This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json) Hash identifier: ZAW1u08vv9xPk/JjHFnnO/nSBPkZgDy770P2x0cHCcg= Subject key identifier: 4A:20:99:D3:B0:8D:6F:76:E7:BD:45:6C:D4:D6:E7:75:D3:47:EB:8D Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Certificate serial: 019BA18EFAB6612C1D48E88640F6957CD8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft Manifest number: 16C8 Signing time: Fri 09 Jan 2026 07:01:00 +0000 Manifest this update: Fri 09 Jan 2026 07:01:00 +0000 Manifest next update: Sat 10 Jan 2026 07:01:00 +0000 Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: 0eJJbPKXlKKHY1Gvs1xczNx2CLQUnFlb4R7uCrtQEW8=) 2: St46xIo1d9knxq8PKrr8XW7TwzU.roa (hash: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8e:fa:b6:61:2c:1d:48:e8:86:40:f6:95:7c:d8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Validity Not Before: Jan 9 07:01:00 2026 GMT Not After : Jan 10 07:01:00 2026 GMT Subject: CN=4a2099d3b08d6f76e7bd456cd4d6e775d347eb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:78:6e:64:54:67:90:ff:7d:95:1d:25:15: a1:f2:cf:a6:26:2b:0f:6a:83:9f:e4:de:be:45:82: f7:2e:6f:3a:10:6d:7f:be:73:a9:2e:a8:a9:ad:21: 96:1e:f2:9a:a3:e6:86:d9:03:a0:57:d2:ad:9c:a8: c2:bc:d0:57:f3:bb:f7:d9:be:04:05:e1:2a:8a:bb: 16:46:0c:80:99:07:69:9c:17:28:45:60:cf:f0:a0: ef:2a:e5:5c:d2:f9:65:c6:9e:6c:f7:4c:09:f9:1a: c1:2e:16:57:7f:6d:29:90:7d:3a:56:83:cb:2b:9b: 1d:c0:83:ca:cb:fc:ff:e9:f3:e3:ea:18:bf:16:77: 72:ec:a2:a6:65:95:32:2c:cc:fa:eb:cd:de:59:6d: 4b:ec:7f:bb:11:24:92:d9:4f:17:ed:95:54:e6:8f: dc:37:08:e4:fe:5a:2c:a7:06:be:37:b1:e9:8c:e0: fc:35:76:c3:c7:a0:31:f2:e5:7e:95:e7:2e:27:d3: 0e:84:0d:d6:44:47:ae:41:d8:7b:bd:20:c9:c5:ec: 93:74:0c:b3:c6:cd:e9:8b:21:19:f5:a3:15:93:95: 55:d9:de:72:f5:d2:4a:15:9e:a7:df:32:f2:95:5d: f0:03:b5:27:e8:7e:01:7d:a8:92:0c:bb:98:aa:02: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:99:D3:B0:8D:6F:76:E7:BD:45:6C:D4:D6:E7:75:D3:47:EB:8D X509v3 Authority Key Identifier: keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:36:8b:00:c8:aa:6b:46:6b:86:61:38:ae:20:c9:46:22: 80:9b:7b:5c:49:8f:60:08:af:40:9f:6d:52:20:70:c7:56:fc: 7b:4d:1a:3b:cc:77:66:05:0a:fa:ee:ff:58:e9:d3:f7:cc:40: 47:68:7e:41:9a:0e:ec:b9:54:47:ce:70:a6:fc:62:b6:a3:7b: ca:81:ea:80:06:50:b4:63:05:9a:82:e0:0a:e9:be:fc:5a:ee: 1a:76:70:91:71:e5:8d:81:07:47:cd:05:26:0c:95:33:18:73: 62:e1:f2:aa:19:93:f7:7a:48:db:f4:6b:97:49:02:29:53:77: 29:65:53:1c:d5:2c:99:af:2b:e8:f9:d3:a2:98:1d:d4:84:c4: 40:f0:bd:e6:59:da:ff:fc:7b:d6:5d:cd:0a:15:db:43:68:2a: 76:8a:4c:f9:8c:15:4b:7a:01:8e:f8:03:12:37:8a:30:52:f9: 4e:98:20:7c:f4:28:4d:a1:c3:24:37:35:a8:98:10:b1:ff:bd: 9f:ab:d8:3e:e1:7c:94:87:fe:a0:ea:29:e9:b3:f5:3d:2d:1f: e2:ce:17:64:ff:ba:86:e2:4b:08:fa:25:8b:c4:82:2d:a0:c2: 6b:18:c8:5b:b9:a4:6f:7d:86:cd:59:fe:4d:87:85:6a:1e:a4: 33:4a:17:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhjvq2YSwdSOiGQPaVfNjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMGM4ZDgwYzNhMzQyNzVmMDNlMjhlZDc5ODY0Y2VlMjY5 NDhkYzcwHhcNMjYwMTA5MDcwMTAwWhcNMjYwMTEwMDcwMTAwWjAzMTEwLwYDVQQD Eyg0YTIwOTlkM2IwOGQ2Zjc2ZTdiZDQ1NmNkNGQ2ZTc3NWQzNDdlYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7N4bmRUZ5D/fZUdJRWh8s+mJisP aoOf5N6+RYL3Lm86EG1/vnOpLqiprSGWHvKao+aG2QOgV9KtnKjCvNBX87v32b4E BeEqirsWRgyAmQdpnBcoRWDP8KDvKuVc0vllxp5s90wJ+RrBLhZXf20pkH06VoPL K5sdwIPKy/z/6fPj6hi/Fndy7KKmZZUyLMz6683eWW1L7H+7ESSS2U8X7ZVU5o/c Nwjk/lospwa+N7HpjOD8NXbDx6Ax8uV+lecuJ9MOhA3WREeuQdh7vSDJxeyTdAyz xs3piyEZ9aMVk5VV2d5y9dJKFZ6n3zLylV3wA7Un6H4BfaiSDLuYqgKKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEogmdOwjW92571FbNTW53XTR+uNMB8GA1UdIwQY MBaAFB8MjYDDo0J18D4o7XmGTO4mlI3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2Mt ZjU0M2I5MTg1OTMyLzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2MtZjU0M2I5MTg1OTMy LzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaE2iwDI qmtGa4ZhOK4gyUYigJt7XEmPYAivQJ9tUiBwx1b8e00aO8x3ZgUK+u7/WOnT98xA R2h+QZoO7LlUR85wpvxitqN7yoHqgAZQtGMFmoLgCum+/FruGnZwkXHljYEHR80F JgyVMxhzYuHyqhmT93pI2/Rrl0kCKVN3KWVTHNUsma8r6PnTopgd1ITEQPC95lna //x71l3NChXbQ2gqdopM+YwVS3oBjvgDEjeKMFL5TpggfPQoTaHDJDc1qJgQsf+9 n6vYPuF8lIf+oOop6bP1PS0f4s4XZP+6huJLCPoli8SCLaDCaxjIW7mkb32GzVn+ TYeFah6kM0oXaA== -----END CERTIFICATE-----Generated at Fri Jan 9 16:00:48 2026 by rpki-client