This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json) Hash identifier: x7+30A9Fx1IhjXaMAuwRqIf89fLzSOfRNEfiAJ97cUQ= Subject key identifier: 1F:E0:35:7E:DC:70:07:0B:35:D6:F7:A4:FD:7E:8B:68:7D:1D:52:B6 Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Certificate serial: 019C427DFA76687E7838416EA8B031967DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft Manifest number: 137D Signing time: Mon 09 Feb 2026 13:01:18 +0000 Manifest this update: Mon 09 Feb 2026 13:01:18 +0000 Manifest next update: Tue 10 Feb 2026 13:01:18 +0000 Files and hashes: 1: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 050LbkgIgVtpHmfh0NnbEo0O+fqTIhqFvrSdcRAnMU0=) 2: c-F2WweblFyg_d0Om77N1Fz0NhA.roa (hash: mryNxcdYvyAitDSF01ejR87XOcQtMw80tZRZ9uD4xtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fa:76:68:7e:78:38:41:6e:a8:b0:31:96:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Validity Not Before: Feb 9 13:01:18 2026 GMT Not After : Feb 10 13:01:18 2026 GMT Subject: CN=1fe0357edc70070b35d6f7a4fd7e8b687d1d52b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:28:2e:8a:5f:15:a9:46:5c:87:5e:1c:d8: 76:da:26:a2:ff:22:30:28:59:e9:0e:a7:d7:d7:89: b3:f3:17:d9:58:85:ef:0d:60:37:e7:13:d7:08:a2: 78:27:e5:23:fd:f5:8b:30:d3:76:d8:7f:3e:42:9d: 26:ff:10:f7:4a:3b:08:61:ae:8c:4e:63:0c:9b:d9: 5e:a3:cd:48:fb:0e:70:c5:91:fb:81:1d:05:ed:4a: ab:e2:a8:4e:ea:ab:36:19:47:a9:bf:64:f3:50:e5: 2c:95:6a:e6:5b:c3:56:6d:0d:b5:3c:71:42:7b:26: b9:61:b1:23:fa:00:64:78:04:46:ee:3d:32:ed:11: 97:80:be:7b:3c:bb:7f:b2:40:50:6c:f4:b5:be:01: 4e:e9:ca:41:40:7a:9c:e4:06:ec:f6:78:ed:6d:8e: ad:f7:3e:23:ee:11:34:d9:c4:2d:f9:b3:8e:9c:bf: aa:b3:45:ef:ee:7a:91:e3:fa:88:92:0c:bd:68:57: 3e:62:da:57:2a:60:1e:38:e6:d3:e5:88:45:ca:cf: c5:91:f5:c0:6b:cb:df:9c:cc:f0:bc:fd:95:3e:b6: 35:2f:8c:94:41:54:52:43:23:6c:0d:02:d9:26:ee: 40:55:b5:6d:83:87:6a:ef:af:b1:b6:17:17:5f:b5: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E0:35:7E:DC:70:07:0B:35:D6:F7:A4:FD:7E:8B:68:7D:1D:52:B6 X509v3 Authority Key Identifier: keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9c:a0:cc:06:04:3e:12:2e:78:ee:59:f3:13:65:c6:a9:4a: cf:e7:75:a4:7e:f3:4b:eb:33:d1:49:77:cd:8d:c8:9e:73:45: 0f:23:3d:d0:ab:98:6d:b5:a7:16:ea:6e:00:eb:b2:4a:ae:ae: ec:55:ff:16:ca:63:bd:e9:2c:b5:22:9a:5f:fa:8c:f7:0c:f7: 89:f4:41:61:77:2b:16:02:d4:3a:3f:1e:c7:07:9f:3b:7f:65: f4:52:c1:13:22:1e:df:e8:f9:cc:6f:8e:34:bb:de:5b:0e:d2: ba:b5:8a:15:d1:6e:cc:92:07:a5:ec:b2:2a:c4:b5:2d:e2:86: e5:90:95:82:b9:0f:2f:c2:d7:96:e9:e7:f2:ae:86:a0:51:73: 4c:87:cb:a1:53:a0:85:5b:13:ce:93:8c:71:29:2e:9e:ae:be: 1a:92:c6:47:db:49:51:54:3b:0e:b5:51:d7:6a:e4:d1:69:c9: 2d:00:73:0c:d6:bb:c5:08:a0:cb:67:e0:33:fd:99:d5:7f:b2: 01:1e:a8:cb:b1:74:12:4f:be:12:86:5f:89:5d:51:c6:0c:f6: 6c:c5:cf:d1:b1:f7:78:e1:8c:40:eb:84:14:f1:9e:c7:d1:8e: b6:39:15:cf:74:55:bd:a8:e9:43:0b:35:a4:e6:07:fc:8f:ff: 60:c6:6c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffp2aH54OEFuqLAxln39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw YmUwMWYwHhcNMjYwMjA5MTMwMTE4WhcNMjYwMjEwMTMwMTE4WjAzMTEwLwYDVQQD EygxZmUwMzU3ZWRjNzAwNzBiMzVkNmY3YTRmZDdlOGI2ODdkMWQ1MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ogoLopfFalGXIdeHNh22iai/yIw KFnpDqfX14mz8xfZWIXvDWA35xPXCKJ4J+Uj/fWLMNN22H8+Qp0m/xD3SjsIYa6M TmMMm9leo81I+w5wxZH7gR0F7Uqr4qhO6qs2GUepv2TzUOUslWrmW8NWbQ21PHFC eya5YbEj+gBkeARG7j0y7RGXgL57PLt/skBQbPS1vgFO6cpBQHqc5Abs9njtbY6t 9z4j7hE02cQt+bOOnL+qs0Xv7nqR4/qIkgy9aFc+YtpXKmAeOObT5YhFys/FkfXA a8vfnMzwvP2VPrY1L4yUQVRSQyNsDQLZJu5AVbVtg4dq76+xthcXX7Vz0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/gNX7ccAcLNdb3pP1+i2h9HVK2MB8GA1UdIwQY MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2 LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJygzAYE PhIueO5Z8xNlxqlKz+d1pH7zS+sz0Ul3zY3InnNFDyM90KuYbbWnFupuAOuySq6u 7FX/FspjvekstSKaX/qM9wz3ifRBYXcrFgLUOj8exwefO39l9FLBEyIe3+j5zG+O NLveWw7SurWKFdFuzJIHpeyyKsS1LeKG5ZCVgrkPL8LXlunn8q6GoFFzTIfLoVOg hVsTzpOMcSkunq6+GpLGR9tJUVQ7DrVR12rk0WnJLQBzDNa7xQigy2fgM/2Z1X+y AR6oy7F0Ek++EoZfiV1Rxgz2bMXP0bH3eOGMQOuEFPGex9GOtjkVz3RVvajpQws1 pOYH/I//YMZsXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:55 2026 by rpki-client