This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft File: HwGmewzRspUViU7OlrUurL4EG9Q.mft (raw, json) Hash identifier: N45KyNTFkVaStMAbq5sxd5eupP3xtGt55Ms4TSZF7Kc= Subject key identifier: F0:21:D2:E1:BA:6D:6A:F8:9A:76:47:C8:20:20:2C:11:35:1D:7D:CD Authority key identifier: 1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4 Certificate issuer: /CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4 Certificate serial: 019C40FD4749B883798F10FCA699394A664F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft Manifest number: 0B41 Signing time: Mon 09 Feb 2026 06:01:06 +0000 Manifest this update: Mon 09 Feb 2026 06:01:06 +0000 Manifest next update: Tue 10 Feb 2026 06:01:06 +0000 Files and hashes: 1: HwGmewzRspUViU7OlrUurL4EG9Q.crl (hash: Grp4QnQfon7JlPouzsqeYnk8MtZSrn8DydUXcSxxwLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:47:49:b8:83:79:8f:10:fc:a6:99:39:4a:66:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4 Validity Not Before: Feb 9 06:01:06 2026 GMT Not After : Feb 10 06:01:06 2026 GMT Subject: CN=f021d2e1ba6d6af89a7647c820202c11351d7dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:07:d1:9b:c9:75:eb:79:0a:78:8e:fa:42: 9e:6d:c8:74:3e:21:43:ba:0a:2e:76:73:ff:cb:45: a1:89:46:58:b8:e4:33:d5:14:56:eb:d0:76:66:34: da:f1:33:f7:1d:1e:38:67:02:66:d6:9a:9d:ba:08: c6:f5:6b:0b:f2:9e:8d:19:02:37:72:70:65:0f:22: 68:18:9b:bf:e5:ee:21:56:09:a3:8d:3b:1b:46:0b: 34:4c:02:d3:5c:34:cc:25:70:64:5f:14:f4:4c:83: 40:2c:16:a1:e8:a2:85:7a:93:78:3d:40:c1:f1:d3: 24:b9:0d:56:d8:59:59:cf:e3:06:e3:85:83:ba:a0: 41:be:43:c3:5e:fa:63:b1:05:c8:9b:8e:4c:22:ef: 34:a7:e1:30:d6:f8:9e:58:1d:ee:8b:18:7c:f9:6b: 57:bb:5e:86:05:a8:6f:8c:62:98:6a:89:24:64:cb: 85:c9:92:a5:b0:ee:22:a8:06:8e:c8:8d:d6:b1:44: b4:5f:b2:96:6c:46:d2:2d:3a:f4:12:7e:13:a4:c0: 26:72:49:2f:27:4a:19:30:83:cc:82:d9:9a:c3:f3: 74:e1:dc:0b:69:71:89:cb:5e:2c:0d:62:2f:62:21: 5f:b0:3e:48:b1:7c:53:f3:92:3f:d7:7f:93:ed:61: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:21:D2:E1:BA:6D:6A:F8:9A:76:47:C8:20:20:2C:11:35:1D:7D:CD X509v3 Authority Key Identifier: keyid:1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cc:df:5a:5f:cd:c6:38:da:7e:5e:2f:77:40:02:f6:98:90: 1a:9b:8f:5b:f0:93:97:45:e6:eb:58:ed:06:7e:03:6a:76:3a: ff:46:75:c7:18:0b:af:c3:a1:e7:8c:2f:d4:c0:56:58:8a:0e: c7:23:d1:ca:98:0f:d8:a4:2d:a6:47:4e:12:e0:f9:76:09:7d: 8f:3d:df:91:19:d5:51:a9:f0:12:f3:e9:6b:e0:c1:91:44:2e: 87:7f:54:82:a9:71:0b:af:ee:3f:df:12:18:a3:f3:3b:f0:6f: 70:69:50:63:8d:29:c2:cf:5b:d2:74:7a:d3:ea:08:9e:63:32: d2:cc:99:8d:cb:5a:44:d9:17:3b:44:88:90:68:df:f1:bb:e0: 16:cc:18:17:2d:fe:ab:a2:f5:fc:d8:16:0e:c0:50:62:c6:d3: b4:86:f6:0c:97:a6:e2:3e:4a:f8:b7:96:c8:34:06:bc:45:2e: 3b:f0:0a:68:a3:43:3c:76:4b:a2:b9:1c:4c:30:0b:c8:7f:9c: 08:69:a6:13:ca:d8:2c:04:a2:a1:33:31:8e:98:3a:81:d5:0d: 45:e4:f7:aa:f3:b1:76:73:a1:08:c9:e9:b7:38:b4:c0:dd:c0: b8:48:51:db:d3:83:f9:e1:74:9a:f0:a5:25:2f:bf:cc:11:79: c8:96:ff:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/UdJuIN5jxD8ppk5SmZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDFhNjdiMGNkMWIyOTUxNTg5NGVjZTk2YjUyZWFjYmUw NDFiZDQwHhcNMjYwMjA5MDYwMTA2WhcNMjYwMjEwMDYwMTA2WjAzMTEwLwYDVQQD EyhmMDIxZDJlMWJhNmQ2YWY4OWE3NjQ3YzgyMDIwMmMxMTM1MWQ3ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0H0ZvJdet5CniO+kKebch0PiFD ugoudnP/y0WhiUZYuOQz1RRW69B2ZjTa8TP3HR44ZwJm1pqdugjG9WsL8p6NGQI3 cnBlDyJoGJu/5e4hVgmjjTsbRgs0TALTXDTMJXBkXxT0TINALBah6KKFepN4PUDB 8dMkuQ1W2FlZz+MG44WDuqBBvkPDXvpjsQXIm45MIu80p+Ew1vieWB3uixh8+WtX u16GBahvjGKYaokkZMuFyZKlsO4iqAaOyI3WsUS0X7KWbEbSLTr0En4TpMAmckkv J0oZMIPMgtmaw/N04dwLaXGJy14sDWIvYiFfsD5IsXxT85I/13+T7WEVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAh0uG6bWr4mnZHyCAgLBE1HX3NMB8GA1UdIwQY MBaAFB8BpnsM0bKVFYlOzpa1Lqy+BBvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdHbWV3elJzcFVWaVU3T2xyVXVyTDRFRzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lYTJlOTMtMzFkMC00OGFkLTg3ZWMt YmRjMTE3MTIyZWZiLzEvSHdHbWV3elJzcFVWaVU3T2xyVXVyTDRFRzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lYTJlOTMtMzFkMC00OGFkLTg3ZWMtYmRjMTE3MTIyZWZi LzEvSHdHbWV3elJzcFVWaVU3T2xyVXVyTDRFRzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHszfWl/N xjjafl4vd0AC9piQGpuPW/CTl0Xm61jtBn4DanY6/0Z1xxgLr8Oh54wv1MBWWIoO xyPRypgP2KQtpkdOEuD5dgl9jz3fkRnVUanwEvPpa+DBkUQuh39UgqlxC6/uP98S GKPzO/BvcGlQY40pws9b0nR60+oInmMy0syZjctaRNkXO0SIkGjf8bvgFswYFy3+ q6L1/NgWDsBQYsbTtIb2DJem4j5K+LeWyDQGvEUuO/AKaKNDPHZLorkcTDALyH+c CGmmE8rYLASioTMxjpg6gdUNReT3qvOxdnOhCMnptzi0wN3AuEhR29OD+eF0mvCl JS+/zBF5yJb/uQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:38 2026 by rpki-client