This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json) Hash identifier: 0G/wM+u667EmyaIxWIBClx8Ghz8MuS7Jb0SavLp0BFU= Subject key identifier: 3E:50:DB:54:5F:6D:5E:7E:B4:4C:DE:B0:58:6B:EC:6E:40:FC:95:62 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019BF6F5EAF0A1D3C95C49B1B46A3B428A4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft Manifest number: 0D95 Signing time: Sun 25 Jan 2026 21:01:10 +0000 Manifest this update: Sun 25 Jan 2026 21:01:10 +0000 Manifest next update: Mon 26 Jan 2026 21:01:10 +0000 Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=) 2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: eGH1Y6fD8cyW2FTbPYveXTAuz2d3DT1epRmiOeXOEQo=) 3: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=) 4: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=) 5: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=) 6: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=) 7: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ea:f0:a1:d3:c9:5c:49:b1:b4:6a:3b:42:8a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 25 21:01:10 2026 GMT Not After : Jan 26 21:01:10 2026 GMT Subject: CN=3e50db545f6d5e7eb44cdeb0586bec6e40fc9562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:8b:9c:1b:3f:f5:9c:db:29:60:0b:f4:6f: e2:e9:e8:ad:f7:c9:0b:ed:86:69:9a:94:cb:41:dd: d2:b1:5e:50:c7:c0:a7:04:14:8a:02:de:77:3a:49: 87:37:0b:ba:df:49:fc:96:ae:4a:a0:37:40:61:87: 49:44:f6:a1:cd:5b:60:be:64:0f:ba:59:b1:11:1b: de:06:c8:c9:fe:25:21:59:27:84:ae:b9:97:37:87: bc:90:90:0b:d3:e6:92:fa:ae:aa:2e:c3:3a:f0:a8: d5:ea:24:61:10:ac:33:9e:be:9a:c5:b6:f6:27:54: bd:2c:27:4c:95:5f:8b:e9:47:a8:fd:f8:aa:a6:39: e8:01:d2:15:09:01:88:a3:83:97:50:2e:aa:40:da: c1:6c:a0:c2:b9:0e:b3:72:56:17:e5:f7:fb:8d:fa: f0:d8:33:8e:11:a0:a0:7d:0f:12:2b:18:d9:89:8a: 56:09:d5:42:15:95:ed:15:4b:c7:19:6f:a5:36:ad: 77:66:c4:ec:5f:86:b2:4a:4b:88:cf:cb:ec:11:d6: 40:0b:92:57:36:fb:63:17:ef:b9:aa:a6:93:85:88: c3:93:23:44:5f:2b:dc:43:0c:e5:42:87:34:bc:d3: 56:80:94:44:16:bd:51:76:f6:32:19:a6:66:6b:a1: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:50:DB:54:5F:6D:5E:7E:B4:4C:DE:B0:58:6B:EC:6E:40:FC:95:62 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f1:12:63:35:b4:f5:a2:3a:a1:85:07:3d:dd:04:8a:05:d3: d3:26:f2:66:78:be:2a:a2:81:64:3c:a6:46:73:d0:15:ca:04: 71:ad:e5:de:92:98:1e:63:d2:07:7f:16:25:6d:4a:6e:bf:cc: ea:2e:e4:1e:e9:1c:08:14:11:6a:f6:55:5a:48:de:04:a4:2c: 2a:50:69:89:c0:a0:e1:6a:09:7c:fe:2d:46:0a:c5:2b:b9:0f: 62:e2:3d:4e:35:d2:50:af:b3:07:9b:15:a5:81:6f:c9:e6:a6: 8f:cb:cc:1d:ff:aa:9d:6e:e2:c4:5d:28:aa:d9:6a:6f:b2:47: 09:0e:50:81:b2:62:89:ae:28:bc:82:15:c7:28:d5:86:60:22: 4f:c3:44:19:a8:49:63:ff:1c:91:6c:44:23:02:c6:aa:3b:4c: 23:49:16:d7:da:62:3c:e4:ed:e3:95:20:63:43:e3:63:50:6f: 32:2d:5d:04:df:f7:d1:ca:ef:e9:0a:fe:bd:5d:d2:c9:e0:05: bf:c5:ce:7b:be:aa:4d:ce:16:6e:4b:e5:2b:d3:29:96:9d:a6: 41:ed:fb:ab:4f:08:89:7e:03:10:0f:65:96:08:d1:ad:2a:03: fa:52:78:ab:3c:7c:3a:be:e9:8a:95:41:1b:55:a5:ac:43:7e: 84:c7:78:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29erwodPJXEmxtGo7QopOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTI1MjEwMTEwWhcNMjYwMTI2MjEwMTEwWjAzMTEwLwYDVQQD EygzZTUwZGI1NDVmNmQ1ZTdlYjQ0Y2RlYjA1ODZiZWM2ZTQwZmM5NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiLnBs/9ZzbKWAL9G/i6eit98kL 7YZpmpTLQd3SsV5Qx8CnBBSKAt53OkmHNwu630n8lq5KoDdAYYdJRPahzVtgvmQP ulmxERveBsjJ/iUhWSeErrmXN4e8kJAL0+aS+q6qLsM68KjV6iRhEKwznr6axbb2 J1S9LCdMlV+L6Ueo/fiqpjnoAdIVCQGIo4OXUC6qQNrBbKDCuQ6zclYX5ff7jfrw 2DOOEaCgfQ8SKxjZiYpWCdVCFZXtFUvHGW+lNq13ZsTsX4aySkuIz8vsEdZAC5JX NvtjF++5qqaThYjDkyNEXyvcQwzlQoc0vNNWgJREFr1RdvYyGaZma6FP4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5Q21RfbV5+tEzesFhr7G5A/JViMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPESYzW0 9aI6oYUHPd0EigXT0ybyZni+KqKBZDymRnPQFcoEca3l3pKYHmPSB38WJW1Kbr/M 6i7kHukcCBQRavZVWkjeBKQsKlBpicCg4WoJfP4tRgrFK7kPYuI9TjXSUK+zB5sV pYFvyeamj8vMHf+qnW7ixF0oqtlqb7JHCQ5QgbJiia4ovIIVxyjVhmAiT8NEGahJ Y/8ckWxEIwLGqjtMI0kW19piPOTt45UgY0PjY1BvMi1dBN/30crv6Qr+vV3SyeAF v8XOe76qTc4WbkvlK9Mplp2mQe37q08IiX4DEA9llgjRrSoD+lJ4qzx8Or7pipVB G1WlrEN+hMd4Hw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:30 2026 by rpki-client