This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json) Hash identifier: kQ5CAekw1v/f0y/MqzSxuGNR8ZJ3//6GHDqgRwkMaQc= Subject key identifier: D8:B2:49:57:8D:B1:D6:24:56:41:BC:23:E4:07:54:EF:43:BF:19:52 Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a Certificate serial: 019C20966C042C71B5D714E4C0D4463E2940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft Manifest number: 1794 Signing time: Mon 02 Feb 2026 23:00:54 +0000 Manifest this update: Mon 02 Feb 2026 23:00:54 +0000 Manifest next update: Tue 03 Feb 2026 23:00:54 +0000 Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: omcPYhXBDRH+9CKNz2WNI/sA6Ujy2GGwLQuNZ3KY6Rg=) 2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:96:6c:04:2c:71:b5:d7:14:e4:c0:d4:46:3e:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a Validity Not Before: Feb 2 23:00:54 2026 GMT Not After : Feb 3 23:00:54 2026 GMT Subject: CN=d8b249578db1d6245641bc23e40754ef43bf1952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:94:a8:ba:e1:7f:2f:e0:92:63:ef:0e:40:cc: 20:69:4b:7e:b4:fd:6e:10:8c:b4:85:db:e0:8b:5f: a4:35:0d:4a:74:d4:3b:e6:40:a7:0c:e5:dd:b2:a9: 28:d2:e0:ad:de:64:20:48:26:da:e0:c7:5c:97:46: de:2c:6e:5d:b1:20:5d:a6:31:e0:d4:ed:8d:8c:01: b5:70:aa:4d:6d:1b:29:e0:4f:d8:e9:c0:e4:46:ac: 12:e6:eb:34:28:9b:dc:5d:f7:f6:7c:05:60:3c:2c: f1:1b:09:6f:48:41:aa:b4:61:e6:34:d5:7d:3d:02: 71:cd:56:8b:96:0c:5d:73:0e:44:e0:62:c5:52:16: 8c:d3:5d:fa:e7:11:4d:3b:f8:f1:7b:fc:8e:e5:80: 9a:e7:72:2d:35:74:01:8b:8d:fa:47:91:c2:cb:8a: 31:35:e8:7c:99:e4:0a:b7:b3:77:c0:b9:f4:06:d6: 2d:6e:9b:06:56:02:55:78:31:4a:63:71:f6:29:f0: 07:6e:20:41:26:78:4e:02:63:a0:29:2f:e2:44:e9: 06:28:35:d4:d8:3b:62:dc:7a:52:f7:23:e2:e6:53: fc:e8:07:55:34:40:cd:c8:9c:bd:c9:a4:95:a3:8a: 84:d9:99:82:71:90:05:af:d1:d2:5d:d2:c8:32:f3: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:49:57:8D:B1:D6:24:56:41:BC:23:E4:07:54:EF:43:BF:19:52 X509v3 Authority Key Identifier: keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:12:a5:a9:68:dd:ec:ae:26:8c:b8:6c:1e:7e:05:a3:4e:14: f9:b4:f6:52:c5:3a:cb:85:81:2e:1a:64:15:a0:8f:b6:8f:e0: 24:07:34:2c:79:a7:45:3d:ef:d2:ad:bd:61:cd:bb:aa:9b:51: 2a:82:57:49:f8:cb:13:f1:ed:ab:41:17:37:a3:38:f8:15:0a: fa:83:37:75:b6:92:76:62:0d:ae:f6:fc:f7:b7:5f:95:aa:ce: 33:18:ef:e1:68:c6:94:13:83:38:ff:6a:ab:d1:4e:57:53:4a: 70:cc:08:15:91:47:d1:3e:22:b0:f8:7c:6c:22:a4:0f:0d:4b: e5:e0:df:55:4b:93:d5:2c:b4:18:4c:ed:1a:9a:5b:36:43:f1: 89:b7:f5:b2:ac:7a:ab:98:76:d6:d7:d2:69:cf:b1:bf:de:ad: 41:bd:0c:67:e0:5f:ec:5f:3d:74:48:a2:ea:ce:44:4b:dc:5b: 99:5a:50:80:86:ca:65:34:60:94:7f:b4:63:9e:a1:47:dd:53: 91:33:e5:a5:f8:0d:06:d8:03:bd:54:d4:6b:c4:89:61:85:53: 05:68:09:30:d6:27:61:2f:02:63:5c:5c:95:84:88:ad:d9:a3: 75:a0:ec:6e:56:ef:b1:60:4d:d3:bd:eb:6c:59:4d:22:b7:f0: bf:f9:62:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwglmwELHG11xTkwNRGPilAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm Y2Q4NWEwHhcNMjYwMjAyMjMwMDU0WhcNMjYwMjAzMjMwMDU0WjAzMTEwLwYDVQQD EyhkOGIyNDk1NzhkYjFkNjI0NTY0MWJjMjNlNDA3NTRlZjQzYmYxOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZSouuF/L+CSY+8OQMwgaUt+tP1u EIy0hdvgi1+kNQ1KdNQ75kCnDOXdsqko0uCt3mQgSCba4Mdcl0beLG5dsSBdpjHg 1O2NjAG1cKpNbRsp4E/Y6cDkRqwS5us0KJvcXff2fAVgPCzxGwlvSEGqtGHmNNV9 PQJxzVaLlgxdcw5E4GLFUhaM01365xFNO/jxe/yO5YCa53ItNXQBi436R5HCy4ox Neh8meQKt7N3wLn0BtYtbpsGVgJVeDFKY3H2KfAHbiBBJnhOAmOgKS/iROkGKDXU 2Dti3HpS9yPi5lP86AdVNEDNyJy9yaSVo4qE2ZmCcZAFr9HSXdLIMvPx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiySVeNsdYkVkG8I+QHVO9DvxlSMB8GA1UdIwQY MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRKlqWjd 7K4mjLhsHn4Fo04U+bT2UsU6y4WBLhpkFaCPto/gJAc0LHmnRT3v0q29Yc27qptR KoJXSfjLE/Htq0EXN6M4+BUK+oM3dbaSdmINrvb897dflarOMxjv4WjGlBODOP9q q9FOV1NKcMwIFZFH0T4isPh8bCKkDw1L5eDfVUuT1Sy0GEztGppbNkPxibf1sqx6 q5h21tfSac+xv96tQb0MZ+Bf7F89dEii6s5ES9xbmVpQgIbKZTRglH+0Y56hR91T kTPlpfgNBtgDvVTUa8SJYYVTBWgJMNYnYS8CY1xclYSIrdmjdaDsblbvsWBN073r bFlNIrfwv/li1w== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:29 2026 by rpki-client