This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json) Hash identifier: 9DppzT+RCUi8ueKClBQiwsXnT+QFOGkYk6jnFD38moQ= Subject key identifier: 0A:04:35:76:BF:5B:84:A3:ED:34:41:C8:36:BE:8E:6C:9D:82:69:98 Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Certificate serial: 019B7712234331287ABD00EFEAA1009ED57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft Manifest number: 11A6 Signing time: Thu 01 Jan 2026 01:00:35 +0000 Manifest this update: Thu 01 Jan 2026 01:00:35 +0000 Manifest next update: Fri 02 Jan 2026 01:00:35 +0000 Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: vlPfU55IQhP3T5Bcq3JG8Gxv/D+PXrICjf65/+DMssY=) 2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:23:43:31:28:7a:bd:00:ef:ea:a1:00:9e:d5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Validity Not Before: Jan 1 01:00:35 2026 GMT Not After : Jan 2 01:00:35 2026 GMT Subject: CN=0a043576bf5b84a3ed3441c836be8e6c9d826998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:7f:01:8f:d6:e9:b7:8b:a1:8e:89:25:f1: 54:8e:6b:40:ed:6e:cf:74:d9:41:48:8a:83:3c:24: ea:44:cc:19:48:db:8b:06:94:e6:6e:d6:40:3e:1b: b4:cb:76:5f:4d:e9:3e:66:9d:94:34:bb:51:32:0a: c7:a4:40:4b:80:22:d1:40:ba:6b:f9:f0:1c:ba:e9: a0:b1:bd:fb:f8:5f:f5:6d:c6:31:4b:d5:73:bc:fb: 17:f8:59:65:7a:31:35:0f:68:f5:7e:12:7d:fa:db: e1:e9:be:c4:e7:9e:7b:6d:bd:23:5f:f3:50:dc:37: ec:db:ac:83:ba:c0:16:0a:47:c3:b5:3b:8d:6f:e7: 3f:be:6f:1b:2b:5d:f8:e9:26:52:d3:18:35:c7:7e: 66:81:1e:e9:25:3a:58:88:a3:ac:d1:e6:12:a7:f0: 13:e7:a1:04:bc:1a:f3:53:16:fa:95:5b:4d:fc:bc: ed:f1:0a:aa:84:bc:14:b1:06:fd:89:a6:42:b3:1a: f7:d7:22:10:c7:89:da:fb:5e:42:f8:c6:54:45:87: 09:18:d7:3c:b2:11:4f:73:ac:5b:ad:60:0f:38:48: bf:c5:1e:36:9c:f3:7e:64:37:83:ed:01:0a:5c:57: 6d:9e:6d:05:da:44:a0:68:a8:fc:b8:b3:b3:ee:6c: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:04:35:76:BF:5B:84:A3:ED:34:41:C8:36:BE:8E:6C:9D:82:69:98 X509v3 Authority Key Identifier: keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d8:06:8e:36:b3:e9:cc:04:af:4f:3e:a3:db:0d:26:e1:f3: 7f:f3:49:57:60:9b:44:e3:ef:21:ab:3f:cf:4f:6e:5b:9f:8c: f8:de:50:cf:d7:8a:ed:a8:ef:b1:22:ac:df:fa:66:fb:08:c6: 3f:c8:e0:9a:73:30:b9:84:68:5a:8d:c6:8c:e5:c4:2c:2e:e6: a6:bc:b0:28:f8:ea:08:44:51:b3:25:7a:47:4c:9c:d6:a6:0a: 1d:f1:26:a9:0a:8a:95:a1:8b:99:61:00:76:1d:84:2d:0a:3e: fe:21:dd:ba:96:d8:c0:b4:e1:3d:9f:52:e1:52:d7:fd:d7:52: 74:65:4f:55:1d:21:f0:cf:79:ca:80:e2:63:22:70:05:ad:80: 50:a8:f7:fa:41:ec:99:a8:7b:70:a8:95:17:c9:13:f0:25:12: 17:a6:bc:b4:95:65:da:f8:a9:bc:bc:63:be:31:20:1d:da:e6: a3:e7:c8:79:0f:d6:b1:8c:24:5f:48:62:12:ca:96:46:0e:6d: 3b:db:c9:c7:a8:01:97:01:29:cf:dc:0d:7d:d9:11:9d:be:18: 7f:68:1d:d2:f2:38:9a:50:24:29:2e:81:31:87:71:90:f1:27: 7f:d3:4e:5f:2f:e0:72:98:7b:84:03:1e:57:20:31:db:cd:ab: 1e:3a:b5:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3EiNDMSh6vQDv6qEAntV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1 NmMxYWIwHhcNMjYwMTAxMDEwMDM1WhcNMjYwMTAyMDEwMDM1WjAzMTEwLwYDVQQD EygwYTA0MzU3NmJmNWI4NGEzZWQzNDQxYzgzNmJlOGU2YzlkODI2OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9/AY/W6beLoY6JJfFUjmtA7W7P dNlBSIqDPCTqRMwZSNuLBpTmbtZAPhu0y3ZfTek+Zp2UNLtRMgrHpEBLgCLRQLpr +fAcuumgsb37+F/1bcYxS9VzvPsX+FllejE1D2j1fhJ9+tvh6b7E5557bb0jX/NQ 3Dfs26yDusAWCkfDtTuNb+c/vm8bK1346SZS0xg1x35mgR7pJTpYiKOs0eYSp/AT 56EEvBrzUxb6lVtN/Lzt8QqqhLwUsQb9iaZCsxr31yIQx4na+15C+MZURYcJGNc8 shFPc6xbrWAPOEi/xR42nPN+ZDeD7QEKXFdtnm0F2kSgaKj8uLOz7mz1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoENXa/W4Sj7TRByDa+jmydgmmYMB8GA1UdIwQY MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3 LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdgGjjaz 6cwEr08+o9sNJuHzf/NJV2CbROPvIas/z09uW5+M+N5Qz9eK7ajvsSKs3/pm+wjG P8jgmnMwuYRoWo3GjOXELC7mprywKPjqCERRsyV6R0yc1qYKHfEmqQqKlaGLmWEA dh2ELQo+/iHdupbYwLThPZ9S4VLX/ddSdGVPVR0h8M95yoDiYyJwBa2AUKj3+kHs mah7cKiVF8kT8CUSF6a8tJVl2vipvLxjvjEgHdrmo+fIeQ/WsYwkX0hiEsqWRg5t O9vJx6gBlwEpz9wNfdkRnb4Yf2gd0vI4mlAkKS6BMYdxkPEnf9NOXy/gcph7hAMe VyAx282rHjq1aA== -----END CERTIFICATE-----Generated at Thu Jan 1 08:46:10 2026 by rpki-client