This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json) Hash identifier: NX/k+kzG2+Xdooiie5SQmyZHvEPb3halNKXpett0KL4= Subject key identifier: E3:4B:05:DF:3A:3A:65:B3:C2:5E:58:C7:78:A3:B3:A8:6F:49:4C:96 Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36 Certificate serial: 019C432296C491C0BE6FA6F4D68577714F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft Manifest number: 0536 Signing time: Mon 09 Feb 2026 16:01:06 +0000 Manifest this update: Mon 09 Feb 2026 16:01:06 +0000 Manifest next update: Tue 10 Feb 2026 16:01:06 +0000 Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: bTjWcNovy2nm/qlE3WP1lklJg5cOqirkgnMm7zFB2aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:96:c4:91:c0:be:6f:a6:f4:d6:85:77:71:4f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36 Validity Not Before: Feb 9 16:01:06 2026 GMT Not After : Feb 10 16:01:06 2026 GMT Subject: CN=e34b05df3a3a65b3c25e58c778a3b3a86f494c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:c4:f3:48:5c:8a:0f:3f:4a:75:84:c9:fd: 49:36:76:52:92:db:ea:b6:20:14:84:54:42:08:09: 69:f7:53:64:08:af:c7:ba:8a:42:d0:8b:f4:f1:53: 0f:c5:61:cf:f8:ee:fd:29:54:a1:3f:e1:6a:5d:ab: 6a:ed:b3:89:a2:ba:cd:67:48:c0:b9:bb:5f:9d:4b: d9:74:62:cc:4e:e0:48:0f:6c:b1:6d:9a:b9:d8:46: 7a:2f:28:28:14:90:d7:9b:51:3e:d6:b4:e6:dd:86: 00:64:a8:59:e8:17:88:79:24:57:17:8c:33:1d:9b: 6d:2c:f3:7e:43:6d:22:7d:e9:53:6c:a9:eb:50:e9: f0:49:54:c9:3a:ff:2a:b0:d1:e8:27:2c:6a:d2:cc: cb:be:df:1f:ea:79:41:f2:bc:af:61:ba:dd:37:59: c1:4a:18:84:48:0f:b5:69:02:fe:f3:b7:68:29:b1: 2d:08:1a:bc:95:ce:57:53:8f:63:ee:f6:f1:ef:81: 2f:01:d0:2b:57:bb:c7:a6:11:1b:14:94:8c:19:4a: 4b:ab:23:66:77:41:da:e4:d0:45:63:c7:42:ce:ca: 16:42:90:03:d6:d1:14:06:35:2b:7b:34:84:38:7d: 77:11:58:4a:de:dd:63:71:44:bb:84:3c:99:59:2f: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:05:DF:3A:3A:65:B3:C2:5E:58:C7:78:A3:B3:A8:6F:49:4C:96 X509v3 Authority Key Identifier: keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:48:a3:e5:67:51:04:11:95:d0:f5:c1:08:4c:7a:84:f6:8c: 44:3d:22:30:77:b4:9d:bc:d4:bf:55:27:ca:c9:4c:df:c6:54: 03:9f:60:07:eb:8e:3e:42:d4:de:62:a2:d9:7e:c5:6a:c0:6e: 24:03:a0:4b:24:03:0b:a5:98:bf:db:a6:e6:22:ac:b2:ba:7a: d8:4b:93:b5:79:40:4b:70:d2:e7:01:88:41:56:e8:41:5c:c7: ce:bb:05:e5:d0:8d:1c:e3:11:b3:62:19:b4:b7:05:25:b7:11: ac:6d:4e:2f:69:f3:40:5f:f7:ce:9d:76:a3:2b:3e:75:7a:87: a4:41:cc:4e:0b:db:dd:d5:37:80:c1:c8:b0:ee:41:03:e7:57: 0c:78:79:08:0c:22:c6:51:e7:24:d7:24:3a:cc:34:aa:62:45: bb:28:b4:04:c3:97:11:49:a9:d1:e2:d4:1e:0b:e3:4b:36:69: c8:53:05:dc:aa:e3:3b:9b:fb:8e:de:ad:13:b5:2d:71:dc:30: 1a:5b:cd:88:92:12:3f:de:7b:30:f0:83:0b:49:e6:b4:87:0f: 99:4d:8f:2c:36:fd:6a:07:b6:40:10:b0:9d:0b:f4:72:77:86: d2:c4:7d:43:ee:81:98:47:5a:8a:89:57:aa:1c:34:a2:be:76: 92:3c:13:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpbEkcC+b6b01oV3cU9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjAwZTA3MTA0MTQ1ZTdiYTk4NzZhOWQzZWU3OTJhMDcz NjRkMzYwHhcNMjYwMjA5MTYwMTA2WhcNMjYwMjEwMTYwMTA2WjAzMTEwLwYDVQQD EyhlMzRiMDVkZjNhM2E2NWIzYzI1ZTU4Yzc3OGEzYjNhODZmNDk0Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscfE80hcig8/SnWEyf1JNnZSktvq tiAUhFRCCAlp91NkCK/HuopC0Iv08VMPxWHP+O79KVShP+FqXatq7bOJorrNZ0jA ubtfnUvZdGLMTuBID2yxbZq52EZ6LygoFJDXm1E+1rTm3YYAZKhZ6BeIeSRXF4wz HZttLPN+Q20ifelTbKnrUOnwSVTJOv8qsNHoJyxq0szLvt8f6nlB8ryvYbrdN1nB ShiESA+1aQL+87doKbEtCBq8lc5XU49j7vbx74EvAdArV7vHphEbFJSMGUpLqyNm d0Ha5NBFY8dCzsoWQpAD1tEUBjUrezSEOH13EVhK3t1jcUS7hDyZWS+NvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONLBd86OmWzwl5Yx3ijs6hvSUyWMB8GA1UdIwQY MBaAFB8gDgcQQUXnuph2qdPueSoHNk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NmRhYmYtOTYyNi00ZDFmLWE4OWUt Nzc1YTdlYzFjYTMzLzEvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NmRhYmYtOTYyNi00ZDFmLWE4OWUtNzc1YTdlYzFjYTMz LzEvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekij5WdR BBGV0PXBCEx6hPaMRD0iMHe0nbzUv1UnyslM38ZUA59gB+uOPkLU3mKi2X7FasBu JAOgSyQDC6WYv9um5iKssrp62EuTtXlAS3DS5wGIQVboQVzHzrsF5dCNHOMRs2IZ tLcFJbcRrG1OL2nzQF/3zp12oys+dXqHpEHMTgvb3dU3gMHIsO5BA+dXDHh5CAwi xlHnJNckOsw0qmJFuyi0BMOXEUmp0eLUHgvjSzZpyFMF3KrjO5v7jt6tE7Utcdww GlvNiJISP957MPCDC0nmtIcPmU2PLDb9age2QBCwnQv0cneG0sR9Q+6BmEdaiolX qhw0or52kjwT6g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:33 2026 by rpki-client