This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json) Hash identifier: vDwdWPfOlBFutfjaMxwIhFel40vOnhs0beZgV+jhL6A= Subject key identifier: 8D:32:A6:EB:22:4D:0C:12:86:2D:C8:93:91:D7:98:50:31:A2:68:A1 Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Certificate serial: 019C43C75E02155350DFB2321380FAAFC8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft Manifest number: 1538 Signing time: Mon 09 Feb 2026 19:01:05 +0000 Manifest this update: Mon 09 Feb 2026 19:01:05 +0000 Manifest next update: Tue 10 Feb 2026 19:01:05 +0000 Files and hashes: 1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=) 2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: jBIYxPDHjMtSHpIbntqrZnSXJFRaIKQItcA1dmSavlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:5e:02:15:53:50:df:b2:32:13:80:fa:af:c8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Validity Not Before: Feb 9 19:01:05 2026 GMT Not After : Feb 10 19:01:05 2026 GMT Subject: CN=8d32a6eb224d0c12862dc89391d7985031a268a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:af:b8:c5:53:f7:4d:79:2f:95:bf:6b:1a: 20:64:82:1b:fd:1f:f3:56:10:dc:6f:61:ff:8f:73: dd:0f:1c:ce:ae:eb:c4:05:99:13:75:55:5f:75:58: 92:aa:5f:17:5d:e3:3b:54:32:0a:6c:70:7c:b0:ac: 85:5f:ee:2a:5f:43:aa:d8:57:ea:65:6a:2d:a7:45: 70:9d:5e:b9:09:2d:60:1f:a6:66:8d:e7:c4:36:84: 47:ad:0e:19:17:70:0c:43:e7:78:8d:c2:dc:12:52: b0:9c:a6:3e:9d:49:f6:84:9c:0f:d3:46:31:79:65: 8b:7d:66:18:d3:9c:75:ae:47:74:3c:7e:a3:38:18: 41:35:03:cf:41:fa:f1:2d:4b:40:af:ca:99:b2:07: 8c:9d:ff:0a:a4:d1:6d:e2:c3:ff:0f:3a:a2:bd:25: 59:0f:76:20:f5:fd:b4:01:10:0e:9a:bf:f8:cd:5a: b4:9f:fb:95:50:21:8d:f6:5e:81:83:1f:88:79:1b: 98:e4:4b:dd:46:d0:2b:b1:42:32:bb:a2:bc:2b:ed: 04:25:c2:ac:59:9c:07:b3:8c:b8:0e:d7:63:2e:cc: f9:51:50:55:dd:d7:bc:4e:2d:95:88:c2:9c:95:8f: 46:85:7f:39:3d:d9:80:3e:4a:23:13:16:49:fa:73: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:32:A6:EB:22:4D:0C:12:86:2D:C8:93:91:D7:98:50:31:A2:68:A1 X509v3 Authority Key Identifier: keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:0a:c4:03:33:2e:4d:cc:6d:6b:03:77:61:12:0d:40:e0: 86:f6:da:8a:ff:1f:c4:6b:f0:29:9d:a6:92:b4:6b:39:4f:9c: 4b:94:2c:4b:c9:ed:ba:e9:29:31:fa:ca:a7:43:a6:4b:8a:c7: 3d:8e:72:f0:7e:ae:34:5d:0e:86:da:a0:da:2c:b8:75:a2:df: f0:70:5f:bd:06:44:71:aa:bd:a9:08:a8:0c:e3:dc:9b:55:98: 83:ed:3d:ad:3d:3f:2f:86:6d:ef:36:ae:e0:29:58:2f:35:93: 40:5a:32:7a:da:d1:84:e4:12:14:b7:9c:6e:ca:d7:53:56:e9: 40:ff:5d:5b:49:0a:b3:fa:0a:a8:5a:de:3a:5a:51:8d:30:ad: 3a:f1:42:cb:12:ba:11:a3:44:00:d2:0a:d6:ad:31:b8:92:f9: 57:de:d0:0e:d5:fc:60:51:25:91:7a:54:5a:36:6a:62:3f:91: 42:25:99:24:7a:80:fe:21:33:81:f7:3e:20:f6:96:8c:09:fc: 7e:3e:8a:15:05:ed:c5:5e:11:b2:6c:cb:d0:e7:1a:cb:49:f4: 0a:e8:92:bb:d0:19:7e:78:cf:0d:22:16:d6:e5:e7:15:a6:d6: 7e:9f:fb:dc:77:b3:0d:60:6d:ea:ec:51:49:ca:49:ec:d8:2d: 75:21:07:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx14CFVNQ37IyE4D6r8juMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0 YzFmYjUwHhcNMjYwMjA5MTkwMTA1WhcNMjYwMjEwMTkwMTA1WjAzMTEwLwYDVQQD Eyg4ZDMyYTZlYjIyNGQwYzEyODYyZGM4OTM5MWQ3OTg1MDMxYTI2OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpSvuMVT9015L5W/axogZIIb/R/z VhDcb2H/j3PdDxzOruvEBZkTdVVfdViSql8XXeM7VDIKbHB8sKyFX+4qX0Oq2Ffq ZWotp0VwnV65CS1gH6ZmjefENoRHrQ4ZF3AMQ+d4jcLcElKwnKY+nUn2hJwP00Yx eWWLfWYY05x1rkd0PH6jOBhBNQPPQfrxLUtAr8qZsgeMnf8KpNFt4sP/DzqivSVZ D3Yg9f20ARAOmr/4zVq0n/uVUCGN9l6Bgx+IeRuY5EvdRtArsUIyu6K8K+0EJcKs WZwHs4y4DtdjLsz5UVBV3de8Ti2ViMKclY9GhX85PdmAPkojExZJ+nM0hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0ypusiTQwShi3Ik5HXmFAxomihMB8GA1UdIwQY MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt NjJlYTFlN2U4ZmM2LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2 LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnw8KxAMz Lk3MbWsDd2ESDUDghvbaiv8fxGvwKZ2mkrRrOU+cS5QsS8ntuukpMfrKp0OmS4rH PY5y8H6uNF0Ohtqg2iy4daLf8HBfvQZEcaq9qQioDOPcm1WYg+09rT0/L4Zt7zau 4ClYLzWTQFoyetrRhOQSFLecbsrXU1bpQP9dW0kKs/oKqFreOlpRjTCtOvFCyxK6 EaNEANIK1q0xuJL5V97QDtX8YFElkXpUWjZqYj+RQiWZJHqA/iEzgfc+IPaWjAn8 fj6KFQXtxV4RsmzL0Ocay0n0CuiSu9AZfnjPDSIW1uXnFabWfp/73HezDWBt6uxR ScpJ7NgtdSEH8A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:05 2026 by rpki-client