This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json) Hash identifier: bqSSfbXO5iIrK0NS4vagEb3BARbt1G8i49dBUsJrgxo= Subject key identifier: 4F:B4:3C:3B:F4:ED:25:7D:27:FB:A0:46:76:C9:66:71:ED:A2:B0:7E Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36 Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36 Certificate serial: 019C4359427C2267633F0DA08AC9B721A727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft Manifest number: 130F Signing time: Mon 09 Feb 2026 17:00:49 +0000 Manifest this update: Mon 09 Feb 2026 17:00:49 +0000 Manifest next update: Tue 10 Feb 2026 17:00:49 +0000 Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: gHntHvq2Y7GK70GrQ6+HOEVNDEY+ykeQOxRVYhSbxtM=) 2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:42:7c:22:67:63:3f:0d:a0:8a:c9:b7:21:a7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36 Validity Not Before: Feb 9 17:00:49 2026 GMT Not After : Feb 10 17:00:49 2026 GMT Subject: CN=4fb43c3bf4ed257d27fba04676c96671eda2b07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:ee:fd:98:23:07:1e:da:6e:30:54:21:1f: 2b:6d:3a:2e:44:e3:fe:45:64:75:56:93:d3:ab:a5: 8b:85:06:d3:60:fb:7e:76:1d:8a:2a:da:10:b6:5a: a5:9b:fb:39:16:5f:12:53:a3:30:a9:1b:7d:7c:b9: 93:08:58:e4:e8:8a:64:6e:06:be:37:8f:4b:44:6d: 68:5d:33:a8:e3:80:e4:f6:2a:8f:07:55:7c:ab:c5: ff:20:c7:51:a4:02:40:86:80:71:38:29:49:0c:f2: a1:1e:f5:e8:10:83:92:e4:bf:20:f6:9e:e1:b7:55: 94:39:1d:1d:b4:42:1c:c0:27:56:75:d1:d2:84:73: 1a:67:ec:89:ba:a0:6f:95:96:97:de:54:58:6a:7e: 3e:35:fd:19:76:bc:45:0d:de:e4:c6:e0:2e:e8:a2: cf:50:cd:9c:84:ca:d9:1f:66:2c:df:00:eb:ae:01: cf:e5:aa:e4:22:b4:94:dc:f3:0b:c4:c8:1a:19:8a: 00:f2:4c:a7:2a:a1:18:7f:5a:8c:92:28:40:ae:79: fe:9a:51:1e:4c:c3:dc:4b:ca:15:37:06:f4:c0:74: 74:6c:d6:08:82:a4:3a:73:e3:4f:3b:0a:ec:b0:82: 9b:27:c0:d3:b5:cd:05:19:c2:ff:be:fe:4d:96:2c: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:3C:3B:F4:ED:25:7D:27:FB:A0:46:76:C9:66:71:ED:A2:B0:7E X509v3 Authority Key Identifier: keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:dc:ad:d6:4d:7b:b8:76:2b:a3:26:a9:60:ba:3c:47:0f: 66:07:50:13:06:95:a6:0e:43:8f:52:6f:61:2d:18:22:28:3a: a5:01:17:82:25:78:4a:af:48:05:25:70:8d:22:f1:4c:9b:34: ce:13:d1:7d:3d:6d:ba:9f:52:86:6b:47:35:f8:82:0c:bb:87: 9b:af:7c:ec:46:c0:97:88:f2:d1:e3:15:75:8b:6f:af:e1:58: 73:e9:ba:b1:e7:24:64:a0:cd:0e:ac:9f:d5:dc:b8:1f:bb:9e: b2:4e:d9:bf:ef:5c:8b:9b:74:65:22:c5:f8:8a:df:a5:b7:58: e1:c7:63:41:53:f6:d5:62:87:cc:92:9d:07:6e:e1:62:28:82: 0b:7a:9d:00:8c:40:e9:0b:55:df:82:0f:9e:3e:5e:50:bd:cf: 9e:64:af:48:9f:e8:db:71:e2:4e:57:2a:03:ca:e6:32:d1:5e: 85:73:90:41:b3:1a:fd:0d:ab:c3:4e:a8:ae:8a:01:e3:8b:f2: ff:3e:da:1a:57:67:71:c1:36:8a:c9:ec:fc:09:d1:29:ae:a2: 17:29:a9:c1:3b:95:c6:cb:1c:40:cb:b1:b1:0d:12:ce:be:06: 94:10:13:64:d6:52:2f:82:8d:53:24:95:1e:6e:3c:c7:ec:e4: f3:7c:37:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUJ8ImdjPw2gism3IacnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ODFlZTg2OWQyZTFjMjAwZmY4YzY5N2UyZDM3ZWFhNDI5 NDBhMzYwHhcNMjYwMjA5MTcwMDQ5WhcNMjYwMjEwMTcwMDQ5WjAzMTEwLwYDVQQD Eyg0ZmI0M2MzYmY0ZWQyNTdkMjdmYmEwNDY3NmM5NjY3MWVkYTJiMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgju/ZgjBx7abjBUIR8rbTouROP+ RWR1VpPTq6WLhQbTYPt+dh2KKtoQtlqlm/s5Fl8SU6MwqRt9fLmTCFjk6Ipkbga+ N49LRG1oXTOo44Dk9iqPB1V8q8X/IMdRpAJAhoBxOClJDPKhHvXoEIOS5L8g9p7h t1WUOR0dtEIcwCdWddHShHMaZ+yJuqBvlZaX3lRYan4+Nf0ZdrxFDd7kxuAu6KLP UM2chMrZH2Ys3wDrrgHP5arkIrSU3PMLxMgaGYoA8kynKqEYf1qMkihArnn+mlEe TMPcS8oVNwb0wHR0bNYIgqQ6c+NPOwrssIKbJ8DTtc0FGcL/vv5NlixJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+0PDv07SV9J/ugRnbJZnHtorB+MB8GA1UdIwQY MBaAFAeB7oadLhwgD/jGl+LTfqpClAo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYt M2U3NTA1MWI4ZWFjLzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYtM2U3NTA1MWI4ZWFj LzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBXcrdZN e7h2K6MmqWC6PEcPZgdQEwaVpg5Dj1JvYS0YIig6pQEXgiV4Sq9IBSVwjSLxTJs0 zhPRfT1tup9ShmtHNfiCDLuHm6987EbAl4jy0eMVdYtvr+FYc+m6seckZKDNDqyf 1dy4H7uesk7Zv+9ci5t0ZSLF+IrfpbdY4cdjQVP21WKHzJKdB27hYiiCC3qdAIxA 6QtV34IPnj5eUL3PnmSvSJ/o23HiTlcqA8rmMtFehXOQQbMa/Q2rw06orooB44vy /z7aGldnccE2isns/AnRKa6iFympwTuVxsscQMuxsQ0Szr4GlBATZNZSL4KNUySV Hm48x+zk83w32g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:14 2026 by rpki-client