 27:07:00:05:20:1c:aa:1e:f5:50:d6:f8:65:a7:36: 29:af:ce:89:f7:03:5f:de:73:04:ea:58:9c:aa:f5: af:a8:d5:f3:ee:10:1b:36:c8:b6:5c:ed:35:0e:e4: 5c:71:da:2f:0d:7c:61:f0:f2:eb:60:e4:ee:50:d7: 7d:f4:a4:8e:2e:ef:ff:f9:2c:8e:01:89:e4:de:cf: 8c:82:57:5c:8b:40:ec:3c:9a:e0:29:46:5e:94:bb: db:81:ff:80:3f:a1:f0:07:66:5f:92:99:84:ca:b0: 6c:9d:93:48:3b:4c:ef:47:7a:f8:e7:ff:ac:e2:de: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A5:5A:8E:10:0F:99:63:70:B7:9F:9F:EB:93:66:03:BB:CD:5E:5B X509v3 Authority Key Identifier: keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:be:84:bc:9c:16:71:24:00:a0:91:f2:20:b0:9a:fa:c6:61: 99:6b:2e:6d:75:31:d5:e4:b3:75:74:ca:c5:c4:c9:57:2d:09: 92:3a:0d:ca:6d:a2:b3:38:a2:a6:21:25:01:99:cf:91:ee:1f: 54:53:e5:c6:bd:09:f7:47:6f:24:59:8c:f1:bd:4f:b0:7c:1e: cd:e3:c7:ab:0d:aa:18:60:0b:a4:12:14:cb:db:f3:7d:f9:cb: 27:79:f5:2e:16:14:e6:68:a1:a1:e3:22:d9:7c:a7:29:58:59: 9f:45:bd:e8:a3:df:da:dd:d3:ed:7d:6b:a7:1c:56:21:be:8c: c7:60:9a:9d:4b:7a:f1:1d:52:ae:4b:0e:01:d3:1d:73:85:c8: c0:fb:73:c6:11:88:36:af:2e:71:2f:c3:65:66:e4:03:0c:89: d9:dd:9e:24:35:20:20:9f:a7:33:82:ee:ee:43:7d:e1:73:c6: ab:9e:c3:9a:e4:97:fe:17:8c:f3:c8:1a:d2:77:7b:c5:3a:56: b9:7e:1a:67:fa:ea:a8:f0:1b:2b:80:7d:55:b7:15:58:4f:f7: bc:51:95:22:3b:df:88:83:99:bc:f2:1a:01:23:d8:70:86:a2: 7e:de:38:6e:8b:58:ab:a2:d1:35:4d:52:3e:b4:9c:d8:6b:f2: 2f:14:c8:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaNSjY5BuIxRT9QPRHdRFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx MTA1NWYwHhcNMjYwMTIwMDcwMTE1WhcNMjYwMTIxMDcwMTE1WjAzMTEwLwYDVQQD Eyg5ZGE1NWE4ZTEwMGY5OTYzNzBiNzlmOWZlYjkzNjYwM2JiY2Q1ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uWWPDjI+uhlx8h1V0fWZHGjP7XU 7Ym+PS0Q1G+BnM1ZgzlRYwbYPPl497kOOOQHlLoAD/MsEqhyqhIrnkGCbTKo7hgV lKWYr1dM6QSRYEgkBQGuda/ewJL3VFexbnd3iA70IQ1IWKdeiIRs4guBVLEbVgiL nOBcOOlWW6njXz0Jqkw18eAnBwAFIByqHvVQ1vhlpzYpr86J9wNf3nME6licqvWv qNXz7hAbNsi2XO01DuRccdovDXxh8PLrYOTuUNd99KSOLu//+SyOAYnk3s+Mgldc i0DsPJrgKUZelLvbgf+AP6HwB2ZfkpmEyrBsnZNIO0zvR3r45/+s4t5SLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2lWo4QD5ljcLefn+uTZgO7zV5bMB8GA1UdIwQY MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb6EvJwW cSQAoJHyILCa+sZhmWsubXUx1eSzdXTKxcTJVy0JkjoNym2isziipiElAZnPke4f VFPlxr0J90dvJFmM8b1PsHwezePHqw2qGGALpBIUy9vzffnLJ3n1LhYU5mihoeMi 2XynKVhZn0W96KPf2t3T7X1rpxxWIb6Mx2CanUt68R1SrksOAdMdc4XIwPtzxhGI Nq8ucS/DZWbkAwyJ2d2eJDUgIJ+nM4Lu7kN94XPGq57DmuSX/heM88ga0nd7xTpW uX4aZ/rqqPAbK4B9VbcVWE/3vFGVIjvfiIOZvPIaASPYcIaift44botYq6LRNU1S PrSc2GvyLxTI+A== -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:34 2026 by rpki-client