This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: u1vRkCjiw8CykMBB/u9V50k9kL9KV3vcKfzKQQSPS2A= Subject key identifier: 0D:89:69:A5:3B:8D:7D:A5:13:89:C7:C7:C0:75:28:38:D4:E6:9C:11 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019BFBE51E948D099D4A96B7E44DDBC96725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 17FA Signing time: Mon 26 Jan 2026 20:00:55 +0000 Manifest this update: Mon 26 Jan 2026 20:00:55 +0000 Manifest next update: Tue 27 Jan 2026 20:00:55 +0000 Files and hashes: 1: 0kMqt-CPfgtjYdaZtK0l7K4Ure0.roa (hash: KGaaMrvGH34iblBGGLnwSzs+JaREEUUOumEoCywsnd8=) 2: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 3: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 4: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 5: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: facMyP8lwojGNPpiyXETxmA9LRtqOWyiOZI0+cLLRlY=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:1e:94:8d:09:9d:4a:96:b7:e4:4d:db:c9:67:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 26 20:00:55 2026 GMT Not After : Jan 27 20:00:55 2026 GMT Subject: CN=0d8969a53b8d7da51389c7c7c0752838d4e69c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:6c:b6:d4:19:bd:80:15:0b:63:5a:71:88: 0f:98:71:0f:60:4a:54:0e:0c:f7:a9:d5:1e:21:4f: fe:96:01:52:65:49:df:44:c0:ff:10:d7:dc:df:11: 00:57:22:34:15:05:5e:82:7c:ba:7a:ab:5b:b2:3b: 55:23:e1:a6:00:1a:02:0a:7f:29:8e:43:9d:cd:58: 55:51:36:c6:17:55:aa:e8:88:b8:e8:5c:94:50:be: 7f:96:d5:ba:1a:45:a9:52:38:d4:0e:d8:52:40:64: 09:96:72:a8:67:89:84:b2:7d:c8:3c:2e:6c:62:f8: 52:cf:36:82:b9:4c:22:4c:4c:a1:13:0b:0d:0d:4d: 0d:a3:5c:03:1d:c6:32:d1:4b:e8:39:8c:29:9d:0c: 5d:dc:cb:1a:33:7d:55:f0:21:1e:be:50:0f:54:79: c6:9c:71:e7:f6:b4:39:12:9c:81:fc:21:4d:9b:bb: f4:e1:c2:fa:24:61:3e:dc:d9:81:93:15:91:b9:de: b5:b1:6c:5a:48:b3:d0:77:39:72:10:e3:73:86:00: 06:e1:6b:aa:b4:27:bd:37:e8:19:20:8e:71:b8:24: 46:36:98:b1:4e:00:11:9a:7c:5c:1f:d6:f3:7f:32: 27:3d:a9:7c:5c:96:ac:11:53:84:7f:82:12:f2:1f: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:69:A5:3B:8D:7D:A5:13:89:C7:C7:C0:75:28:38:D4:E6:9C:11 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:10:b5:f6:76:ff:f2:f1:9f:39:b2:41:e4:9f:f3:1c:37:e9: fd:e8:8a:38:c0:e2:15:fc:49:ee:52:9f:84:3a:a6:ff:7c:be: 00:21:79:73:6c:1c:eb:c8:eb:49:13:53:f5:2a:39:5f:90:8c: 4b:a6:77:e6:d7:14:df:4a:e1:b2:76:80:62:ce:5d:1e:7e:b7: 02:6b:31:17:4d:25:cc:c9:f2:11:a9:7c:bf:7d:b3:96:77:4c: 09:42:e9:97:f5:00:f3:24:d8:68:6b:20:a5:00:c4:79:4d:e1: bd:2b:c6:44:41:85:ba:63:c2:36:73:a2:bd:7b:ee:dd:7c:ca: b8:66:a4:03:53:bc:16:e2:42:a7:5b:ee:72:1f:a4:d4:45:52: c8:f2:ee:6b:75:56:64:28:97:95:67:0f:fd:ef:0a:80:a6:4f: bb:46:31:04:a7:55:89:04:4f:28:ef:b0:7d:cc:4a:77:14:4c: df:2c:18:86:99:e5:dd:8d:1a:70:aa:11:8b:cd:7a:fe:87:b6: 55:ec:99:2c:68:7b:78:6f:70:f5:83:5a:34:68:e5:ef:df:a3: 93:7a:ca:85:6c:3b:d0:15:68:bb:8e:db:1a:c1:20:8a:3a:10: e5:05:38:9c:24:74:59:30:65:02:ee:90:6c:49:75:54:11:42: f0:b1:b9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75R6UjQmdSpa35E3byWclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTI2MjAwMDU1WhcNMjYwMTI3MjAwMDU1WjAzMTEwLwYDVQQD EygwZDg5NjlhNTNiOGQ3ZGE1MTM4OWM3YzdjMDc1MjgzOGQ0ZTY5YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE9sttQZvYAVC2NacYgPmHEPYEpU Dgz3qdUeIU/+lgFSZUnfRMD/ENfc3xEAVyI0FQVegny6eqtbsjtVI+GmABoCCn8p jkOdzVhVUTbGF1Wq6Ii46FyUUL5/ltW6GkWpUjjUDthSQGQJlnKoZ4mEsn3IPC5s YvhSzzaCuUwiTEyhEwsNDU0No1wDHcYy0UvoOYwpnQxd3MsaM31V8CEevlAPVHnG nHHn9rQ5EpyB/CFNm7v04cL6JGE+3NmBkxWRud61sWxaSLPQdzlyEONzhgAG4Wuq tCe9N+gZII5xuCRGNpixTgARmnxcH9bzfzInPal8XJasEVOEf4IS8h+leQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2JaaU7jX2lE4nHx8B1KDjU5pwRMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBC19nb/ 8vGfObJB5J/zHDfp/eiKOMDiFfxJ7lKfhDqm/3y+ACF5c2wc68jrSRNT9So5X5CM S6Z35tcU30rhsnaAYs5dHn63AmsxF00lzMnyEal8v32zlndMCULpl/UA8yTYaGsg pQDEeU3hvSvGREGFumPCNnOivXvu3XzKuGakA1O8FuJCp1vuch+k1EVSyPLua3VW ZCiXlWcP/e8KgKZPu0YxBKdViQRPKO+wfcxKdxRM3ywYhpnl3Y0acKoRi816/oe2 VeyZLGh7eG9w9YNaNGjl79+jk3rKhWw70BVou47bGsEgijoQ5QU4nCR0WTBlAu6Q bEl1VBFC8LG5Tw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:21 2026 by rpki-client