This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json) Hash identifier: 4NVGvqn+HEc6zj0fDecIgQxYXdCJVXADQGcvs1t5Tm0= Subject key identifier: B4:22:51:DE:ED:0B:6E:0E:3F:A1:3A:61:35:17:85:29:9F:15:FB:81 Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Certificate serial: 019C432259FAAC7F51EBA82431FCC664FF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:50 +0000 Manifest this update: Mon 09 Feb 2026 16:00:50 +0000 Manifest next update: Tue 10 Feb 2026 16:00:50 +0000 Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: cAmFxfF4VX8IPgyJ77uzLy7nS3qKQm5/SR1My2AhThg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:59:fa:ac:7f:51:eb:a8:24:31:fc:c6:64:ff:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Validity Not Before: Feb 9 16:00:50 2026 GMT Not After : Feb 10 16:00:50 2026 GMT Subject: CN=b42251deed0b6e0e3fa13a61351785299f15fb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:5c:5a:87:e1:e8:ca:bc:54:ac:3a:49:d8: f6:7b:d8:ac:ef:70:7a:f6:48:60:ff:8e:4e:c8:f0: f0:5f:87:9a:dd:7c:fb:f2:d9:08:d0:49:5b:5c:a6: 1a:23:97:70:b1:56:5e:c1:97:24:67:c3:af:97:05: 5b:43:0c:f2:e8:de:fb:c6:75:d5:8c:5d:5c:70:42: 5d:f3:a3:a7:0c:f9:2d:2a:13:f9:7a:c8:04:0a:f3: 94:70:fc:9f:e8:77:05:06:0c:9e:b7:9b:6a:9a:18: a5:8e:eb:6d:3c:b8:e2:09:26:9d:e0:67:21:d8:71: 36:5b:76:4b:91:b9:0b:ef:41:b4:8a:36:ea:2d:ee: 65:0f:f8:8e:f7:5c:85:4f:ed:2d:cc:f8:17:8c:c6: ea:75:0c:67:6c:24:5b:2b:54:6d:bd:5b:bb:a1:4a: 74:49:83:8a:7e:3e:ca:6f:0a:27:3b:a6:61:44:59: 11:67:c5:50:5c:c7:6c:11:24:9f:42:e0:2c:07:dd: bd:f5:16:f5:83:72:41:cf:69:13:c8:48:46:ca:88: e4:fe:1c:3c:ef:34:cf:4c:87:08:58:c5:b8:af:e9: 16:fa:1e:f6:18:bc:ae:a5:5a:83:63:8f:dc:9c:17: 53:18:d4:3b:cc:7c:bc:bf:c9:8d:4d:87:d3:68:3f: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:51:DE:ED:0B:6E:0E:3F:A1:3A:61:35:17:85:29:9F:15:FB:81 X509v3 Authority Key Identifier: keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:50:a7:08:91:22:97:61:c0:37:c1:aa:70:b4:5a:81:4a: 75:62:7a:18:6c:1f:43:82:03:52:ca:97:be:97:67:21:84:c7: 9b:e4:62:31:09:04:2c:45:79:93:4c:ed:df:b9:a7:ea:16:d5: 1b:e5:15:e6:dc:45:13:e7:35:72:bd:8e:25:46:ca:92:d0:ad: 04:f0:b1:d1:0e:35:d0:c2:11:d4:2c:f7:01:6a:02:93:b9:64: cf:19:aa:8b:d3:05:ba:25:5f:1b:f2:4b:70:dd:fc:f1:26:fe: 19:be:e3:9d:5e:ef:33:96:62:2c:b5:ba:9c:c9:39:7b:f9:cc: e8:28:19:67:6c:a7:3a:42:85:08:74:c6:0c:54:d1:91:d5:75: a6:07:a0:2a:16:4f:66:90:dc:eb:d2:b9:c3:9a:be:b3:97:cc: ee:2b:b7:25:b6:1c:9a:47:b9:6f:bd:e5:16:de:b9:99:20:54: d3:ca:76:c3:d3:14:8c:57:14:87:ec:f7:48:e4:91:ff:bc:1c: 98:dc:fb:25:eb:ed:06:25:e6:58:cb:ee:ad:ec:41:04:83:32: 18:0e:b4:43:a5:05:1c:13:1a:31:cc:a1:61:6e:29:4f:df:19: 8f:13:8d:a7:c6:fa:43:4c:16:78:17:c1:c0:a3:14:26:f5:ac: 68:d8:44:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIln6rH9R66gkMfzGZP83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4 Nzg3MDUwHhcNMjYwMjA5MTYwMDUwWhcNMjYwMjEwMTYwMDUwWjAzMTEwLwYDVQQD EyhiNDIyNTFkZWVkMGI2ZTBlM2ZhMTNhNjEzNTE3ODUyOTlmMTVmYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRcWofh6Mq8VKw6Sdj2e9is73B6 9khg/45OyPDwX4ea3Xz78tkI0ElbXKYaI5dwsVZewZckZ8OvlwVbQwzy6N77xnXV jF1ccEJd86OnDPktKhP5esgECvOUcPyf6HcFBgyet5tqmhiljuttPLjiCSad4Gch 2HE2W3ZLkbkL70G0ijbqLe5lD/iO91yFT+0tzPgXjMbqdQxnbCRbK1RtvVu7oUp0 SYOKfj7KbwonO6ZhRFkRZ8VQXMdsESSfQuAsB9299Rb1g3JBz2kTyEhGyojk/hw8 7zTPTIcIWMW4r+kW+h72GLyupVqDY4/cnBdTGNQ7zHy8v8mNTYfTaD92zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQiUd7tC24OP6E6YTUXhSmfFfuBMB8GA1UdIwQY MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSxQpwiR IpdhwDfBqnC0WoFKdWJ6GGwfQ4IDUsqXvpdnIYTHm+RiMQkELEV5k0zt37mn6hbV G+UV5txFE+c1cr2OJUbKktCtBPCx0Q410MIR1Cz3AWoCk7lkzxmqi9MFuiVfG/JL cN388Sb+Gb7jnV7vM5ZiLLW6nMk5e/nM6CgZZ2ynOkKFCHTGDFTRkdV1pgegKhZP ZpDc69K5w5q+s5fM7iu3JbYcmke5b73lFt65mSBU08p2w9MUjFcUh+z3SOSR/7wc mNz7JevtBiXmWMvurexBBIMyGA60Q6UFHBMaMcyhYW4pT98ZjxONp8b6Q0wWeBfB wKMUJvWsaNhEyg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:00 2026 by rpki-client