This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json) Hash identifier: No+DPMr1Qu1JFJ2eA0so8IsxZIAnF+T7Yl1srp4zdzk= Subject key identifier: 9D:DB:15:DA:7C:B8:1F:6F:8F:49:41:80:88:02:B6:4A:AC:18:8A:13 Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3 Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3 Certificate serial: 019C4510E9B6F65E85E282F26CA7D1918636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft Manifest number: 06B2 Signing time: Tue 10 Feb 2026 01:01:02 +0000 Manifest this update: Tue 10 Feb 2026 01:01:02 +0000 Manifest next update: Wed 11 Feb 2026 01:01:02 +0000 Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: /gW6gYzhlBakMWnRe5SuhNrIowfp6qVWWzXcU7UQARw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:e9:b6:f6:5e:85:e2:82:f2:6c:a7:d1:91:86:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3 Validity Not Before: Feb 10 01:01:02 2026 GMT Not After : Feb 11 01:01:02 2026 GMT Subject: CN=9ddb15da7cb81f6f8f4941808802b64aac188a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:08:a0:07:36:66:2a:ef:65:ae:29:af:a2: 06:a6:f7:d1:1e:20:9e:48:e4:08:3f:19:d5:d0:4b: 65:46:ea:1d:2f:2d:28:9f:c6:98:43:6b:f9:49:0f: b5:a0:e8:0b:bd:73:6f:4a:6f:a8:95:6c:78:7e:7d: 04:4f:de:14:2e:4c:bd:95:56:b2:56:bf:89:30:74: 78:56:0e:c7:fb:ba:7d:97:9a:48:2d:89:93:08:7e: 70:00:17:3d:e1:e1:3e:10:57:71:74:25:1a:b4:37: 4f:fc:26:e4:cf:64:c9:0b:a5:76:f9:da:5a:56:73: ca:61:1f:8c:a5:6a:f1:68:c6:15:e9:69:99:06:01: 81:8b:81:32:d8:ab:5a:1b:5a:40:6b:47:b6:cd:cc: e2:08:f7:c9:38:41:11:4f:13:ab:fe:51:c8:8d:dd: 81:92:3f:82:c0:e2:2a:9e:95:93:c6:47:b6:e9:4f: f3:eb:bd:28:ec:1d:9f:50:5a:32:93:4e:f7:df:72: 26:b3:f5:72:bf:a7:86:37:50:77:22:d4:ed:db:ff: 02:cc:03:1c:7f:e3:9d:48:f2:6c:9b:ce:f6:67:9f: dc:ee:63:b5:03:f1:a7:4c:05:c0:9e:47:1e:05:b0: 0a:35:00:aa:1d:a9:d5:ad:d2:64:7d:c7:a2:f1:d8: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:15:DA:7C:B8:1F:6F:8F:49:41:80:88:02:B6:4A:AC:18:8A:13 X509v3 Authority Key Identifier: keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f9:db:18:2f:b8:a6:58:fa:c8:63:aa:dd:1a:2a:2c:7a:e5: 23:af:a8:5e:94:ae:51:95:0a:ff:ce:d7:cd:38:ff:93:b0:e4: 0f:d3:bb:d4:19:60:9d:09:98:04:51:6f:7b:74:86:3b:af:37: d2:4c:a8:00:d8:33:4f:0d:62:b7:63:65:90:33:ff:aa:8b:75: f0:c1:99:55:c4:36:b7:92:c1:ea:c0:89:35:48:a6:d3:08:e0: 1d:c3:a0:97:db:81:dd:af:be:6c:30:e3:a1:ac:ac:55:de:1b: 16:a5:02:80:43:e8:b8:71:4c:0d:88:a6:d9:c6:b2:f5:62:2a: a7:8d:8c:08:ff:6f:df:a4:61:cc:08:9c:79:36:29:6a:3f:4c: e8:92:6b:a8:c2:e6:7f:7c:ed:7f:c8:ea:f5:10:33:db:a8:f9: e0:4d:06:bc:a0:46:6a:fe:b9:5e:c9:70:a9:3a:43:c9:99:d1: 53:2a:87:27:0a:25:ad:80:2d:2d:22:5c:7f:c7:2e:05:48:0c: 59:8f:42:61:b7:ae:9d:a3:5d:c6:e3:ad:16:a4:8e:93:01:34: 40:f5:ba:8c:9b:36:73:12:c3:29:52:5c:47:88:5b:c6:f8:4a: f7:ff:20:79:c2:b7:9d:97:2c:96:bb:b8:39:c6:65:0d:a3:b3: 31:f4:9b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEOm29l6F4oLybKfRkYY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNGFhZWIzZTJiN2E0M2RmMDFmMzFkNTFhMjBlZjIyNTVj ZWFmZTMwHhcNMjYwMjEwMDEwMTAyWhcNMjYwMjExMDEwMTAyWjAzMTEwLwYDVQQD Eyg5ZGRiMTVkYTdjYjgxZjZmOGY0OTQxODA4ODAyYjY0YWFjMTg4YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr0IoAc2ZirvZa4pr6IGpvfRHiCe SOQIPxnV0EtlRuodLy0on8aYQ2v5SQ+1oOgLvXNvSm+olWx4fn0ET94ULky9lVay Vr+JMHR4Vg7H+7p9l5pILYmTCH5wABc94eE+EFdxdCUatDdP/Cbkz2TJC6V2+dpa VnPKYR+MpWrxaMYV6WmZBgGBi4Ey2KtaG1pAa0e2zcziCPfJOEERTxOr/lHIjd2B kj+CwOIqnpWTxke26U/z670o7B2fUFoyk07333Ims/Vyv6eGN1B3ItTt2/8CzAMc f+OdSPJsm872Z5/c7mO1A/GnTAXAnkceBbAKNQCqHanVrdJkfcei8djjaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3bFdp8uB9vj0lBgIgCtkqsGIoTMB8GA1UdIwQY MBaAFB9KrrPit6Q98B8x1Rog7yJVzq/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMt ZTE4NDJiZTQxMmQxLzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zZjNmNTAtMmYzNS00MDdlLWI5OWMtZTE4NDJiZTQxMmQx LzEvSDBxdXMtSzNwRDN3SHpIVkdpRHZJbFhPci1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfnbGC+4 plj6yGOq3RoqLHrlI6+oXpSuUZUK/87XzTj/k7DkD9O71BlgnQmYBFFve3SGO683 0kyoANgzTw1it2NlkDP/qot18MGZVcQ2t5LB6sCJNUim0wjgHcOgl9uB3a++bDDj oaysVd4bFqUCgEPouHFMDYim2cay9WIqp42MCP9v36RhzAiceTYpaj9M6JJrqMLm f3ztf8jq9RAz26j54E0GvKBGav65XslwqTpDyZnRUyqHJwolrYAtLSJcf8cuBUgM WY9CYbeunaNdxuOtFqSOkwE0QPW6jJs2cxLDKVJcR4hbxvhK9/8gecK3nZcslru4 OcZlDaOzMfSbkw== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:54 2026 by rpki-client