This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json) Hash identifier: +BosVNLfsKZbRLdrEOpIjNy/vWIT42GtGWRUt+8lHE0= Subject key identifier: 2C:0A:A2:13:D8:53:E8:09:CD:46:58:07:9A:25:9B:D7:1F:06:CF:D2 Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Certificate serial: 019C4358BFAA2ECBBD3EB829C6CD1EB76B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft Manifest number: 0136 Signing time: Mon 09 Feb 2026 17:00:15 +0000 Manifest this update: Mon 09 Feb 2026 17:00:15 +0000 Manifest next update: Tue 10 Feb 2026 17:00:15 +0000 Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: 8zKIvFRMrtlqzjPj1e5nvy7/oXrmM5UpXNXXa//FUKg=) 2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bf:aa:2e:cb:bd:3e:b8:29:c6:cd:1e:b7:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Validity Not Before: Feb 9 17:00:15 2026 GMT Not After : Feb 10 17:00:15 2026 GMT Subject: CN=2c0aa213d853e809cd4658079a259bd71f06cfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:d6:34:44:33:d6:cd:6b:24:8d:55:24:a3: 00:cd:0b:0b:21:f7:e8:c6:da:82:6a:96:32:fa:99: 72:a2:55:7c:d4:6f:2d:30:42:0e:32:d0:af:ee:24: b4:0f:cf:e7:a9:a2:59:fe:ea:12:c8:3d:ae:62:3d: 19:21:2d:a6:30:54:d9:70:4c:62:23:de:8d:df:df: 79:43:6f:47:75:9d:10:4c:3a:94:4c:05:d2:ae:8a: 97:b4:46:9e:6a:8f:aa:7e:96:ae:62:ba:40:4c:e6: f6:cd:ab:d8:9e:34:28:0a:11:54:e4:2b:f9:21:56: 28:2d:84:8c:2a:b7:00:d6:f2:8c:bc:4b:55:0b:eb: 6a:74:47:d1:1a:25:43:e8:e3:73:50:a0:7a:2a:36: 97:b0:c5:a7:04:ef:a1:87:e4:af:fe:d1:c9:ce:4d: 53:5c:31:14:e2:af:2a:29:4c:f7:e8:1a:97:3e:90: f8:a1:51:d0:4f:b4:bd:56:93:8f:a7:3a:a3:71:00: 21:04:c7:c6:cb:07:91:ba:74:68:b3:04:2a:ae:8e: 87:f3:97:56:50:df:4c:ba:da:f3:ca:48:ac:93:7a: af:eb:05:42:4d:02:59:03:f9:46:73:6f:1b:c2:d9: 5c:6e:2f:1b:d4:83:36:eb:98:f1:23:3c:8c:9e:d8: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:A2:13:D8:53:E8:09:CD:46:58:07:9A:25:9B:D7:1F:06:CF:D2 X509v3 Authority Key Identifier: keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:01:4e:46:dc:e7:8d:94:aa:3d:64:01:d4:10:1f:63:71:74: b7:af:fc:af:2f:a2:5c:f3:49:6d:64:98:02:83:93:39:eb:a2: 9c:5e:c7:5d:8e:4d:a6:ea:35:a2:1e:89:15:c8:ba:61:4c:72: af:1c:58:dc:9a:fa:25:d4:95:0e:7d:3a:be:27:d5:ec:18:ba: d3:1c:3f:14:c4:fa:88:08:d1:d7:aa:3d:d0:92:c5:5f:4d:09: fc:9f:ff:4d:1f:bf:7e:74:b1:19:63:37:8c:e6:bc:89:e7:0f: 69:f7:97:b2:4d:cb:59:5f:0c:30:5b:85:90:82:ce:62:bc:2e: b1:f6:33:0f:3f:6d:ee:55:ac:c4:d1:ff:69:7f:60:91:6c:42: 46:f6:9c:d7:3d:82:e9:b5:bf:77:66:19:ff:43:21:ec:97:fc: 33:2f:7b:a4:b5:e1:67:d5:be:e3:74:1a:58:b8:9c:c0:86:92: c3:f6:32:ff:f7:a1:43:2b:be:bd:ac:99:4e:d5:65:24:6a:79: 01:68:01:ca:79:07:16:35:f0:aa:14:ff:07:82:8c:77:2c:7a: 66:48:17:fa:eb:4e:b3:a5:0a:27:4c:97:a1:d3:ec:28:7c:01: 61:bd:f2:d7:c6:89:08:0a:49:36:d5:e5:fd:92:52:2d:5d:c0: d8:4d:48:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWL+qLsu9Prgpxs0et2tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz MTQzYzMwHhcNMjYwMjA5MTcwMDE1WhcNMjYwMjEwMTcwMDE1WjAzMTEwLwYDVQQD EygyYzBhYTIxM2Q4NTNlODA5Y2Q0NjU4MDc5YTI1OWJkNzFmMDZjZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7fWNEQz1s1rJI1VJKMAzQsLIffo xtqCapYy+plyolV81G8tMEIOMtCv7iS0D8/nqaJZ/uoSyD2uYj0ZIS2mMFTZcExi I96N3995Q29HdZ0QTDqUTAXSroqXtEaeao+qfpauYrpATOb2zavYnjQoChFU5Cv5 IVYoLYSMKrcA1vKMvEtVC+tqdEfRGiVD6ONzUKB6KjaXsMWnBO+hh+Sv/tHJzk1T XDEU4q8qKUz36BqXPpD4oVHQT7S9VpOPpzqjcQAhBMfGyweRunRoswQqro6H85dW UN9Mutrzykisk3qv6wVCTQJZA/lGc28bwtlcbi8b1IM265jxIzyMntiENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwKohPYU+gJzUZYB5olm9cfBs/SMB8GA1UdIwQY MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgFORtzn jZSqPWQB1BAfY3F0t6/8ry+iXPNJbWSYAoOTOeuinF7HXY5Npuo1oh6JFci6YUxy rxxY3Jr6JdSVDn06vifV7Bi60xw/FMT6iAjR16o90JLFX00J/J//TR+/fnSxGWM3 jOa8iecPafeXsk3LWV8MMFuFkILOYrwusfYzDz9t7lWsxNH/aX9gkWxCRvac1z2C 6bW/d2YZ/0Mh7Jf8My97pLXhZ9W+43QaWLicwIaSw/Yy//ehQyu+vayZTtVlJGp5 AWgBynkHFjXwqhT/B4KMdyx6ZkgX+utOs6UKJ0yXodPsKHwBYb3y18aJCApJNtXl /ZJSLV3A2E1I8g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:00 2026 by rpki-client