This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json) Hash identifier: aumd8yHqgPz1kegwTGbVSeS8bXX80hHAQ/3kl8fNK0g= Subject key identifier: 2D:A2:29:A9:63:1A:EB:42:3C:1C:17:F1:33:12:D2:85:8C:EE:86:62 Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Certificate serial: 019C42B467582630DE3342FB7E43F9042FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft Manifest number: 0333 Signing time: Mon 09 Feb 2026 14:00:45 +0000 Manifest this update: Mon 09 Feb 2026 14:00:45 +0000 Manifest next update: Tue 10 Feb 2026 14:00:45 +0000 Files and hashes: 1: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: Q51aLWJIxu8FRObbWH8ysYyYMhiYCqWfcQaSPLTsT4g=) 2: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:67:58:26:30:de:33:42:fb:7e:43:f9:04:2f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Validity Not Before: Feb 9 14:00:45 2026 GMT Not After : Feb 10 14:00:45 2026 GMT Subject: CN=2da229a9631aeb423c1c17f13312d2858cee8662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:db:34:ec:02:d7:bb:67:de:88:37:90:28: 6c:22:91:08:f4:8a:fd:bc:0a:3a:07:74:b3:bd:54: 00:a8:57:d6:35:43:ca:21:c0:de:08:8d:6a:7b:5b: cf:04:b5:76:42:e2:77:47:1d:01:2f:b7:e8:07:db: 7b:b7:de:c6:d7:58:09:31:b1:60:b8:cf:21:24:27: 90:89:ef:f8:2d:30:e9:ea:09:a8:bf:c4:e6:18:0a: 6d:1e:ac:c1:21:ae:01:21:a9:2e:36:eb:b3:0a:f1: b0:b4:74:ca:39:fe:f6:3e:20:ab:c7:69:26:77:44: 2a:cf:25:79:62:af:f5:7d:fb:5f:bc:15:13:fd:93: 7f:3d:42:74:c8:b4:df:d1:99:94:e8:82:d9:4c:47: 07:72:95:9c:e1:a4:b6:d5:4b:ea:a0:4e:b7:ba:80: e0:af:88:a5:64:2b:c5:f7:53:85:a5:06:54:d9:94: 1b:fe:40:cd:15:67:eb:06:9f:82:14:36:7f:44:62: 98:b5:0e:fe:1e:f0:b1:5b:b9:f0:89:94:11:f1:6b: b2:9b:94:19:f2:aa:ce:1a:2f:c1:58:0f:22:da:74: b3:2d:a6:e1:5a:c6:53:42:30:8f:ca:6c:f1:d2:35: 65:65:01:01:13:26:61:b2:ca:53:97:7f:fc:2a:83: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:29:A9:63:1A:EB:42:3C:1C:17:F1:33:12:D2:85:8C:EE:86:62 X509v3 Authority Key Identifier: keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:52:5d:48:89:12:a6:c0:02:fb:0b:49:b8:73:af:5e:e5:21: fe:5d:69:dd:eb:cc:bf:49:6b:b4:2f:a9:cb:a0:9f:08:2d:18: 5e:72:99:73:34:58:6c:e9:4e:96:d1:06:3d:e6:d1:75:69:64: 22:e4:ce:34:ad:9b:8b:96:4d:f0:9b:b8:28:52:5a:ad:e6:bc: 37:82:3e:62:92:5c:da:f2:23:2e:a8:64:53:dc:64:59:03:af: 7a:3d:df:68:6d:7f:2f:63:e4:75:a7:be:f6:d0:8e:55:76:f6: 17:1a:36:f1:76:a1:0c:12:a5:ba:df:8f:21:97:09:f8:23:db: ec:3f:fe:c2:28:e4:f3:5f:04:33:9b:24:f1:e0:43:8f:e2:8d: 27:0c:ce:6b:62:dd:ef:40:31:4f:ca:18:cd:91:7c:d4:79:ce: a1:42:75:46:32:d7:6a:72:60:53:e7:c2:20:a1:a1:b4:84:72: cc:43:de:ab:7b:db:8f:a2:e2:fa:01:55:38:f8:7e:ae:d9:79: 69:5c:be:76:2d:13:6c:6e:58:1b:4c:df:b0:37:bf:63:2b:58: b5:9f:e2:38:0c:d3:12:09:f0:03:80:a7:b2:68:6e:05:ee:b7: 15:d9:31:b9:96:53:f7:d8:df:b2:47:44:58:29:ff:24:90:ac: 1c:9c:37:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGdYJjDeM0L7fkP5BC/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWY5OGFlZTM3YTEyODE1YjQ0YmZkNmJlYjRiZTY0YWMw ZWY2ZTUwHhcNMjYwMjA5MTQwMDQ1WhcNMjYwMjEwMTQwMDQ1WjAzMTEwLwYDVQQD EygyZGEyMjlhOTYzMWFlYjQyM2MxYzE3ZjEzMzEyZDI4NThjZWU4NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61nbNOwC17tn3og3kChsIpEI9Ir9 vAo6B3SzvVQAqFfWNUPKIcDeCI1qe1vPBLV2QuJ3Rx0BL7foB9t7t97G11gJMbFg uM8hJCeQie/4LTDp6gmov8TmGAptHqzBIa4BIakuNuuzCvGwtHTKOf72PiCrx2km d0QqzyV5Yq/1fftfvBUT/ZN/PUJ0yLTf0ZmU6ILZTEcHcpWc4aS21UvqoE63uoDg r4ilZCvF91OFpQZU2ZQb/kDNFWfrBp+CFDZ/RGKYtQ7+HvCxW7nwiZQR8Wuym5QZ 8qrOGi/BWA8i2nSzLabhWsZTQjCPymzx0jVlZQEBEyZhsspTl3/8KoPF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2iKaljGutCPBwX8TMS0oWM7oZiMB8GA1UdIwQY MBaAFISvmK7jehKBW0S/1r60vmSsDvblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUt NzRlMTAwOTlmODFjLzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUtNzRlMTAwOTlmODFj LzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1JdSIkS psAC+wtJuHOvXuUh/l1p3evMv0lrtC+py6CfCC0YXnKZczRYbOlOltEGPebRdWlk IuTONK2bi5ZN8Ju4KFJarea8N4I+YpJc2vIjLqhkU9xkWQOvej3faG1/L2Pkdae+ 9tCOVXb2Fxo28XahDBKlut+PIZcJ+CPb7D/+wijk818EM5sk8eBDj+KNJwzOa2Ld 70AxT8oYzZF81HnOoUJ1RjLXanJgU+fCIKGhtIRyzEPeq3vbj6Li+gFVOPh+rtl5 aVy+di0TbG5YG0zfsDe/YytYtZ/iOAzTEgnwA4CnsmhuBe63FdkxuZZT99jfskdE WCn/JJCsHJw3UA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:46 2026 by rpki-client