This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json) Hash identifier: 7KN9a86aP2CqS5vbHSDvF8CX+g1T3aiXlmGQx/qA11U= Subject key identifier: D9:1D:AB:38:99:6E:2A:EF:8C:ED:0D:33:B7:C4:A4:70:81:14:34:BF Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Certificate serial: 019C43FE86C6F8509FEAC96102415C4BA501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft Manifest number: 0DDF Signing time: Mon 09 Feb 2026 20:01:19 +0000 Manifest this update: Mon 09 Feb 2026 20:01:19 +0000 Manifest next update: Tue 10 Feb 2026 20:01:19 +0000 Files and hashes: 1: PPitSZuRvTIuYET2fTr2uybz-Tg.roa (hash: 3kuiLKHDLxUf6+yboDVRpg9YOVajrkYmPy+E5r4q0G0=) 2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: lttYDJqqJq6OeC2td97ZbVJMJZCnICjtA8nAUPzIWvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:86:c6:f8:50:9f:ea:c9:61:02:41:5c:4b:a5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Validity Not Before: Feb 9 20:01:19 2026 GMT Not After : Feb 10 20:01:19 2026 GMT Subject: CN=d91dab38996e2aef8ced0d33b7c4a470811434bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:9a:9f:94:b1:36:95:cc:a7:db:c9:4c:40: 0f:d1:ce:01:24:38:ee:fc:c1:a4:66:4f:eb:fb:7d: 04:79:96:ce:2e:2d:07:14:98:02:bd:bb:81:4a:a6: ef:4f:6f:46:b3:ae:fb:c8:64:72:22:68:10:1c:30: 3d:9a:9b:c3:27:4e:30:dd:e0:37:6c:4f:4b:68:7e: 85:8b:40:cb:55:3e:41:99:5f:e6:c1:2b:73:9a:1f: eb:c3:38:09:4f:66:16:f4:81:5a:f4:d7:e9:85:7e: 1d:aa:23:28:92:90:09:d8:be:89:3c:48:f5:f9:7b: e1:29:a7:3d:3b:3a:f9:c6:ff:4b:04:00:9e:18:be: 63:9a:8f:0e:94:c9:f8:04:eb:f9:d3:3d:90:57:09: 52:d4:7d:13:4a:10:ab:52:82:49:c5:ea:f7:f4:28: 14:1f:94:41:58:be:67:5f:19:e4:6f:1e:ed:fe:c2: a9:64:b3:f2:3e:6a:5b:83:d0:07:07:5d:3c:bd:e4: 16:4a:9b:3f:3f:09:98:44:b9:d0:cf:0a:e1:83:7d: 7e:fb:d6:5c:6d:36:16:18:3a:9c:df:6b:24:ba:65: dd:31:83:7b:9b:39:10:06:14:35:70:30:46:50:42: bd:ec:cf:6c:3b:03:6d:8d:bd:0b:f4:f6:e0:e1:ac: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:AB:38:99:6E:2A:EF:8C:ED:0D:33:B7:C4:A4:70:81:14:34:BF X509v3 Authority Key Identifier: keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1c:bc:29:29:3b:06:e1:1f:a8:32:14:48:6d:84:e6:12:94: 8f:73:c9:c1:2f:c8:87:ba:92:fe:4b:8c:dc:42:80:08:17:26: fa:52:ac:9d:95:aa:87:2d:4a:7d:2c:6d:cb:cc:44:0a:60:5f: 8f:eb:42:dd:97:b4:b4:95:5f:c9:e0:13:d1:c4:51:a0:31:1e: 77:0a:12:89:2d:74:69:1c:92:fa:0a:3a:1f:f7:a1:bc:5d:e6: d1:9b:be:c7:a2:88:61:e5:ec:f6:a1:28:33:6f:43:51:25:48: 19:01:6d:5a:73:9e:bb:5c:26:25:09:c9:27:7f:38:2e:11:07: 03:84:7b:71:98:d4:60:61:c2:79:d7:1c:06:bb:ca:8b:ee:c2: 30:2e:47:4a:2b:80:1d:ab:c2:42:58:34:45:52:63:95:94:73: 88:3e:ed:ae:63:ae:28:b2:ff:90:2e:da:b4:ce:89:9a:b9:7d: 20:d7:33:ed:d0:f5:43:a6:26:a1:01:2d:c8:10:fc:ec:6a:ac: 17:a6:23:c2:f9:0a:f3:23:f3:5a:19:97:9a:cf:e7:e0:53:e5: 4a:29:b7:44:16:3e:68:4b:38:a2:4c:a2:ff:f6:83:f2:c2:91: 4e:53:8d:c1:69:ee:3b:b5:49:19:80:fb:84:ce:27:2e:26:f2: 1e:16:3e:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/obG+FCf6slhAkFcS6UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm OGY0ZTcwHhcNMjYwMjA5MjAwMTE5WhcNMjYwMjEwMjAwMTE5WjAzMTEwLwYDVQQD EyhkOTFkYWIzODk5NmUyYWVmOGNlZDBkMzNiN2M0YTQ3MDgxMTQzNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowaan5SxNpXMp9vJTEAP0c4BJDju /MGkZk/r+30EeZbOLi0HFJgCvbuBSqbvT29Gs677yGRyImgQHDA9mpvDJ04w3eA3 bE9LaH6Fi0DLVT5BmV/mwStzmh/rwzgJT2YW9IFa9NfphX4dqiMokpAJ2L6JPEj1 +XvhKac9Ozr5xv9LBACeGL5jmo8OlMn4BOv50z2QVwlS1H0TShCrUoJJxer39CgU H5RBWL5nXxnkbx7t/sKpZLPyPmpbg9AHB108veQWSps/PwmYRLnQzwrhg31++9Zc bTYWGDqc32skumXdMYN7mzkQBhQ1cDBGUEK97M9sOwNtjb0L9Pbg4aymLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkdqziZbirvjO0NM7fEpHCBFDS/MB8GA1UdIwQY MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt YjA1ODMyYmM2OTYyLzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxy8KSk7 BuEfqDIUSG2E5hKUj3PJwS/Ih7qS/kuM3EKACBcm+lKsnZWqhy1KfSxty8xECmBf j+tC3Ze0tJVfyeAT0cRRoDEedwoSiS10aRyS+go6H/ehvF3m0Zu+x6KIYeXs9qEo M29DUSVIGQFtWnOeu1wmJQnJJ384LhEHA4R7cZjUYGHCedccBrvKi+7CMC5HSiuA HavCQlg0RVJjlZRziD7trmOuKLL/kC7atM6Jmrl9INcz7dD1Q6YmoQEtyBD87Gqs F6YjwvkK8yPzWhmXms/n4FPlSim3RBY+aEs4okyi//aD8sKRTlONwWnuO7VJGYD7 hM4nLibyHhY+IA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:04 2026 by rpki-client