This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json) Hash identifier: Rurp4LzOyzsUGtrWx3jTFGA/D+4ulspD5Vl/LyzqOkY= Subject key identifier: BF:F8:E7:87:39:26:C8:C0:44:7F:B4:14:9D:F5:72:1E:AE:A0:57:AD Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f Certificate serial: 019C4435172896FFB3AE163B115EF09FC07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft Manifest number: 09BE Signing time: Mon 09 Feb 2026 21:00:55 +0000 Manifest this update: Mon 09 Feb 2026 21:00:55 +0000 Manifest next update: Tue 10 Feb 2026 21:00:55 +0000 Files and hashes: 1: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: N5zJU4fE4RoZZgmc2rHzufD5ZpmNkLbTdCSfE9eNMHc=) 2: ykE1MwKYkciApw-UZeYngB_HUNs.roa (hash: SkxpvOB9g0NJAFJu1F10IT/jLtAQ4gxiMRGC76Dncgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:17:28:96:ff:b3:ae:16:3b:11:5e:f0:9f:c0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f Validity Not Before: Feb 9 21:00:55 2026 GMT Not After : Feb 10 21:00:55 2026 GMT Subject: CN=bff8e7873926c8c0447fb4149df5721eaea057ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:31:84:5c:11:d9:96:6f:91:bf:bf:0d:e8: 6b:8a:49:e6:aa:40:e2:36:8e:c5:77:03:52:ec:be: 90:9b:11:b5:b5:f7:bb:a9:35:11:43:49:7c:de:9b: 24:2f:b8:77:d7:f7:4f:dc:be:b1:28:b3:00:7b:79: d8:f3:14:55:5c:5e:e1:e1:4f:6d:0a:21:6a:86:12: 8d:f6:90:57:6f:e7:26:21:62:af:e8:8a:e3:c6:e8: 63:25:4d:b0:54:30:c1:9e:09:56:85:32:80:0c:20: 15:76:3d:f1:4b:dc:26:44:fc:7a:f2:c5:40:dd:43: 43:3d:ac:7b:f2:64:a2:f7:4c:17:42:05:1d:0d:49: 90:c8:c0:0a:0a:c6:88:18:b3:46:61:fa:5f:4e:b6: eb:3a:46:44:cb:56:07:c5:96:b7:99:36:8e:80:8f: 01:c1:85:6d:43:f9:be:bc:19:79:1e:95:7e:ce:a9: b4:79:f5:af:dc:99:77:cf:b7:bf:c9:01:b9:de:80: c5:e4:9a:85:0d:fd:c1:94:64:55:ef:7f:e6:60:52: 48:f8:c7:92:79:5d:39:5a:48:b5:e1:9f:25:16:be: 44:e9:e0:f8:02:8c:92:dd:e6:c0:37:68:ba:94:ab: 3c:e8:62:12:48:0a:13:c3:bc:ce:8b:87:01:25:42: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:E7:87:39:26:C8:C0:44:7F:B4:14:9D:F5:72:1E:AE:A0:57:AD X509v3 Authority Key Identifier: keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fa:c1:56:6f:68:db:72:e8:e7:78:25:9c:48:d2:70:e8:bc: ef:d7:c8:30:e5:06:7f:c9:15:31:a4:51:c6:33:21:1e:11:13: 7d:3e:60:26:8b:cc:92:2f:00:a3:1a:c2:1f:0e:7f:5f:40:aa: 8e:91:5d:e8:e6:d5:73:ee:e8:ad:0c:ce:33:34:91:b0:b4:e3: 95:74:b2:2e:12:de:80:38:a9:3a:a5:bd:81:cd:ab:20:db:c4: ba:7f:33:30:c3:b4:50:4e:71:88:a4:dc:41:cc:94:ae:9e:38: c2:38:dd:7d:a9:ad:50:1c:e7:50:fc:33:e8:1a:bc:5c:70:c5: 3c:24:53:91:67:12:ea:db:c3:19:e4:9e:17:5d:a5:1d:09:1f: cb:55:12:51:28:4e:6b:08:76:fe:bd:fd:d6:7d:5f:b8:b5:76: 35:ab:6e:3c:1c:0a:73:e6:ef:2a:b9:a9:ef:67:36:4a:70:82: 6f:ed:7a:44:71:d1:0b:22:24:48:12:d4:37:15:d6:cf:5c:ce: 95:31:0f:73:d6:bf:84:e2:1c:aa:b7:86:af:d1:1c:94:2e:08: 92:78:c2:ca:df:77:e8:02:4a:9d:41:3e:19:e9:79:ce:7b:fd: 64:04:a4:ca:66:a2:75:7d:f9:a7:9d:19:24:5a:41:e5:d4:6f: 9c:f4:3c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENRcolv+zrhY7EV7wn8B6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTYzZDAwMzEzNGNjZGE1NmZlZGZlYjI3OGY3YTc2OGE3 ZjQwMmYwHhcNMjYwMjA5MjEwMDU1WhcNMjYwMjEwMjEwMDU1WjAzMTEwLwYDVQQD EyhiZmY4ZTc4NzM5MjZjOGMwNDQ3ZmI0MTQ5ZGY1NzIxZWFlYTA1N2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLwxhFwR2ZZvkb+/DehriknmqkDi No7FdwNS7L6QmxG1tfe7qTURQ0l83pskL7h31/dP3L6xKLMAe3nY8xRVXF7h4U9t CiFqhhKN9pBXb+cmIWKv6IrjxuhjJU2wVDDBnglWhTKADCAVdj3xS9wmRPx68sVA 3UNDPax78mSi90wXQgUdDUmQyMAKCsaIGLNGYfpfTrbrOkZEy1YHxZa3mTaOgI8B wYVtQ/m+vBl5HpV+zqm0efWv3Jl3z7e/yQG53oDF5JqFDf3BlGRV73/mYFJI+MeS eV05Wki14Z8lFr5E6eD4AoyS3ebAN2i6lKs86GISSAoTw7zOi4cBJULAXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/454c5JsjARH+0FJ31ch6uoFetMB8GA1UdIwQY MBaAFIaWPQAxNMzaVv7f6yePenaKf0AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQt MTIxZDJjYmIyMWQ2LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQtMTIxZDJjYmIyMWQ2 LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/rBVm9o 23Lo53glnEjScOi879fIMOUGf8kVMaRRxjMhHhETfT5gJovMki8AoxrCHw5/X0Cq jpFd6ObVc+7orQzOMzSRsLTjlXSyLhLegDipOqW9gc2rINvEun8zMMO0UE5xiKTc QcyUrp44wjjdfamtUBznUPwz6Bq8XHDFPCRTkWcS6tvDGeSeF12lHQkfy1USUShO awh2/r391n1fuLV2NatuPBwKc+bvKrmp72c2SnCCb+16RHHRCyIkSBLUNxXWz1zO lTEPc9a/hOIcqreGr9EclC4IknjCyt936AJKnUE+Gel5znv9ZASkymaidX35p50Z JFpB5dRvnPQ8yA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:34 2026 by rpki-client