This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json) Hash identifier: NuHMHWDxF4JaFd7eR/wgtIMy2IoJ0CWHqrTMzoEXqxM= Subject key identifier: 02:B6:24:03:9F:52:D8:7F:93:C5:12:73:D2:34:2F:44:05:4C:20:42 Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Certificate serial: 019C42B43D5B13EB1B340658EEA67B024EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft Manifest number: 10E4 Signing time: Mon 09 Feb 2026 14:00:34 +0000 Manifest this update: Mon 09 Feb 2026 14:00:34 +0000 Manifest next update: Tue 10 Feb 2026 14:00:34 +0000 Files and hashes: 1: 56PKH7YMrBCc9R8BOdvmQYxeMC8.roa (hash: D+8+obK3QpwhAemmlTLP2YO6xby6ajF6Y8nUY7wgtXA=) 2: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: INh5rTr64b739DlF/N/YBqd4J8tY2jhCwzi6Ukmrzo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3d:5b:13:eb:1b:34:06:58:ee:a6:7b:02:4e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Validity Not Before: Feb 9 14:00:34 2026 GMT Not After : Feb 10 14:00:34 2026 GMT Subject: CN=02b624039f52d87f93c51273d2342f44054c2042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:4d:e0:43:b7:20:00:d1:20:f8:ef:fe:0d: 4b:86:b6:08:0f:23:9e:46:7f:c2:9c:1f:26:10:75: 48:f1:61:07:ef:83:fc:e4:af:6e:87:c2:ab:ea:7f: 68:83:03:a3:cb:55:08:8c:5b:ab:24:17:3e:fe:88: 36:9b:1e:33:5c:9e:58:18:42:71:db:92:68:f8:77: a0:8d:a0:1a:d5:36:00:ac:e9:ce:3d:42:a4:0c:68: 06:c8:c8:8e:2e:e5:72:23:61:c7:79:d0:11:b8:d3: 6b:73:71:c4:bb:5a:cf:13:45:71:33:7c:23:67:eb: 8f:c7:47:71:36:d5:66:35:66:1c:86:53:f2:e1:41: 61:b4:5a:98:79:ff:6f:79:a0:a1:99:12:9f:2b:b9: 4a:fc:ac:70:1d:c0:40:68:47:6b:eb:76:eb:bb:67: 9e:44:33:79:35:15:b3:10:6f:d9:91:b5:76:35:05: 1d:b9:a9:e7:c7:84:dc:14:8d:6f:f0:0a:69:69:fa: 19:25:65:1c:c2:a4:47:fc:2e:34:91:64:4f:3d:15: db:0c:11:25:b3:c5:52:98:e0:b3:30:69:fc:2d:64: 38:44:9a:c5:42:6a:72:31:b8:bd:cf:ea:b6:60:c0: 9f:d9:b7:b5:07:21:fa:09:a6:5b:c7:d8:09:fb:a6: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:24:03:9F:52:D8:7F:93:C5:12:73:D2:34:2F:44:05:4C:20:42 X509v3 Authority Key Identifier: keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c9:27:a0:85:72:ea:34:ec:80:12:de:00:de:bb:ac:92:6e: 3a:ad:05:3a:7c:63:fa:e4:2d:f2:46:29:24:97:6e:8a:e2:68: 43:18:4d:4d:c9:22:6c:80:ef:9f:dc:49:19:13:c5:a3:41:64: 60:22:22:b5:3d:31:95:21:4b:ed:dc:a2:6f:0d:ca:a1:ee:3b: b8:da:86:6e:2a:5d:f6:18:5a:bf:aa:5a:f9:8c:81:86:5a:b5: 12:77:40:c9:d8:b9:bb:a1:34:21:9d:be:7b:4f:fb:08:cb:06: 0e:33:b8:b2:bc:45:ba:54:f6:f7:63:75:f1:bb:16:5d:46:fc: 1e:72:70:5a:b0:8b:8f:76:28:ee:75:2e:f7:01:41:65:29:ed: 18:80:41:e7:d6:22:ab:c6:76:1e:85:36:17:c8:0b:d4:f0:10: dc:d3:bc:3d:6c:e4:c3:e6:6e:a4:c0:b5:1b:0d:49:43:9d:a8: 4a:73:98:d4:3b:f4:64:2e:cb:ad:c9:21:d2:a6:cb:61:05:b8: 6c:a1:57:a5:ca:bd:07:e4:33:9a:fa:bf:6d:f0:0f:f8:44:f9: a8:f8:b4:35:95:72:fb:1d:7f:0c:40:05:d8:39:b5:8b:15:a2: 66:84:2c:c4:be:f1:2e:77:47:03:f9:9e:9f:c5:c1:ad:0f:f3: 61:54:0d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtD1bE+sbNAZY7qZ7Ak7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl MjYzNzYwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD EygwMmI2MjQwMzlmNTJkODdmOTNjNTEyNzNkMjM0MmY0NDA1NGMyMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptVN4EO3IADRIPjv/g1LhrYIDyOe Rn/CnB8mEHVI8WEH74P85K9uh8Kr6n9ogwOjy1UIjFurJBc+/og2mx4zXJ5YGEJx 25Jo+HegjaAa1TYArOnOPUKkDGgGyMiOLuVyI2HHedARuNNrc3HEu1rPE0VxM3wj Z+uPx0dxNtVmNWYchlPy4UFhtFqYef9veaChmRKfK7lK/KxwHcBAaEdr63bru2ee RDN5NRWzEG/ZkbV2NQUduannx4TcFI1v8AppafoZJWUcwqRH/C40kWRPPRXbDBEl s8VSmOCzMGn8LWQ4RJrFQmpyMbi9z+q2YMCf2be1ByH6CaZbx9gJ+6ZrVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK2JAOfUth/k8USc9I0L0QFTCBCMB8GA1UdIwQY MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt MjI0NGZkNjE4NWQzLzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsknoIVy 6jTsgBLeAN67rJJuOq0FOnxj+uQt8kYpJJduiuJoQxhNTckibIDvn9xJGRPFo0Fk YCIitT0xlSFL7dyibw3Koe47uNqGbipd9hhav6pa+YyBhlq1EndAydi5u6E0IZ2+ e0/7CMsGDjO4srxFulT292N18bsWXUb8HnJwWrCLj3Yo7nUu9wFBZSntGIBB59Yi q8Z2HoU2F8gL1PAQ3NO8PWzkw+ZupMC1Gw1JQ52oSnOY1Dv0ZC7Lrckh0qbLYQW4 bKFXpcq9B+Qzmvq/bfAP+ET5qPi0NZVy+x1/DEAF2Dm1ixWiZoQsxL7xLndHA/me n8XBrQ/zYVQN7g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:49 2026 by rpki-client