This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json) Hash identifier: LowfmwVwus2q75yO5PqJk8R2vsot3t06gGyadx+VoPE= Subject key identifier: A6:33:38:D1:EE:59:D0:87:F3:DE:3A:2D:85:50:37:53:82:52:84:65 Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Certificate serial: 019BB24BA4942EB640C9136C413F9FD0907F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft Manifest number: 17C2 Signing time: Mon 12 Jan 2026 13:01:00 +0000 Manifest this update: Mon 12 Jan 2026 13:01:00 +0000 Manifest next update: Tue 13 Jan 2026 13:01:00 +0000 Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: V41YRN0ZLGFF0k1dL0XtHzzdP6uzcgMrmqVIuPQ5qS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4b:a4:94:2e:b6:40:c9:13:6c:41:3f:9f:d0:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Validity Not Before: Jan 12 13:01:00 2026 GMT Not After : Jan 13 13:01:00 2026 GMT Subject: CN=a63338d1ee59d087f3de3a2d8550375382528465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:0d:de:a3:55:7f:33:8d:5d:3e:98:14:71: de:44:52:d2:0b:40:f9:7e:53:5e:5c:84:6e:19:15: e4:0a:65:1d:d4:f8:f7:84:75:86:1e:89:7a:68:1c: 97:f5:88:3e:ed:3e:37:c4:99:50:6a:a5:99:d0:ae: 7e:a6:b1:a9:51:a8:42:15:47:80:02:ee:55:98:67: be:7e:bf:65:13:9d:a6:45:23:5b:b2:7b:4e:3c:25: 74:59:54:e7:aa:99:1d:71:b5:5f:90:61:58:be:f2: 81:fc:07:cc:37:0c:91:f0:d1:2c:8b:1b:03:6c:05: ca:17:97:87:b4:39:78:b0:6d:87:29:6f:0e:35:67: 1a:c9:5c:85:d2:68:0b:7e:c6:52:7a:a7:2b:73:16: c3:69:3b:89:1e:61:8e:57:6b:6d:02:64:e4:75:97: b1:50:87:ed:35:1e:73:a8:47:ff:31:98:9f:c2:9e: f7:95:e6:e9:9a:2d:cc:ef:0e:5c:d6:87:86:27:89: 4d:e7:b8:11:3f:9c:b0:8d:d6:bf:9c:29:a7:35:4b: e3:af:97:8d:e5:15:47:8a:2e:68:aa:0a:fd:1a:f8: fe:7a:1f:10:bf:32:61:69:54:b8:eb:ee:eb:8e:04: b7:d1:7a:8b:76:59:5d:9c:4c:ca:20:02:01:b8:39: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:33:38:D1:EE:59:D0:87:F3:DE:3A:2D:85:50:37:53:82:52:84:65 X509v3 Authority Key Identifier: keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:2e:50:e2:5e:22:53:9f:5f:2d:3a:66:5d:51:08:eb:bc: 4d:78:71:6a:d3:c3:46:51:6c:e6:75:c0:6b:1d:af:7e:29:cb: f6:f1:b2:d0:e2:37:4c:95:51:f8:9e:98:ed:bb:f7:4d:28:b4: 9f:01:51:af:6e:c7:b7:b2:f9:81:90:82:0a:3a:0f:ef:88:ef: 92:00:ee:a3:bd:f3:2f:ea:43:27:fc:0c:dd:da:80:6d:70:b0: da:ee:2b:71:e9:3e:28:dc:e8:7e:aa:c1:c4:8d:08:63:3d:61: 7a:f4:13:38:b9:23:f3:f3:32:ee:de:64:87:5d:aa:de:c6:d9: eb:f4:ab:61:3f:de:6e:4b:7e:09:94:48:88:74:6d:2d:19:08: bc:9f:5f:b1:ec:9e:22:bb:21:6b:c1:bb:1f:54:ad:52:05:62: 95:b3:42:88:4d:cd:f6:9f:e2:9a:18:8b:4f:17:cd:41:76:a5: 02:8b:16:71:f8:45:fe:4c:e9:70:57:ab:f4:0d:98:89:b5:77: 19:e7:71:17:a4:8b:31:4a:f8:1f:df:5e:19:aa:93:c3:75:cf: 8e:04:7a:a8:a7:e7:22:e0:48:0f:49:40:64:1e:c0:85:61:12: 8e:37:4b:1e:e9:ba:f8:fa:aa:e1:fb:b8:c4:28:7e:55:4d:ad: a4:eb:63:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyS6SULrZAyRNsQT+f0JB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4 Nzg3MDUwHhcNMjYwMTEyMTMwMTAwWhcNMjYwMTEzMTMwMTAwWjAzMTEwLwYDVQQD EyhhNjMzMzhkMWVlNTlkMDg3ZjNkZTNhMmQ4NTUwMzc1MzgyNTI4NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1oN3qNVfzONXT6YFHHeRFLSC0D5 flNeXIRuGRXkCmUd1Pj3hHWGHol6aByX9Yg+7T43xJlQaqWZ0K5+prGpUahCFUeA Au5VmGe+fr9lE52mRSNbsntOPCV0WVTnqpkdcbVfkGFYvvKB/AfMNwyR8NEsixsD bAXKF5eHtDl4sG2HKW8ONWcayVyF0mgLfsZSeqcrcxbDaTuJHmGOV2ttAmTkdZex UIftNR5zqEf/MZifwp73lebpmi3M7w5c1oeGJ4lN57gRP5ywjda/nCmnNUvjr5eN 5RVHii5oqgr9Gvj+eh8QvzJhaVS46+7rjgS30XqLdlldnEzKIAIBuDlQQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYzONHuWdCH8946LYVQN1OCUoRlMB8GA1UdIwQY MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr0uUOJe IlOfXy06Zl1RCOu8TXhxatPDRlFs5nXAax2vfinL9vGy0OI3TJVR+J6Y7bv3TSi0 nwFRr27Ht7L5gZCCCjoP74jvkgDuo73zL+pDJ/wM3dqAbXCw2u4rcek+KNzofqrB xI0IYz1hevQTOLkj8/My7t5kh12q3sbZ6/SrYT/ebkt+CZRIiHRtLRkIvJ9fseye Irsha8G7H1StUgVilbNCiE3N9p/imhiLTxfNQXalAosWcfhF/kzpcFer9A2YibV3 GedxF6SLMUr4H99eGaqTw3XPjgR6qKfnIuBID0lAZB7AhWESjjdLHum6+Pqq4fu4 xCh+VU2tpOtj7w== -----END CERTIFICATE-----Generated at Mon Jan 12 22:45:11 2026 by rpki-client