This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json) Hash identifier: QHFkWULMArGVpaG93znYSa33uOIKo4AAZmY3EVdqcvw= Subject key identifier: AE:86:42:35:97:18:95:D8:EF:40:FC:0F:C7:85:5E:CC:51:15:0B:16 Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f Certificate serial: 019C41D8A8D90CF154521F3601AB8D172533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft Manifest number: 035B Signing time: Mon 09 Feb 2026 10:00:43 +0000 Manifest this update: Mon 09 Feb 2026 10:00:43 +0000 Manifest next update: Tue 10 Feb 2026 10:00:43 +0000 Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: /B5smdO0nw0SIiydVi2KTNQm25LoG6zGfkPCrKlcv1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a8:d9:0c:f1:54:52:1f:36:01:ab:8d:17:25:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f Validity Not Before: Feb 9 10:00:43 2026 GMT Not After : Feb 10 10:00:43 2026 GMT Subject: CN=ae864235971895d8ef40fc0fc7855ecc51150b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:dd:8e:a9:d0:89:f5:41:ab:0e:4d:92:bc: 54:22:18:9d:dd:70:b3:9c:ca:0f:19:0c:87:6b:00: 20:e9:b1:64:5e:9b:c2:1d:41:ef:87:f7:1d:0f:ce: 6b:ac:28:53:16:d9:b9:b9:51:ec:17:8e:47:4a:68: 80:43:fa:fd:8b:e8:4d:ff:ce:10:c8:7c:f8:b9:3e: fc:0e:ec:31:3c:91:c9:61:d7:21:08:8a:ac:87:58: ae:29:34:e2:ae:10:21:44:55:07:c1:94:83:d8:9c: be:99:eb:93:2e:0f:63:44:07:08:d0:c5:d4:4a:d0: d1:cd:5c:1d:20:74:f0:ad:25:ab:8c:4d:b3:c6:68: 06:b4:62:76:97:7c:23:b5:6a:c3:28:55:1d:9a:ed: ca:b0:67:46:4f:fe:e4:9d:36:dc:df:b7:d1:90:76: 3a:4e:02:99:9a:43:20:e4:fa:b7:b2:5d:be:a7:6d: c4:85:ce:37:eb:f8:da:eb:12:e0:ae:bc:d8:df:3c: cf:7d:09:0a:a1:8c:c1:c3:b8:74:4a:7a:71:6c:8f: cc:80:af:e9:5f:30:40:55:11:39:89:b3:89:7c:51: 1a:40:af:09:cf:ff:b4:a5:52:a1:3f:d2:55:ad:dd: 64:fa:98:23:eb:4b:31:fb:42:79:9d:61:14:48:d9: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:86:42:35:97:18:95:D8:EF:40:FC:0F:C7:85:5E:CC:51:15:0B:16 X509v3 Authority Key Identifier: keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:99:15:23:5c:c3:70:51:a6:9e:f9:21:b6:28:e9:f1:3d:80: 75:ba:5d:47:a8:27:38:8e:a8:c4:0f:5d:b6:bc:b1:97:27:5b: 52:7e:a1:d4:02:79:11:24:0e:bb:ee:8b:7a:ec:57:ee:67:dd: c2:61:8c:6d:c3:8b:ab:e9:ed:2d:90:e9:0c:ee:ff:ca:3c:23: 82:3f:46:2c:2c:b4:7d:88:98:7a:91:30:65:2b:62:87:c2:c3: 9c:62:e9:cc:b6:53:99:be:1d:bf:3e:91:4d:bc:b5:b1:86:52: b8:f3:17:59:26:c8:04:35:7f:f5:a2:da:2f:3e:2d:aa:0a:86: ee:a3:a4:3f:dc:07:91:e9:18:79:98:28:96:e4:6a:3c:35:1b: 7d:bc:c3:c2:61:47:7c:0d:d6:b6:45:22:7c:73:60:a3:1c:e6: 8d:09:99:a3:55:61:3d:e8:51:62:0d:77:63:75:8e:b1:bc:db: f4:b8:2b:ff:7d:bf:43:6d:2f:2a:a2:ae:2a:f4:17:93:9b:62: e8:c2:e8:3c:94:8a:1d:81:bc:4d:03:6f:c7:25:0a:18:f0:a4: 3e:68:43:18:c9:8f:19:84:9b:57:87:e7:5e:3b:72:00:da:c8: 3f:2b:34:21:66:d7:1c:ce:d8:84:d5:86:36:b9:0b:fc:ce:41: 1c:a2:c6:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KjZDPFUUh82AauNFyUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzhiZjFjYzEzODE2NzgwMzhlZjVkYTY3NjQyMzk4ZTNk OTgxOWYwHhcNMjYwMjA5MTAwMDQzWhcNMjYwMjEwMTAwMDQzWjAzMTEwLwYDVQQD EyhhZTg2NDIzNTk3MTg5NWQ4ZWY0MGZjMGZjNzg1NWVjYzUxMTUwYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyfdjqnQifVBqw5NkrxUIhid3XCz nMoPGQyHawAg6bFkXpvCHUHvh/cdD85rrChTFtm5uVHsF45HSmiAQ/r9i+hN/84Q yHz4uT78DuwxPJHJYdchCIqsh1iuKTTirhAhRFUHwZSD2Jy+meuTLg9jRAcI0MXU StDRzVwdIHTwrSWrjE2zxmgGtGJ2l3wjtWrDKFUdmu3KsGdGT/7knTbc37fRkHY6 TgKZmkMg5Pq3sl2+p23Ehc436/ja6xLgrrzY3zzPfQkKoYzBw7h0SnpxbI/MgK/p XzBAVRE5ibOJfFEaQK8Jz/+0pVKhP9JVrd1k+pgj60sx+0J5nWEUSNkyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6GQjWXGJXY70D8D8eFXsxRFQsWMB8GA1UdIwQY MBaAFIc4vxzBOBZ4A4712mdkI5jj2YGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmIt NTFmNzNjZDEyNWJmLzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmItNTFmNzNjZDEyNWJm LzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5kVI1zD cFGmnvkhtijp8T2AdbpdR6gnOI6oxA9dtryxlydbUn6h1AJ5ESQOu+6LeuxX7mfd wmGMbcOLq+ntLZDpDO7/yjwjgj9GLCy0fYiYepEwZStih8LDnGLpzLZTmb4dvz6R Tby1sYZSuPMXWSbIBDV/9aLaLz4tqgqG7qOkP9wHkekYeZgoluRqPDUbfbzDwmFH fA3WtkUifHNgoxzmjQmZo1VhPehRYg13Y3WOsbzb9Lgr/32/Q20vKqKuKvQXk5ti 6MLoPJSKHYG8TQNvxyUKGPCkPmhDGMmPGYSbV4fnXjtyANrIPys0IWbXHM7YhNWG NrkL/M5BHKLGXg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:35 2026 by rpki-client