This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json) Hash identifier: cVcQDjxNAiWmIM7t44Zlr0QNXUXFrUO6gZuf5+xSh6w= Subject key identifier: 26:EA:A1:A7:43:E1:AE:B7:39:61:97:9A:F8:1F:3B:05:9E:B6:44:52 Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Certificate serial: 019C40FCFE849A193B2014A7CD5B66C1E955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft Manifest number: 1578 Signing time: Mon 09 Feb 2026 06:00:47 +0000 Manifest this update: Mon 09 Feb 2026 06:00:47 +0000 Manifest next update: Tue 10 Feb 2026 06:00:47 +0000 Files and hashes: 1: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (hash: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM=) 2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: UnbkDCZzPEeCWxKje093rzaqj3BOKWVxOLy8jyTiKkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:fe:84:9a:19:3b:20:14:a7:cd:5b:66:c1:e9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Validity Not Before: Feb 9 06:00:47 2026 GMT Not After : Feb 10 06:00:47 2026 GMT Subject: CN=26eaa1a743e1aeb73961979af81f3b059eb64452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:67:df:82:b0:6f:5b:cd:ec:42:d7:8c:af: 53:22:96:ac:b9:ab:e2:a2:8c:f1:1b:db:58:23:ae: 2f:56:62:72:32:0d:f9:2e:11:5f:f3:d5:06:a4:d9: 63:8e:c8:15:9b:fa:27:68:99:7a:2b:2a:d4:49:20: de:16:8d:7e:fa:8f:5d:cf:3d:98:b7:c3:fa:a5:30: 1f:98:fa:8e:1e:92:64:a1:f6:53:c4:6f:b9:86:41: 32:21:be:12:a2:ec:56:cc:ee:d2:7f:20:45:5b:d7: 07:e7:1c:79:e5:d5:e9:b2:1c:ab:2e:14:91:05:44: 4e:db:52:0f:c3:b6:81:df:df:b6:05:61:3b:99:9e: aa:68:e2:59:bd:6b:ae:78:ba:88:a1:c2:68:f2:41: 62:b8:8b:97:11:47:c2:3c:b0:02:38:06:44:32:94: 7d:ef:c8:72:81:e2:d2:80:80:89:52:fb:2e:a1:e0: b7:d5:0e:56:f3:d4:c5:d9:82:f5:15:26:81:ca:f3: f1:bd:7d:db:0c:66:b7:28:09:1a:7c:c1:d2:07:0e: 55:ad:1f:df:21:80:68:99:df:a6:e7:bd:d6:c8:0c: a7:c7:14:10:ff:33:6f:f9:28:c1:75:d2:d0:3a:02: 13:4c:12:a1:cd:e0:09:cf:9d:a9:32:25:3c:17:fd: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:A1:A7:43:E1:AE:B7:39:61:97:9A:F8:1F:3B:05:9E:B6:44:52 X509v3 Authority Key Identifier: keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:58:4d:4a:9d:36:a4:a4:ac:a8:dc:df:e5:74:c4:25:92:59: 2f:38:01:3d:23:f7:00:69:21:a9:9c:4a:21:58:83:a3:46:f0: ea:eb:31:74:5d:a5:41:5a:9b:df:ab:aa:bc:e3:e3:9f:a7:5b: 84:53:27:35:e9:15:94:18:54:45:96:9d:4f:10:59:04:b5:1f: 75:34:df:30:5c:e5:71:54:1b:99:de:2c:a3:ba:13:20:86:f1: 51:bb:98:cb:c2:53:d6:0b:fc:ee:80:3f:8e:22:46:0d:19:1c: 4f:02:2e:88:cd:41:23:73:13:e0:5a:d3:89:c2:7b:f7:3f:95: ce:d2:6a:3b:38:43:8b:46:ec:87:c1:e8:d6:b1:de:13:ac:5f: 79:4f:41:e1:cb:4a:06:82:6e:36:bb:dd:b4:e2:09:d1:70:4f: 20:01:c6:64:6f:05:43:a4:3e:30:30:48:18:72:7c:58:31:ef: 71:b1:80:7e:b5:c3:19:37:33:46:55:b0:ba:0d:5d:6c:86:ef: 91:98:4a:f4:8a:28:d3:03:08:b7:ef:ed:62:ce:61:78:6f:6c: d5:52:9e:46:d3:2c:20:33:69:02:fa:c4:c9:ec:10:40:cd:6a: 33:a2:99:5c:eb:3e:1c:69:92:63:32:a9:f0:16:29:bb:6e:93: 6e:65:2f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/P6Emhk7IBSnzVtmwelVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz OTBkZTYwHhcNMjYwMjA5MDYwMDQ3WhcNMjYwMjEwMDYwMDQ3WjAzMTEwLwYDVQQD EygyNmVhYTFhNzQzZTFhZWI3Mzk2MTk3OWFmODFmM2IwNTllYjY0NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu1n34Kwb1vN7ELXjK9TIpasuavi oozxG9tYI64vVmJyMg35LhFf89UGpNljjsgVm/onaJl6KyrUSSDeFo1++o9dzz2Y t8P6pTAfmPqOHpJkofZTxG+5hkEyIb4SouxWzO7SfyBFW9cH5xx55dXpshyrLhSR BURO21IPw7aB39+2BWE7mZ6qaOJZvWuueLqIocJo8kFiuIuXEUfCPLACOAZEMpR9 78hygeLSgICJUvsuoeC31Q5W89TF2YL1FSaByvPxvX3bDGa3KAkafMHSBw5VrR/f IYBomd+m573WyAynxxQQ/zNv+SjBddLQOgITTBKhzeAJz52pMiU8F/0oKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbqoadD4a63OWGXmvgfOwWetkRSMB8GA1UdIwQY MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlhNSp02 pKSsqNzf5XTEJZJZLzgBPSP3AGkhqZxKIViDo0bw6usxdF2lQVqb36uqvOPjn6db hFMnNekVlBhURZadTxBZBLUfdTTfMFzlcVQbmd4so7oTIIbxUbuYy8JT1gv87oA/ jiJGDRkcTwIuiM1BI3MT4FrTicJ79z+VztJqOzhDi0bsh8Ho1rHeE6xfeU9B4ctK BoJuNrvdtOIJ0XBPIAHGZG8FQ6Q+MDBIGHJ8WDHvcbGAfrXDGTczRlWwug1dbIbv kZhK9Ioo0wMIt+/tYs5heG9s1VKeRtMsIDNpAvrEyewQQM1qM6KZXOs+HGmSYzKp 8BYpu26TbmUv+g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:29 2026 by rpki-client