This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json) Hash identifier: 6K4Ou+0gdftsvjwuFI/xdXaXc8TYbU5SMzMHvnOD/Bg= Subject key identifier: D0:90:2F:F2:22:18:85:5C:DB:14:67:BB:06:4F:3A:05:40:88:D0:5C Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Certificate serial: 019C43C6C2C9A8F9F2FDCC9AC857E07B1970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft Manifest number: 171C Signing time: Mon 09 Feb 2026 19:00:25 +0000 Manifest this update: Mon 09 Feb 2026 19:00:25 +0000 Manifest next update: Tue 10 Feb 2026 19:00:25 +0000 Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: qvpni6oj+QpBE2FWj/IiQbeuUdMvGwoErukKg16uqYk=) 2: St46xIo1d9knxq8PKrr8XW7TwzU.roa (hash: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c2:c9:a8:f9:f2:fd:cc:9a:c8:57:e0:7b:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Validity Not Before: Feb 9 19:00:25 2026 GMT Not After : Feb 10 19:00:25 2026 GMT Subject: CN=d0902ff22218855cdb1467bb064f3a054088d05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:43:b5:60:07:be:bd:fb:6e:aa:ed:79:86: e1:08:11:60:0e:90:24:57:a8:a9:d4:90:40:d8:5a: 8a:28:51:29:c3:67:d7:56:8d:d3:87:d1:65:e3:5d: 3b:37:69:9f:79:7e:44:30:36:74:32:98:56:4d:23: ae:12:61:89:09:41:8b:50:28:bd:bc:ed:ab:ee:dd: 31:59:65:2a:f9:c3:63:a3:c2:48:72:98:fc:e5:12: ff:4b:0e:4a:6e:4f:47:c5:7b:41:df:ba:70:aa:5f: c8:83:9d:f5:1e:4d:a7:c9:64:4e:0f:d2:34:98:d7: 3b:d1:99:87:c8:13:3c:2a:1a:16:6d:1b:66:f5:82: 88:60:06:11:6f:72:35:a8:2d:a3:97:c7:a8:df:e5: 6e:ec:76:f3:8d:21:96:68:0c:01:6d:9e:df:55:7c: 95:4c:36:35:4f:2f:b6:70:35:29:5d:2c:09:81:bc: 72:de:fb:b6:4e:5c:30:11:39:26:bd:10:21:01:0c: 3f:ac:0f:38:55:fe:99:7b:13:8f:2e:ef:78:9f:30: 1f:61:6e:a2:85:75:d8:57:70:4c:72:f0:14:16:02: 3c:cb:5b:7d:a0:ce:1b:2b:9e:b0:92:40:1f:0c:bf: c0:5c:0e:68:68:d9:d6:11:d4:a2:37:58:d3:10:40: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:90:2F:F2:22:18:85:5C:DB:14:67:BB:06:4F:3A:05:40:88:D0:5C X509v3 Authority Key Identifier: keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2a:5c:42:79:ab:bc:70:e7:8d:4f:d6:a5:0a:ef:1b:14:df: 98:47:c5:a7:97:9f:75:59:33:78:14:72:8e:ad:fc:c2:62:ca: 92:cc:51:34:a0:da:93:9b:ba:1f:93:af:f6:c8:0e:b3:68:b7: 80:f6:db:71:89:fd:c7:d0:73:4e:b3:e6:35:ef:62:9b:af:92: de:12:a6:a3:c1:22:42:22:0c:da:70:68:f6:59:db:5f:f3:d7: b2:48:d8:4c:f1:f1:dc:44:67:b5:98:06:55:f5:cb:31:4a:42: 69:86:5c:80:04:b2:8e:6c:51:60:ec:cb:2f:40:12:78:27:80: 95:a8:77:28:cc:07:db:64:ba:b0:4e:17:ef:95:c0:16:35:d1: d0:ce:af:2d:75:f0:c8:83:5d:cc:00:34:96:ba:8b:24:c7:1e: 3b:19:24:ee:fc:e1:54:fc:93:fa:69:28:e8:89:54:f4:bb:3d: 29:19:b5:2f:4d:d6:1f:73:a5:c8:e3:9b:71:72:e0:b6:18:4f: bc:e4:29:50:44:bf:29:8c:14:ea:68:11:2d:5c:df:35:91:aa: 78:07:97:41:f3:ac:d8:f3:1d:ed:e0:a1:89:63:19:cd:70:73: 2b:c1:e8:2e:bc:7c:f9:fb:6c:9f:ed:4f:48:20:99:df:fe:2d: 8d:c4:b8:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsLJqPny/cyayFfgexlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMGM4ZDgwYzNhMzQyNzVmMDNlMjhlZDc5ODY0Y2VlMjY5 NDhkYzcwHhcNMjYwMjA5MTkwMDI1WhcNMjYwMjEwMTkwMDI1WjAzMTEwLwYDVQQD EyhkMDkwMmZmMjIyMTg4NTVjZGIxNDY3YmIwNjRmM2EwNTQwODhkMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC9DtWAHvr37bqrteYbhCBFgDpAk V6ip1JBA2FqKKFEpw2fXVo3Th9Fl4107N2mfeX5EMDZ0MphWTSOuEmGJCUGLUCi9 vO2r7t0xWWUq+cNjo8JIcpj85RL/Sw5Kbk9HxXtB37pwql/Ig531Hk2nyWROD9I0 mNc70ZmHyBM8KhoWbRtm9YKIYAYRb3I1qC2jl8eo3+Vu7HbzjSGWaAwBbZ7fVXyV TDY1Ty+2cDUpXSwJgbxy3vu2TlwwETkmvRAhAQw/rA84Vf6ZexOPLu94nzAfYW6i hXXYV3BMcvAUFgI8y1t9oM4bK56wkkAfDL/AXA5oaNnWEdSiN1jTEEBCvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCQL/IiGIVc2xRnuwZPOgVAiNBcMB8GA1UdIwQY MBaAFB8MjYDDo0J18D4o7XmGTO4mlI3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2Mt ZjU0M2I5MTg1OTMyLzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2MtZjU0M2I5MTg1OTMy LzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXypcQnmr vHDnjU/WpQrvGxTfmEfFp5efdVkzeBRyjq38wmLKksxRNKDak5u6H5Ov9sgOs2i3 gPbbcYn9x9BzTrPmNe9im6+S3hKmo8EiQiIM2nBo9lnbX/PXskjYTPHx3ERntZgG VfXLMUpCaYZcgASyjmxRYOzLL0ASeCeAlah3KMwH22S6sE4X75XAFjXR0M6vLXXw yINdzAA0lrqLJMceOxkk7vzhVPyT+mko6IlU9Ls9KRm1L03WH3OlyOObcXLgthhP vOQpUES/KYwU6mgRLVzfNZGqeAeXQfOs2PMd7eChiWMZzXBzK8HoLrx8+ftsn+1P SCCZ3/4tjcS4gg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:01 2026 by rpki-client