This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json) Hash identifier: tM/199DwH6WVPTUJH19lGAaT1PUO4h8YOwM/P84Otj8= Subject key identifier: 57:75:08:7E:B3:E7:80:D3:0F:2B:E5:7F:50:04:FB:22:31:92:6E:34 Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019BCF0CC024661FBC62C5D44CB5FCED1D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft Manifest number: 0658 Signing time: Sun 18 Jan 2026 03:01:17 +0000 Manifest this update: Sun 18 Jan 2026 03:01:17 +0000 Manifest next update: Mon 19 Jan 2026 03:01:17 +0000 Files and hashes: 1: 8YW4uCegbiOXKfdM50rIePBZe5k.roa (hash: daS7MSZX4yQZhE3JNsrTDfEdlUzwTcG/vXeE0dV4qcs=) 2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: ya5DQWk3Vwty1h6bfUWyO9l9OByB0i6xTnyUFXcRnPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:0c:c0:24:66:1f:bc:62:c5:d4:4c:b5:fc:ed:1d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Jan 18 03:01:17 2026 GMT Not After : Jan 19 03:01:17 2026 GMT Subject: CN=5775087eb3e780d30f2be57f5004fb2231926e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:68:fa:59:dd:fa:c7:e3:7f:a9:0b:68:f2: 91:c1:f6:90:9b:dd:a1:b9:6d:9e:eb:60:69:07:e8: c0:de:a6:62:7b:e7:bd:5d:0e:b1:2c:d9:16:a2:29: 77:16:69:86:10:b3:4f:78:5b:6b:e9:c7:45:d6:ec: fb:f6:7b:3e:c5:9c:3d:b2:73:ba:a7:b5:d9:b1:e8: 7f:3e:48:82:da:e5:c2:e4:d1:a9:bf:c9:90:a8:2d: 9d:f9:58:f6:a4:17:64:08:7b:3b:0c:ed:0a:b1:c6: ab:8d:eb:fd:9b:6d:21:9c:4b:2c:00:44:fc:90:dc: 38:74:c6:69:d6:e2:fc:58:ff:c5:da:45:4b:ea:16: 38:f9:fe:53:70:d8:30:4d:e9:01:a8:32:3e:ae:5e: ee:c8:24:da:2b:71:7d:01:ec:26:98:70:01:1f:5f: 2a:67:30:10:c2:2e:09:aa:69:ff:35:ba:5c:3c:6f: a2:67:83:6d:a2:e3:2d:56:46:99:c6:1a:7d:2f:11: 56:2e:d5:95:11:af:4b:f2:fe:08:b2:9c:8b:93:fc: 6a:7e:cf:d5:57:d7:73:f5:af:45:7d:b6:11:01:24: 84:de:48:18:cf:44:cb:11:87:1c:06:58:8b:73:9c: 6b:1a:45:b2:38:06:c0:44:94:0f:e8:a1:1f:fd:ea: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:75:08:7E:B3:E7:80:D3:0F:2B:E5:7F:50:04:FB:22:31:92:6E:34 X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:22:2e:e3:9f:43:e2:12:31:1a:2c:ef:25:fd:3c:68:94:93: 36:91:2c:8d:be:63:b6:b5:33:e2:9d:41:7e:2c:66:63:ce:ea: dc:99:4d:42:79:e8:6e:8a:bb:e3:60:88:68:69:b3:9f:c4:36: e0:b8:77:39:8a:02:bd:dc:de:a6:dc:12:fa:32:9c:bb:93:6d: 7c:5b:8a:bc:25:b9:8a:c8:f0:36:4a:b3:cc:1a:c4:d1:cf:3d: 14:dc:55:2c:7a:5c:a4:9c:2b:51:0f:d2:d5:c8:1e:40:2d:b3: 21:33:3c:5e:cb:d2:dc:0c:97:3e:80:ad:62:f1:d8:59:d4:17: c6:25:36:e6:3a:cc:7c:66:b2:30:ea:23:29:89:86:98:65:f7: 39:0b:90:19:96:e0:d2:17:34:5d:17:86:4b:32:90:27:6c:69: 85:79:f3:bd:d6:de:6c:e7:87:ab:81:9b:6d:27:96:6d:cc:2f: a0:e3:18:91:65:c8:cb:33:c4:a3:41:e5:ca:77:2c:8b:c2:3b: e4:5d:9b:73:04:bc:b0:23:91:a4:a8:ba:88:cb:98:a3:a8:87: 86:30:7b:ae:aa:4e:16:36:11:31:ba:a7:f3:0d:c4:47:7b:3e: 01:05:a2:1a:97:0b:34:ca:47:a5:f1:d5:63:ea:d0:97:7a:e4: 59:a6:1e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPDMAkZh+8YsXUTLX87R0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjYwMTE4MDMwMTE3WhcNMjYwMTE5MDMwMTE3WjAzMTEwLwYDVQQD Eyg1Nzc1MDg3ZWIzZTc4MGQzMGYyYmU1N2Y1MDA0ZmIyMjMxOTI2ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDlo+lnd+sfjf6kLaPKRwfaQm92h uW2e62BpB+jA3qZie+e9XQ6xLNkWoil3FmmGELNPeFtr6cdF1uz79ns+xZw9snO6 p7XZseh/PkiC2uXC5NGpv8mQqC2d+Vj2pBdkCHs7DO0Kscarjev9m20hnEssAET8 kNw4dMZp1uL8WP/F2kVL6hY4+f5TcNgwTekBqDI+rl7uyCTaK3F9AewmmHABH18q ZzAQwi4Jqmn/NbpcPG+iZ4NtouMtVkaZxhp9LxFWLtWVEa9L8v4IspyLk/xqfs/V V9dz9a9FfbYRASSE3kgYz0TLEYccBliLc5xrGkWyOAbARJQP6KEf/epFOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd1CH6z54DTDyvlf1AE+yIxkm40MB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliIu459D 4hIxGizvJf08aJSTNpEsjb5jtrUz4p1BfixmY87q3JlNQnnoboq742CIaGmzn8Q2 4Lh3OYoCvdzeptwS+jKcu5NtfFuKvCW5isjwNkqzzBrE0c89FNxVLHpcpJwrUQ/S 1cgeQC2zITM8XsvS3AyXPoCtYvHYWdQXxiU25jrMfGayMOojKYmGmGX3OQuQGZbg 0hc0XReGSzKQJ2xphXnzvdbebOeHq4GbbSeWbcwvoOMYkWXIyzPEo0Hlyncsi8I7 5F2bcwS8sCORpKi6iMuYo6iHhjB7rqpOFjYRMbqn8w3ER3s+AQWiGpcLNMpHpfHV Y+rQl3rkWaYeZA== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:27 2026 by rpki-client