This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json) Hash identifier: TtgyVQZ+3sNSNN99dTbeoldSRUTOrvg9s0pWdjSOiqg= Subject key identifier: 29:39:8F:62:92:4E:4F:EB:96:9A:06:B4:33:F8:C8:09:2A:EE:1B:02 Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1 Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1 Certificate serial: 019C41A18069A63DBD890FA793C87F98CE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 09:00:29 +0000 Manifest this update: Mon 09 Feb 2026 09:00:29 +0000 Manifest next update: Tue 10 Feb 2026 09:00:29 +0000 Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: qjts0YRV4jsQjhLcv74zEQiMrNA30MSHKtCVEQ6Rsn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:80:69:a6:3d:bd:89:0f:a7:93:c8:7f:98:ce:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1 Validity Not Before: Feb 9 09:00:29 2026 GMT Not After : Feb 10 09:00:29 2026 GMT Subject: CN=29398f62924e4feb969a06b433f8c8092aee1b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:08:bf:5e:5a:72:ed:85:5a:0a:a1:e5:26: d6:f1:ba:d1:74:af:ca:80:1c:d3:8b:1a:a3:3d:02: be:5b:ee:32:46:07:ad:ea:ac:d4:36:76:79:79:52: a1:94:3f:7f:03:17:c7:e2:64:d8:c4:60:6f:db:93: 93:4c:ee:e3:6f:a7:8b:ec:ae:91:e3:14:52:eb:46: 59:4e:fb:b5:db:9c:c2:7b:58:12:ea:fa:8f:da:17: 10:46:2c:42:ee:c5:58:ce:a6:43:8e:b4:9b:c7:a5: e2:ee:78:f5:1d:d5:9e:50:c8:11:d6:5e:d6:42:92: 62:85:24:61:92:05:b1:59:a9:90:cf:e3:75:40:93: 0e:be:7b:e0:d1:9e:9a:d6:3b:5c:6e:c1:d5:94:90: e7:98:88:5f:b0:58:8a:28:4e:f5:8f:9a:e4:b3:ba: 94:22:0b:ce:97:44:b7:56:46:c0:c2:ed:cf:62:8d: 11:3f:4f:4c:8b:1e:84:e5:c0:e2:e3:c6:6c:18:f7: c9:26:0d:ae:45:9d:72:0c:94:27:a1:31:8d:95:55: 03:3e:f5:64:53:7a:8c:c8:27:64:75:07:79:62:5b: d6:fe:82:bf:56:71:e0:0a:7c:34:a3:bb:1f:09:4b: 51:27:9b:9a:22:14:11:53:8c:1e:f5:46:88:4f:43: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:39:8F:62:92:4E:4F:EB:96:9A:06:B4:33:F8:C8:09:2A:EE:1B:02 X509v3 Authority Key Identifier: keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:33:13:24:a1:47:da:c3:23:a8:1d:59:1f:8b:f0:91:99:dd: 06:df:7f:2f:66:a8:91:30:ef:7b:2a:79:43:be:2d:2e:61:88: c7:33:37:3f:a0:0e:c3:5b:ba:72:8f:6f:f8:1c:a9:0e:ee:9b: 50:6f:12:95:ad:fb:19:78:28:28:d7:92:8f:0f:17:b1:93:b0: 4e:6c:a7:6b:bd:71:fc:ce:4b:61:53:3a:90:8a:38:60:40:aa: aa:c5:82:12:53:f2:a7:d5:c9:e7:a9:20:07:e3:15:2a:69:ba: ca:13:0c:5d:ea:99:6e:18:73:cb:a7:b0:37:de:d8:6a:38:56: 77:37:fb:1f:02:b1:38:15:58:20:fb:97:3d:cc:6e:c1:be:26: bc:e1:50:c0:0a:30:79:fa:df:04:37:73:82:71:ea:17:98:a8: 81:20:43:bb:7c:2a:5b:49:d1:34:00:02:9a:35:38:01:9e:51: d3:b7:cc:a4:aa:4b:44:f6:03:f4:d2:85:66:a0:75:26:e4:e5: e5:45:ed:48:f3:59:a1:92:83:32:18:ce:b2:c8:9b:62:d9:4c: 0e:a6:82:9d:62:06:ab:d0:46:35:8c:e8:36:5c:3f:bc:d2:56: 73:92:54:43:02:69:d4:0d:3b:89:fd:ab:22:5e:71:3d:e8:c5: 3e:5d:35:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYBppj29iQ+nk8h/mM6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MWJmOWMzY2QyYjM2NDA3ZGZiZDk3NmZiODRhMjExOTdh MGVhYTEwHhcNMjYwMjA5MDkwMDI5WhcNMjYwMjEwMDkwMDI5WjAzMTEwLwYDVQQD EygyOTM5OGY2MjkyNGU0ZmViOTY5YTA2YjQzM2Y4YzgwOTJhZWUxYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMMIv15acu2FWgqh5SbW8brRdK/K gBzTixqjPQK+W+4yRget6qzUNnZ5eVKhlD9/AxfH4mTYxGBv25OTTO7jb6eL7K6R 4xRS60ZZTvu125zCe1gS6vqP2hcQRixC7sVYzqZDjrSbx6Xi7nj1HdWeUMgR1l7W QpJihSRhkgWxWamQz+N1QJMOvnvg0Z6a1jtcbsHVlJDnmIhfsFiKKE71j5rks7qU IgvOl0S3VkbAwu3PYo0RP09Mix6E5cDi48ZsGPfJJg2uRZ1yDJQnoTGNlVUDPvVk U3qMyCdkdQd5YlvW/oK/VnHgCnw0o7sfCUtRJ5uaIhQRU4we9UaIT0NF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk5j2KSTk/rlpoGtDP4yAkq7hsCMB8GA1UdIwQY MBaAFIcb+cPNKzZAffvZdvuEohGXoOqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWIt ZmExZTYwODM5OTJkLzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lYmU4OGUtNzE0Mi00YzhhLTkzOWItZmExZTYwODM5OTJk LzEvaHh2NXc4MHJOa0I5LTlsMi00U2lFWmVnNnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDMTJKFH 2sMjqB1ZH4vwkZndBt9/L2aokTDveyp5Q74tLmGIxzM3P6AOw1u6co9v+BypDu6b UG8Sla37GXgoKNeSjw8XsZOwTmyna71x/M5LYVM6kIo4YECqqsWCElPyp9XJ56kg B+MVKmm6yhMMXeqZbhhzy6ewN97YajhWdzf7HwKxOBVYIPuXPcxuwb4mvOFQwAow efrfBDdzgnHqF5iogSBDu3wqW0nRNAACmjU4AZ5R07fMpKpLRPYD9NKFZqB1JuTl 5UXtSPNZoZKDMhjOssibYtlMDqaCnWIGq9BGNYzoNlw/vNJWc5JUQwJp1A07if2r Il5xPejFPl01Sg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:26 2026 by rpki-client