This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json) Hash identifier: jTfB62uLJAwg3pp5M3UPNG1e8Rfc4MvHZvF9Y7qnRYI= Subject key identifier: B0:58:4B:FD:2C:09:0B:D8:6C:C2:09:83:50:96:7F:77:CB:03:7C:98 Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Certificate serial: 019C0556E71E0EAB35292639BCAF05A6DE20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft Manifest number: 0792 Signing time: Wed 28 Jan 2026 16:01:47 +0000 Manifest this update: Wed 28 Jan 2026 16:01:47 +0000 Manifest next update: Thu 29 Jan 2026 16:01:47 +0000 Files and hashes: 1: G6Qimd7tAYQUvnYU3UCWKXw35BE.roa (hash: Y7JkYNH4E9BqcN5WcuNtct/o2Kwq3jTuydqYb5r4gpo=) 2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: olJKcZwpWM2LSAWuWg6rNu107GgVrTiUdm0DAEZF1ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:e7:1e:0e:ab:35:29:26:39:bc:af:05:a6:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Validity Not Before: Jan 28 16:01:47 2026 GMT Not After : Jan 29 16:01:47 2026 GMT Subject: CN=b0584bfd2c090bd86cc2098350967f77cb037c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:66:54:49:45:99:fc:18:b6:79:8f:46:2a: 65:c7:57:25:ba:c6:c9:71:ca:d5:30:28:a7:b1:be: 9b:d1:c7:42:f8:60:95:f8:8f:8f:ec:b3:a0:e2:e8: a0:33:1a:e2:62:02:fd:3a:65:6a:f3:6d:4f:da:69: ba:b2:f3:ef:f3:ea:2a:05:98:b2:03:5b:b9:75:01: b3:81:d0:bd:89:6f:26:0b:2d:c3:03:20:08:70:ea: a0:df:ec:64:04:54:d7:22:bf:74:03:fc:e4:09:76: c3:9a:e9:d3:c0:06:93:ad:a6:fb:4c:2c:5a:44:14: 77:9d:f7:19:0e:83:10:89:f0:a9:45:2a:ce:4c:e6: 82:b0:b9:57:8c:c9:1b:c9:9c:0c:ff:f7:49:31:c8: f2:4e:db:c1:7f:e8:14:82:6e:c5:9d:f8:df:e6:de: 3f:fa:ca:df:f2:81:15:3b:69:77:f6:de:a1:0e:6f: b0:ff:b9:2e:0f:54:8d:11:02:71:6f:07:d2:fc:18: 32:9f:d3:2a:89:10:59:18:63:31:32:32:94:83:fc: 8e:9b:27:32:ad:51:57:b4:d2:3a:2c:34:8c:11:d4: ad:15:ed:88:e5:51:35:7c:1d:22:d7:9e:8c:95:98: ba:23:98:7b:d1:45:70:56:35:1e:87:af:a8:88:4e: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:58:4B:FD:2C:09:0B:D8:6C:C2:09:83:50:96:7F:77:CB:03:7C:98 X509v3 Authority Key Identifier: keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:70:f1:20:e8:c7:59:97:5e:90:b5:1d:38:a6:42:3b:ab:24: 21:6e:7d:55:fd:08:d0:54:bd:3d:1f:25:4f:b3:65:3c:86:cb: 89:49:0c:41:e0:4b:32:f8:65:f0:a0:b5:4a:b5:88:af:4f:88: c7:53:01:e6:55:18:22:5a:30:bc:cb:2d:1a:4e:34:a8:aa:14: e4:ae:37:65:50:c2:19:e8:e6:d1:e7:73:9b:2e:28:2a:18:c7: 80:b6:e6:04:90:98:d0:36:e0:98:27:60:ab:39:f1:69:28:f0: f0:36:19:ee:e5:f7:96:3c:ac:99:b3:ab:9d:44:88:44:71:da: 21:92:a9:80:9b:3f:8e:79:a2:af:2e:fa:1c:a5:85:87:f6:af: 31:7a:c5:36:1a:f7:f3:ea:ec:c8:f4:15:97:54:48:55:a1:b8: bd:ec:8c:c9:64:27:04:f7:f4:a6:e1:0a:86:56:93:a5:0d:bf: f1:31:82:c2:44:0c:8b:4d:21:29:82:89:7e:31:ff:d8:d6:7f: 19:99:bb:11:dd:ad:b4:10:44:d1:50:79:8b:c5:4f:d5:20:fa: fc:f1:83:6c:08:6d:74:3f:11:66:06:1f:d5:44:de:4f:e0:bd: 28:e4:5d:48:d1:14:a4:db:8e:4c:4e:78:3a:e2:43:5d:d3:d9: 05:df:ca:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVuceDqs1KSY5vK8Fpt4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi Njg2MTAwHhcNMjYwMTI4MTYwMTQ3WhcNMjYwMTI5MTYwMTQ3WjAzMTEwLwYDVQQD EyhiMDU4NGJmZDJjMDkwYmQ4NmNjMjA5ODM1MDk2N2Y3N2NiMDM3Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3tmVElFmfwYtnmPRiplx1clusbJ ccrVMCinsb6b0cdC+GCV+I+P7LOg4uigMxriYgL9OmVq821P2mm6svPv8+oqBZiy A1u5dQGzgdC9iW8mCy3DAyAIcOqg3+xkBFTXIr90A/zkCXbDmunTwAaTrab7TCxa RBR3nfcZDoMQifCpRSrOTOaCsLlXjMkbyZwM//dJMcjyTtvBf+gUgm7Fnfjf5t4/ +srf8oEVO2l39t6hDm+w/7kuD1SNEQJxbwfS/Bgyn9MqiRBZGGMxMjKUg/yOmycy rVFXtNI6LDSMEdStFe2I5VE1fB0i156MlZi6I5h70UVwVjUeh6+oiE4e0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBYS/0sCQvYbMIJg1CWf3fLA3yYMB8GA1UdIwQY MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3DxIOjH WZdekLUdOKZCO6skIW59Vf0I0FS9PR8lT7NlPIbLiUkMQeBLMvhl8KC1SrWIr0+I x1MB5lUYIlowvMstGk40qKoU5K43ZVDCGejm0edzmy4oKhjHgLbmBJCY0DbgmCdg qznxaSjw8DYZ7uX3ljysmbOrnUSIRHHaIZKpgJs/jnmiry76HKWFh/avMXrFNhr3 8+rsyPQVl1RIVaG4veyMyWQnBPf0puEKhlaTpQ2/8TGCwkQMi00hKYKJfjH/2NZ/ GZm7Ed2ttBBE0VB5i8VP1SD6/PGDbAhtdD8RZgYf1UTeT+C9KORdSNEUpNuOTE54 OuJDXdPZBd/K6A== -----END CERTIFICATE-----Generated at Wed Jan 28 21:04:39 2026 by rpki-client