This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json) Hash identifier: UrAEcXuF20p8t5dthZNPYX88danoJowBw+PU1v4Q+pA= Subject key identifier: C3:28:08:93:53:22:9D:32:8B:76:EB:50:83:A7:81:8D:4A:E1:07:F8 Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82 Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282 Certificate serial: 019BFD65726C3C6ECFB6A2CBB82BCEDEDD9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft Manifest number: 076F Signing time: Tue 27 Jan 2026 03:00:42 +0000 Manifest this update: Tue 27 Jan 2026 03:00:42 +0000 Manifest next update: Wed 28 Jan 2026 03:00:42 +0000 Files and hashes: 1: LVJLyRNkzYXWrFPMXDuqL1cx3r0.roa (hash: /6VNNRjnmK1nx7DLPoyOKEbtFH+S0vHKlP1nyDqaMBk=) 2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: j6P3ChE2tMRq4NJIb8SHZ42odrKPQ3+YcSfZBluXSSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:72:6c:3c:6e:cf:b6:a2:cb:b8:2b:ce:de:dd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282 Validity Not Before: Jan 27 03:00:42 2026 GMT Not After : Jan 28 03:00:42 2026 GMT Subject: CN=c328089353229d328b76eb5083a7818d4ae107f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:98:1a:e0:44:67:cb:20:56:ff:dd:60:7c: 1d:f9:52:a0:25:08:ca:c7:f8:50:c9:95:f8:60:3e: f8:e3:98:23:e9:2c:e7:1f:f4:c0:6e:e6:92:88:ba: 28:49:1d:91:7b:29:8f:78:1a:27:4b:70:5e:85:4d: 49:63:96:92:b7:d0:cb:0e:1a:ac:09:c9:30:80:38: 60:3d:f6:89:8a:8e:e5:6e:13:42:3d:50:16:13:22: cd:f6:6c:82:6b:01:c5:b1:e5:c0:a6:e6:d3:ce:46: 97:57:75:21:c9:ae:5e:77:8c:46:8f:21:e0:7e:64: 96:92:39:bb:66:67:dc:47:a6:de:4b:09:14:90:9f: ca:aa:e5:9d:35:09:87:2e:3c:1d:8e:82:28:e6:5a: 2d:fb:a1:f4:94:99:1c:e3:b4:42:78:65:fd:82:e3: 6f:f2:92:75:35:c1:d3:82:0b:f5:eb:94:e1:af:b2: f5:e1:3e:5e:36:0b:ee:9a:02:0d:38:d4:d1:0e:b6: 13:70:14:b7:e5:ef:48:2a:cd:25:9f:75:30:fe:6b: e3:63:ab:a0:16:0e:0c:6a:cc:40:f8:bf:b5:63:27: 80:3c:2b:fc:e0:34:29:dd:f5:66:69:91:f1:d1:25: c9:ac:11:30:3d:30:05:e9:ff:26:7e:2b:02:a8:f9: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:28:08:93:53:22:9D:32:8B:76:EB:50:83:A7:81:8D:4A:E1:07:F8 X509v3 Authority Key Identifier: keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7a:7c:8f:06:3f:6f:79:9f:07:29:f6:a1:27:76:eb:0b:ce: d3:a7:15:37:96:22:06:f0:df:dc:05:a6:8b:bb:52:e5:f1:96: 77:01:f6:b9:fb:2f:d5:cc:f7:9e:df:3e:cb:c3:44:f5:42:b7: b3:8a:7c:5d:b7:64:76:41:2f:d4:07:0f:92:17:3f:a2:2f:b4: 65:f0:b2:91:6a:f9:f6:f4:11:c5:f2:d0:ac:8e:0e:32:a8:19: 3d:5a:38:c7:2a:6f:4c:80:a6:d5:85:71:9a:01:7d:e7:29:db: 52:91:33:cf:b1:f1:2c:9e:ab:f2:85:de:ff:fe:f6:bb:59:31: 6d:09:9e:9d:8c:5e:96:b9:27:6f:c5:47:b7:38:93:ac:5e:bb: 6e:63:f3:5d:a6:30:72:fa:e3:d1:a1:93:fb:e6:63:42:fc:51: 59:06:d7:43:0c:1f:c9:56:d9:ee:56:08:d5:34:2e:35:9b:4c: c0:bb:68:27:f7:55:8e:41:14:ea:18:c3:a2:50:6d:ef:be:e0: c9:12:71:b1:33:fc:f5:8f:41:d4:3a:21:16:ad:7f:d3:39:b4: 8f:c8:23:c0:8a:71:b7:69:ba:dc:a0:88:de:e2:ef:d0:c9:d8: 3f:b5:5d:34:41:65:d4:cd:da:a5:d8:ca:93:cb:df:04:d2:de: 4c:b0:64:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZXJsPG7PtqLLuCvO3t2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi N2EyODIwHhcNMjYwMTI3MDMwMDQyWhcNMjYwMTI4MDMwMDQyWjAzMTEwLwYDVQQD EyhjMzI4MDg5MzUzMjI5ZDMyOGI3NmViNTA4M2E3ODE4ZDRhZTEwN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMKYGuBEZ8sgVv/dYHwd+VKgJQjK x/hQyZX4YD7445gj6SznH/TAbuaSiLooSR2ReymPeBonS3BehU1JY5aSt9DLDhqs CckwgDhgPfaJio7lbhNCPVAWEyLN9myCawHFseXApubTzkaXV3Uhya5ed4xGjyHg fmSWkjm7ZmfcR6beSwkUkJ/KquWdNQmHLjwdjoIo5lot+6H0lJkc47RCeGX9guNv 8pJ1NcHTggv165Thr7L14T5eNgvumgINONTRDrYTcBS35e9IKs0ln3Uw/mvjY6ug Fg4MasxA+L+1YyeAPCv84DQp3fVmaZHx0SXJrBEwPTAF6f8mfisCqPk1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMoCJNTIp0yi3brUIOngY1K4Qf4MB8GA1UdIwQY MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnp8jwY/ b3mfByn2oSd26wvO06cVN5YiBvDf3AWmi7tS5fGWdwH2ufsv1cz3nt8+y8NE9UK3 s4p8XbdkdkEv1AcPkhc/oi+0ZfCykWr59vQRxfLQrI4OMqgZPVo4xypvTICm1YVx mgF95ynbUpEzz7HxLJ6r8oXe//72u1kxbQmenYxelrknb8VHtziTrF67bmPzXaYw cvrj0aGT++ZjQvxRWQbXQwwfyVbZ7lYI1TQuNZtMwLtoJ/dVjkEU6hjDolBt777g yRJxsTP89Y9B1DohFq1/0zm0j8gjwIpxt2m63KCI3uLv0MnYP7VdNEFl1M3apdjK k8vfBNLeTLBkQQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:26 2026 by rpki-client