This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json) Hash identifier: fcH+YZszEAkjI9uEFUNI+I61clAlhGepAy00SludkaI= Subject key identifier: 5A:24:72:9C:49:18:1C:04:57:21:EC:89:D5:85:79:A8:5F:AE:9A:27 Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Certificate serial: 019C427D37AC34E66F9F19E67D3E0823A665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft Manifest number: 07FB Signing time: Mon 09 Feb 2026 13:00:28 +0000 Manifest this update: Mon 09 Feb 2026 13:00:28 +0000 Manifest next update: Tue 10 Feb 2026 13:00:28 +0000 Files and hashes: 1: IBlLkWqkaAhFp5QCimnfnCtLSuw.roa (hash: Qqv9tu5JI0ukk1Ce5QgBQxyaYDJ3PAWYDYEJ40iffTc=) 2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: 5UcvCnquwcYENilXz8p2WjkKEaurQnYuCgB7Yu0Ga+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:37:ac:34:e6:6f:9f:19:e6:7d:3e:08:23:a6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Validity Not Before: Feb 9 13:00:28 2026 GMT Not After : Feb 10 13:00:28 2026 GMT Subject: CN=5a24729c49181c045721ec89d58579a85fae9a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:56:2f:4e:9a:4c:bc:be:cb:47:42:b1:f1: 37:8e:a8:38:7a:b8:17:03:6c:04:f9:37:01:2a:d5: 55:e3:1c:68:9f:36:2f:24:dd:de:84:48:c5:ab:eb: 8c:ee:90:64:01:9c:18:90:dc:40:56:78:90:01:8d: 23:bd:b3:34:bb:98:1b:81:cb:06:cf:11:b1:b6:12: a1:d4:7a:d8:50:fc:10:a9:8d:b7:b9:8a:98:ba:d0: 1d:ec:d9:b3:22:9f:be:4d:9c:50:26:91:5b:a5:20: a9:47:f9:b9:13:aa:a1:c8:6f:76:c1:27:dd:04:22: 31:ed:b4:dc:f9:4a:e5:08:d9:fe:fe:c2:f7:e1:87: 6b:b6:28:30:51:77:63:a8:63:b9:62:e3:b4:b2:5d: 61:cb:ee:86:e2:be:40:e4:89:8b:ad:67:98:5f:9e: 97:43:68:ea:7c:c9:04:36:e0:c3:4d:01:b2:52:8a: 7f:88:02:e1:a2:34:fe:7b:25:d9:b2:31:bf:42:28: 48:21:24:c0:9d:df:16:b4:ac:7f:3d:d3:25:6b:fb: 0a:0f:78:f8:3e:cb:20:21:8e:7f:a6:3a:ba:d0:4d: eb:33:95:4e:7d:73:c4:02:f8:3f:e6:d6:9a:ef:64: 29:15:d1:fc:92:68:d8:f9:63:79:61:5b:94:5a:e2: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:24:72:9C:49:18:1C:04:57:21:EC:89:D5:85:79:A8:5F:AE:9A:27 X509v3 Authority Key Identifier: keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fc:8a:72:d7:23:98:21:2b:1c:9d:27:82:1c:c7:51:28:57: 1c:64:2c:a3:39:76:6c:45:92:7e:12:52:ae:13:20:ce:e1:cf: 7a:d7:b8:03:9f:24:15:e1:26:1c:e7:b8:53:d3:9b:41:67:69: 2c:d8:2b:e0:1c:72:dc:2c:c6:d2:41:67:cd:94:02:40:dc:d4: 54:e4:0a:d8:dd:e3:80:e4:ad:56:8a:8a:b2:21:b5:7b:18:28: 05:07:eb:52:e5:dd:97:78:de:fb:3e:86:e7:52:3d:12:2f:2a: f7:e0:88:2f:83:63:31:4b:c4:ad:c7:45:9f:7f:a2:75:bd:b6: a0:f5:c7:22:7d:37:1e:ac:16:57:cf:23:2b:8b:86:ac:cd:6d: d8:a5:d2:55:3c:32:eb:72:23:81:53:fa:62:16:46:b7:9f:74: 4b:82:39:f5:a8:67:24:5f:27:d8:a2:86:87:27:78:92:20:80: 1d:a1:93:9f:a4:0d:81:48:65:ff:a9:97:bc:35:dd:e0:68:ed: f0:0b:c8:2b:12:fc:ce:af:0c:a6:d7:62:d6:04:1a:66:b1:9c: 89:ed:2a:4e:fb:25:8b:1d:c9:0f:6c:40:ac:37:b2:de:d5:42: 70:92:8f:c5:6d:2d:5e:87:56:c4:ba:20:f7:a8:b0:56:be:c9: c6:f3:a0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTesNOZvnxnmfT4II6ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzJlODRjNTJlNWM0OTA5ZGJjNzAyYWExZDIxMmQ0Nzg4 NzVmYWQwHhcNMjYwMjA5MTMwMDI4WhcNMjYwMjEwMTMwMDI4WjAzMTEwLwYDVQQD Eyg1YTI0NzI5YzQ5MTgxYzA0NTcyMWVjODlkNTg1NzlhODVmYWU5YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoClWL06aTLy+y0dCsfE3jqg4ergX A2wE+TcBKtVV4xxonzYvJN3ehEjFq+uM7pBkAZwYkNxAVniQAY0jvbM0u5gbgcsG zxGxthKh1HrYUPwQqY23uYqYutAd7NmzIp++TZxQJpFbpSCpR/m5E6qhyG92wSfd BCIx7bTc+UrlCNn+/sL34YdrtigwUXdjqGO5YuO0sl1hy+6G4r5A5ImLrWeYX56X Q2jqfMkENuDDTQGyUop/iALhojT+eyXZsjG/QihIISTAnd8WtKx/PdMla/sKD3j4 PssgIY5/pjq60E3rM5VOfXPEAvg/5taa72QpFdH8kmjY+WN5YVuUWuKh4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFokcpxJGBwEVyHsidWFeahfrponMB8GA1UdIwQY MBaAFJxy6ExS5cSQnbxwKqHSEtR4h1+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUt NTc2MGI1ZDU0ZGY5LzEvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUtNTc2MGI1ZDU0ZGY5 LzEvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfyKctcj mCErHJ0nghzHUShXHGQsozl2bEWSfhJSrhMgzuHPete4A58kFeEmHOe4U9ObQWdp LNgr4Bxy3CzG0kFnzZQCQNzUVOQK2N3jgOStVoqKsiG1exgoBQfrUuXdl3je+z6G 51I9Ei8q9+CIL4NjMUvErcdFn3+idb22oPXHIn03HqwWV88jK4uGrM1t2KXSVTwy 63IjgVP6YhZGt590S4I59ahnJF8n2KKGhyd4kiCAHaGTn6QNgUhl/6mXvDXd4Gjt 8AvIKxL8zq8Mptdi1gQaZrGcie0qTvslix3JD2xArDey3tVCcJKPxW0tXodWxLog 96iwVr7JxvOgdg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:56 2026 by rpki-client