This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json) Hash identifier: m6Zdrgwspk8l7lBjM2oC6wnVYlHivy5PtCJhAntU1V0= Subject key identifier: 4D:4C:A4:F8:93:AD:B1:AF:D0:C2:95:88:9F:40:1E:3E:B0:D8:7A:49 Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664 Certificate serial: 019B78C9C07A83557B8E47D5A0C2937A7778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft Manifest number: 056D Signing time: Thu 01 Jan 2026 09:00:46 +0000 Manifest this update: Thu 01 Jan 2026 09:00:46 +0000 Manifest next update: Fri 02 Jan 2026 09:00:46 +0000 Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: yDk5fMj7MLSTUklK3GWojnkNAYxxw7KV7bwOdCQkFx8=) 2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:c0:7a:83:55:7b:8e:47:d5:a0:c2:93:7a:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664 Validity Not Before: Jan 1 09:00:46 2026 GMT Not After : Jan 2 09:00:46 2026 GMT Subject: CN=4d4ca4f893adb1afd0c295889f401e3eb0d87a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:bb:e3:ec:67:2b:50:2e:00:bb:5b:c9:e2: f9:71:02:77:40:24:2a:31:fd:be:5d:1d:47:03:d3: 04:90:3e:dc:24:30:0d:b5:94:e9:e8:88:9a:0c:90: 56:3d:8c:5f:1b:42:5a:3f:dc:5d:5b:56:34:b2:95: 0b:13:3f:63:b4:38:1c:b3:eb:c3:8f:fa:f7:b2:52: 71:75:02:5f:fe:58:18:e3:0d:d1:f0:d5:1b:f1:ca: 0e:2b:d3:3e:77:96:6c:8c:67:95:a7:e9:98:ce:11: c3:58:39:15:db:13:e9:95:e0:46:cb:29:3f:5c:04: 1e:30:d7:7e:d6:77:af:b4:f4:f3:74:22:8b:db:be: 9b:2a:f7:92:a9:0e:5c:4e:ae:68:b2:2c:10:ba:cb: d5:8b:fe:bb:ab:c8:64:3d:cd:6f:ca:8c:93:31:b5: ab:c4:4c:b4:bf:fb:98:9a:f9:ee:e4:7d:47:87:91: fd:6c:11:26:8a:72:36:a3:42:b9:c8:f1:cd:18:d1: 6b:5e:8d:f1:2a:b7:34:75:ac:fd:61:6a:1b:e0:5e: ed:d5:4b:66:5f:0f:52:1a:82:dd:90:fe:3d:33:a6: b6:bf:d4:6d:62:d1:6a:f6:20:f8:72:ea:f3:1a:35: 16:16:a4:68:cc:90:b2:23:27:5e:b2:0f:05:53:44: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:A4:F8:93:AD:B1:AF:D0:C2:95:88:9F:40:1E:3E:B0:D8:7A:49 X509v3 Authority Key Identifier: keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:eb:19:b1:31:9b:94:eb:39:db:82:0e:a1:0d:68:aa:38:45: 72:ee:c7:14:17:0e:82:76:55:c7:9a:f3:0a:57:24:ae:e6:19: 03:3c:9d:52:eb:8f:fd:e2:68:f5:8b:c1:5d:de:a5:16:8e:fa: 90:5d:8f:c0:bb:90:74:52:28:65:c8:4e:bc:8d:9a:8d:a2:4c: 32:e5:f6:fb:3d:f4:f2:04:61:b0:a3:91:a6:48:9c:ee:cb:c7: 45:8d:2c:1d:14:75:8a:76:2e:31:ff:b9:b8:68:b4:d9:4a:62: fe:fa:75:98:1c:31:89:db:84:d7:61:ec:7d:a0:57:22:6d:83: 2e:66:0a:19:cf:9c:40:3c:8d:6d:d0:8e:99:78:fa:09:41:4e: 56:8f:99:06:05:7f:55:74:99:5a:98:b7:64:bb:29:eb:e8:af: c2:f4:e4:7d:2a:ab:58:3c:63:3b:98:83:7c:1b:08:68:c7:e1: 63:01:8c:7d:82:19:b7:de:e5:32:70:92:c8:2a:7f:d6:c0:c3: 3c:74:3b:b7:90:0d:f5:82:ff:e3:59:24:ac:55:02:3f:d3:e3: 3d:1e:ef:df:0e:37:22:40:b7:57:d8:9f:ce:5a:a0:34:e5:87: ca:7c:82:33:57:69:62:96:7b:9a:d4:a3:20:18:f1:5e:ed:73: e9:30:ac:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ycB6g1V7jkfVoMKTend4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTRiODA3MjM5MjFjZGQ1MWRhNTMzMjVmMTJiM2RiYzY3 ODI2NjQwHhcNMjYwMTAxMDkwMDQ2WhcNMjYwMTAyMDkwMDQ2WjAzMTEwLwYDVQQD Eyg0ZDRjYTRmODkzYWRiMWFmZDBjMjk1ODg5ZjQwMWUzZWIwZDg3YTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZK74+xnK1AuALtbyeL5cQJ3QCQq Mf2+XR1HA9MEkD7cJDANtZTp6IiaDJBWPYxfG0JaP9xdW1Y0spULEz9jtDgcs+vD j/r3slJxdQJf/lgY4w3R8NUb8coOK9M+d5ZsjGeVp+mYzhHDWDkV2xPpleBGyyk/ XAQeMNd+1nevtPTzdCKL276bKveSqQ5cTq5osiwQusvVi/67q8hkPc1vyoyTMbWr xEy0v/uYmvnu5H1Hh5H9bBEminI2o0K5yPHNGNFrXo3xKrc0daz9YWob4F7t1Utm Xw9SGoLdkP49M6a2v9RtYtFq9iD4curzGjUWFqRozJCyIydesg8FU0ToOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1MpPiTrbGv0MKViJ9AHj6w2HpJMB8GA1UdIwQY MBaAFB5UuAcjkhzdUdpTMl8Ss9vGeCZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWIt ZGU4MDc5MWExMzg2LzEvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWItZGU4MDc5MWExMzg2 LzEvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOsZsTGb lOs524IOoQ1oqjhFcu7HFBcOgnZVx5rzClckruYZAzydUuuP/eJo9YvBXd6lFo76 kF2PwLuQdFIoZchOvI2ajaJMMuX2+z308gRhsKORpkic7svHRY0sHRR1inYuMf+5 uGi02Upi/vp1mBwxiduE12HsfaBXIm2DLmYKGc+cQDyNbdCOmXj6CUFOVo+ZBgV/ VXSZWpi3ZLsp6+ivwvTkfSqrWDxjO5iDfBsIaMfhYwGMfYIZt97lMnCSyCp/1sDD PHQ7t5AN9YL/41kkrFUCP9PjPR7v3w43IkC3V9ifzlqgNOWHynyCM1dpYpZ7mtSj IBjxXu1z6TCsAQ== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:30 2026 by rpki-client