This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json) Hash identifier: 7uiSwMAyx9RKrszyukS/ylnq96v8C27pR38tGsNaqlU= Subject key identifier: 88:85:65:DB:00:96:D9:53:B7:A1:A9:AF:27:6F:58:01:33:88:52:D2 Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Certificate serial: 019C4322D814614DAD87D24668F8D2B43D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft Manifest number: 15A1 Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: 4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa (hash: JkbE2ukkvOX9Yb+5O016nUW2TqsNKcHpk0PraLymPbM=) 2: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: h3ARnL4blWl73ydPwncSW7TKLxFmfIFqU9Ln4Qx+nDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d8:14:61:4d:ad:87:d2:46:68:f8:d2:b4:3d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=888565db0096d953b7a1a9af276f5801338852d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:94:29:a2:4b:d3:33:1f:4e:a0:1a:29:78: 78:a0:94:d8:ae:c1:12:1a:a2:5f:8f:8a:8d:ea:df: c2:2f:bd:9b:d0:1e:1d:b8:5b:f4:8c:7e:af:3a:40: e2:51:f3:c5:3d:5c:ef:f0:da:7d:d4:21:ae:b7:81: b8:8c:2e:73:d0:23:18:f0:85:06:11:02:d2:76:20: c1:f5:33:ab:8d:df:f8:52:9a:15:23:85:fb:5f:20: fe:30:7f:30:c9:42:f7:e5:53:7f:19:b8:fe:b3:1d: 75:36:da:ce:2a:8a:e9:7d:f2:21:9c:d2:9e:0d:b7: 13:0d:ed:84:cb:16:6e:65:e3:70:dd:4a:7b:b1:42: 17:6f:e6:43:b4:f4:8f:58:b4:0b:5f:33:76:55:8d: 82:2c:be:4e:2b:76:e2:b0:92:ac:ab:bd:06:b9:81: c9:a1:b4:ac:7d:09:d6:4e:59:78:ef:bd:97:0f:f5: f7:c4:5e:13:f9:c0:a9:27:8e:a3:18:63:17:18:db: 98:af:75:71:52:ed:25:bc:43:13:79:da:e8:29:36: c6:b9:d4:78:e7:12:7f:e5:e1:31:ea:05:31:21:6b: 2b:59:05:5c:8d:a4:60:68:f9:d4:7e:ea:c8:0c:f2: b5:16:db:84:22:29:bb:55:7d:cf:d9:8d:78:45:bc: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:65:DB:00:96:D9:53:B7:A1:A9:AF:27:6F:58:01:33:88:52:D2 X509v3 Authority Key Identifier: keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f7:76:1f:c7:7d:87:7a:e0:3e:b6:73:b0:94:32:77:12:df: 86:8f:35:cf:78:19:ce:7f:45:46:93:41:02:b0:32:96:98:79: 61:bd:ab:b1:d4:e9:11:f8:91:f2:30:ad:82:8f:99:8a:e2:58: e3:2d:3c:a2:c9:fb:f1:5e:62:1f:e4:63:2c:c0:6e:cf:24:09: e1:a7:a5:56:e6:04:1d:d7:6f:f6:c5:28:e0:62:6d:56:0e:d8: 8f:a9:72:ba:c4:1a:45:e3:4e:ef:a2:09:25:93:be:23:d3:12: ed:86:76:3a:80:57:15:4a:24:08:a7:36:65:6b:a8:c5:75:96: a7:60:7f:1a:bb:ad:bf:86:2c:7a:d1:dd:bb:66:a9:af:8a:97: 80:bf:41:73:e2:0f:b2:0e:db:95:79:07:21:be:5b:54:01:bf: 85:e7:26:93:9c:ec:c3:46:0a:56:4c:96:e6:81:56:ed:a2:d5: 0e:67:9e:53:ba:f8:8c:54:b8:ac:5f:f0:d4:9c:6a:d9:d9:93: 23:3b:fc:d1:43:1b:0e:a9:a1:ec:ab:29:87:a4:eb:49:40:62: 78:6f:35:c8:7b:c5:bd:d9:5a:e0:6a:cc:0e:78:ba:13:13:bf: 5c:94:19:7c:ec:4f:5f:74:7e:9c:49:b0:d6:33:5d:d1:56:3c: 11:4f:f3:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItgUYU2th9JGaPjStD1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjkyNTEzOWFjYzRhZmUwYmU5ZWYwOTg0ZTNlN2JkNWI0 NGU5ZTYwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD Eyg4ODg1NjVkYjAwOTZkOTUzYjdhMWE5YWYyNzZmNTgwMTMzODg1MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yuUKaJL0zMfTqAaKXh4oJTYrsES GqJfj4qN6t/CL72b0B4duFv0jH6vOkDiUfPFPVzv8Np91CGut4G4jC5z0CMY8IUG EQLSdiDB9TOrjd/4UpoVI4X7XyD+MH8wyUL35VN/Gbj+sx11NtrOKorpffIhnNKe DbcTDe2EyxZuZeNw3Up7sUIXb+ZDtPSPWLQLXzN2VY2CLL5OK3bisJKsq70GuYHJ obSsfQnWTll4772XD/X3xF4T+cCpJ46jGGMXGNuYr3VxUu0lvEMTedroKTbGudR4 5xJ/5eEx6gUxIWsrWQVcjaRgaPnUfurIDPK1FtuEIim7VX3P2Y14RbyDnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiFZdsAltlTt6GprydvWAEziFLSMB8GA1UdIwQY MBaAFIVpJROazEr+C+nvCYTj571bROnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUt OGQyMDNiYTRhY2M0LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUtOGQyMDNiYTRhY2M0 LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvd2H8d9 h3rgPrZzsJQydxLfho81z3gZzn9FRpNBArAylph5Yb2rsdTpEfiR8jCtgo+ZiuJY 4y08osn78V5iH+RjLMBuzyQJ4aelVuYEHddv9sUo4GJtVg7Yj6lyusQaReNO76IJ JZO+I9MS7YZ2OoBXFUokCKc2ZWuoxXWWp2B/Grutv4YsetHdu2apr4qXgL9Bc+IP sg7blXkHIb5bVAG/hecmk5zsw0YKVkyW5oFW7aLVDmeeU7r4jFS4rF/w1Jxq2dmT Izv80UMbDqmh7Ksph6TrSUBieG81yHvFvdla4GrMDni6ExO/XJQZfOxPX3R+nEmw 1jNd0VY8EU/zfg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:44 2026 by rpki-client