This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json) Hash identifier: PcPWrWaVCsojNHZlhvQnPaBw8GXA9rUo1u+SHsZzfVw= Subject key identifier: AA:5C:2B:59:D7:46:8F:85:B7:99:FE:F9:CD:78:9B:60:B8:19:3C:6A Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c Certificate serial: 019BA1C6F2FC95895D613CBAD178ADAFC328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft Manifest number: 17C1 Signing time: Fri 09 Jan 2026 08:02:08 +0000 Manifest this update: Fri 09 Jan 2026 08:02:08 +0000 Manifest next update: Sat 10 Jan 2026 08:02:08 +0000 Files and hashes: 1: CWhgnMt-ss9B8-btHZoqc3CLkvE.roa (hash: E3kIV5fo174JAQ+/2CA5CLbdIf038voHzxoXiPQe6Z8=) 2: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: hVErPg44ohkUxiq2L2jLwJJN/eu8B2lZToUVmQniqB8=) 3: RS-DcQuebpqY8Culr_rM9_XKltU.roa (hash: D72/49kWrpo5EEjDXndBWXIkpecf2+TgHDpJLb07DlU=) 4: mgGVP9w-ya_7zv7yO1xWTM7sa_0.roa (hash: CNgDgTCH1ZO1+h/LC5uHK3Xji2RJx/Y7qygtDyi4V4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c6:f2:fc:95:89:5d:61:3c:ba:d1:78:ad:af:c3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c Validity Not Before: Jan 9 08:02:08 2026 GMT Not After : Jan 10 08:02:08 2026 GMT Subject: CN=aa5c2b59d7468f85b799fef9cd789b60b8193c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:21:a2:9b:fb:51:c6:d0:6a:5b:65:2a:2f: fc:02:06:cc:b2:fa:06:05:a1:fd:9e:6e:88:97:60: 23:d9:10:51:f9:80:4a:28:4a:cc:9c:ec:7c:54:c8: a2:b4:8c:00:5c:8a:a7:0b:ad:c3:c3:67:a4:ce:5c: ba:88:0c:3d:dc:a3:45:e5:1d:9e:09:2a:23:03:92: 01:1a:be:48:8f:3b:e4:09:15:d3:60:ef:f8:4b:da: 8b:cd:6c:49:b7:b0:f4:65:10:44:23:65:ad:60:f1: 00:e4:97:c0:4e:49:91:46:33:58:cb:8a:3c:fd:48: 8b:a9:15:4f:4a:25:da:ff:24:53:8c:1d:ff:ab:c5: d3:5d:dc:98:eb:3c:25:ad:ae:c1:f3:d3:46:7c:95: d9:08:84:6b:64:14:a4:35:15:e9:51:5c:84:75:10: 3b:72:b1:d2:93:7c:52:3c:f6:7c:a4:67:bd:f5:95: 9f:4b:8d:c0:d2:4f:2f:8e:56:8f:15:73:09:66:c6: 52:5b:99:7a:cb:eb:3b:88:8a:df:a9:ea:35:b3:12: 3e:32:93:0e:c0:ec:56:fd:69:94:68:ef:0e:fe:57: a3:a5:34:fc:3b:b8:b9:72:55:20:b6:33:34:c7:e6: 02:36:91:6f:ad:33:0b:32:91:8b:db:b9:00:7c:a9: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:2B:59:D7:46:8F:85:B7:99:FE:F9:CD:78:9B:60:B8:19:3C:6A X509v3 Authority Key Identifier: keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d9:5e:a8:20:72:74:29:75:fa:3d:e7:ff:98:0e:91:5e:ee: 24:6b:4c:52:fc:22:81:a3:3e:24:c2:fb:e4:e9:44:4a:33:7e: d3:77:dd:98:18:60:45:4f:5c:d4:6d:93:b5:be:8e:57:33:d2: d0:8e:6a:3f:a6:a0:91:ba:ac:f6:7b:2c:f2:a7:a1:db:73:7b: d3:b9:0b:1c:39:ab:c8:29:d8:cf:14:20:06:a9:66:5a:7e:fb: 91:b2:f3:c6:46:a4:35:25:a8:13:0a:8c:c1:af:25:d1:fa:36: f1:bf:d2:b2:a3:b2:81:f3:3a:d2:a3:8b:60:f1:6a:3d:8b:02: 4e:89:e4:3f:96:d0:0b:2f:96:9a:99:25:13:79:ee:b1:15:7c: ec:88:57:f9:f4:73:4e:0f:23:35:8d:20:d9:e9:db:ad:2c:00: 1b:85:d9:a7:41:2e:37:75:ab:6c:20:b3:ca:df:52:d4:7e:ae: da:42:fb:84:70:12:32:94:43:4c:e2:e9:60:85:07:49:23:5a: db:a5:5d:69:8f:36:98:04:a5:bc:36:f9:43:29:45:63:33:98: aa:1b:22:d2:7d:0b:35:e0:bd:1a:a1:08:94:66:92:50:21:9d: ad:74:39:d0:39:d5:dc:fe:0f:ea:35:85:0c:74:9e:c7:6a:d7: 38:c8:c8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxvL8lYldYTy60Xitr8MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2 MjE4MmMwHhcNMjYwMTA5MDgwMjA4WhcNMjYwMTEwMDgwMjA4WjAzMTEwLwYDVQQD EyhhYTVjMmI1OWQ3NDY4Zjg1Yjc5OWZlZjljZDc4OWI2MGI4MTkzYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Ahopv7UcbQaltlKi/8AgbMsvoG BaH9nm6Il2Aj2RBR+YBKKErMnOx8VMiitIwAXIqnC63Dw2ekzly6iAw93KNF5R2e CSojA5IBGr5IjzvkCRXTYO/4S9qLzWxJt7D0ZRBEI2WtYPEA5JfATkmRRjNYy4o8 /UiLqRVPSiXa/yRTjB3/q8XTXdyY6zwlra7B89NGfJXZCIRrZBSkNRXpUVyEdRA7 crHSk3xSPPZ8pGe99ZWfS43A0k8vjlaPFXMJZsZSW5l6y+s7iIrfqeo1sxI+MpMO wOxW/WmUaO8O/lejpTT8O7i5clUgtjM0x+YCNpFvrTMLMpGL27kAfKnC8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpcK1nXRo+Ft5n++c14m2C4GTxqMB8GA1UdIwQY MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2 LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNleqCBy dCl1+j3n/5gOkV7uJGtMUvwigaM+JML75OlESjN+03fdmBhgRU9c1G2Ttb6OVzPS 0I5qP6agkbqs9nss8qeh23N707kLHDmryCnYzxQgBqlmWn77kbLzxkakNSWoEwqM wa8l0fo28b/SsqOygfM60qOLYPFqPYsCTonkP5bQCy+WmpklE3nusRV87IhX+fRz Tg8jNY0g2enbrSwAG4XZp0EuN3WrbCCzyt9S1H6u2kL7hHASMpRDTOLpYIUHSSNa 26VdaY82mASlvDb5QylFYzOYqhsi0n0LNeC9GqEIlGaSUCGdrXQ50DnV3P4P6jWF DHSex2rXOMjIlQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:32 2026 by rpki-client