This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json) Hash identifier: Ppv/5pNGucOwBrRcEA/S+4iqhDoK1tgRw/27Kf7WnBM= Subject key identifier: A1:A8:1C:43:10:79:01:91:F4:59:41:3D:C7:3F:B9:05:48:1F:E8:E4 Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066 Certificate serial: 019C424640AD80BE3A4CFC21998823BA1904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft Manifest number: 08CD Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 27wuFP2o99FdDtjx2KMKTYGaShoAIrMfH+5O2TsWcGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:40:ad:80:be:3a:4c:fc:21:99:88:23:ba:19:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066 Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=a1a81c4310790191f459413dc73fb905481fe8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:3e:8e:3f:75:bc:f0:42:44:9b:d0:c7:4e: fc:18:2c:21:8e:92:06:ef:ec:5f:d1:bf:c4:e8:26: 73:3b:74:96:fe:e7:dc:fe:9c:c0:10:72:7a:a2:eb: 43:cb:44:11:c0:7b:1d:95:c3:a0:2d:13:76:34:41: 22:c8:ea:e1:64:3d:cc:a7:4d:81:e0:a3:f1:ae:91: df:4d:0e:47:8a:1f:c8:a3:e4:59:fd:64:cc:6d:a2: 12:2f:55:dc:00:cf:be:11:57:20:44:3a:18:de:35: 82:9a:62:3c:8f:5a:aa:84:39:13:83:63:e1:88:b2: 66:92:8b:e8:99:13:d6:3d:79:51:64:ce:71:c1:fe: e2:92:bf:06:0c:00:c4:fe:8d:97:90:bf:19:be:23: 38:66:cd:8d:0c:14:76:19:b7:67:65:7f:ac:a7:4b: b4:37:fe:84:e0:aa:29:92:8c:7a:55:55:a4:21:14: ca:18:d1:58:16:d2:ca:66:4c:ff:a8:0b:57:b2:bb: e8:b1:9c:07:f6:89:40:c6:d5:c4:da:c5:c3:7e:fa: 09:89:c1:63:d8:59:bd:dd:d9:96:7d:26:fa:8d:cf: 60:4e:8d:3e:00:2d:f1:09:63:5a:fd:82:b0:82:41: df:a9:48:4f:ce:35:b7:f8:fa:1f:86:01:0a:a9:5c: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A8:1C:43:10:79:01:91:F4:59:41:3D:C7:3F:B9:05:48:1F:E8:E4 X509v3 Authority Key Identifier: keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:3f:b5:4b:0c:f7:97:bb:2f:b4:66:bd:65:ff:77:1c:79: 52:a2:10:8b:a8:cc:fb:1c:59:fa:0b:63:69:02:a0:64:bb:59: 81:53:87:8b:08:11:96:79:f4:f7:d0:6f:57:06:6d:e6:93:e9: 3c:26:10:6b:45:83:16:47:cd:71:1c:98:e3:ef:e7:3d:f5:a1: 4b:a2:f0:fb:bc:b8:e0:c8:e5:df:53:af:9b:17:6e:c1:27:3f: d2:6e:75:ee:1a:64:fa:f8:eb:55:51:a4:7d:56:66:da:3e:81: 70:e5:3d:9e:0f:8e:cc:59:78:b6:8d:5f:be:58:60:22:11:d9: 52:e9:0c:42:45:a8:39:5f:96:48:a9:e5:8f:a2:cf:ce:ca:8f: f2:6c:5f:42:13:3a:09:6f:a4:37:b7:fc:49:3c:30:00:a3:e7: b6:cb:a5:46:53:ba:e6:e9:21:8d:e5:62:fd:79:88:c0:d5:f1: 80:5e:88:1b:66:72:7c:b6:54:de:0e:97:06:c3:43:82:7f:52: 6e:fb:a1:0b:f0:ed:d8:84:57:f6:57:8e:cf:d0:26:14:66:0e: c5:b2:e8:09:ad:b1:65:75:fa:41:db:94:37:3d:48:3a:48:19: 60:93:ac:0d:92:bf:b3:d6:a0:12:69:4f:32:33:d7:83:ef:28: d3:bc:1d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkCtgL46TPwhmYgjuhkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNmZlMDA3OTE3ZWI2MzI3YmUzMDYxYTlhZjZlYzU0OGQz NTMwNjYwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD EyhhMWE4MWM0MzEwNzkwMTkxZjQ1OTQxM2RjNzNmYjkwNTQ4MWZlOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFw+jj91vPBCRJvQx078GCwhjpIG 7+xf0b/E6CZzO3SW/ufc/pzAEHJ6outDy0QRwHsdlcOgLRN2NEEiyOrhZD3Mp02B 4KPxrpHfTQ5Hih/Io+RZ/WTMbaISL1XcAM++EVcgRDoY3jWCmmI8j1qqhDkTg2Ph iLJmkovomRPWPXlRZM5xwf7ikr8GDADE/o2XkL8ZviM4Zs2NDBR2GbdnZX+sp0u0 N/6E4Kopkox6VVWkIRTKGNFYFtLKZkz/qAtXsrvosZwH9olAxtXE2sXDfvoJicFj 2Fm93dmWfSb6jc9gTo0+AC3xCWNa/YKwgkHfqUhPzjW3+PofhgEKqVwmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGoHEMQeQGR9FlBPcc/uQVIH+jkMB8GA1UdIwQY MBaAFB9v4AeRfrYye+MGGpr27FSNNTBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQt MDliM2I4NzIyNjg4LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQtMDliM2I4NzIyNjg4 LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjY/tUsM 95e7L7RmvWX/dxx5UqIQi6jM+xxZ+gtjaQKgZLtZgVOHiwgRlnn099BvVwZt5pPp PCYQa0WDFkfNcRyY4+/nPfWhS6Lw+7y44Mjl31OvmxduwSc/0m517hpk+vjrVVGk fVZm2j6BcOU9ng+OzFl4to1fvlhgIhHZUukMQkWoOV+WSKnlj6LPzsqP8mxfQhM6 CW+kN7f8STwwAKPntsulRlO65ukhjeVi/XmIwNXxgF6IG2ZyfLZU3g6XBsNDgn9S bvuhC/Dt2IRX9leOz9AmFGYOxbLoCa2xZXX6QduUNz1IOkgZYJOsDZK/s9agEmlP MjPXg+8o07wd0g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:41 2026 by rpki-client