This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json) Hash identifier: fROXSqxZvRWNhCsf/sN1nE/e9r9zfV1sSYjajakP/g8= Subject key identifier: 22:E3:DC:AC:B2:E9:17:0D:2E:93:CE:39:1F:C3:4B:A9:81:28:58:AF Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Certificate serial: 019C27E227A9D356072FD14A05B36E5DA4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft Manifest number: 0B9A Signing time: Wed 04 Feb 2026 09:00:58 +0000 Manifest this update: Wed 04 Feb 2026 09:00:58 +0000 Manifest next update: Thu 05 Feb 2026 09:00:58 +0000 Files and hashes: 1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: zfTfDbySihR6mvUH8kDxLafBFH/2Eh2UJ/3Utb0L12Y=) 2: S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa (hash: HALtWZ0hiQzMkL2eGHauQhHqRPrLY/Kagy5eLk2wo9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:e2:27:a9:d3:56:07:2f:d1:4a:05:b3:6e:5d:a4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Validity Not Before: Feb 4 09:00:58 2026 GMT Not After : Feb 5 09:00:58 2026 GMT Subject: CN=22e3dcacb2e9170d2e93ce391fc34ba9812858af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:57:40:1d:77:55:ca:82:2a:76:ae:13:c0: 4e:1c:f1:b3:7f:7e:03:20:18:4b:28:3c:e3:e8:e2: c0:5a:11:b0:fc:a6:e4:26:6a:fd:ad:72:b5:89:4b: 38:bf:4b:e0:b3:e8:b4:6a:ee:4e:b7:ce:3d:34:40: fc:bd:18:05:70:04:39:30:b6:bd:72:04:52:82:17: f0:ad:6a:2d:52:f2:67:a6:87:14:a6:27:f0:80:af: 95:3a:cf:b2:4d:ed:bf:af:2c:38:0b:90:a4:8e:db: 09:4a:70:3e:b1:78:d1:e7:81:aa:e2:e2:61:61:57: 33:9d:3f:8c:f6:49:c3:9c:df:ea:94:4a:f7:16:7f: 11:3d:ce:05:69:61:ca:40:40:97:f8:95:b0:c5:c1: ce:f7:56:f1:87:de:db:a3:de:eb:6a:bf:b4:d2:de: 09:42:6f:94:bc:0f:00:0e:41:05:f7:fa:dd:e9:de: ea:d5:45:de:a7:6f:e5:67:78:04:87:cf:e0:6d:18: 9d:5e:b8:11:b2:fd:31:89:c6:7b:6d:62:57:46:24: 3f:0f:dd:04:ec:2d:be:e9:81:42:ae:32:d6:d2:56: 80:fe:83:36:16:12:4b:e7:99:e9:9a:25:f8:2a:3d: ed:23:af:46:6b:0c:c5:b7:c0:fa:dd:17:fa:24:1c: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:DC:AC:B2:E9:17:0D:2E:93:CE:39:1F:C3:4B:A9:81:28:58:AF X509v3 Authority Key Identifier: keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:3c:71:8c:59:79:51:05:7c:d6:bb:0c:5e:15:31:4b:e8: a4:6e:e4:9a:76:3a:b2:f1:07:51:4a:9e:3d:2d:62:19:07:7b: 85:c1:39:bc:f9:6e:95:67:98:6c:e0:42:31:53:25:00:71:4b: c7:d3:f3:39:69:07:0d:e7:71:a1:cc:c3:50:f2:6d:d4:0a:69: 5e:82:df:59:46:68:ca:0a:60:8b:b7:bf:bf:4b:ac:5d:04:67: 43:a6:7f:6a:a8:25:41:b1:28:42:27:16:7e:89:22:8d:96:0d: 4d:a5:63:d7:93:76:31:0d:e3:12:17:7e:67:d8:cf:1d:33:61: bd:69:d9:54:dd:5f:bf:e5:a3:08:c0:64:01:62:0e:b3:5d:58: bf:ef:51:e6:29:25:e1:ef:b1:b6:82:64:ff:3e:bd:bc:1f:28: 61:e1:e4:fc:52:97:57:48:1c:3e:7c:60:d2:58:07:53:45:e9: df:0b:8f:5a:14:f0:67:eb:4a:39:6c:5a:e6:ce:5d:7f:7c:4b: 44:df:0b:56:6a:4d:f3:ab:d2:e0:c6:91:40:36:fb:fc:b5:52: f8:e5:9a:e3:5f:39:53:9b:87:47:06:b3:39:22:f5:1d:5b:bd: 02:d3:be:f0:c9:e8:65:c7:57:2e:ca:f4:f0:95:65:02:eb:31: 55:27:68:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwn4iep01YHL9FKBbNuXaTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy MTRhODcwHhcNMjYwMjA0MDkwMDU4WhcNMjYwMjA1MDkwMDU4WjAzMTEwLwYDVQQD EygyMmUzZGNhY2IyZTkxNzBkMmU5M2NlMzkxZmMzNGJhOTgxMjg1OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyJXQB13VcqCKnauE8BOHPGzf34D IBhLKDzj6OLAWhGw/KbkJmr9rXK1iUs4v0vgs+i0au5Ot849NED8vRgFcAQ5MLa9 cgRSghfwrWotUvJnpocUpifwgK+VOs+yTe2/ryw4C5CkjtsJSnA+sXjR54Gq4uJh YVcznT+M9knDnN/qlEr3Fn8RPc4FaWHKQECX+JWwxcHO91bxh97bo97rar+00t4J Qm+UvA8ADkEF9/rd6d7q1UXep2/lZ3gEh8/gbRidXrgRsv0xicZ7bWJXRiQ/D90E 7C2+6YFCrjLW0laA/oM2FhJL55npmiX4Kj3tI69GawzFt8D63Rf6JBztCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLj3Kyy6RcNLpPOOR/DS6mBKFivMB8GA1UdIwQY MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt MmM5OGYxN2I4ZWIzLzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2U8cYxZ eVEFfNa7DF4VMUvopG7kmnY6svEHUUqePS1iGQd7hcE5vPlulWeYbOBCMVMlAHFL x9PzOWkHDedxoczDUPJt1AppXoLfWUZoygpgi7e/v0usXQRnQ6Z/aqglQbEoQicW fokijZYNTaVj15N2MQ3jEhd+Z9jPHTNhvWnZVN1fv+WjCMBkAWIOs11Yv+9R5ikl 4e+xtoJk/z69vB8oYeHk/FKXV0gcPnxg0lgHU0Xp3wuPWhTwZ+tKOWxa5s5df3xL RN8LVmpN86vS4MaRQDb7/LVS+OWa4185U5uHRwazOSL1HVu9AtO+8MnoZcdXLsr0 8JVlAusxVSdoMg== -----END CERTIFICATE-----Generated at Wed Feb 4 10:43:04 2026 by rpki-client