This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: 3HRaq+PFtGgALXqHM1/l8tdEGS83N0MFoV46cwWu18E= Subject key identifier: 48:23:5D:C7:78:1F:DD:93:78:29:67:0E:22:13:6E:EC:70:C1:2E:58 Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019C44A2A76918ABF3DFAE8D01ED3D890991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0F05 Signing time: Mon 09 Feb 2026 23:00:36 +0000 Manifest this update: Mon 09 Feb 2026 23:00:36 +0000 Manifest next update: Tue 10 Feb 2026 23:00:36 +0000 Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=) 2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: 88drS9MCf5W0WWGR7QhiRh6ut+h9fI3Cm4/sq9vb0II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:a7:69:18:ab:f3:df:ae:8d:01:ed:3d:89:09:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Feb 9 23:00:36 2026 GMT Not After : Feb 10 23:00:36 2026 GMT Subject: CN=48235dc7781fdd937829670e22136eec70c12e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:31:59:e5:e9:31:1f:ab:39:97:81:c3:7e: 47:e7:86:56:8a:1e:1e:3d:45:e9:0e:d3:e1:b1:ef: dc:fd:a8:4b:ae:c9:cd:04:d2:46:23:de:cc:87:a9: d3:ff:f4:62:25:ad:20:71:c8:8f:88:0b:85:d0:e4: f3:5a:d7:b4:3e:b7:cc:9e:bf:9e:9c:a7:c8:a8:bf: 2b:a8:f4:bf:35:da:40:db:3d:d0:ba:7e:31:6c:63: 1e:6b:75:b5:c3:b5:6c:6d:61:56:ca:fe:27:0f:30: 0d:5c:9b:a2:7b:04:be:85:10:fd:62:f8:8c:ba:4d: 65:14:4d:f6:9f:9d:d5:a9:f6:de:4b:15:57:7e:2f: fa:88:29:1e:8f:39:d0:ce:c2:ad:86:07:79:31:be: 26:42:f7:20:f8:e1:86:49:eb:a6:df:9b:4e:9c:59: ff:e1:79:76:b4:56:55:2d:fd:6b:80:ce:64:51:7a: 33:e4:0c:de:fa:95:e5:2b:70:54:6f:db:0b:81:00: ce:ff:d3:4d:2c:cb:0f:c5:de:2b:87:c1:98:cd:75: 92:c4:ea:89:58:c5:71:90:a0:cf:57:40:a5:52:a4: 1b:f5:ad:47:35:4f:a6:04:b3:09:ae:97:76:90:d0: ac:7b:1f:11:a4:26:ab:d4:ab:51:df:be:cf:8f:bf: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:5D:C7:78:1F:DD:93:78:29:67:0E:22:13:6E:EC:70:C1:2E:58 X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:e3:4e:a1:35:11:e8:2e:ec:71:85:a8:5f:bc:8b:aa:35: 40:f9:93:96:07:5d:49:4d:81:96:84:19:03:b0:94:ef:ae:ec: eb:0e:28:ad:7d:cd:fe:cb:6e:af:fd:28:df:87:c5:f6:11:69: c6:a2:2f:08:01:e9:6e:27:55:9a:4e:26:f2:99:41:44:84:c2: 56:9d:a4:a7:50:05:19:5c:51:99:38:89:fc:b6:da:78:87:52: 4d:55:38:70:37:4c:31:43:17:0b:d5:e3:1c:9f:da:dc:23:61: e9:b2:32:52:9e:32:c4:ee:2b:9c:e6:c5:6f:69:e6:f8:f6:96: 70:d9:b3:29:ef:5b:a5:31:4e:89:bd:1d:7a:85:25:aa:6d:1d: d1:f5:b0:d2:19:b4:33:a3:50:ed:cc:7e:75:d1:94:f4:ee:81: 79:19:20:94:0d:dc:ac:6d:d5:e5:99:de:4b:90:69:62:ab:12: d8:66:64:97:0a:e8:71:a4:52:fa:a6:d8:6b:8c:05:9f:1c:c6: f5:8e:d2:1b:31:52:b2:91:e4:b1:80:27:f6:60:4b:86:a3:01: 2f:3f:25:c9:da:a6:cd:0a:2f:14:f0:5e:9e:81:a9:6a:fe:e1: 1f:91:27:6d:77:72:88:bf:34:75:92:f5:33:b0:62:6b:5e:60: a0:ef:8e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEoqdpGKvz366NAe09iQmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjYwMjA5MjMwMDM2WhcNMjYwMjEwMjMwMDM2WjAzMTEwLwYDVQQD Eyg0ODIzNWRjNzc4MWZkZDkzNzgyOTY3MGUyMjEzNmVlYzcwYzEyZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn54xWeXpMR+rOZeBw35H54ZWih4e PUXpDtPhse/c/ahLrsnNBNJGI97Mh6nT//RiJa0gcciPiAuF0OTzWte0PrfMnr+e nKfIqL8rqPS/NdpA2z3Qun4xbGMea3W1w7VsbWFWyv4nDzANXJuiewS+hRD9YviM uk1lFE32n53VqfbeSxVXfi/6iCkejznQzsKthgd5Mb4mQvcg+OGGSeum35tOnFn/ 4Xl2tFZVLf1rgM5kUXoz5Aze+pXlK3BUb9sLgQDO/9NNLMsPxd4rh8GYzXWSxOqJ WMVxkKDPV0ClUqQb9a1HNU+mBLMJrpd2kNCsex8RpCar1KtR377Pj78GvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgjXcd4H92TeClnDiITbuxwwS5YMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEzjTqE1 Eegu7HGFqF+8i6o1QPmTlgddSU2BloQZA7CU767s6w4orX3N/stur/0o34fF9hFp xqIvCAHpbidVmk4m8plBRITCVp2kp1AFGVxRmTiJ/LbaeIdSTVU4cDdMMUMXC9Xj HJ/a3CNh6bIyUp4yxO4rnObFb2nm+PaWcNmzKe9bpTFOib0deoUlqm0d0fWw0hm0 M6NQ7cx+ddGU9O6BeRkglA3crG3V5ZneS5BpYqsS2GZklwrocaRS+qbYa4wFnxzG 9Y7SGzFSspHksYAn9mBLhqMBLz8lydqmzQovFPBenoGpav7hH5EnbXdyiL80dZL1 M7Bia15goO+O5g== -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:57 2026 by rpki-client