This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json) Hash identifier: 247Sx6AmsdU7c+w376WM05SKlEhoyQXyuEiIfeKLRN0= Subject key identifier: 38:A5:B5:80:14:1E:49:80:75:08:4A:7C:95:BD:F7:78:58:9A:31:8D Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d Certificate serial: 019C41A2099789D3E2310BBEA23D8F492925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 09:01:04 +0000 Manifest this update: Mon 09 Feb 2026 09:01:04 +0000 Manifest next update: Tue 10 Feb 2026 09:01:04 +0000 Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=) 2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=) 3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: rjCsJIXDsSDoEjd9G2smhaPll1saKi7ikp6rkzskXzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:09:97:89:d3:e2:31:0b:be:a2:3d:8f:49:29:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d Validity Not Before: Feb 9 09:01:04 2026 GMT Not After : Feb 10 09:01:04 2026 GMT Subject: CN=38a5b580141e498075084a7c95bdf778589a318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:06:de:ab:08:e1:67:62:2c:bd:ff:26:37: 0e:d7:21:09:60:27:ac:00:18:b1:e4:95:4e:1d:a5: 61:49:cf:1d:5b:67:48:15:84:7d:1c:f5:27:bc:49: 0d:d6:5b:c1:3a:a8:0f:c7:43:e8:4a:a1:c6:5e:b7: 31:4f:80:b3:56:33:54:24:af:04:3b:44:db:6a:23: 5a:61:43:29:b2:f9:40:86:76:59:73:25:a5:e0:e8: 19:e0:ec:43:c5:98:94:47:3a:ef:b2:59:3f:4d:76: bb:c8:3f:74:2f:ab:f1:9e:2c:60:50:64:c8:93:fd: 86:34:75:53:be:76:14:bd:d4:0b:51:7b:c6:fa:b8: e4:04:ce:b6:7a:bb:42:a6:50:4b:e4:c5:24:a0:36: bd:20:90:47:74:83:99:ac:d7:32:06:98:4f:fb:e3: 36:6b:68:49:53:42:1d:35:1d:12:56:23:0e:6f:ff: 29:23:61:e0:98:56:2b:63:47:90:cd:03:13:0a:b3: 4c:99:d4:8e:05:df:1e:7a:9c:fc:e9:53:78:50:1b: 11:8a:b5:3e:18:ec:c6:65:22:51:1d:ce:2c:11:92: e5:86:1a:af:c4:d8:00:55:72:d8:89:aa:12:64:a6: aa:11:6c:de:a1:ec:49:32:27:8d:c2:a6:1f:aa:10: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:B5:80:14:1E:49:80:75:08:4A:7C:95:BD:F7:78:58:9A:31:8D X509v3 Authority Key Identifier: keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:33:7a:a6:82:0f:0f:90:1f:e6:eb:1d:8f:51:91:40:77:83: 46:e3:0a:c5:06:d8:c4:b6:d4:74:20:1c:64:a4:e8:ae:8b:d5: 41:3a:54:e6:c5:22:ad:db:4c:66:cb:96:a3:6f:63:d3:ef:89: 57:4c:f5:31:6e:1a:c3:2a:06:e4:0d:bf:79:e2:47:19:84:0f: bc:c5:c5:9a:8d:08:55:9e:32:1f:a9:6e:9f:a1:e6:f2:ae:fe: 1b:9d:c6:47:c2:4a:6d:37:ce:07:b9:9d:f3:04:e1:3d:2e:67: 28:3c:ca:66:ef:14:9e:01:31:4b:7e:a3:c1:77:55:1d:e3:3f: 70:d1:46:3e:b5:46:29:69:d8:f3:e0:0f:f2:a7:d8:63:05:e7: f9:38:9b:ae:af:19:2e:16:75:53:9a:1a:d3:df:35:8c:67:93: 4c:ef:0e:71:d2:49:65:3b:f0:26:9b:09:5f:43:fa:5d:a9:cb: ef:95:1c:d7:f0:3d:74:1d:05:cb:cc:3c:6c:99:e9:3d:82:e0: 44:ed:7e:9a:7a:6d:8f:75:55:55:92:5b:3b:2b:e1:2d:88:a6: 72:d1:62:78:9f:f0:2f:02:5f:cd:b7:b2:cb:6b:c7:09:de:e0: 05:ee:2d:80:8c:0e:21:57:c1:6f:a6:61:b0:7c:58:5b:12:53: 2e:68:4d:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogmXidPiMQu+oj2PSSklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh ODA4MmQwHhcNMjYwMjA5MDkwMTA0WhcNMjYwMjEwMDkwMTA0WjAzMTEwLwYDVQQD EygzOGE1YjU4MDE0MWU0OTgwNzUwODRhN2M5NWJkZjc3ODU4OWEzMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU8G3qsI4WdiLL3/JjcO1yEJYCes ABix5JVOHaVhSc8dW2dIFYR9HPUnvEkN1lvBOqgPx0PoSqHGXrcxT4CzVjNUJK8E O0TbaiNaYUMpsvlAhnZZcyWl4OgZ4OxDxZiURzrvslk/TXa7yD90L6vxnixgUGTI k/2GNHVTvnYUvdQLUXvG+rjkBM62ertCplBL5MUkoDa9IJBHdIOZrNcyBphP++M2 a2hJU0IdNR0SViMOb/8pI2HgmFYrY0eQzQMTCrNMmdSOBd8eepz86VN4UBsRirU+ GOzGZSJRHc4sEZLlhhqvxNgAVXLYiaoSZKaqEWzeoexJMieNwqYfqhCG0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiltYAUHkmAdQhKfJW993hYmjGNMB8GA1UdIwQY MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2 LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTN6poIP D5Af5usdj1GRQHeDRuMKxQbYxLbUdCAcZKTorovVQTpU5sUirdtMZsuWo29j0++J V0z1MW4awyoG5A2/eeJHGYQPvMXFmo0IVZ4yH6lun6Hm8q7+G53GR8JKbTfOB7md 8wThPS5nKDzKZu8UngExS36jwXdVHeM/cNFGPrVGKWnY8+AP8qfYYwXn+Tibrq8Z LhZ1U5oa0981jGeTTO8OcdJJZTvwJpsJX0P6XanL75Uc1/A9dB0Fy8w8bJnpPYLg RO1+mnptj3VVVZJbOyvhLYimctFieJ/wLwJfzbeyy2vHCd7gBe4tgIwOIVfBb6Zh sHxYWxJTLmhNjg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:59 2026 by rpki-client