This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json) Hash identifier: 3DoxpqtZZjpdt9Lo0mYPUT+hyGK1HMU8Rn2PnryYgJs= Subject key identifier: 99:5F:34:A1:35:50:52:1A:6C:C8:AF:CA:C6:FD:68:8B:39:B4:8C:38 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019BF8E4467810680DE5AB30A2BCBDB58BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft Manifest number: 0D96 Signing time: Mon 26 Jan 2026 06:01:08 +0000 Manifest this update: Mon 26 Jan 2026 06:01:08 +0000 Manifest next update: Tue 27 Jan 2026 06:01:08 +0000 Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=) 2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: 9b3X4Fhzt1B5wX0smEYcXtO63KxKUFT3fEF9eZFCjpw=) 3: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=) 4: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=) 5: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=) 6: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=) 7: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:46:78:10:68:0d:e5:ab:30:a2:bc:bd:b5:8b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 26 06:01:08 2026 GMT Not After : Jan 27 06:01:08 2026 GMT Subject: CN=995f34a13550521a6cc8afcac6fd688b39b48c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:eb:c0:a6:ea:2d:4e:94:d4:2c:a7:97:75: 62:94:b3:06:44:24:2d:b6:6a:c5:c6:02:cf:f6:d8: 95:dc:44:7c:fa:ed:c6:cf:65:f2:5b:29:4b:d0:45: 0b:89:55:97:f5:89:4e:53:13:aa:4a:63:49:d4:09: 14:71:89:75:e4:d9:5e:6a:2a:c2:44:c6:fa:38:b9: 4b:27:38:f6:ba:ce:6b:63:12:0c:fc:02:ba:96:a4: f0:7a:94:2f:31:bd:e9:5d:da:b1:88:02:2c:00:07: 92:3b:22:c0:0e:42:7e:e8:05:52:e0:d8:4d:aa:81: 42:81:4f:69:89:7f:f0:88:a1:e0:37:ab:a3:99:88: 52:5f:69:7d:0e:0c:48:42:75:db:c1:08:ce:32:63: 0a:4a:67:43:0f:ef:c7:78:39:0f:9f:62:c1:98:68: d3:d2:fb:60:f9:87:98:4e:fc:5a:0a:5b:63:02:d5: 6a:8b:43:70:c1:e2:52:9b:0a:ac:8a:54:fb:89:a5: a4:cb:a1:d3:c4:ea:a3:92:e7:4a:2b:a6:b0:ad:6f: 1a:59:d3:50:11:2f:84:57:b2:e3:d9:28:2d:67:8b: f0:97:fd:2c:36:e6:c1:3f:87:72:72:ba:a3:7e:af: 24:f0:24:8e:e4:ee:9c:1d:90:95:ea:cf:f4:ab:71: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:34:A1:35:50:52:1A:6C:C8:AF:CA:C6:FD:68:8B:39:B4:8C:38 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:39:db:cb:ac:49:d7:5b:31:1a:dc:0c:93:41:97:0b:06:26: a8:31:85:92:39:78:7e:e0:01:a7:ab:c1:a4:1b:9f:1f:3a:68: f7:3e:75:77:08:a9:52:aa:7e:36:0b:ce:0a:38:a6:24:13:ba: 3c:70:a4:28:5c:a0:ec:d8:a9:d3:ea:a6:8c:b0:1b:59:5b:d3: a7:10:b8:e4:a4:9b:3f:03:48:f7:c6:27:95:c9:a2:d3:9c:23: d9:c8:18:a5:09:57:97:c6:70:64:3e:e5:40:65:44:b1:28:26: c3:2d:05:e0:9f:4c:2e:e0:d1:b8:53:2f:17:a6:67:4b:3f:27: e0:9b:22:0b:6c:ad:2c:d1:46:3f:ea:93:62:90:4d:c4:67:41: d7:09:42:28:59:35:36:ad:33:3a:44:bb:8e:39:3b:8c:83:ba: 03:84:bd:fd:6b:95:c6:06:f3:d8:1e:b1:25:77:51:5e:b0:ba: b2:d5:22:8e:41:91:08:c7:2b:55:10:67:39:57:6d:91:12:82: af:db:b3:61:bd:d7:be:cc:12:c2:fc:5c:f1:00:ba:5a:c6:bd: c6:2d:66:5f:e5:14:31:67:97:9e:94:01:4c:43:37:83:73:4b: ac:73:f0:29:dc:f8:68:a3:98:d9:0e:54:ae:26:77:96:84:68: 7e:22:ab:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45EZ4EGgN5aswory9tYu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTI2MDYwMTA4WhcNMjYwMTI3MDYwMTA4WjAzMTEwLwYDVQQD Eyg5OTVmMzRhMTM1NTA1MjFhNmNjOGFmY2FjNmZkNjg4YjM5YjQ4YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzvrwKbqLU6U1Cynl3VilLMGRCQt tmrFxgLP9tiV3ER8+u3Gz2XyWylL0EULiVWX9YlOUxOqSmNJ1AkUcYl15NleairC RMb6OLlLJzj2us5rYxIM/AK6lqTwepQvMb3pXdqxiAIsAAeSOyLADkJ+6AVS4NhN qoFCgU9piX/wiKHgN6ujmYhSX2l9DgxIQnXbwQjOMmMKSmdDD+/HeDkPn2LBmGjT 0vtg+YeYTvxaCltjAtVqi0NwweJSmwqsilT7iaWky6HTxOqjkudKK6awrW8aWdNQ ES+EV7Lj2SgtZ4vwl/0sNubBP4dycrqjfq8k8CSO5O6cHZCV6s/0q3E3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlfNKE1UFIabMivysb9aIs5tIw4MB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDnby6xJ 11sxGtwMk0GXCwYmqDGFkjl4fuABp6vBpBufHzpo9z51dwipUqp+NgvOCjimJBO6 PHCkKFyg7Nip0+qmjLAbWVvTpxC45KSbPwNI98Ynlcmi05wj2cgYpQlXl8ZwZD7l QGVEsSgmwy0F4J9MLuDRuFMvF6ZnSz8n4JsiC2ytLNFGP+qTYpBNxGdB1wlCKFk1 Nq0zOkS7jjk7jIO6A4S9/WuVxgbz2B6xJXdRXrC6stUijkGRCMcrVRBnOVdtkRKC r9uzYb3XvswSwvxc8QC6Wsa9xi1mX+UUMWeXnpQBTEM3g3NLrHPwKdz4aKOY2Q5U riZ3loRofiKrBw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:01 2026 by rpki-client