This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json) Hash identifier: 0EPXWDjK+/YpjVtcqHPSCIKXRySLITR8lkQuJ22UOw4= Subject key identifier: F3:B0:AC:4F:7F:A7:7A:59:FB:AC:24:18:19:D4:25:A6:B7:EF:64:25 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019C42EB4671F8AB87EA840608CB75A72293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft Manifest number: 17DF Signing time: Mon 09 Feb 2026 15:00:41 +0000 Manifest this update: Mon 09 Feb 2026 15:00:41 +0000 Manifest next update: Tue 10 Feb 2026 15:00:41 +0000 Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: x3UD/Dix9MJ8C0uQiHtiXZqE0HLCRU+dNgMZ6V1evr0=) 2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:46:71:f8:ab:87:ea:84:06:08:cb:75:a7:22:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Feb 9 15:00:41 2026 GMT Not After : Feb 10 15:00:41 2026 GMT Subject: CN=f3b0ac4f7fa77a59fbac241819d425a6b7ef6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:c2:05:42:38:21:66:af:7a:39:19:3b:f5: 09:e7:38:69:fb:e3:7f:81:f2:36:15:d9:74:86:f3: 13:b2:6c:b9:dd:43:0b:c4:28:99:2f:60:7b:88:f6: 33:49:f2:df:6d:54:ec:55:c3:9a:42:c4:9a:65:4c: 48:25:e9:63:c8:84:62:98:13:5b:bb:f6:a8:84:5f: e9:95:dc:3d:e9:a2:6f:ee:21:23:42:30:5f:04:a6: d7:06:de:67:4c:2f:a2:dc:ae:e9:5b:9d:b1:a9:96: 31:3f:48:82:29:31:98:04:22:e3:d6:27:7c:d8:09: de:fa:0d:6d:91:d0:2d:2e:79:57:86:f3:32:80:d8: 85:24:b4:19:c9:65:fe:5b:8e:4c:b8:d7:aa:34:46: f4:e5:2d:23:a2:4a:18:c4:33:9c:a7:f0:dc:b0:be: fa:b3:78:58:11:ad:4c:a5:98:64:81:ca:eb:f7:f6: 55:19:52:1c:58:69:c7:29:1f:2c:26:7f:49:8d:3e: 41:86:fa:c7:31:f6:37:5a:2e:b2:cd:3c:6d:40:c7: 88:1a:91:cd:c4:ee:73:e4:f8:43:88:5f:e9:a8:a2: b6:48:34:80:85:d2:3e:76:79:fc:c7:f9:db:0d:0a: f3:1d:58:ac:0b:20:6d:85:e1:8d:79:ff:2c:e4:27: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:AC:4F:7F:A7:7A:59:FB:AC:24:18:19:D4:25:A6:B7:EF:64:25 X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:18:83:32:fa:75:17:b1:a2:3f:71:2b:64:a0:54:88:62:9d: 9c:dc:cd:49:8c:f2:f3:9d:2d:ac:e8:77:ea:8e:ee:06:9b:9e: 20:4d:1e:c8:94:0c:f6:f0:9b:dd:5e:7c:6d:6e:8e:8d:86:d8: 2e:7d:09:68:ba:69:cd:50:dc:19:5e:f4:30:56:2a:f7:dc:27: b7:47:17:df:8f:67:cf:12:c1:65:f8:8b:aa:36:67:5d:86:9a: 30:05:ae:7b:e0:77:0d:4d:6f:46:8c:d6:70:8b:f9:82:60:31: 17:72:d5:9e:09:40:17:74:31:82:69:af:9a:f2:03:2a:16:f6: 38:51:1d:b0:b6:84:4c:9f:9d:02:ab:0f:3f:cd:0d:25:cd:4b: 9d:43:72:8d:27:74:26:ac:0b:a4:cd:29:0d:83:6f:21:c6:39: a5:e4:d6:d9:04:55:a8:d5:44:9d:c3:2d:bd:38:c2:c3:cb:ba: 93:e7:97:8d:05:6d:e0:82:b4:da:65:3c:a0:6a:df:55:f7:73: 08:d1:37:c3:4d:ee:d8:28:f4:f7:57:36:c9:d4:28:5e:13:aa: 7c:05:e8:e2:dd:51:c9:4f:d1:0b:bd:00:34:81:de:9f:12:28: 7a:3d:1b:97:cc:0a:80:d4:62:bf:e6:13:34:38:ae:14:10:52: e1:6a:74:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60Zx+KuH6oQGCMt1pyKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjYwMjA5MTUwMDQxWhcNMjYwMjEwMTUwMDQxWjAzMTEwLwYDVQQD EyhmM2IwYWM0ZjdmYTc3YTU5ZmJhYzI0MTgxOWQ0MjVhNmI3ZWY2NDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGTCBUI4IWavejkZO/UJ5zhp++N/ gfI2Fdl0hvMTsmy53UMLxCiZL2B7iPYzSfLfbVTsVcOaQsSaZUxIJeljyIRimBNb u/aohF/pldw96aJv7iEjQjBfBKbXBt5nTC+i3K7pW52xqZYxP0iCKTGYBCLj1id8 2Ane+g1tkdAtLnlXhvMygNiFJLQZyWX+W45MuNeqNEb05S0jokoYxDOcp/DcsL76 s3hYEa1MpZhkgcrr9/ZVGVIcWGnHKR8sJn9JjT5BhvrHMfY3Wi6yzTxtQMeIGpHN xO5z5PhDiF/pqKK2SDSAhdI+dnn8x/nbDQrzHVisCyBtheGNef8s5Cdc7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOwrE9/p3pZ+6wkGBnUJaa372QlMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3RiDMvp1 F7GiP3ErZKBUiGKdnNzNSYzy850trOh36o7uBpueIE0eyJQM9vCb3V58bW6OjYbY Ln0JaLppzVDcGV70MFYq99wnt0cX349nzxLBZfiLqjZnXYaaMAWue+B3DU1vRozW cIv5gmAxF3LVnglAF3QxgmmvmvIDKhb2OFEdsLaETJ+dAqsPP80NJc1LnUNyjSd0 JqwLpM0pDYNvIcY5peTW2QRVqNVEncMtvTjCw8u6k+eXjQVt4IK02mU8oGrfVfdz CNE3w03u2Cj091c2ydQoXhOqfAXo4t1RyU/RC70ANIHenxIoej0bl8wKgNRiv+YT NDiuFBBS4Wp0RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:53 2026 by rpki-client