This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json) Hash identifier: D3rqqnig/qIon8wJcnul8o2zW9rr1Ymkj5YVUDRpV7o= Subject key identifier: 36:52:F8:65:0A:98:DF:98:3F:02:46:3F:D8:70:33:D4:4C:E0:E8:14 Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Certificate serial: 019BB1A71B13B683F19F9D353580D285D117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft Manifest number: 1155 Signing time: Mon 12 Jan 2026 10:01:17 +0000 Manifest this update: Mon 12 Jan 2026 10:01:17 +0000 Manifest next update: Tue 13 Jan 2026 10:01:17 +0000 Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=) 2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: HalWSYJaTd8hlKETdxsH1AZbbKEDUykH8afzIz8UqoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:a7:1b:13:b6:83:f1:9f:9d:35:35:80:d2:85:d1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Validity Not Before: Jan 12 10:01:17 2026 GMT Not After : Jan 13 10:01:17 2026 GMT Subject: CN=3652f8650a98df983f02463fd87033d44ce0e814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:73:fd:ab:45:39:c1:d4:f2:c9:aa:36:90: 7a:68:e7:c5:7c:a8:7b:86:67:c3:f7:93:d0:5c:49: f5:f2:18:b1:ec:e4:33:15:6e:06:83:a1:e8:96:33: 40:17:2b:c0:9d:b2:24:b6:82:df:43:01:ce:a1:78: 20:14:a0:2a:b9:24:e0:0c:e2:90:c9:d3:37:87:a9: 7c:5e:06:19:92:61:04:2d:28:85:d6:7d:a9:b2:7a: 7d:bf:d1:07:1d:ae:a5:30:a0:3b:db:a0:ca:be:00: 08:91:ea:74:2f:b0:7c:e8:1f:a2:8d:85:b2:5c:66: 8f:71:b4:f2:7d:f3:af:9a:f6:0e:07:e2:35:0b:72: 0b:52:15:9d:69:5b:d3:5d:3f:bb:01:ce:57:ef:2a: e7:b5:79:7c:6b:66:ce:d9:e1:31:4c:99:38:f7:c2: 89:36:66:3b:bb:34:28:9b:62:39:12:85:7e:a3:ca: 1c:6e:12:30:61:22:14:4a:9c:31:c4:7b:6a:44:37: e6:cd:34:71:14:ee:d2:af:62:d2:ca:fd:4a:ef:7b: bd:3d:9e:0c:10:3d:fe:b7:b2:d1:6c:0d:e7:51:3e: f2:d4:dc:00:91:95:6a:06:13:48:32:2c:37:c9:be: 63:2a:15:12:11:73:af:55:54:b6:f8:a5:7f:70:e4: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:F8:65:0A:98:DF:98:3F:02:46:3F:D8:70:33:D4:4C:E0:E8:14 X509v3 Authority Key Identifier: keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6f:12:e6:0f:c1:40:2c:e1:04:4c:c1:9f:c5:07:5a:48:db: d1:bb:19:dd:c7:43:50:94:33:28:90:05:39:76:f9:a3:18:bb: c0:86:fb:08:ad:33:6a:23:15:54:2a:43:bc:b1:dd:3e:3f:2f: 5a:48:e0:b6:6d:34:96:89:4b:53:ec:6b:d8:0c:9c:5c:69:4f: f2:1d:c9:9f:1c:3a:4c:08:15:95:46:3b:e5:21:0b:6f:36:f2: c8:0e:a7:da:f6:5e:c8:55:24:18:6b:58:dd:ca:68:41:98:d8: 22:4c:15:a0:5e:3b:ff:b9:e4:6c:e2:68:1b:26:75:93:37:59: af:83:22:17:31:bb:ee:1b:ff:d3:aa:c1:f0:56:03:4d:92:dd: 9a:a7:32:8c:a6:37:de:bf:ba:f7:6b:fa:96:a4:15:d3:16:21: 58:b4:07:88:b4:4e:f3:3b:6a:5d:24:49:c4:8e:81:a4:95:73: f7:61:72:1d:2b:91:46:d7:4c:88:4a:8a:2d:ef:ec:d6:63:34: 95:54:87:aa:04:5e:47:6a:f8:e6:7d:f3:90:75:80:db:fc:59: 3e:90:9f:30:ac:56:03:7f:a7:d3:28:87:2d:0d:64:9f:8d:57: e6:8b:34:33:68:32:3b:25:d2:9b:0b:ee:de:59:82:9a:ef:04: 52:f4:c7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxpxsTtoPxn501NYDShdEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi YTljNGYwHhcNMjYwMTEyMTAwMTE3WhcNMjYwMTEzMTAwMTE3WjAzMTEwLwYDVQQD EygzNjUyZjg2NTBhOThkZjk4M2YwMjQ2M2ZkODcwMzNkNDRjZTBlODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpz/atFOcHU8smqNpB6aOfFfKh7 hmfD95PQXEn18hix7OQzFW4Gg6HoljNAFyvAnbIktoLfQwHOoXggFKAquSTgDOKQ ydM3h6l8XgYZkmEELSiF1n2psnp9v9EHHa6lMKA726DKvgAIkep0L7B86B+ijYWy XGaPcbTyffOvmvYOB+I1C3ILUhWdaVvTXT+7Ac5X7yrntXl8a2bO2eExTJk498KJ NmY7uzQom2I5EoV+o8ocbhIwYSIUSpwxxHtqRDfmzTRxFO7Sr2LSyv1K73u9PZ4M ED3+t7LRbA3nUT7y1NwAkZVqBhNIMiw3yb5jKhUSEXOvVVS2+KV/cOT0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZS+GUKmN+YPwJGP9hwM9RM4OgUMB8GA1UdIwQY MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2 LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW8S5g/B QCzhBEzBn8UHWkjb0bsZ3cdDUJQzKJAFOXb5oxi7wIb7CK0zaiMVVCpDvLHdPj8v Wkjgtm00lolLU+xr2AycXGlP8h3Jnxw6TAgVlUY75SELbzbyyA6n2vZeyFUkGGtY 3cpoQZjYIkwVoF47/7nkbOJoGyZ1kzdZr4MiFzG77hv/06rB8FYDTZLdmqcyjKY3 3r+692v6lqQV0xYhWLQHiLRO8ztqXSRJxI6BpJVz92FyHSuRRtdMiEqKLe/s1mM0 lVSHqgReR2r45n3zkHWA2/xZPpCfMKxWA3+n0yiHLQ1kn41X5os0M2gyOyXSmwvu 3lmCmu8EUvTHzQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:46:14 2026 by rpki-client