This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json) Hash identifier: 6G9pI3DusirmARedNJzTXMVBFHXBFWxtFqfWuo1KzqU= Subject key identifier: 7B:0F:FC:6B:AF:12:2F:8F:A4:E9:06:12:4B:C0:03:5C:1F:E7:52:D8 Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f Certificate serial: 019C4323134C63A04BC9DFC09748449D4350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft Manifest number: 0DE1 Signing time: Mon 09 Feb 2026 16:01:38 +0000 Manifest this update: Mon 09 Feb 2026 16:01:38 +0000 Manifest next update: Tue 10 Feb 2026 16:01:38 +0000 Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: /wjy3vlyoWUvXRT1mtfkMm8nWyvYiZPhyS7+PDuVB5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:13:4c:63:a0:4b:c9:df:c0:97:48:44:9d:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f Validity Not Before: Feb 9 16:01:38 2026 GMT Not After : Feb 10 16:01:38 2026 GMT Subject: CN=7b0ffc6baf122f8fa4e906124bc0035c1fe752d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:86:e0:ef:e0:17:e5:2d:77:8c:da:67:73: 4c:e9:83:39:8c:f4:79:0a:a0:06:51:e1:c1:19:82: cb:d1:ee:15:de:f2:58:91:ab:31:0a:ad:72:87:d8: c6:b5:60:e5:da:81:43:b3:ec:11:4a:3a:54:46:d9: 4c:fd:08:06:9c:31:6b:aa:0d:e9:85:e2:40:28:e7: 01:d8:0a:ae:87:1b:dc:f1:40:04:d5:f6:c5:40:75: da:4b:c2:7d:b0:fa:01:b2:90:11:56:ba:aa:fb:4e: 27:c8:04:ec:a3:3e:27:af:31:cf:6a:a0:75:ba:75: 17:28:20:10:5f:8a:f2:7f:1d:a1:e8:7c:54:90:e5: 2d:e3:7f:ce:01:ab:4a:aa:91:20:0b:13:91:f7:29: 41:d4:1d:36:95:81:c7:34:be:88:af:ea:3b:74:f7: b5:89:9a:1f:51:17:e2:f9:86:44:1d:e1:3c:94:7b: b7:f9:fb:ee:e6:99:b5:e6:4d:30:f8:c8:6b:8e:ae: e0:32:ad:39:80:00:c5:9d:e7:c6:89:ba:87:8e:25: cb:68:7e:73:d0:08:f4:fa:49:28:0b:7b:05:fd:11: 25:cd:b3:9f:00:7c:6a:7f:0c:1e:cc:6c:2e:f8:97: 3e:fe:fd:5b:5e:a6:34:3e:de:9f:d8:ba:d4:ee:f8: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:FC:6B:AF:12:2F:8F:A4:E9:06:12:4B:C0:03:5C:1F:E7:52:D8 X509v3 Authority Key Identifier: keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e2:c3:2f:6f:a0:1b:99:9f:c9:56:4b:eb:4f:27:62:93:05: b0:7a:70:e9:a8:ad:25:e4:5c:eb:5e:7e:f8:84:67:98:6d:92: ad:6a:fa:0b:45:b2:19:70:c6:70:8d:a9:88:6f:72:df:47:cc: db:a6:3a:0d:9c:09:86:55:ff:56:f3:89:9b:34:ab:73:27:cc: 9d:8d:69:08:03:b2:b7:72:4f:1a:9c:85:a8:93:6e:82:45:17: 36:bc:ad:a7:81:c4:22:10:64:0b:30:40:d3:77:ca:eb:40:d7: d8:0a:df:48:61:01:c0:f9:46:4c:20:0f:40:7e:b6:9f:b4:a7: 88:27:4a:60:e5:e7:7c:f1:f8:b8:ba:be:0e:31:e8:96:63:81: cf:08:6e:5e:3f:0d:e8:db:ad:a8:23:27:e1:43:82:01:63:40: 7b:54:f5:0c:34:06:b6:55:17:38:76:ed:32:95:e2:78:da:c1: 83:aa:7f:7a:33:46:fe:64:2e:98:01:e9:3b:a3:d8:36:3a:65: c0:5e:76:b2:81:92:b5:df:99:ba:25:48:01:c8:34:3f:e6:a7: 1f:5f:57:19:14:52:04:19:79:be:ce:80:93:97:39:8e:c4:8c: 61:c3:06:43:2c:e0:1a:a5:4b:43:65:b6:36:cc:30:55:f7:89: df:b4:6f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIxNMY6BLyd/Al0hEnUNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj MGFlN2YwHhcNMjYwMjA5MTYwMTM4WhcNMjYwMjEwMTYwMTM4WjAzMTEwLwYDVQQD Eyg3YjBmZmM2YmFmMTIyZjhmYTRlOTA2MTI0YmMwMDM1YzFmZTc1MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa2G4O/gF+Utd4zaZ3NM6YM5jPR5 CqAGUeHBGYLL0e4V3vJYkasxCq1yh9jGtWDl2oFDs+wRSjpURtlM/QgGnDFrqg3p heJAKOcB2Aquhxvc8UAE1fbFQHXaS8J9sPoBspARVrqq+04nyATsoz4nrzHPaqB1 unUXKCAQX4ryfx2h6HxUkOUt43/OAatKqpEgCxOR9ylB1B02lYHHNL6Ir+o7dPe1 iZofURfi+YZEHeE8lHu3+fvu5pm15k0w+Mhrjq7gMq05gADFnefGibqHjiXLaH5z 0Aj0+kkoC3sF/RElzbOfAHxqfwwezGwu+Jc+/v1bXqY0Pt6f2LrU7vjDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsP/GuvEi+PpOkGEkvAA1wf51LYMB8GA1UdIwQY MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuLDL2+g G5mfyVZL608nYpMFsHpw6aitJeRc615++IRnmG2SrWr6C0WyGXDGcI2piG9y30fM 26Y6DZwJhlX/VvOJmzSrcyfMnY1pCAOyt3JPGpyFqJNugkUXNrytp4HEIhBkCzBA 03fK60DX2ArfSGEBwPlGTCAPQH62n7SniCdKYOXnfPH4uLq+DjHolmOBzwhuXj8N 6NutqCMn4UOCAWNAe1T1DDQGtlUXOHbtMpXieNrBg6p/ejNG/mQumAHpO6PYNjpl wF52soGStd+ZuiVIAcg0P+anH19XGRRSBBl5vs6Ak5c5jsSMYcMGQyzgGqVLQ2W2 NswwVfeJ37Rv/g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:16 2026 by rpki-client