This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json) Hash identifier: EGOoq9gDvtkGoqYNgCO3Ze8CFYkIbMGHyd6LzS++Mgo= Subject key identifier: 04:A8:A1:8B:BD:CF:19:87:E2:B6:B7:09:01:B5:34:89:14:78:8F:C9 Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b Certificate serial: 019BFBAE9F88E2CA8401DA536F0B6CF8C05C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft Manifest number: 07BC Signing time: Mon 26 Jan 2026 19:01:23 +0000 Manifest this update: Mon 26 Jan 2026 19:01:23 +0000 Manifest next update: Tue 27 Jan 2026 19:01:23 +0000 Files and hashes: 1: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (hash: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI=) 2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 4oDTnip2pXVmOkR+mTKP0t0PzOAzzl8WTgCgW9T2Uns=) 3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=) 4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:9f:88:e2:ca:84:01:da:53:6f:0b:6c:f8:c0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b Validity Not Before: Jan 26 19:01:23 2026 GMT Not After : Jan 27 19:01:23 2026 GMT Subject: CN=04a8a18bbdcf1987e2b6b70901b5348914788fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:b7:ab:5e:55:44:e2:0d:0e:2a:a6:57:55: ca:09:00:83:f1:2d:4b:9f:ac:14:32:ff:e5:89:3a: db:53:1d:37:de:10:cc:2d:33:5e:24:1c:3d:21:38: ef:c6:06:fa:3c:c8:b8:8e:db:0a:aa:04:f8:a8:37: 77:ab:4c:2b:01:fe:91:c2:4d:5f:cb:38:bd:e7:0d: f6:f3:3d:e7:29:1b:0a:23:a3:33:05:63:8e:36:39: e4:94:81:26:d9:ec:21:81:12:c8:18:94:2e:4d:74: fa:3a:bb:fc:03:2d:6a:4c:2c:66:14:11:d1:bf:12: 0a:d5:4e:7a:a2:e5:22:92:c0:e1:ab:1e:d8:15:aa: 35:d1:84:9a:8d:af:56:2a:02:ea:3c:f3:60:cf:d7: 89:45:23:b8:fd:96:22:91:d5:11:02:66:30:d8:7b: d4:7d:d3:1f:de:d5:ac:23:9b:15:d2:9c:d6:a0:dd: e8:a9:65:12:7e:bc:a9:36:97:27:d6:01:c1:a6:ce: c7:01:fd:7b:9e:4a:01:3b:22:ba:40:01:d5:c0:0c: 73:82:07:c7:88:87:48:09:04:03:7f:d3:f8:83:c0: c4:d5:f1:6f:ba:74:ad:ff:f8:31:56:be:50:2b:08: 71:71:97:b7:c9:c6:ed:d4:c6:5e:44:c9:48:87:ac: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A8:A1:8B:BD:CF:19:87:E2:B6:B7:09:01:B5:34:89:14:78:8F:C9 X509v3 Authority Key Identifier: keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:a6:c5:9f:d8:67:0c:84:3f:d6:cf:18:99:5a:9a:dd:1a: e2:15:ac:46:df:0e:1c:9d:16:d6:7f:06:e6:4c:2a:cb:8a:72: 36:7c:b4:04:28:32:c1:4b:b9:14:2c:61:19:05:5d:6d:f5:4e: de:32:81:4e:ab:89:cb:1f:ee:56:8d:ca:49:a4:31:2c:2c:e8: d9:ab:84:5e:8e:38:73:68:d3:9e:a6:81:5a:3b:bd:ec:ee:da: 9b:a7:85:99:b2:44:d1:69:8e:0d:ce:6d:39:d6:45:42:0b:de: c7:3d:1e:8a:a6:a2:76:6d:1c:d4:26:80:40:41:a5:06:75:8d: df:8f:36:46:fe:62:22:79:f6:93:03:08:9b:d0:76:de:8e:c9: f5:1f:62:20:6f:c0:f1:4c:32:d7:4a:3d:a0:1b:bd:e3:65:a2: 3b:9f:96:73:0b:f2:59:1c:c7:ac:60:91:13:18:c6:3d:c2:d1: ff:3e:86:62:7d:43:c3:88:93:c9:24:e8:57:a2:b8:12:17:31: 06:c5:57:a6:69:ae:16:ce:da:a5:34:db:22:70:21:ff:a3:9d: 81:75:d5:0f:28:cf:7a:79:4a:cf:09:7b:64:7b:c9:e1:83:05: 56:4a:f4:f8:16:46:dc:21:d6:83:e6:b8:bd:ae:c4:6f:60:58: 52:b4:91:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rp+I4sqEAdpTbwts+MBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh Njc3MGIwHhcNMjYwMTI2MTkwMTIzWhcNMjYwMTI3MTkwMTIzWjAzMTEwLwYDVQQD EygwNGE4YTE4YmJkY2YxOTg3ZTJiNmI3MDkwMWI1MzQ4OTE0Nzg4ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2S3q15VROINDiqmV1XKCQCD8S1L n6wUMv/liTrbUx033hDMLTNeJBw9ITjvxgb6PMi4jtsKqgT4qDd3q0wrAf6Rwk1f yzi95w328z3nKRsKI6MzBWOONjnklIEm2ewhgRLIGJQuTXT6Orv8Ay1qTCxmFBHR vxIK1U56ouUiksDhqx7YFao10YSaja9WKgLqPPNgz9eJRSO4/ZYikdURAmYw2HvU fdMf3tWsI5sV0pzWoN3oqWUSfrypNpcn1gHBps7HAf17nkoBOyK6QAHVwAxzggfH iIdICQQDf9P4g8DE1fFvunSt//gxVr5QKwhxcZe3ycbt1MZeRMlIh6x3qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASooYu9zxmH4ra3CQG1NIkUeI/JMB8GA1UdIwQY MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt ZTA4MDJmNDc0NDQ0LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0 LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCqmxZ/Y ZwyEP9bPGJlamt0a4hWsRt8OHJ0W1n8G5kwqy4pyNny0BCgywUu5FCxhGQVdbfVO 3jKBTquJyx/uVo3KSaQxLCzo2auEXo44c2jTnqaBWju97O7am6eFmbJE0WmODc5t OdZFQgvexz0eiqaidm0c1CaAQEGlBnWN3482Rv5iInn2kwMIm9B23o7J9R9iIG/A 8Uwy10o9oBu942WiO5+WcwvyWRzHrGCRExjGPcLR/z6GYn1Dw4iTySToV6K4Ehcx BsVXpmmuFs7apTTbInAh/6OdgXXVDyjPenlKzwl7ZHvJ4YMFVkr0+BZG3CHWg+a4 va7Eb2BYUrSREQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:20 2026 by rpki-client