This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json) Hash identifier: atYKpv2eBApsPpkzufpeT70eSeQs0F7XAq2H6HX9dh4= Subject key identifier: 15:47:96:B9:A8:27:94:65:D1:EA:5D:D8:57:9D:7E:95:1A:74:7E:27 Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Certificate serial: 019C454789B1541A680C0DED449922E48592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft Manifest number: 11EE Signing time: Tue 10 Feb 2026 02:00:41 +0000 Manifest this update: Tue 10 Feb 2026 02:00:41 +0000 Manifest next update: Wed 11 Feb 2026 02:00:41 +0000 Files and hashes: 1: cuE4TW5rh-XwN9tNjWmFmQtIPFU.roa (hash: NU4Otp39oKMhqOc0L+AnrGl6IMBfgna2IPqlcLesd28=) 2: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: dhPZY1ZSG6fmHFDmF7THQT5Yb28cxOb4m4aoi71CiIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:89:b1:54:1a:68:0c:0d:ed:44:99:22:e4:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Validity Not Before: Feb 10 02:00:41 2026 GMT Not After : Feb 11 02:00:41 2026 GMT Subject: CN=154796b9a8279465d1ea5dd8579d7e951a747e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:30:99:14:7f:4f:a1:02:06:b4:68:5a:f5: 0a:36:ed:f1:db:27:c6:14:fc:0c:2d:67:d9:c9:9f: 9d:3a:cf:77:4b:d7:d1:46:59:0d:68:3e:84:31:b5: 3d:d5:b3:27:13:94:a1:54:c8:98:fc:70:42:30:6c: ff:9f:53:95:39:8d:9e:6d:24:79:b8:88:e7:83:c2: 28:cf:2b:3c:94:ca:73:aa:a7:9a:79:46:1a:33:c6: 89:fd:01:2f:b9:af:43:72:89:b6:f1:fb:28:c1:6f: 64:7d:13:c8:bc:1e:00:72:3c:3c:56:cd:2c:16:98: e9:01:bf:be:f6:2b:75:97:c3:70:dd:3c:04:c1:0c: b2:b9:91:56:8f:2c:32:54:dd:48:92:8d:dd:46:98: 99:68:cd:14:6e:a5:41:80:7f:ee:b4:0c:19:c6:d7: 8b:18:a6:80:7e:6a:0a:5f:fb:70:22:ba:4e:d1:1d: dc:cb:97:f6:62:ff:f3:dd:c4:2c:82:5b:2d:bf:57: ed:b3:6a:60:1a:ce:b2:d6:90:5d:34:25:1c:19:03: ce:65:aa:1d:46:c0:89:6f:b9:c1:9e:56:ec:f2:8f: 73:1b:13:ca:13:75:a4:05:12:dd:04:27:96:a0:c1: 1b:9c:5c:99:20:c0:9f:b3:1c:ab:3c:43:00:cc:2e: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:47:96:B9:A8:27:94:65:D1:EA:5D:D8:57:9D:7E:95:1A:74:7E:27 X509v3 Authority Key Identifier: keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:c6:d5:1a:7b:ce:59:61:12:7e:ac:8f:63:1e:20:50:47: b6:c5:80:9c:40:76:89:44:68:4c:d7:3f:8b:1e:c1:f8:5c:b7: 1b:38:39:cd:93:23:85:3b:71:af:ef:06:97:d1:e5:aa:52:87: 66:b9:ac:44:10:66:92:ab:22:aa:49:7e:f0:dc:81:f5:33:56: a3:49:71:0a:67:a7:16:23:50:63:51:62:72:b2:a3:08:84:91: 12:7d:fc:92:30:0e:f1:42:c5:e0:2a:36:85:4f:9b:df:a4:74: 4a:cf:f5:57:b6:d8:cb:44:50:de:3c:e0:b4:73:86:78:78:19: 01:e4:5d:0b:f4:e8:96:1c:41:56:03:ce:15:61:40:8e:e3:8e: b6:cb:e6:99:35:a6:d9:cd:bd:62:a4:5a:98:8c:3d:86:b0:de: 3c:af:f1:8e:25:b8:6a:02:8a:b3:50:fd:24:b1:fa:78:6b:25: 68:cf:d2:17:c7:4a:54:34:38:ee:94:09:67:ba:10:32:7f:a7: 20:0d:8b:8f:47:39:c3:ae:6e:63:f1:dd:f1:dd:b4:69:4f:04: eb:e1:cc:46:34:1c:4a:29:ad:1d:42:6d:02:c6:a1:74:73:6a: c5:af:f2:8c:70:3c:9f:a0:19:67:63:db:dc:8e:34:78:c7:1c: 12:e2:f1:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR4mxVBpoDA3tRJki5IWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YTNjZjExNGJlNGZhNGM0ZmY3NmIyMThmYWQ1MGU1MTcz OTE2MGQwHhcNMjYwMjEwMDIwMDQxWhcNMjYwMjExMDIwMDQxWjAzMTEwLwYDVQQD EygxNTQ3OTZiOWE4Mjc5NDY1ZDFlYTVkZDg1NzlkN2U5NTFhNzQ3ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRAwmRR/T6ECBrRoWvUKNu3x2yfG FPwMLWfZyZ+dOs93S9fRRlkNaD6EMbU91bMnE5ShVMiY/HBCMGz/n1OVOY2ebSR5 uIjng8Iozys8lMpzqqeaeUYaM8aJ/QEvua9Dcom28fsowW9kfRPIvB4Acjw8Vs0s FpjpAb++9it1l8Nw3TwEwQyyuZFWjywyVN1Iko3dRpiZaM0UbqVBgH/utAwZxteL GKaAfmoKX/twIrpO0R3cy5f2Yv/z3cQsglstv1fts2pgGs6y1pBdNCUcGQPOZaod RsCJb7nBnlbs8o9zGxPKE3WkBRLdBCeWoMEbnFyZIMCfsxyrPEMAzC5VVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVHlrmoJ5Rl0epd2FedfpUadH4nMB8GA1UdIwQY MBaAFISjzxFL5PpMT/drIY+tUOUXORYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUt NTM5MzI5YmVkNDZlLzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUtNTM5MzI5YmVkNDZl LzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH/G1Rp7 zllhEn6sj2MeIFBHtsWAnEB2iURoTNc/ix7B+Fy3Gzg5zZMjhTtxr+8Gl9HlqlKH ZrmsRBBmkqsiqkl+8NyB9TNWo0lxCmenFiNQY1FicrKjCISREn38kjAO8ULF4Co2 hU+b36R0Ss/1V7bYy0RQ3jzgtHOGeHgZAeRdC/TolhxBVgPOFWFAjuOOtsvmmTWm 2c29YqRamIw9hrDePK/xjiW4agKKs1D9JLH6eGslaM/SF8dKVDQ47pQJZ7oQMn+n IA2Lj0c5w65uY/Hd8d20aU8E6+HMRjQcSimtHUJtAsahdHNqxa/yjHA8n6AZZ2Pb 3I40eMccEuLxqQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:34 2026 by rpki-client