This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json) Hash identifier: SZypACZrNxQ+BcBnqfu0C7wB3uyopKmdAAZfJZXbZag= Subject key identifier: 79:CC:48:59:B2:07:AB:88:4E:60:82:D1:27:B0:9C:52:19:70:23:2E Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Certificate serial: 019C427DBD1F5C488ED435BD6EEDF395E54F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft Manifest number: 11A0 Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: dTkV4lIVV3LdS-QtyVd2kESmNcE.roa (hash: OZe4+m0/tBIpier8+gZxd1IxLVhJsfg1e6HAKFROo4c=) 2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: 4On34Tu8OQLCd7wCodHIj7f5qmVwkjYA7t3YAWs375s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bd:1f:5c:48:8e:d4:35:bd:6e:ed:f3:95:e5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=79cc4859b207ab884e6082d127b09c521970232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:b4:06:45:a2:21:b9:75:f5:74:f3:96:c3: d0:23:b5:0e:96:2b:f8:5f:36:93:c4:5a:02:49:fd: 14:a0:98:dd:94:c1:60:76:20:a0:c0:2a:ae:c2:7a: 7e:05:d2:f8:5f:22:f0:3c:9e:fa:22:bb:de:8a:b8: b5:08:9b:2c:cd:7d:dd:b7:ea:e5:25:3d:0a:e3:6e: a4:5c:91:66:11:e0:ed:da:4f:b0:44:d7:f3:f9:b2: 4f:bf:c9:d3:16:b1:bc:df:77:15:ff:78:fa:24:96: a9:58:cd:e4:ea:de:cb:69:be:e5:f3:e5:28:27:5e: 5a:fd:03:d8:a1:52:ad:17:92:1c:0f:5c:cd:63:e3: 92:d0:98:5d:24:11:46:1c:1c:91:d2:c5:09:0e:d3: d9:8c:a1:36:3a:e6:f2:28:bb:32:fc:62:f4:cd:95: 06:cf:c4:3c:b7:46:39:ab:70:d6:72:3b:ec:16:7b: 09:b6:54:0b:9b:de:c8:35:6b:69:1c:d5:86:e5:dd: cc:17:58:9e:d0:15:ae:62:d7:a9:f3:1c:5d:5c:9d: 7a:d1:dc:6d:8b:01:98:b9:11:e7:b1:60:22:dc:ec: a1:1c:a2:53:61:bb:4c:f4:93:40:ef:4a:cd:5f:c3: 81:d4:ae:28:1c:d0:e2:e0:a0:17:82:d9:49:48:85: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CC:48:59:B2:07:AB:88:4E:60:82:D1:27:B0:9C:52:19:70:23:2E X509v3 Authority Key Identifier: keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:81:b8:a4:77:76:0d:69:e1:17:a8:1a:a4:35:fc:62:f6:07: a6:9d:4a:00:78:48:2e:b6:df:bd:ba:e7:e9:7e:3a:9c:f7:ba: cc:52:76:42:31:2f:9f:ed:60:21:86:08:0c:10:bb:52:02:62: 63:74:76:94:2c:2d:db:7c:cd:c6:e8:8b:f7:90:76:59:67:07: b4:3f:b9:5d:28:1f:a7:f7:50:55:a1:ef:84:23:37:0c:bd:ab: 01:2e:42:54:cc:44:78:f6:b3:d0:0e:a0:db:ef:08:97:d3:7b: 4f:da:66:61:c0:c3:29:c4:1a:62:d5:2a:01:63:6d:8d:75:a7: d6:40:03:1c:9a:80:46:68:30:d9:03:de:f3:6f:be:b5:70:07: ab:c2:03:5b:80:12:e6:4b:09:64:e4:81:4e:18:7b:a2:fb:96: a3:cf:b5:f0:29:4c:c7:74:89:3f:0d:24:a4:9b:a3:32:b2:88: 74:38:46:80:e0:ba:e8:5a:a2:1e:fd:79:a3:19:96:3e:68:d6: bd:51:72:1e:3e:53:d0:93:a0:c6:2f:38:69:83:46:63:b7:a4: 01:22:a3:b5:60:8c:c0:fa:7a:c5:17:6a:94:ae:67:5f:88:de: 81:e2:0c:00:5a:72:b5:0a:48:b2:bf:eb:fb:37:b6:f3:3d:ce: a8:e1:f5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb0fXEiO1DW9bu3zleVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi YTljNGYwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD Eyg3OWNjNDg1OWIyMDdhYjg4NGU2MDgyZDEyN2IwOWM1MjE5NzAyMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zq0BkWiIbl19XTzlsPQI7UOliv4 XzaTxFoCSf0UoJjdlMFgdiCgwCquwnp+BdL4XyLwPJ76Irveiri1CJsszX3dt+rl JT0K426kXJFmEeDt2k+wRNfz+bJPv8nTFrG833cV/3j6JJapWM3k6t7Lab7l8+Uo J15a/QPYoVKtF5IcD1zNY+OS0JhdJBFGHByR0sUJDtPZjKE2OubyKLsy/GL0zZUG z8Q8t0Y5q3DWcjvsFnsJtlQLm97INWtpHNWG5d3MF1ie0BWuYtep8xxdXJ160dxt iwGYuRHnsWAi3OyhHKJTYbtM9JNA70rNX8OB1K4oHNDi4KAXgtlJSIXIiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnMSFmyB6uITmCC0SewnFIZcCMuMB8GA1UdIwQY MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2 LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIG4pHd2 DWnhF6gapDX8YvYHpp1KAHhILrbfvbrn6X46nPe6zFJ2QjEvn+1gIYYIDBC7UgJi Y3R2lCwt23zNxuiL95B2WWcHtD+5XSgfp/dQVaHvhCM3DL2rAS5CVMxEePaz0A6g 2+8Il9N7T9pmYcDDKcQaYtUqAWNtjXWn1kADHJqARmgw2QPe82++tXAHq8IDW4AS 5ksJZOSBThh7ovuWo8+18ClMx3SJPw0kpJujMrKIdDhGgOC66FqiHv15oxmWPmjW vVFyHj5T0JOgxi84aYNGY7ekASKjtWCMwPp6xRdqlK5nX4jegeIMAFpytQpIsr/r +ze28z3OqOH15A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:27 2026 by rpki-client