This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json) Hash identifier: rhBrMjTKanLlszPPihYWfHLifkbq7fW8KjL+syiqy+c= Subject key identifier: BF:24:F7:5A:D2:07:39:48:37:7C:30:1D:29:6B:A5:2B:11:6B:AA:E9 Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Certificate serial: 019C41D89DE8AF328818AAD6B9AAD1647230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft Manifest number: 1532 Signing time: Mon 09 Feb 2026 10:00:41 +0000 Manifest this update: Mon 09 Feb 2026 10:00:41 +0000 Manifest next update: Tue 10 Feb 2026 10:00:41 +0000 Files and hashes: 1: 74CsHa1gIlR63JIzjhQivmcI93g.roa (hash: C1WaPS/UW69Pt4QRIwyedYxNzPaQEVQGboXKkZyZxnU=) 2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: GLSCcCt+NLo5K8MHz5uKYx53dcKspdlVJC+U1JAiNgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9d:e8:af:32:88:18:aa:d6:b9:aa:d1:64:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Validity Not Before: Feb 9 10:00:41 2026 GMT Not After : Feb 10 10:00:41 2026 GMT Subject: CN=bf24f75ad2073948377c301d296ba52b116baae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:04:7a:76:70:70:e3:7c:54:c9:d3:1c:1b: a3:d1:13:d4:8c:a2:cb:c9:10:7d:ae:a6:8d:05:8c: 01:34:a3:a7:a9:01:f1:ba:b6:59:23:8b:b8:7c:a7: 83:6b:13:ae:a6:06:d5:19:31:a7:bd:ba:ba:b2:62: 1d:d8:a8:0b:bb:81:b6:02:d7:ce:70:fb:2b:5e:00: d6:58:a5:fa:7f:3c:29:ba:93:a6:8b:b3:7b:39:ee: 08:4b:ae:6d:2e:6a:43:ad:e9:83:7b:dd:1c:9c:48: 67:52:71:e6:47:36:37:59:ac:ff:4c:1e:39:35:25: e3:e7:e2:d7:10:00:14:ac:a0:ff:88:6d:06:e2:3c: 5b:41:75:92:df:44:31:92:fd:87:1e:2e:92:84:fa: 10:8d:0b:d8:93:79:80:cd:7d:87:2e:84:4a:6d:25: ba:c9:5f:7d:a9:05:bd:5f:f5:ad:05:74:98:2c:4a: 73:26:be:09:c8:e8:ed:3c:ff:0b:83:37:e5:65:39: f3:9c:01:0d:ab:70:ac:14:8a:86:40:9a:c6:29:39: 86:96:62:56:85:16:b0:41:0c:57:2d:c8:92:92:44: 18:d5:16:3e:ee:2a:88:3f:93:dc:0b:4e:ac:d4:a2: d7:4a:15:ce:40:e8:ec:da:a6:41:bd:38:bc:69:f5: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:F7:5A:D2:07:39:48:37:7C:30:1D:29:6B:A5:2B:11:6B:AA:E9 X509v3 Authority Key Identifier: keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:52:5b:1b:b7:5e:72:d5:61:d4:4c:1e:16:0a:38:ce:f1: 38:be:dc:b2:45:1a:a6:19:a4:78:1d:ef:ba:26:d8:a8:77:20: 9c:75:b8:96:c7:f8:71:aa:2b:dc:75:d9:47:3d:ac:27:1e:7c: 66:f3:58:3a:14:26:aa:79:54:2b:be:6f:86:38:5a:4c:b5:e0: 1f:eb:8b:57:c0:bd:5f:54:2d:cb:fa:11:e8:11:48:d1:91:df: b5:70:c0:be:88:ee:cf:8e:f1:ed:65:fa:a0:c9:47:34:b5:62: 9c:28:18:de:d3:bc:d0:c8:e5:8e:f9:68:ed:13:61:25:cf:41: 84:bf:0a:75:5b:09:ca:26:39:f3:ac:21:59:93:f5:d1:d0:2e: f0:f1:96:91:ae:6f:97:6d:37:84:eb:60:ab:cc:06:f5:76:71: 9a:af:c2:46:28:59:63:49:4f:98:2b:5a:64:a3:9e:2d:6f:27: e1:63:2c:5b:46:87:8c:26:34:da:e8:d6:b1:4a:ac:81:6a:4a: 0b:33:94:29:02:16:92:53:6b:b6:80:44:78:23:bd:f8:a2:89: 93:a8:bc:ab:54:20:23:c3:8f:cc:5f:68:b8:ec:01:e5:59:11: 34:dd:c1:cb:ab:df:5a:a2:f4:fd:fa:34:18:65:ec:a9:64:34: 1c:bc:8d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2J3orzKIGKrWuarRZHIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGZjMGZiYTFiODM2YzIzZmY2ZGY0NjhjOGFiZjdkM2E4 MjE2Y2UwHhcNMjYwMjA5MTAwMDQxWhcNMjYwMjEwMTAwMDQxWjAzMTEwLwYDVQQD EyhiZjI0Zjc1YWQyMDczOTQ4Mzc3YzMwMWQyOTZiYTUyYjExNmJhYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4IEenZwcON8VMnTHBuj0RPUjKLL yRB9rqaNBYwBNKOnqQHxurZZI4u4fKeDaxOupgbVGTGnvbq6smId2KgLu4G2AtfO cPsrXgDWWKX6fzwpupOmi7N7Oe4IS65tLmpDremDe90cnEhnUnHmRzY3Waz/TB45 NSXj5+LXEAAUrKD/iG0G4jxbQXWS30Qxkv2HHi6ShPoQjQvYk3mAzX2HLoRKbSW6 yV99qQW9X/WtBXSYLEpzJr4JyOjtPP8LgzflZTnznAENq3CsFIqGQJrGKTmGlmJW hRawQQxXLciSkkQY1RY+7iqIP5PcC06s1KLXShXOQOjs2qZBvTi8afXM8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8k91rSBzlIN3wwHSlrpSsRa6rpMB8GA1UdIwQY MBaAFIdPwPuhuDbCP/bfRoyKv306ghbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMt MmQ1NGU1ODJiNWUwLzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMtMmQ1NGU1ODJiNWUw LzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9lSWxu3 XnLVYdRMHhYKOM7xOL7cskUaphmkeB3vuibYqHcgnHW4lsf4caor3HXZRz2sJx58 ZvNYOhQmqnlUK75vhjhaTLXgH+uLV8C9X1Qty/oR6BFI0ZHftXDAvojuz47x7WX6 oMlHNLVinCgY3tO80Mjljvlo7RNhJc9BhL8KdVsJyiY586whWZP10dAu8PGWka5v l203hOtgq8wG9XZxmq/CRihZY0lPmCtaZKOeLW8n4WMsW0aHjCY02ujWsUqsgWpK CzOUKQIWklNrtoBEeCO9+KKJk6i8q1QgI8OPzF9ouOwB5VkRNN3By6vfWqL0/fo0 GGXsqWQ0HLyNrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:16 2026 by rpki-client