This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json) Hash identifier: zXwRzUV6Y8JtDrv2A9hPwiCdgl2jRXFT7ZQSEnAygl8= Subject key identifier: 22:8B:49:7B:C0:E8:67:37:89:80:6C:36:18:3E:38:25:93:C9:AE:FD Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Certificate serial: 019BD922556D1DA1FA27B393DF981C5BF2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft Manifest number: 083D Signing time: Tue 20 Jan 2026 02:01:04 +0000 Manifest this update: Tue 20 Jan 2026 02:01:04 +0000 Manifest next update: Wed 21 Jan 2026 02:01:04 +0000 Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: 1JJUk+SPwcW1VBbitXkIftAEdkOdiIaTYSIWWqoX38M=) 2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:22:55:6d:1d:a1:fa:27:b3:93:df:98:1c:5b:f2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Validity Not Before: Jan 20 02:01:04 2026 GMT Not After : Jan 21 02:01:04 2026 GMT Subject: CN=228b497bc0e8673789806c36183e382593c9aefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:2f:15:f3:09:f1:62:f3:1c:f8:d3:20:af: 32:63:ff:df:c9:5b:99:b7:91:0a:0e:c6:29:d2:14: a1:ce:e3:74:95:ac:8a:1b:02:6e:97:9c:b9:c1:f0: e2:15:7a:86:2f:9e:d2:49:ae:67:84:58:16:da:05: d9:d9:ed:82:a7:57:fb:f9:5d:51:15:36:79:a1:bd: 1b:0c:a1:d5:ab:3d:41:11:9f:8b:4c:b8:8b:61:bb: 6e:bd:c9:22:00:86:61:33:a2:62:64:3a:73:29:5f: 86:9d:de:2c:78:e9:a6:4a:a1:00:74:17:52:aa:8e: 87:9a:9c:b7:49:31:a3:30:c7:db:d0:2c:78:08:df: 8b:89:94:7e:75:eb:ab:d4:7b:9c:f5:b3:cb:7b:a8: 19:e7:b0:e7:9d:1b:1a:5b:19:4e:e8:ca:38:44:86: 78:84:e9:5d:3a:cf:0c:ed:3d:2c:b1:37:f0:a7:57: 45:d7:c4:d9:9a:61:2e:69:39:c3:c7:6e:b9:98:76: dd:f2:22:a5:92:84:71:e8:75:61:a0:1d:ac:51:ac: 3e:4e:d5:98:b3:60:81:d5:f6:c7:4e:6b:1d:da:b5: 3c:4d:16:00:92:41:1e:e1:84:5f:51:6c:d0:4e:c8: be:98:4a:1a:2c:1f:be:3a:91:ee:e9:ff:95:b5:e0: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:49:7B:C0:E8:67:37:89:80:6C:36:18:3E:38:25:93:C9:AE:FD X509v3 Authority Key Identifier: keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2b:2e:53:f0:1c:0f:d1:10:98:ae:04:18:98:60:34:52:be: b8:df:c9:19:95:88:3e:bf:1a:0f:68:04:a3:98:ae:d2:d0:18: 87:2b:d5:ba:d2:6a:24:44:5b:c8:f2:f4:97:b4:4e:b1:9d:43: c7:91:01:5a:84:f1:4d:41:8d:a9:da:f5:a4:66:65:c5:98:29: 39:23:0b:ad:ba:92:2e:e4:56:7d:b2:d4:29:d7:f5:ff:98:32: 41:75:88:7e:a6:4e:6c:47:9e:4e:64:91:5e:5c:af:b0:22:6a: 28:3c:5a:f5:12:87:4a:e4:1b:ab:2d:f1:e0:5b:20:10:ed:03: 78:d1:9a:4a:60:b6:ce:24:94:fc:0e:cb:77:0e:70:5a:78:1c: 22:49:c3:b7:85:e6:b2:4d:2f:ac:fd:41:7a:00:13:2b:b3:7a: 95:a8:53:3b:17:9e:f9:46:97:2f:5d:46:d7:d6:52:2d:e4:1c: 5a:09:f3:6c:68:bc:2e:f0:18:f3:db:0c:79:4c:c4:82:ab:38: 71:a7:c9:e7:72:ad:69:c5:90:f4:16:09:be:bc:e4:62:c7:3f: fb:c6:96:2e:54:36:84:a1:52:21:93:f7:1f:8d:b7:71:07:57: 8e:47:35:8b:39:10:be:e0:cf:df:02:39:78:96:c8:ee:65:0d: 6b:5c:7b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZIlVtHaH6J7OT35gcW/LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy Yzg5NjkwHhcNMjYwMTIwMDIwMTA0WhcNMjYwMTIxMDIwMTA0WjAzMTEwLwYDVQQD EygyMjhiNDk3YmMwZTg2NzM3ODk4MDZjMzYxODNlMzgyNTkzYzlhZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJEvFfMJ8WLzHPjTIK8yY//fyVuZ t5EKDsYp0hShzuN0layKGwJul5y5wfDiFXqGL57SSa5nhFgW2gXZ2e2Cp1f7+V1R FTZ5ob0bDKHVqz1BEZ+LTLiLYbtuvckiAIZhM6JiZDpzKV+Gnd4seOmmSqEAdBdS qo6Hmpy3STGjMMfb0Cx4CN+LiZR+deur1Huc9bPLe6gZ57DnnRsaWxlO6Mo4RIZ4 hOldOs8M7T0ssTfwp1dF18TZmmEuaTnDx265mHbd8iKlkoRx6HVhoB2sUaw+TtWY s2CB1fbHTmsd2rU8TRYAkkEe4YRfUWzQTsi+mEoaLB++OpHu6f+VteCK1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKLSXvA6Gc3iYBsNhg+OCWTya79MB8GA1UdIwQY MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3 LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQysuU/Ac D9EQmK4EGJhgNFK+uN/JGZWIPr8aD2gEo5iu0tAYhyvVutJqJERbyPL0l7ROsZ1D x5EBWoTxTUGNqdr1pGZlxZgpOSMLrbqSLuRWfbLUKdf1/5gyQXWIfqZObEeeTmSR XlyvsCJqKDxa9RKHSuQbqy3x4FsgEO0DeNGaSmC2ziSU/A7Ldw5wWngcIknDt4Xm sk0vrP1BegATK7N6lahTOxee+UaXL11G19ZSLeQcWgnzbGi8LvAY89sMeUzEgqs4 cafJ53KtacWQ9BYJvrzkYsc/+8aWLlQ2hKFSIZP3H423cQdXjkc1izkQvuDP3wI5 eJbI7mUNa1x75Q== -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:36 2026 by rpki-client