This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json) Hash identifier: mj3Yv5kMT8dnVxsfb0U/WIN/xLVfMnh+YBjcz9TSm/8= Subject key identifier: 8A:BE:FE:93:47:E1:78:E8:43:40:28:7D:7E:F2:CE:B9:0B:A3:A3:39 Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500 Certificate serial: 019C41A16AE9FBC68E43B2FAE449E2D620D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft Manifest number: 149C Signing time: Mon 09 Feb 2026 09:00:23 +0000 Manifest this update: Mon 09 Feb 2026 09:00:23 +0000 Manifest next update: Tue 10 Feb 2026 09:00:23 +0000 Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: OQI9/coDvhrTRN4e6a2YeVvLhpC/Antd8nvaOIpFT8Y=) 2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:6a:e9:fb:c6:8e:43:b2:fa:e4:49:e2:d6:20:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500 Validity Not Before: Feb 9 09:00:23 2026 GMT Not After : Feb 10 09:00:23 2026 GMT Subject: CN=8abefe9347e178e84340287d7ef2ceb90ba3a339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:92:14:95:5d:c1:6a:bc:e4:46:c0:3f:58: 8b:fd:1a:78:a9:5e:1a:c6:e7:66:c2:35:ed:f1:0a: bf:86:6e:ba:d3:57:e6:69:9d:03:04:98:48:e4:78: b9:c6:00:cf:10:4c:8b:4c:67:09:a7:53:19:e3:9b: 9b:97:3a:1d:48:c3:78:21:d3:e6:c4:74:fe:d5:4c: d5:00:56:df:44:58:67:e0:52:6a:6a:69:35:27:c5: 19:32:83:91:cb:55:b3:84:b8:84:72:18:1c:4b:8f: 73:eb:d8:32:20:a3:cc:94:7a:3c:7a:bf:c9:f7:50: 11:34:d0:32:75:98:e5:a0:d9:44:6b:09:83:d6:cd: 37:ed:ab:b5:6d:4c:85:36:59:9b:04:a6:8b:03:47: 06:66:0b:da:8b:72:6e:4c:89:11:75:f9:7b:71:c8: ed:39:9b:ac:44:4a:b1:23:1a:37:c4:c1:bc:0e:6a: 45:4a:b3:78:be:b6:93:f9:68:d4:50:ed:56:85:13: 7f:1e:60:7e:a9:fb:37:38:5d:9d:de:eb:0d:db:4d: 08:42:82:c0:e1:12:e2:9d:61:4b:9e:a4:15:b4:1d: b8:c9:4b:7d:cd:d8:8c:e8:f1:2b:04:bf:2b:fc:ed: 27:c7:8b:54:77:43:1d:12:55:da:72:0d:a9:57:ea: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BE:FE:93:47:E1:78:E8:43:40:28:7D:7E:F2:CE:B9:0B:A3:A3:39 X509v3 Authority Key Identifier: keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1b:57:68:3d:87:24:69:c1:b7:76:dd:cc:f8:60:32:73:a6: 2c:90:ff:5c:ca:ee:a9:5e:4b:bc:d1:7e:86:ec:67:ae:26:75: 6e:59:1d:f2:19:17:b9:dc:a0:cf:85:06:e9:8f:6e:ae:1c:ba: 55:cf:cd:c8:c6:a9:52:2a:c2:fb:d2:57:2e:6f:de:c1:d0:53: 0f:7d:20:5c:aa:8c:d7:00:4a:f9:1e:df:d0:df:96:69:8a:15: 9d:b5:8a:2d:b5:37:77:1b:ba:31:ed:17:5f:4a:62:2a:2a:98: 7f:dd:cf:9d:5b:2f:b0:05:b9:a8:47:e8:92:af:9e:28:ea:7a: 8d:7d:ea:a4:c7:0e:a0:d8:f4:b3:d1:0d:1e:b4:f7:44:61:f0: 23:06:89:d8:2d:dc:da:e8:23:fb:06:76:8f:6c:d9:45:70:66: 83:23:b7:84:04:c5:d6:01:81:98:9f:f3:f5:55:ae:d3:4d:c9: 80:72:47:3c:c8:c6:bc:8c:c5:00:f7:06:ee:12:2e:d7:15:31: d6:0e:cb:f5:fc:35:0d:10:44:b3:da:dc:c5:d8:90:bb:f3:a6: 0c:94:d5:e2:b7:a0:81:b4:c2:a5:71:5e:17:b6:03:38:ab:29: 49:d4:75:ae:69:91:4b:66:38:65:a5:98:1d:01:7f:7b:34:d5: 79:e3:e0:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWrp+8aOQ7L65Eni1iDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz OTM1MDAwHhcNMjYwMjA5MDkwMDIzWhcNMjYwMjEwMDkwMDIzWjAzMTEwLwYDVQQD Eyg4YWJlZmU5MzQ3ZTE3OGU4NDM0MDI4N2Q3ZWYyY2ViOTBiYTNhMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PCSFJVdwWq85EbAP1iL/Rp4qV4a xudmwjXt8Qq/hm6601fmaZ0DBJhI5Hi5xgDPEEyLTGcJp1MZ45ublzodSMN4IdPm xHT+1UzVAFbfRFhn4FJqamk1J8UZMoORy1WzhLiEchgcS49z69gyIKPMlHo8er/J 91ARNNAydZjloNlEawmD1s037au1bUyFNlmbBKaLA0cGZgvai3JuTIkRdfl7ccjt OZusREqxIxo3xMG8DmpFSrN4vraT+WjUUO1WhRN/HmB+qfs3OF2d3usN200IQoLA 4RLinWFLnqQVtB24yUt9zdiM6PErBL8r/O0nx4tUd0MdElXacg2pV+r07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq+/pNH4XjoQ0AofX7yzrkLo6M5MB8GA1UdIwQY MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0 LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBtXaD2H JGnBt3bdzPhgMnOmLJD/XMruqV5LvNF+huxnriZ1blkd8hkXudygz4UG6Y9urhy6 Vc/NyMapUirC+9JXLm/ewdBTD30gXKqM1wBK+R7f0N+WaYoVnbWKLbU3dxu6Me0X X0piKiqYf93PnVsvsAW5qEfokq+eKOp6jX3qpMcOoNj0s9ENHrT3RGHwIwaJ2C3c 2ugj+wZ2j2zZRXBmgyO3hATF1gGBmJ/z9VWu003JgHJHPMjGvIzFAPcG7hIu1xUx 1g7L9fw1DRBEs9rcxdiQu/OmDJTV4reggbTCpXFeF7YDOKspSdR1rmmRS2Y4ZaWY HQF/ezTVeePgWg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:50 2026 by rpki-client