This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json) Hash identifier: LrEyfZ4PW2vmLh9edSrJmXAScg/Gh6l6HCH9LGoj+GA= Subject key identifier: 6B:08:4D:9E:CC:E5:E0:88:8F:7E:45:E8:B1:C8:57:01:95:BA:5D:4E Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Certificate serial: 019BFCC0CD778E99B9157AB0CF48DE025021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft Manifest number: 064B Signing time: Tue 27 Jan 2026 00:00:52 +0000 Manifest this update: Tue 27 Jan 2026 00:00:52 +0000 Manifest next update: Wed 28 Jan 2026 00:00:52 +0000 Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: zh+YSJcP4k9deQGEM5ytZi1cPcIofUv+iKx0RCkyZzQ=) 2: rFR6ifvFvE2ynV2hmLnL9rHW-es.roa (hash: S4CeuRl2W6crNxhLlfTzDmJqM3oGkzLJPZkdIsK+MO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:cd:77:8e:99:b9:15:7a:b0:cf:48:de:02:50:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Validity Not Before: Jan 27 00:00:52 2026 GMT Not After : Jan 28 00:00:52 2026 GMT Subject: CN=6b084d9ecce5e0888f7e45e8b1c8570195ba5d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:9b:d3:f6:72:cb:cb:36:fc:a6:f8:cf:0a: 99:4d:e1:b6:b5:b5:12:c6:5e:5e:f5:98:e1:ed:74: 2b:2f:8f:81:d4:21:e4:77:de:fa:c0:67:a1:9e:45: a6:28:59:59:40:a6:95:ef:00:7e:94:c3:d2:e8:0e: 7b:6b:a6:6a:85:ed:8a:67:b3:e3:e4:21:dd:01:9b: 7f:c6:f1:e2:d4:76:61:d5:b4:c8:22:1c:50:1f:28: 00:b0:a5:db:e9:1b:56:31:a5:c9:3c:99:d9:12:dc: 5c:e5:08:8d:ee:67:c3:88:46:42:71:a4:26:22:df: 50:3b:5d:22:33:ac:5e:54:0d:30:f4:63:53:35:94: ce:4b:82:5e:7d:e4:9b:8b:3e:22:34:a9:8e:65:0e: cf:1c:ce:ce:e8:ce:4a:3e:72:78:6a:8e:56:6e:16: b0:f3:1c:b8:bd:a9:59:03:aa:50:4d:c4:09:bf:62: 5c:f7:24:17:e8:b6:2d:c2:c8:2e:93:88:41:ab:26: 69:39:0d:8f:0e:7f:22:71:e5:be:97:7e:b8:e4:fe: be:d9:b6:a0:48:54:5e:dd:66:8a:a1:6b:34:ab:3e: 54:7b:d2:c5:70:c4:71:3a:a8:cf:4b:a6:f9:f9:41: a3:7a:0d:49:fb:ce:c2:6e:89:79:cd:e8:52:30:8c: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:08:4D:9E:CC:E5:E0:88:8F:7E:45:E8:B1:C8:57:01:95:BA:5D:4E X509v3 Authority Key Identifier: keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0a:05:56:40:dc:8b:37:cc:bb:a1:b1:46:2d:66:61:3f:9c: a1:45:d0:22:c7:ee:7e:6f:f7:72:08:53:98:0a:45:a8:e2:07: df:20:6d:ce:69:15:ed:67:6f:6b:44:c1:0b:8a:5a:66:f8:4c: 75:96:7f:bb:7d:a1:a2:38:7c:79:d6:aa:b2:6e:9e:bb:aa:c7: 1d:24:0b:72:d9:e6:05:85:3e:e9:b0:60:0c:00:2a:8f:a5:1b: 45:f8:86:ca:f0:57:bf:12:1e:95:d8:bf:4f:2b:bb:16:bb:d9: e9:1a:88:33:fd:d1:a1:27:9c:ab:7c:38:80:98:f7:58:62:6d: 33:dd:2d:6c:e7:d8:e2:d1:ad:05:a7:51:5e:72:8e:d3:a6:ff: 56:85:ca:0c:62:ef:58:ff:35:8d:ab:a5:4d:2c:46:c6:3a:9f: bd:c6:cf:68:63:49:c2:19:3b:38:d6:a3:1b:d6:b8:d9:2f:54: 43:bc:51:4b:b3:61:7e:30:70:e0:12:9d:eb:69:8b:a1:6d:16: 6d:47:82:a6:91:87:b6:f1:ea:52:35:69:a0:57:b5:a7:2a:8c: c8:81:76:7f:78:6e:a0:69:40:78:24:fe:d9:24:47:24:bc:0c: 41:db:0b:06:0b:6d:f4:bc:72:89:23:1d:51:39:7a:d4:68:fb: 3e:26:57:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wM13jpm5FXqwz0jeAlAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk ZDQ5YTAwHhcNMjYwMTI3MDAwMDUyWhcNMjYwMTI4MDAwMDUyWjAzMTEwLwYDVQQD Eyg2YjA4NGQ5ZWNjZTVlMDg4OGY3ZTQ1ZThiMWM4NTcwMTk1YmE1ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Ob0/Zyy8s2/Kb4zwqZTeG2tbUS xl5e9Zjh7XQrL4+B1CHkd976wGehnkWmKFlZQKaV7wB+lMPS6A57a6Zqhe2KZ7Pj 5CHdAZt/xvHi1HZh1bTIIhxQHygAsKXb6RtWMaXJPJnZEtxc5QiN7mfDiEZCcaQm It9QO10iM6xeVA0w9GNTNZTOS4JefeSbiz4iNKmOZQ7PHM7O6M5KPnJ4ao5Wbhaw 8xy4valZA6pQTcQJv2Jc9yQX6LYtwsguk4hBqyZpOQ2PDn8iceW+l3645P6+2bag SFRe3WaKoWs0qz5Ue9LFcMRxOqjPS6b5+UGjeg1J+87Cbol5zehSMIziEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsITZ7M5eCIj35F6LHIVwGVul1OMB8GA1UdIwQY MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3 LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwoFVkDc izfMu6GxRi1mYT+coUXQIsfufm/3cghTmApFqOIH3yBtzmkV7Wdva0TBC4paZvhM dZZ/u32hojh8edaqsm6eu6rHHSQLctnmBYU+6bBgDAAqj6UbRfiGyvBXvxIeldi/ Tyu7FrvZ6RqIM/3RoSecq3w4gJj3WGJtM90tbOfY4tGtBadRXnKO06b/VoXKDGLv WP81jaulTSxGxjqfvcbPaGNJwhk7ONajG9a42S9UQ7xRS7NhfjBw4BKd62mLoW0W bUeCppGHtvHqUjVpoFe1pyqMyIF2f3huoGlAeCT+2SRHJLwMQdsLBgtt9LxyiSMd UTl61Gj7PiZXig== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:27 2026 by rpki-client