This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json) Hash identifier: Zr9aH2sTPOYRRcS+nw0D/pHvTpOQvIa5ZYqbxZorSiw= Subject key identifier: 73:01:A0:0D:F9:C5:D8:12:2B:56:6A:65:D1:1A:50:2C:55:46:1B:E8 Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42 Certificate issuer: /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942 Certificate serial: 019C427DA59272F6E7FE6BD35EA51D4A6476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft Manifest number: 1722 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: pg2Fu0yUZVIvJQh2/nzf3qY4MRsnduTpFJkt6gE9D+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a5:92:72:f6:e7:fe:6b:d3:5e:a5:1d:4a:64:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=7301a00df9c5d8122b566a65d11a502c55461be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:df:06:0c:7d:ea:dc:b7:a1:9b:f9:28:b3: e1:c4:db:70:dd:5e:4a:b9:af:d9:bb:79:14:22:cb: 8a:ea:09:69:a1:ff:5a:8e:5c:15:2e:5f:a6:fc:4b: 5c:3a:52:c2:e8:aa:7d:1d:1e:be:33:e0:54:fe:4a: b6:98:97:6c:8c:c2:d3:09:5d:dd:a5:00:55:25:c2: 2c:6d:a1:82:6c:be:80:79:23:18:30:bb:58:e5:62: 62:b5:59:a7:73:39:87:7d:21:b3:9f:ec:c7:e7:3c: 83:56:1d:ec:2d:1b:ed:f5:b0:f7:bf:79:a2:77:4f: 6a:0c:c9:c6:51:03:d6:94:2f:06:8b:b7:ca:f2:03: 8b:93:96:48:89:43:fc:5b:ff:19:6e:48:6c:cb:7a: f6:4e:8d:ab:0b:e2:d6:bc:99:2e:db:5d:82:2c:19: ea:de:61:6e:b8:3a:c5:f5:b5:79:a9:3d:87:89:c4: 85:35:f4:38:dc:f7:6b:35:71:9e:39:27:81:2e:1f: 7e:45:32:e9:77:b3:86:6c:6b:13:1c:8d:f3:51:c1: 92:8d:c3:5a:8b:69:9a:b6:bb:97:58:0b:3d:df:9b: 16:5b:47:bc:e0:b1:e9:1e:bf:1a:4b:c8:4d:1f:f1: 88:ca:0f:cc:31:f1:6f:e9:89:7a:9b:7e:51:89:f9: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:A0:0D:F9:C5:D8:12:2B:56:6A:65:D1:1A:50:2C:55:46:1B:E8 X509v3 Authority Key Identifier: keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:16:c3:9c:1a:ee:45:cf:fc:38:bd:42:d5:92:ce:11:db:1d: e9:af:26:7b:91:b3:38:97:f7:c7:87:1a:e8:f9:d3:3a:4c:1a: 90:7f:de:3b:f0:13:ee:f8:4c:04:48:08:cb:ff:f9:f8:b0:e9: 93:36:fd:58:04:c6:e2:db:7c:4c:65:44:e3:b3:97:ff:ea:c4: f6:af:73:e1:c2:46:cc:4e:fa:ec:95:19:f6:5b:1b:f0:ab:23: e7:48:0b:ed:d3:48:48:87:e4:01:38:60:4b:7b:b8:6e:30:6a: 40:a4:7a:53:37:c7:07:b6:48:28:17:9d:e0:54:43:df:c3:b4: 73:94:84:da:ee:85:30:e7:65:3a:fd:53:ab:4a:58:7d:9b:54: a3:97:5d:65:70:c4:93:cf:c5:01:6d:a1:46:91:a5:4d:89:cc: 39:58:80:19:8c:7b:5c:57:5a:73:32:9f:06:9c:7e:46:98:10: 58:3d:eb:9e:78:30:cb:f4:31:b4:09:7a:4b:c8:4f:6e:0c:a0: e1:a8:67:77:44:3d:ab:ca:c8:72:e4:80:a7:35:5f:3a:78:cb: d7:85:2f:22:d7:3d:bc:21:1c:ea:e1:1e:ad:74:03:fd:40:6b: 3c:3d:80:50:c6:ff:f6:17:8f:da:13:9f:20:85:4e:c7:b4:7e: 19:82:07:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaWScvbn/mvTXqUdSmR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZGMzYTk3ZjFjY2FlZjdmMTA4Njk5MWNmN2IxMGE0MTBj ZTE5NDIwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD Eyg3MzAxYTAwZGY5YzVkODEyMmI1NjZhNjVkMTFhNTAyYzU1NDYxYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvDfBgx96ty3oZv5KLPhxNtw3V5K ua/Zu3kUIsuK6glpof9ajlwVLl+m/EtcOlLC6Kp9HR6+M+BU/kq2mJdsjMLTCV3d pQBVJcIsbaGCbL6AeSMYMLtY5WJitVmnczmHfSGzn+zH5zyDVh3sLRvt9bD3v3mi d09qDMnGUQPWlC8Gi7fK8gOLk5ZIiUP8W/8Zbkhsy3r2To2rC+LWvJku212CLBnq 3mFuuDrF9bV5qT2HicSFNfQ43PdrNXGeOSeBLh9+RTLpd7OGbGsTHI3zUcGSjcNa i2matruXWAs935sWW0e84LHpHr8aS8hNH/GIyg/MMfFv6Yl6m35RifmlcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMBoA35xdgSK1ZqZdEaUCxVRhvoMB8GA1UdIwQY MBaAFB7cOpfxzK738Qhpkc97EKQQzhlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wZDA3MjQtNTVmNS00NzU1LTk5YzIt NjEyNjUxYWUzZWIzLzEvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wZDA3MjQtNTVmNS00NzU1LTk5YzItNjEyNjUxYWUzZWIz LzEvSHR3NmxfSE1ydmZ4Q0dtUnozc1FwQkRPR1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxbDnBru Rc/8OL1C1ZLOEdsd6a8me5GzOJf3x4ca6PnTOkwakH/eO/AT7vhMBEgIy//5+LDp kzb9WATG4tt8TGVE47OX/+rE9q9z4cJGzE767JUZ9lsb8Ksj50gL7dNISIfkAThg S3u4bjBqQKR6UzfHB7ZIKBed4FRD38O0c5SE2u6FMOdlOv1Tq0pYfZtUo5ddZXDE k8/FAW2hRpGlTYnMOViAGYx7XFdaczKfBpx+RpgQWD3rnngwy/QxtAl6S8hPbgyg 4ahnd0Q9q8rIcuSApzVfOnjL14UvItc9vCEc6uEerXQD/UBrPD2AUMb/9heP2hOf IIVOx7R+GYIHvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:21 2026 by rpki-client