This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: 4nkyRZtxnh2B+wbxMavZUz3U8lQGmK5OKy0HqpFZbwg= Subject key identifier: 11:3E:D5:34:02:33:39:15:B4:55:84:32:53:02:7B:E0:6A:E8:50:A7 Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019BF9522577A51540E7C98A184831CACE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 0464 Signing time: Mon 26 Jan 2026 08:01:08 +0000 Manifest this update: Mon 26 Jan 2026 08:01:08 +0000 Manifest next update: Tue 27 Jan 2026 08:01:08 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: dIg8Nqb2VODyqv30P0FXeqUBNkaMOsOAjMWeWC1beLc=) 2: xeVq-PBuKK_SBfzuo8r_1P3J9i0.roa (hash: nSDj1T3Jr53LrWElVUryMfTC/F/bH2T8+fPwvgYwitI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:25:77:a5:15:40:e7:c9:8a:18:48:31:ca:ce:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Jan 26 08:01:08 2026 GMT Not After : Jan 27 08:01:08 2026 GMT Subject: CN=113ed53402333915b455843253027be06ae850a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:25:16:15:01:f3:bc:19:f1:d4:2b:94:2e: 18:b0:34:80:43:03:ce:ec:e9:00:03:32:83:07:a0: 86:c9:d0:25:93:47:06:a7:14:c8:d5:ef:0b:41:58: 89:36:c8:95:4d:f3:70:55:e2:3f:53:3c:22:13:60: 80:ea:87:ef:bd:b9:f2:7f:b6:23:23:24:ac:1e:be: 11:7b:9c:02:2e:5b:16:28:e6:af:fd:7b:2b:cb:cc: 49:38:e9:4b:b0:18:34:ef:f1:c8:8f:a3:e1:55:94: 57:d2:d8:a9:dc:19:a3:9e:76:ee:22:68:a8:f4:1d: 37:36:e1:a1:2f:bc:8f:0d:14:fc:1b:66:f8:9a:15: 51:ac:6a:9f:b1:5b:2b:63:d3:a7:cf:53:a4:e7:9a: a3:78:f1:7f:67:5d:8c:2b:37:b8:88:48:d2:5a:23: 31:3b:72:c4:32:f0:63:40:df:65:1b:7b:00:00:04: 26:7b:e8:f3:3b:e3:b4:1c:b1:85:21:62:42:71:c0: b1:c5:4f:38:ba:c9:77:f7:a0:35:ff:d8:1b:99:0b: eb:98:a9:5a:31:24:0f:20:78:a4:c5:a4:cd:26:de: 63:42:99:af:f0:2f:96:cb:21:64:07:d1:f1:44:7a: f5:33:68:c4:da:f6:98:47:15:87:a6:9a:ed:9b:4f: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3E:D5:34:02:33:39:15:B4:55:84:32:53:02:7B:E0:6A:E8:50:A7 X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:64:aa:8a:0e:7b:29:10:88:9a:2d:de:64:6e:6e:03:57:34: c7:1f:d6:1f:6c:7f:d1:bb:db:b9:05:29:a9:79:b9:d7:97:28: 3c:3a:08:14:77:bc:3e:fd:e1:5b:ad:bd:cf:15:a6:00:2e:ff: 2a:f1:4f:3e:a8:9c:8e:eb:40:8d:80:f0:e1:46:54:14:6c:ca: 1a:2c:9c:89:34:59:90:69:13:78:8a:06:ac:87:ef:ea:75:ba: 49:76:1a:98:09:b4:81:b0:a3:a0:a7:1b:5d:10:17:cf:21:31: bc:44:c6:67:5c:b6:ce:22:49:0c:f8:ae:f5:f9:ab:f5:b6:66: fb:2a:e1:22:40:69:f7:af:76:59:fa:8b:25:c4:cd:9e:8f:17: 71:1a:5e:3f:0e:e1:c2:ad:01:f3:c9:e9:9d:ea:31:e4:e7:c3: 70:6a:85:21:1f:09:c1:fd:16:da:93:61:9a:48:e6:c1:98:05: 14:f9:fa:bf:45:44:c0:37:13:81:2c:a1:65:09:6f:49:3b:9f: 20:d6:2c:72:5d:71:d6:4c:3a:29:a6:dc:fc:ba:d7:aa:eb:3e: 4c:78:80:44:8f:08:9f:0e:a4:70:60:94:9e:6c:31:65:68:88: 0e:43:ef:43:ef:3c:2c:d7:ca:0a:4c:fe:85:2d:bc:6e:1f:6f: 9b:a5:72:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UiV3pRVA58mKGEgxys4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjYwMTI2MDgwMTA4WhcNMjYwMTI3MDgwMTA4WjAzMTEwLwYDVQQD EygxMTNlZDUzNDAyMzMzOTE1YjQ1NTg0MzI1MzAyN2JlMDZhZTg1MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg4lFhUB87wZ8dQrlC4YsDSAQwPO 7OkAAzKDB6CGydAlk0cGpxTI1e8LQViJNsiVTfNwVeI/UzwiE2CA6ofvvbnyf7Yj IySsHr4Re5wCLlsWKOav/Xsry8xJOOlLsBg07/HIj6PhVZRX0tip3BmjnnbuImio 9B03NuGhL7yPDRT8G2b4mhVRrGqfsVsrY9Onz1Ok55qjePF/Z12MKze4iEjSWiMx O3LEMvBjQN9lG3sAAAQme+jzO+O0HLGFIWJCccCxxU84usl396A1/9gbmQvrmKla MSQPIHikxaTNJt5jQpmv8C+WyyFkB9HxRHr1M2jE2vaYRxWHpprtm09STwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE+1TQCMzkVtFWEMlMCe+Bq6FCnMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2Sqig57 KRCImi3eZG5uA1c0xx/WH2x/0bvbuQUpqXm515coPDoIFHe8Pv3hW629zxWmAC7/ KvFPPqicjutAjYDw4UZUFGzKGiyciTRZkGkTeIoGrIfv6nW6SXYamAm0gbCjoKcb XRAXzyExvETGZ1y2ziJJDPiu9fmr9bZm+yrhIkBp9692WfqLJcTNno8XcRpePw7h wq0B88npneox5OfDcGqFIR8Jwf0W2pNhmkjmwZgFFPn6v0VEwDcTgSyhZQlvSTuf INYscl1x1kw6Kabc/LrXqus+THiARI8Inw6kcGCUnmwxZWiIDkPvQ+88LNfKCkz+ hS28bh9vm6Vy8w== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:14 2026 by rpki-client