This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json) Hash identifier: qHcDQHSCUIhCdvPDmQgdbpkcHHfNqNvzY39R4LEIDoc= Subject key identifier: 44:A6:66:95:B3:DB:18:F2:E2:A8:38:2E:55:7F:D9:41:F7:E4:54:A7 Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded Certificate serial: 019C43FDB93D9065B95CD3D0303967CEAD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft Manifest number: 092D Signing time: Mon 09 Feb 2026 20:00:27 +0000 Manifest this update: Mon 09 Feb 2026 20:00:27 +0000 Manifest next update: Tue 10 Feb 2026 20:00:27 +0000 Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: pi552BJnhykRw1L4noFMw77Q90ygRZ1ff8ax3ldBJfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b9:3d:90:65:b9:5c:d3:d0:30:39:67:ce:ad:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded Validity Not Before: Feb 9 20:00:27 2026 GMT Not After : Feb 10 20:00:27 2026 GMT Subject: CN=44a66695b3db18f2e2a8382e557fd941f7e454a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:9b:ee:66:80:7c:79:eb:8e:29:50:4f:3e: f1:2c:a5:89:2d:59:be:6a:7d:56:0d:2a:68:85:44: 08:22:01:85:ad:84:69:4a:82:fd:65:99:da:33:3c: 4e:d1:64:b7:1c:83:df:55:65:b3:d3:fc:bb:eb:17: fc:e3:8d:a2:2f:0b:48:e2:66:86:86:b7:f1:dd:c9: 60:1a:1a:85:34:79:c9:9a:ed:54:1c:ea:35:f4:42: 06:13:07:24:51:a4:e1:15:eb:8a:8a:f9:0a:33:dc: f5:f4:fe:7f:51:5b:8c:5c:52:2a:51:4b:57:c2:13: 3c:55:18:77:f1:e0:0c:d9:94:05:28:1a:17:1c:a1: b9:86:26:ff:6e:7e:55:2c:cb:23:b7:95:d0:d5:8b: bc:9e:63:98:9c:60:f1:0f:32:f6:c4:86:29:f0:84: a0:52:8f:c6:2c:c9:2f:d8:bb:0d:58:e2:7f:26:39: 68:15:21:c4:7e:f0:3c:d3:98:dc:3a:77:da:2d:ac: 6f:ca:a9:ad:ce:5c:39:5b:2b:58:ee:34:0c:49:2b: 99:4c:1f:c4:78:c9:67:51:2b:49:6f:ce:fe:c8:37: a7:88:34:5b:7b:54:53:a1:9a:2a:fc:1c:7d:56:64: 68:ec:c7:0b:1e:84:97:10:93:53:9a:a0:d4:fe:5c: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:66:95:B3:DB:18:F2:E2:A8:38:2E:55:7F:D9:41:F7:E4:54:A7 X509v3 Authority Key Identifier: keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c2:d6:b4:7a:92:48:a6:8f:db:6f:aa:ec:3d:f5:53:70:53: 81:9d:c7:36:f9:78:e6:97:2a:2f:e5:a6:56:4f:5b:0c:66:40: 90:02:ed:de:1c:69:96:0b:52:c6:2d:a0:6f:c7:12:5e:b6:61: 5f:72:b6:4d:96:1c:3b:65:52:e4:8a:13:77:d5:4b:71:1f:14: 9e:e2:ee:a2:fe:f2:f1:88:ce:4f:1d:04:9d:a0:36:c1:3d:a9: 23:24:76:18:b0:a6:dc:b0:92:5a:9c:a7:a6:02:b0:12:78:d5: c6:f5:8a:39:7f:9b:f9:5c:1d:b5:f8:0d:dd:70:19:b0:38:ad: ba:e6:5d:5a:00:3c:cb:b7:82:d9:61:a1:64:4c:5f:56:54:41: 4f:8d:58:ad:44:c5:70:a8:50:a7:ea:42:0e:95:2f:89:71:17: 16:68:fc:08:07:f2:ed:5f:54:82:a4:cf:f0:d9:d9:ea:89:db: 1e:b0:83:65:d0:dc:7d:64:1a:91:fc:c5:6a:f7:14:64:aa:6a: a6:0d:01:7e:4c:fd:96:88:17:97:c8:c6:c7:d7:6a:a5:d8:a1: 33:30:30:0b:16:9e:a2:84:32:43:a4:e9:be:72:7d:10:8d:fc: 6e:d7:5c:c4:64:a7:27:68:ca:32:3e:d7:9c:18:43:ec:5d:44: 69:9c:b0:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bk9kGW5XNPQMDlnzq0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMTExN2U5NzZiM2UzMzk1M2I5MzYxYmI0YmIxZWJhMmY0 MDlkZWQwHhcNMjYwMjA5MjAwMDI3WhcNMjYwMjEwMjAwMDI3WjAzMTEwLwYDVQQD Eyg0NGE2NjY5NWIzZGIxOGYyZTJhODM4MmU1NTdmZDk0MWY3ZTQ1NGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljib7maAfHnrjilQTz7xLKWJLVm+ an1WDSpohUQIIgGFrYRpSoL9ZZnaMzxO0WS3HIPfVWWz0/y76xf8442iLwtI4maG hrfx3clgGhqFNHnJmu1UHOo19EIGEwckUaThFeuKivkKM9z19P5/UVuMXFIqUUtX whM8VRh38eAM2ZQFKBoXHKG5hib/bn5VLMsjt5XQ1Yu8nmOYnGDxDzL2xIYp8ISg Uo/GLMkv2LsNWOJ/JjloFSHEfvA805jcOnfaLaxvyqmtzlw5WytY7jQMSSuZTB/E eMlnUStJb87+yDeniDRbe1RToZoq/Bx9VmRo7McLHoSXEJNTmqDU/lxwLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESmZpWz2xjy4qg4LlV/2UH35FSnMB8GA1UdIwQY MBaAFP4RF+l2s+M5U7k2G7S7HrovQJ3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2Ut ODQ2ZTFmNDFmYzYyLzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2UtODQ2ZTFmNDFmYzYy LzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcLWtHqS SKaP22+q7D31U3BTgZ3HNvl45pcqL+WmVk9bDGZAkALt3hxplgtSxi2gb8cSXrZh X3K2TZYcO2VS5IoTd9VLcR8UnuLuov7y8YjOTx0EnaA2wT2pIyR2GLCm3LCSWpyn pgKwEnjVxvWKOX+b+VwdtfgN3XAZsDituuZdWgA8y7eC2WGhZExfVlRBT41YrUTF cKhQp+pCDpUviXEXFmj8CAfy7V9UgqTP8NnZ6onbHrCDZdDcfWQakfzFavcUZKpq pg0Bfkz9logXl8jGx9dqpdihMzAwCxaeooQyQ6TpvnJ9EI38btdcxGSnJ2jKMj7X nBhD7F1EaZyw0g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:38 2026 by rpki-client