This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json) Hash identifier: +iKIfz4vy6i4ESDkirikrDic2LgSdRjS36Ooei37iB4= Subject key identifier: 85:18:15:8C:09:E9:A6:70:F8:30:96:1A:8E:92:E1:63:99:01:ED:E0 Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Certificate serial: 019C20287036D9600617CA2D85F5DF02893B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft Manifest number: 0D35 Signing time: Mon 02 Feb 2026 21:00:46 +0000 Manifest this update: Mon 02 Feb 2026 21:00:46 +0000 Manifest next update: Tue 03 Feb 2026 21:00:46 +0000 Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: 5ikjunP5hfIU9GgRslXvpBsZ8uPQq6WzvcqVqAPmSXw=) 2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:28:70:36:d9:60:06:17:ca:2d:85:f5:df:02:89:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Validity Not Before: Feb 2 21:00:46 2026 GMT Not After : Feb 3 21:00:46 2026 GMT Subject: CN=8518158c09e9a670f830961a8e92e1639901ede0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:78:2f:d5:20:71:a0:dc:d0:73:b5:52:be: 6f:a9:fc:25:e5:99:4f:93:c0:df:34:64:73:69:61: 27:af:61:88:5b:65:0f:f9:64:6f:22:64:dc:0b:de: 0e:f9:16:4f:73:42:d4:af:08:8e:65:31:47:48:38: 49:c4:d6:01:5f:fc:49:a4:f4:71:ac:2f:4f:78:f1: e7:39:3c:d8:c5:12:28:d0:7d:d2:fb:35:87:3d:e7: 0c:a9:34:2e:37:e5:73:d4:c3:b4:f7:a5:01:23:9e: d7:fb:f5:b0:75:87:ec:67:ff:c8:81:58:b5:69:74: 73:83:45:9a:20:c4:69:bd:d3:5c:97:36:4c:fa:5a: 7a:0a:55:1a:e3:a0:cf:1d:45:9a:c0:5f:5d:f4:9a: 11:33:5a:5a:87:ae:ba:c4:34:ed:33:27:f3:ea:31: 65:78:cb:0f:89:93:50:41:49:d6:cc:8f:24:b1:8c: 94:35:23:e6:7b:4b:ea:95:4a:0b:ca:12:6b:ad:a0: b6:fd:71:8f:46:fd:f0:12:78:0b:f2:eb:f7:db:09: b3:ea:47:4f:0b:96:a0:ef:34:49:16:21:07:a1:7d: be:fb:58:9f:07:ff:81:f0:13:6e:92:ac:9d:e7:c3: 7a:26:9b:d3:93:77:fd:1e:31:46:56:c7:c7:dc:65: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:15:8C:09:E9:A6:70:F8:30:96:1A:8E:92:E1:63:99:01:ED:E0 X509v3 Authority Key Identifier: keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:8e:44:ca:b4:17:d1:45:5d:c2:8c:d2:3b:a0:42:c5:36: 91:d0:a9:08:f7:9f:d4:97:90:fc:ae:12:5e:5e:2b:35:7d:ea: 98:4c:3e:4a:2a:00:2d:6b:8b:84:93:fe:3a:41:3b:31:a1:39: dc:0d:3d:b9:55:b6:be:4b:c7:e2:52:56:28:67:8d:34:5b:f4: e9:43:26:26:e8:da:1e:83:9a:17:1f:fb:69:da:d3:47:71:7c: d4:56:10:f0:ab:75:79:bc:57:05:4c:8c:f1:9a:99:0e:5e:cb: f1:bf:91:bc:ae:e0:e3:ad:00:ee:b9:c8:54:c7:c4:26:73:36: 5a:23:3a:e2:d2:af:c1:59:6e:51:24:30:28:9a:01:9a:f4:90: 94:8b:9a:f6:7d:89:79:f6:60:8f:83:7e:4e:a4:9a:38:5a:24: 7c:b4:a5:95:47:10:50:12:02:48:74:d0:31:38:4f:27:9a:92: d8:2a:f2:7b:39:df:26:bd:24:ca:34:52:3d:aa:35:11:8f:6d: 05:e9:15:0d:e4:04:62:01:bb:87:f3:f6:ae:33:e3:ec:b3:a5: ad:df:73:58:12:51:33:8f:fd:74:1a:2b:3c:e9:80:84:cf:00: cb:fa:0b:48:cb:6d:c3:50:5c:df:58:2f:94:c7:cd:28:f0:46: 22:a4:bf:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgKHA22WAGF8othfXfAok7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh ODhlNmIwHhcNMjYwMjAyMjEwMDQ2WhcNMjYwMjAzMjEwMDQ2WjAzMTEwLwYDVQQD Eyg4NTE4MTU4YzA5ZTlhNjcwZjgzMDk2MWE4ZTkyZTE2Mzk5MDFlZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJN4L9UgcaDc0HO1Ur5vqfwl5ZlP k8DfNGRzaWEnr2GIW2UP+WRvImTcC94O+RZPc0LUrwiOZTFHSDhJxNYBX/xJpPRx rC9PePHnOTzYxRIo0H3S+zWHPecMqTQuN+Vz1MO096UBI57X+/WwdYfsZ//IgVi1 aXRzg0WaIMRpvdNclzZM+lp6ClUa46DPHUWawF9d9JoRM1pah666xDTtMyfz6jFl eMsPiZNQQUnWzI8ksYyUNSPme0vqlUoLyhJrraC2/XGPRv3wEngL8uv32wmz6kdP C5ag7zRJFiEHoX2++1ifB/+B8BNukqyd58N6JpvTk3f9HjFGVsfH3GXSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUYFYwJ6aZw+DCWGo6S4WOZAe3gMB8GA1UdIwQY MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0eORMq0 F9FFXcKM0jugQsU2kdCpCPef1JeQ/K4SXl4rNX3qmEw+SioALWuLhJP+OkE7MaE5 3A09uVW2vkvH4lJWKGeNNFv06UMmJujaHoOaFx/7adrTR3F81FYQ8Kt1ebxXBUyM 8ZqZDl7L8b+RvK7g460A7rnIVMfEJnM2WiM64tKvwVluUSQwKJoBmvSQlIua9n2J efZgj4N+TqSaOFokfLSllUcQUBICSHTQMThPJ5qS2CryeznfJr0kyjRSPao1EY9t BekVDeQEYgG7h/P2rjPj7LOlrd9zWBJRM4/9dBorPOmAhM8Ay/oLSMttw1Bc31gv lMfNKPBGIqS/6A== -----END CERTIFICATE-----Generated at Tue Feb 3 01:54:28 2026 by rpki-client