This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json) Hash identifier: xoEYU8Pb7TmKVmWiiUtr/zciEvRZH/m3nRCJrpDPDDk= Subject key identifier: F4:3A:5F:01:A9:FF:E1:3D:48:97:13:3B:AE:BD:DC:D6:18:8E:78:50 Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Certificate serial: 019C4246BFC8F01BCF886340AD2787247C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft Manifest number: 1184 Signing time: Mon 09 Feb 2026 12:00:58 +0000 Manifest this update: Mon 09 Feb 2026 12:00:58 +0000 Manifest next update: Tue 10 Feb 2026 12:00:58 +0000 Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=) 2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: R9o4Ahw/SuLgO1CwPYAf3tQgAVr8rD3k0RB35kQA7rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:bf:c8:f0:1b:cf:88:63:40:ad:27:87:24:7c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Validity Not Before: Feb 9 12:00:58 2026 GMT Not After : Feb 10 12:00:58 2026 GMT Subject: CN=f43a5f01a9ffe13d4897133baebddcd6188e7850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:5d:a7:00:34:24:f7:ad:3e:64:6f:6f:f5: e8:52:26:9d:5a:7d:21:a9:f2:f0:5f:9f:23:38:78: 0e:55:7b:ae:7b:c2:d8:cf:53:e4:d3:6a:79:f2:96: e7:6d:bc:81:74:95:65:6e:39:7e:b1:c3:24:ad:2c: 68:0d:c0:26:09:7b:cc:ac:bb:61:db:ca:1a:c2:f5: 80:27:d4:bb:4e:0e:a1:91:3b:5b:48:82:f4:d0:f9: ea:01:68:52:4b:f0:ea:65:7b:02:ff:f6:41:d9:ca: 94:92:60:d5:f3:27:41:b5:f8:fe:a7:4b:f6:28:36: fe:19:10:7c:fa:f7:82:13:b7:ae:27:f7:aa:56:5d: 54:82:37:78:b7:4e:2e:41:e8:49:10:dc:a6:c6:d6: 87:aa:77:ef:2e:72:8e:0c:5d:75:db:15:d3:3d:24: c5:63:c5:c9:a8:1a:b7:61:5d:d4:bd:72:1e:cd:51: 57:c0:c2:52:64:97:3d:5b:c2:1c:d8:c7:39:90:f0: 64:8c:f7:40:c0:2e:db:ce:38:e8:f5:99:46:41:e5: 4f:9d:c5:c4:25:2c:d2:f0:ec:7c:ff:60:3a:5f:4b: d3:64:16:91:7e:11:62:65:d1:d4:e0:0a:2b:00:57: 37:30:e1:61:bf:eb:b1:f9:48:39:51:c1:4e:80:56: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3A:5F:01:A9:FF:E1:3D:48:97:13:3B:AE:BD:DC:D6:18:8E:78:50 X509v3 Authority Key Identifier: keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:41:9a:3e:13:98:22:b9:d0:03:66:12:8f:6a:c8:29:63:cf: cc:90:c3:c5:7d:29:d2:2c:51:31:a9:0a:9c:75:53:14:6f:8e: 3e:bd:f4:f6:9d:d9:76:fb:c4:4b:a0:99:72:27:e0:e9:1d:0f: 98:db:fa:f9:f0:b6:ef:0f:23:10:9b:9b:6c:61:87:ce:de:17: 72:e5:39:bd:d6:b5:32:e7:c9:9b:2f:76:f7:55:23:2f:8b:2a: ad:3b:28:90:a6:22:ac:42:78:1d:dc:74:9a:49:c7:f0:43:6e: e5:b0:ac:e7:e4:0b:e9:6e:80:7b:e4:0e:5b:0d:68:65:5d:87: 60:4a:f7:cf:2e:81:3d:56:5b:bb:06:26:da:62:94:e4:c5:9c: 2d:b2:ef:ee:4c:27:69:cb:af:e2:0c:5d:b7:ca:51:e3:da:46: ec:f2:54:a8:2d:3c:ce:db:83:33:72:cf:85:07:a8:88:00:35: 4a:c1:72:11:71:bc:ce:dc:3d:8c:b8:3b:89:5d:3c:e6:95:d9: 9c:83:ee:09:d2:da:7d:a2:1a:c1:9e:01:31:53:20:c8:f6:b4: 90:ae:7d:e6:61:f0:77:0a:79:1f:4a:c0:32:68:1c:73:e8:f9: e0:fa:7d:2d:ab:fd:c0:a2:7c:96:ac:36:81:d9:80:5c:cf:b5: d7:37:a9:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRr/I8BvPiGNArSeHJHxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh NTRkZjgwHhcNMjYwMjA5MTIwMDU4WhcNMjYwMjEwMTIwMDU4WjAzMTEwLwYDVQQD EyhmNDNhNWYwMWE5ZmZlMTNkNDg5NzEzM2JhZWJkZGNkNjE4OGU3ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVdpwA0JPetPmRvb/XoUiadWn0h qfLwX58jOHgOVXuue8LYz1Pk02p58pbnbbyBdJVlbjl+scMkrSxoDcAmCXvMrLth 28oawvWAJ9S7Tg6hkTtbSIL00PnqAWhSS/DqZXsC//ZB2cqUkmDV8ydBtfj+p0v2 KDb+GRB8+veCE7euJ/eqVl1Ugjd4t04uQehJENymxtaHqnfvLnKODF112xXTPSTF Y8XJqBq3YV3UvXIezVFXwMJSZJc9W8Ic2Mc5kPBkjPdAwC7bzjjo9ZlGQeVPncXE JSzS8Ox8/2A6X0vTZBaRfhFiZdHU4AorAFc3MOFhv+ux+Ug5UcFOgFY2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ6XwGp/+E9SJcTO6693NYYjnhQMB8GA1UdIwQY MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUGaPhOY IrnQA2YSj2rIKWPPzJDDxX0p0ixRMakKnHVTFG+OPr309p3ZdvvES6CZcifg6R0P mNv6+fC27w8jEJubbGGHzt4XcuU5vda1MufJmy9291UjL4sqrTsokKYirEJ4Hdx0 mknH8ENu5bCs5+QL6W6Ae+QOWw1oZV2HYEr3zy6BPVZbuwYm2mKU5MWcLbLv7kwn acuv4gxdt8pR49pG7PJUqC08ztuDM3LPhQeoiAA1SsFyEXG8ztw9jLg7iV085pXZ nIPuCdLafaIawZ4BMVMgyPa0kK595mHwdwp5H0rAMmgcc+j54Pp9Lav9wKJ8lqw2 gdmAXM+11zepqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:04 2026 by rpki-client