This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json) Hash identifier: 4B7Rebai2HNrliZTTagr9R6oEIT206UrU+OvAboslW0= Subject key identifier: 97:02:DD:DA:53:69:EB:3D:38:F8:9E:E5:2D:A6:56:E1:A7:66:1B:AB Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54 Certificate issuer: /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54 Certificate serial: 019C420FDFCC89221FAED8DE8654151D3F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft Manifest number: 0419 Signing time: Mon 09 Feb 2026 11:01:02 +0000 Manifest this update: Mon 09 Feb 2026 11:01:02 +0000 Manifest next update: Tue 10 Feb 2026 11:01:02 +0000 Files and hashes: 1: 3uUdC3qqQNH1_dT0n-HK8fBBniQ.roa (hash: UQYOsde53G7aaoc7Sep9TNvii9QGeiprFatc1ldKcwI=) 2: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: YpQexTCrshRKHyRC2Am1lpmyOGH+3Df/fY6fJC0wYb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:df:cc:89:22:1f:ae:d8:de:86:54:15:1d:3f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54 Validity Not Before: Feb 9 11:01:02 2026 GMT Not After : Feb 10 11:01:02 2026 GMT Subject: CN=9702ddda5369eb3d38f89ee52da656e1a7661bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:c4:e5:16:16:25:d0:9e:5f:57:cb:c9:46: f1:c4:9c:61:f4:df:8c:d5:bb:d3:a5:bf:fe:8b:5f: a5:09:a3:c4:1a:4f:36:a6:2c:ac:fc:c2:e4:de:20: 12:24:19:90:31:e9:ee:86:68:7f:0d:cd:48:1a:47: 36:d2:19:b4:48:c8:49:1d:1c:4b:ef:41:9a:6a:88: b8:82:d1:70:78:9d:e0:d2:f6:cc:9e:c0:30:de:99: 2a:ba:42:14:ce:47:a6:f3:dc:1b:82:09:44:09:bb: c3:f1:02:bd:bb:a7:2e:ab:c9:2e:e3:94:e2:cd:b0: a6:9e:c0:2f:e0:e6:2f:d0:b1:1a:1f:af:12:25:5b: 45:24:1f:cf:84:7f:f1:84:a6:3d:46:c4:f3:56:d2: 32:86:63:e7:96:08:d5:b4:f7:3a:92:99:52:93:ec: ec:8b:e1:ce:e7:6d:bb:a7:e3:b6:09:66:eb:a7:48: cf:cb:cd:1f:8f:c3:5f:41:28:e1:50:8e:2a:0e:05: 45:aa:bb:12:3b:64:59:da:de:bf:b8:3a:97:9c:a8: 86:a3:94:46:4c:8b:f9:3f:2b:33:a0:3a:f6:e4:59: 4e:ea:63:e1:4f:9b:e6:58:63:bc:81:c4:e4:93:14: 36:68:c1:ea:71:30:89:8a:fe:ac:13:c9:1a:d7:11: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:DD:DA:53:69:EB:3D:38:F8:9E:E5:2D:A6:56:E1:A7:66:1B:AB X509v3 Authority Key Identifier: keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:22:a0:39:b9:17:3c:16:30:92:3d:8d:46:33:ce:92:44:c6: 5d:c8:d5:58:f6:ab:03:fc:e8:77:f0:b5:69:aa:2f:c6:50:c0: 79:fb:ee:65:d8:2a:5f:0b:2d:06:f9:ce:94:ca:31:71:68:92: 58:5a:9a:a7:0e:78:d8:30:8f:c9:0a:ea:12:b7:fd:0c:4e:21: c3:f0:e0:2b:55:ca:59:ce:dc:ab:01:85:85:65:29:33:7d:8b: b8:3e:68:b3:4f:34:9f:bd:cc:ae:b5:86:c6:8b:e2:c1:13:35: b2:ba:ab:b7:a4:78:33:78:f3:31:67:07:25:f7:c4:74:20:a7: f3:8b:7d:52:78:55:56:87:ac:1f:85:cd:55:cf:e7:cd:90:68: f7:64:52:b5:b5:6f:e7:45:86:e4:5a:61:65:f9:df:62:a7:3c: 08:c4:54:30:0a:90:5c:ce:4f:83:fb:75:73:b4:e0:d6:09:f8: 74:54:20:24:ae:cd:ff:63:98:cc:1f:07:42:18:69:99:8c:54: d4:2b:f4:02:41:58:b1:b9:3e:68:24:a9:34:99:68:a6:1f:e3: 7f:d5:05:37:a3:d6:59:48:5f:ee:1c:e4:41:18:18:7d:49:f0: bf:d9:11:e7:32:9f:8a:d7:fc:ce:e3:44:8d:4f:b2:f0:86:27: 30:41:69:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9/MiSIfrtjehlQVHT+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZmI2ZGY5MzM3NWEwNmM1NjgyYzA1N2MwZmQyYTczMDYy MThhNTQwHhcNMjYwMjA5MTEwMTAyWhcNMjYwMjEwMTEwMTAyWjAzMTEwLwYDVQQD Eyg5NzAyZGRkYTUzNjllYjNkMzhmODllZTUyZGE2NTZlMWE3NjYxYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbbE5RYWJdCeX1fLyUbxxJxh9N+M 1bvTpb/+i1+lCaPEGk82piys/MLk3iASJBmQMenuhmh/Dc1IGkc20hm0SMhJHRxL 70Gaaoi4gtFweJ3g0vbMnsAw3pkqukIUzkem89wbgglECbvD8QK9u6cuq8ku45Ti zbCmnsAv4OYv0LEaH68SJVtFJB/PhH/xhKY9RsTzVtIyhmPnlgjVtPc6kplSk+zs i+HO5227p+O2CWbrp0jPy80fj8NfQSjhUI4qDgVFqrsSO2RZ2t6/uDqXnKiGo5RG TIv5PyszoDr25FlO6mPhT5vmWGO8gcTkkxQ2aMHqcTCJiv6sE8ka1xE+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcC3dpTaes9OPie5S2mVuGnZhurMB8GA1UdIwQY MBaAFBz7bfkzdaBsVoLAV8D9KnMGIYpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mYmFkZmYtNzVkNy00Y2JhLTk3MzUt NjZlYzJlYWY2NDZmLzEvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mYmFkZmYtNzVkNy00Y2JhLTk3MzUtNjZlYzJlYWY2NDZm LzEvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyKgObkX PBYwkj2NRjPOkkTGXcjVWParA/zod/C1aaovxlDAefvuZdgqXwstBvnOlMoxcWiS WFqapw542DCPyQrqErf9DE4hw/DgK1XKWc7cqwGFhWUpM32LuD5os080n73MrrWG xoviwRM1srqrt6R4M3jzMWcHJffEdCCn84t9UnhVVoesH4XNVc/nzZBo92RStbVv 50WG5FphZfnfYqc8CMRUMAqQXM5Pg/t1c7Tg1gn4dFQgJK7N/2OYzB8HQhhpmYxU 1Cv0AkFYsbk+aCSpNJloph/jf9UFN6PWWUhf7hzkQRgYfUnwv9kR5zKfitf8zuNE jU+y8IYnMEFpmg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:05 2026 by rpki-client