This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json) Hash identifier: oiePChGYlrdl58VHklySXaqw+gbjcWMFVjDiAMZ8Nyc= Subject key identifier: 21:ED:35:3D:4A:48:9A:90:25:54:3B:93:82:23:72:C6:17:1D:04:FA Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d Certificate serial: 019C427D0DC01314959BA7B27094C0078CF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft Manifest number: 0CDB Signing time: Mon 09 Feb 2026 13:00:17 +0000 Manifest this update: Mon 09 Feb 2026 13:00:17 +0000 Manifest next update: Tue 10 Feb 2026 13:00:17 +0000 Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: I7cuvUMmecNTLqrRj1jyO0eHE7PQyGKXdxX4f2NEeOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0d:c0:13:14:95:9b:a7:b2:70:94:c0:07:8c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d Validity Not Before: Feb 9 13:00:17 2026 GMT Not After : Feb 10 13:00:17 2026 GMT Subject: CN=21ed353d4a489a9025543b93822372c6171d04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:21:86:e6:d5:f8:16:16:bc:8d:3d:07:fd: 12:4e:3b:9d:24:85:15:ed:24:50:5f:f6:ac:bb:a8: ad:0a:fa:38:72:d1:1c:96:ab:1b:15:14:8c:e1:39: e3:82:54:5e:ea:b4:58:50:72:29:fd:bb:18:2f:e5: fb:35:99:1b:a9:a8:2b:7b:62:29:57:31:9d:3b:6a: cc:4a:18:48:0a:ca:42:19:5c:9e:93:c1:dc:72:63: a9:03:6d:c6:af:2e:90:97:ee:11:25:25:08:23:f3: b0:01:03:67:9f:86:1c:42:86:d9:66:71:59:07:2a: 6b:01:99:ab:9f:40:a4:b3:99:a3:2a:20:c9:55:5e: 9b:a5:5f:70:a3:4a:70:7c:61:a3:d3:0b:7b:6f:9a: 41:2a:e2:be:44:c2:45:f1:15:0d:02:9c:46:31:d0: 5f:fa:6d:45:04:3b:98:20:69:93:e4:9f:97:65:24: 34:33:79:cf:51:b2:8b:ce:9a:09:bd:c9:c5:d6:4d: 64:ac:f9:6e:f3:8f:54:1c:ad:27:61:44:a0:c6:d8: f9:fd:8f:1e:80:c3:7b:21:0c:4a:87:d8:79:1f:9c: 87:68:61:de:7c:3a:5e:92:78:88:79:53:12:f0:ad: 70:89:b1:a3:4b:e8:a0:5f:1f:01:7b:36:eb:81:39: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:35:3D:4A:48:9A:90:25:54:3B:93:82:23:72:C6:17:1D:04:FA X509v3 Authority Key Identifier: keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:d7:58:12:10:5a:2a:c9:0b:68:c7:cc:f7:75:28:52:13: 63:82:da:00:21:29:c7:2f:bd:00:20:35:f3:cd:5e:7c:9c:29: a7:56:2a:9c:7b:af:4b:e9:3d:19:a7:d9:1a:91:2f:7c:93:ee: 18:6e:9e:37:7f:a7:3c:33:58:75:b9:86:e4:e0:d7:55:78:9a: 8c:07:82:1d:85:dd:6f:42:9c:cd:d8:2e:20:4f:59:69:87:3a: af:62:96:25:10:ef:a4:88:fd:61:04:76:ba:2a:8d:3d:13:73: b6:62:11:80:b7:6e:06:01:0b:68:86:53:d6:67:50:41:0c:c5: 12:cf:f8:f8:a2:ef:84:2a:f5:d8:54:8e:af:0e:78:79:28:de: 29:d7:6f:70:85:fd:c5:dd:4c:b9:05:4e:af:60:40:ae:65:11: 02:4e:cf:63:65:3f:37:94:4c:75:f9:f1:4d:3d:13:74:6c:8e: 97:f6:75:26:e4:3a:20:66:7c:36:6b:c8:70:7b:d9:2d:ab:30: 74:ca:90:e4:e2:9e:56:11:7a:74:38:97:41:0d:07:c5:2e:6c: a5:3e:70:b4:9d:5e:e5:30:27:c4:66:74:33:28:3c:fd:97:bd: b1:8a:3d:bf:df:25:51:c7:2e:1a:47:7b:33:e5:d2:52:59:67: d0:db:43:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQ3AExSVm6eycJTAB4z2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzY5M2M1ZmFkM2YyMTZhNGZmN2FjODZjZWViMjNiMDA0 MzgzNWQwHhcNMjYwMjA5MTMwMDE3WhcNMjYwMjEwMTMwMDE3WjAzMTEwLwYDVQQD EygyMWVkMzUzZDRhNDg5YTkwMjU1NDNiOTM4MjIzNzJjNjE3MWQwNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ewhhubV+BYWvI09B/0STjudJIUV 7SRQX/asu6itCvo4ctEclqsbFRSM4TnjglRe6rRYUHIp/bsYL+X7NZkbqagre2Ip VzGdO2rMShhICspCGVyek8HccmOpA23Gry6Ql+4RJSUII/OwAQNnn4YcQobZZnFZ ByprAZmrn0Cks5mjKiDJVV6bpV9wo0pwfGGj0wt7b5pBKuK+RMJF8RUNApxGMdBf +m1FBDuYIGmT5J+XZSQ0M3nPUbKLzpoJvcnF1k1krPlu849UHK0nYUSgxtj5/Y8e gMN7IQxKh9h5H5yHaGHefDpekniIeVMS8K1wibGjS+igXx8BezbrgTnpqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHtNT1KSJqQJVQ7k4IjcsYXHQT6MB8GA1UdIwQY MBaAFB42k8X60/IWpP96yGzusjsAQ4NdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQt NDIxMTUxOGQ5OGE0LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQtNDIxMTUxOGQ5OGE0 LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibnXWBIQ WirJC2jHzPd1KFITY4LaACEpxy+9ACA1881efJwpp1YqnHuvS+k9GafZGpEvfJPu GG6eN3+nPDNYdbmG5ODXVXiajAeCHYXdb0KczdguIE9ZaYc6r2KWJRDvpIj9YQR2 uiqNPRNztmIRgLduBgELaIZT1mdQQQzFEs/4+KLvhCr12FSOrw54eSjeKddvcIX9 xd1MuQVOr2BArmURAk7PY2U/N5RMdfnxTT0TdGyOl/Z1JuQ6IGZ8NmvIcHvZLasw dMqQ5OKeVhF6dDiXQQ0HxS5spT5wtJ1e5TAnxGZ0Myg8/Ze9sYo9v98lUccuGkd7 M+XSUlln0NtDxA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:40 2026 by rpki-client