This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json) Hash identifier: lhEKuS8pzO1hxswUejmoD+oA7tGlxRnDX4hCWsi19vY= Subject key identifier: 71:F8:50:29:82:9D:A7:98:0E:ED:F0:40:A7:04:AB:58:D2:86:5A:B1 Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Certificate serial: 019BF46265D8EDEFFB0F0E0263B5EBAA5694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft Manifest number: 04C4 Signing time: Sun 25 Jan 2026 09:00:47 +0000 Manifest this update: Sun 25 Jan 2026 09:00:47 +0000 Manifest next update: Mon 26 Jan 2026 09:00:47 +0000 Files and hashes: 1: HwD4cyrwIKeODHcEWvQPjWNfNAU.roa (hash: A9msp0CJMQoW2BR940+KvuS4ZriMwEJxGVLiaXmijlw=) 2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: WmehNy0HE0mUMOadMn5axMCwEb53q8tRSaeybg4Gnog=) 3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:65:d8:ed:ef:fb:0f:0e:02:63:b5:eb:aa:56:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Validity Not Before: Jan 25 09:00:47 2026 GMT Not After : Jan 26 09:00:47 2026 GMT Subject: CN=71f85029829da7980eedf040a704ab58d2865ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:4d:ff:be:5b:f2:cf:f7:f1:4d:81:0c:47: 31:f0:ac:c4:08:4f:16:fe:1e:74:85:5c:36:29:5e: e4:fa:51:25:71:ca:de:93:16:7b:f9:a7:8f:87:0f: 35:20:54:06:26:01:e2:db:c8:52:d5:80:6d:33:57: 4e:d7:fc:b8:a5:d3:a9:6c:4e:c6:01:d6:87:95:da: 16:f0:99:05:dd:61:f6:ac:fd:08:ef:78:0d:f8:57: b5:d1:eb:1a:01:f3:c7:a7:41:98:ba:eb:a0:b1:4f: 01:c5:aa:56:dd:76:88:22:e9:2f:ac:94:c2:4b:38: cf:f3:fb:5d:26:7b:c2:aa:c8:23:af:8c:f2:06:79: ee:f3:57:fd:29:6d:49:d9:3d:cf:83:fa:c8:26:2e: 9d:68:f9:75:69:f4:d8:64:66:d7:be:45:66:6d:95: 99:b6:8f:8f:a1:08:c9:3c:64:c3:c4:8c:d9:51:37: 60:e5:e8:48:45:67:e7:26:e1:ed:5d:d1:a9:c3:36: 27:be:74:85:3c:2b:4c:17:fa:4d:93:b6:0f:87:98: b2:37:b0:63:b9:1a:43:47:29:72:d1:e3:d6:04:6c: b8:f3:fa:18:57:b6:5a:48:fc:89:13:7b:2c:1b:7c: a2:63:d5:c2:5a:0d:82:51:45:32:fd:97:e2:db:32: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:50:29:82:9D:A7:98:0E:ED:F0:40:A7:04:AB:58:D2:86:5A:B1 X509v3 Authority Key Identifier: keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:9e:84:94:11:e1:96:e8:65:a3:57:c7:16:2f:a6:76:9e: 55:fe:87:92:b1:cf:09:f7:2f:2b:05:73:15:81:e5:a8:ac:c0: 4b:f5:f6:75:4c:f4:01:4c:86:e7:48:7f:fe:b0:74:32:53:ec: 2b:a9:cc:1a:71:83:4a:5a:6c:16:2e:c2:51:ef:8c:80:30:73: 65:9e:16:0a:96:cd:57:aa:b5:10:2e:bd:30:80:ad:67:c7:09: 55:4d:c1:4f:23:54:d1:ec:21:7f:99:95:65:6e:f1:b2:94:67: 11:e8:cf:54:25:a8:bb:6f:74:c8:7f:44:3a:79:74:85:81:d1: 53:6e:ff:a4:29:b6:46:47:9c:7d:3e:ab:66:64:66:e7:2a:e4: aa:64:4e:9b:7e:f2:f8:24:d3:f3:2d:86:69:76:26:3a:ea:70: 4a:7b:e2:24:d3:01:88:05:a6:80:0c:a7:4f:d5:25:51:b4:e3: 9b:ff:b4:49:b3:07:5f:8a:94:a9:a1:e8:d0:01:5c:6f:89:26: ea:2b:ec:0f:a6:4e:c6:02:5d:ba:ad:cd:3c:46:62:09:3e:fc: 79:5a:1a:32:a6:3f:f2:54:7d:cf:db:fe:86:f7:75:64:a2:34: 15:54:d7:9d:7f:79:ba:c5:56:5d:3f:5d:b7:21:64:2d:90:be: f9:b7:76:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YmXY7e/7Dw4CY7XrqlaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3 NTRlYzQwHhcNMjYwMTI1MDkwMDQ3WhcNMjYwMTI2MDkwMDQ3WjAzMTEwLwYDVQQD Eyg3MWY4NTAyOTgyOWRhNzk4MGVlZGYwNDBhNzA0YWI1OGQyODY1YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD1N/75b8s/38U2BDEcx8KzECE8W /h50hVw2KV7k+lElccrekxZ7+aePhw81IFQGJgHi28hS1YBtM1dO1/y4pdOpbE7G AdaHldoW8JkF3WH2rP0I73gN+Fe10esaAfPHp0GYuuugsU8BxapW3XaIIukvrJTC SzjP8/tdJnvCqsgjr4zyBnnu81f9KW1J2T3Pg/rIJi6daPl1afTYZGbXvkVmbZWZ to+PoQjJPGTDxIzZUTdg5ehIRWfnJuHtXdGpwzYnvnSFPCtMF/pNk7YPh5iyN7Bj uRpDRyly0ePWBGy48/oYV7ZaSPyJE3ssG3yiY9XCWg2CUUUy/Zfi2zLICQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH4UCmCnaeYDu3wQKcEq1jShlqxMB8GA1UdIwQY MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1 LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOGehJQR 4ZboZaNXxxYvpnaeVf6HkrHPCfcvKwVzFYHlqKzAS/X2dUz0AUyG50h//rB0MlPs K6nMGnGDSlpsFi7CUe+MgDBzZZ4WCpbNV6q1EC69MICtZ8cJVU3BTyNU0ewhf5mV ZW7xspRnEejPVCWou290yH9EOnl0hYHRU27/pCm2RkecfT6rZmRm5yrkqmROm37y +CTT8y2GaXYmOupwSnviJNMBiAWmgAynT9UlUbTjm/+0SbMHX4qUqaHo0AFcb4km 6ivsD6ZOxgJduq3NPEZiCT78eVoaMqY/8lR9z9v+hvd1ZKI0FVTXnX95usVWXT9d tyFkLZC++bd2vg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:52:45 2026 by rpki-client