This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json) Hash identifier: lGoAXZoXulp1qtM+/pWuBtTYbpuOiysbAlu4ODaTIgs= Subject key identifier: CD:A0:AC:9F:37:B8:12:50:7E:72:EB:CD:37:44:7A:06:63:CA:7E:DD Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1 Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1 Certificate serial: 019C43230A08F5CE1243C2984CBCF6090627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft Manifest number: 094C Signing time: Mon 09 Feb 2026 16:01:35 +0000 Manifest this update: Mon 09 Feb 2026 16:01:35 +0000 Manifest next update: Tue 10 Feb 2026 16:01:35 +0000 Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: VmhwX4SIeZFCMy60dZAw/LvZKEU6ffCTXX7BHWtv+zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:0a:08:f5:ce:12:43:c2:98:4c:bc:f6:09:06:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1 Validity Not Before: Feb 9 16:01:35 2026 GMT Not After : Feb 10 16:01:35 2026 GMT Subject: CN=cda0ac9f37b812507e72ebcd37447a0663ca7edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:86:be:b3:2d:b5:9f:85:cc:1f:16:fc:cb: fa:b7:78:2d:c3:b3:45:c3:ff:bf:16:9d:79:6f:8a: b1:08:d5:05:98:3f:fb:a1:e1:91:d1:ac:9f:53:3e: fc:5a:af:e4:2a:a2:35:79:25:5a:b6:f3:60:9d:3a: af:d2:e1:a0:dc:11:95:1a:63:ba:0b:45:d5:e6:f6: 99:f9:d9:cc:db:16:d3:63:1c:39:22:46:da:80:74: cd:b8:09:a4:6b:52:8c:c6:4e:e6:03:bf:d2:3a:f8: 93:b4:07:31:7b:36:3a:35:5e:b1:ca:ce:39:ce:bc: 12:06:80:a5:a3:02:87:1a:cf:81:98:ba:63:ef:2a: 78:2e:c4:be:98:e5:5f:3b:2c:ff:05:30:8d:8f:e0: ec:52:56:fb:6e:40:4e:19:73:b6:77:9b:70:77:b0: 9e:e2:6a:5a:54:93:c7:4a:0b:2b:76:bf:10:fa:d5: 90:64:65:13:ee:1e:94:6b:d4:6f:1b:f2:d6:76:ce: df:15:64:b7:14:d6:14:dc:0e:1d:9b:d9:94:d7:1a: 4c:eb:74:6d:8d:01:36:30:9b:f4:bb:11:d0:ae:c1: ca:f1:aa:72:a3:43:3a:3e:07:68:ac:62:74:7d:22: 4a:ef:27:52:d7:36:4f:5b:90:64:69:cc:50:cb:31: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A0:AC:9F:37:B8:12:50:7E:72:EB:CD:37:44:7A:06:63:CA:7E:DD X509v3 Authority Key Identifier: keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3b:01:38:d6:3f:57:08:7e:48:a2:f2:64:58:12:51:91:39: 3e:b6:f9:6c:4a:a4:38:b3:9d:93:a2:f6:bd:1c:a6:13:d7:14: bb:2b:de:c9:77:30:29:4b:e1:74:2f:39:06:bd:a0:c5:f7:1e: 6c:44:d8:bb:25:89:04:f2:92:ed:14:e1:55:d7:b2:1a:05:20: 3a:6b:9c:d8:ec:cc:0d:e6:50:1f:a7:87:44:e6:56:1c:f4:47: 50:5d:bf:37:2f:e1:95:25:82:b2:09:f7:54:04:c8:a4:97:34: 0b:9a:ea:4e:e7:7b:98:a2:e0:8c:c2:ad:14:a3:c6:25:30:58: 4c:d9:21:6c:f8:1c:88:44:5e:c8:ca:c7:1b:c6:18:88:51:47: bb:61:36:89:78:7f:44:9b:ee:bd:79:94:ca:30:85:91:a0:98: b4:19:50:b7:c9:a1:10:3c:6b:ed:b1:b5:52:4a:e5:9d:97:e5: 02:12:39:12:81:e8:24:ad:56:05:5a:77:08:d8:75:28:2f:15: 66:27:74:38:5f:b9:e0:d6:93:3f:c1:3f:02:ed:5c:0b:7d:01: c4:4d:b3:ce:5e:80:b1:0c:0e:5d:55:18:d9:ce:44:98:58:64: ee:fc:a4:63:9b:80:ef:00:81:9a:e7:d2:57:5b:09:b9:70:82: 6b:7e:14:ef -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIwoI9c4SQ8KYTLz2CQYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4N2M1ODY0NjJjM2YzZmQ3ZTYyNzgwZjRkMzNmMThiNmE2 OWJhYzEwHhcNMjYwMjA5MTYwMTM1WhcNMjYwMjEwMTYwMTM1WjAzMTEwLwYDVQQD EyhjZGEwYWM5ZjM3YjgxMjUwN2U3MmViY2QzNzQ0N2EwNjYzY2E3ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IqGvrMttZ+FzB8W/Mv6t3gtw7NF w/+/Fp15b4qxCNUFmD/7oeGR0ayfUz78Wq/kKqI1eSVatvNgnTqv0uGg3BGVGmO6 C0XV5vaZ+dnM2xbTYxw5IkbagHTNuAmka1KMxk7mA7/SOviTtAcxezY6NV6xys45 zrwSBoClowKHGs+BmLpj7yp4LsS+mOVfOyz/BTCNj+DsUlb7bkBOGXO2d5twd7Ce 4mpaVJPHSgsrdr8Q+tWQZGUT7h6Ua9RvG/LWds7fFWS3FNYU3A4dm9mU1xpM63Rt jQE2MJv0uxHQrsHK8apyo0M6PgdorGJ0fSJK7ydS1zZPW5BkacxQyzE1ZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM2grJ83uBJQfnLrzTdEegZjyn7dMB8GA1UdIwQY MBaAFPh8WGRiw/P9fmJ4D00z8YtqabrBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IeFlaR0xEOF8xLVluZ1BUVFB4aTJwcHVzRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZjk5ZTlkLTdhOGUtNDBkYS04ODli LWUzYWNjYTVlYmZmMC8xLzEtSHhZWkdMRDhfMS1ZbmdQVFRQeGkycHB1c0UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNhL2Y5OWU5ZC03YThlLTQwZGEtODg5Yi1lM2FjY2E1ZWJm ZjAvMS8xLUh4WVpHTEQ4XzEtWW5nUFRUUHhpMnBwdXNFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTsB ONY/Vwh+SKLyZFgSUZE5Prb5bEqkOLOdk6L2vRymE9cUuyveyXcwKUvhdC85Br2g xfcebETYuyWJBPKS7RThVdeyGgUgOmuc2OzMDeZQH6eHROZWHPRHUF2/Ny/hlSWC sgn3VATIpJc0C5rqTud7mKLgjMKtFKPGJTBYTNkhbPgciEReyMrHG8YYiFFHu2E2 iXh/RJvuvXmUyjCFkaCYtBlQt8mhEDxr7bG1UkrlnZflAhI5EoHoJK1WBVp3CNh1 KC8VZid0OF+54NaTP8E/Au1cC30BxE2zzl6AsQwOXVUY2c5EmFhk7vykY5uA7wCB mufSV1sJuXCCa34U7w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:00 2026 by rpki-client