This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json) Hash identifier: lEl/S0PJYcNdIneFerr1ODLDhrrd3jpzFyDo/WRvVhU= Subject key identifier: E2:0C:AC:EC:82:04:C9:FA:FF:AA:94:56:DF:F1:FA:32:0C:E2:B2:8C Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Certificate serial: 019BB2151867E66A5518B0F2F45785408377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 12:01:25 +0000 Manifest this update: Mon 12 Jan 2026 12:01:25 +0000 Manifest next update: Tue 13 Jan 2026 12:01:25 +0000 Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: Itr3tECp1sk4poXVO9RUnwkJPSreoN4VYkWfzcFjKnc=) 2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:18:67:e6:6a:55:18:b0:f2:f4:57:85:40:83:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Validity Not Before: Jan 12 12:01:25 2026 GMT Not After : Jan 13 12:01:25 2026 GMT Subject: CN=e20cacec8204c9faffaa9456dff1fa320ce2b28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:16:83:db:6f:40:c4:f1:fd:1f:69:39:ed: 60:1d:86:28:de:4d:7c:d2:78:b3:62:b6:bc:d9:4b: f7:f7:cb:02:04:3d:2d:30:0f:4a:60:61:2a:65:59: f2:61:88:2d:72:66:a8:08:94:f0:5e:65:7c:0a:d4: f3:75:14:f7:07:ed:28:4b:44:40:00:01:d5:ed:80: 50:32:a8:e7:1c:6f:0e:62:ec:31:49:1e:4d:f7:ba: a1:b6:86:f6:24:90:29:82:70:79:fa:84:e4:28:f5: 4b:37:46:38:c5:9e:e6:68:7b:4a:23:d6:cd:25:55: 59:e8:82:53:14:fa:02:8b:b5:1f:fa:0a:75:3c:d1: 0c:f2:5b:ed:09:fd:9d:a0:31:72:5c:97:e1:0c:2c: 63:19:b7:dc:a5:9e:6c:d1:76:be:ca:f9:19:12:21: e0:a9:87:32:01:64:5c:85:35:08:0a:1f:c3:49:06: 1f:30:df:50:13:59:d9:a9:49:ca:6c:01:ba:b6:cb: 50:45:14:11:e5:2b:f1:45:45:c0:b9:98:0d:22:61: dc:5f:a6:e2:0b:6b:79:28:f2:5c:19:b9:27:1c:2b: 37:5f:3a:71:24:14:7c:7d:dd:d8:8c:08:19:c4:a6: f9:8f:08:34:d5:8d:c9:db:bd:e9:d3:70:cd:37:13: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:AC:EC:82:04:C9:FA:FF:AA:94:56:DF:F1:FA:32:0C:E2:B2:8C X509v3 Authority Key Identifier: keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0b:0d:87:f5:1d:f2:7a:99:ab:c0:5e:f7:1d:18:5a:ab:75: 34:14:d9:c1:ec:88:26:ad:3a:a1:57:d9:c8:ad:96:c0:49:c4: d1:68:7b:93:5a:c0:84:86:12:90:c2:63:2f:67:37:98:d8:5a: 3b:0d:8d:55:e2:a2:9c:ba:7a:84:c5:0c:49:c0:2b:75:e4:b5: c4:6a:65:4f:31:1a:83:b5:40:45:c4:f0:b9:3b:9a:17:d5:00: c4:03:cd:16:21:fa:3e:2b:a0:6e:14:b8:3f:f5:6a:40:fa:f7: 8a:4e:4b:ef:c0:3e:76:1b:bf:2a:26:e7:ba:8b:da:31:94:18: f7:c9:28:c9:81:de:06:a4:f4:c5:b4:b8:b7:4b:4b:ef:ba:08: 89:8b:d7:99:ac:cb:8a:61:8f:51:7f:26:e4:7c:88:b2:2c:69: 0e:c3:f3:68:6a:ae:03:b4:d2:c2:99:2e:95:9b:4b:d4:b0:c7: 7e:b1:59:4f:9e:a4:2b:2c:90:d2:fb:3e:b2:e5:a9:49:6f:36: 2a:37:7a:51:f8:fe:e2:b7:47:78:33:99:71:88:cf:d6:c5:ad: 2a:ec:8c:56:e2:9f:59:af:31:6f:40:04:b5:1d:64:65:a9:21: 34:1f:d4:14:a5:04:3f:6a:65:ae:1c:da:d2:0a:3c:03:3b:e8: db:a6:f0:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFRhn5mpVGLDy9FeFQIN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh NjZkMTgwHhcNMjYwMTEyMTIwMTI1WhcNMjYwMTEzMTIwMTI1WjAzMTEwLwYDVQQD EyhlMjBjYWNlYzgyMDRjOWZhZmZhYTk0NTZkZmYxZmEzMjBjZTJiMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/AWg9tvQMTx/R9pOe1gHYYo3k18 0nizYra82Uv398sCBD0tMA9KYGEqZVnyYYgtcmaoCJTwXmV8CtTzdRT3B+0oS0RA AAHV7YBQMqjnHG8OYuwxSR5N97qhtob2JJApgnB5+oTkKPVLN0Y4xZ7maHtKI9bN JVVZ6IJTFPoCi7Uf+gp1PNEM8lvtCf2doDFyXJfhDCxjGbfcpZ5s0Xa+yvkZEiHg qYcyAWRchTUICh/DSQYfMN9QE1nZqUnKbAG6tstQRRQR5SvxRUXAuZgNImHcX6bi C2t5KPJcGbknHCs3XzpxJBR8fd3YjAgZxKb5jwg01Y3J273p03DNNxP0fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIMrOyCBMn6/6qUVt/x+jIM4rKMMB8GA1UdIwQY MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2 LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAsNh/Ud 8nqZq8Be9x0YWqt1NBTZweyIJq06oVfZyK2WwEnE0Wh7k1rAhIYSkMJjL2c3mNha Ow2NVeKinLp6hMUMScArdeS1xGplTzEag7VARcTwuTuaF9UAxAPNFiH6PiugbhS4 P/VqQPr3ik5L78A+dhu/KibnuovaMZQY98koyYHeBqT0xbS4t0tL77oIiYvXmazL imGPUX8m5HyIsixpDsPzaGquA7TSwpkulZtL1LDHfrFZT56kKyyQ0vs+suWpSW82 Kjd6Ufj+4rdHeDOZcYjP1sWtKuyMVuKfWa8xb0AEtR1kZakhNB/UFKUEP2plrhza 0go8Azvo26bwAw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:12:52 2026 by rpki-client