This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json) Hash identifier: DdpW9EBUuc55GnpckVv4qCQ3HY5mJRpU9OiJVVg8CEA= Subject key identifier: CE:CA:CF:CD:6F:4B:BC:57:84:4E:CD:32:9D:0C:20:85:43:3A:5B:23 Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63 Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63 Certificate serial: 019C446BF010F0074CBCC9C4406BA20945BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft Manifest number: 181D Signing time: Mon 09 Feb 2026 22:00:50 +0000 Manifest this update: Mon 09 Feb 2026 22:00:50 +0000 Manifest next update: Tue 10 Feb 2026 22:00:50 +0000 Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: zN1XstU0UVcINBc0qiGqv9wSIbk7qlCfS1ZXa6pXioY=) 2: iRVjihfwRYJETXspv6JRTsIrfXI.roa (hash: 3nsOjJGMe27V8EM8Am0pLzNkNlpRhB+GO1fG/bewBbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:f0:10:f0:07:4c:bc:c9:c4:40:6b:a2:09:45:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63 Validity Not Before: Feb 9 22:00:50 2026 GMT Not After : Feb 10 22:00:50 2026 GMT Subject: CN=cecacfcd6f4bbc57844ecd329d0c2085433a5b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:89:ee:df:0a:02:6e:f8:b7:ac:26:f4:bb: b8:04:df:79:26:59:38:62:42:4f:c7:5f:ad:cb:93: 28:dc:3a:29:09:e9:1f:50:d8:74:e6:ed:23:df:e4: ea:9a:f6:0e:d6:37:68:2b:ed:d2:f6:3d:71:15:9c: fb:a7:ce:21:e9:03:09:92:2e:af:55:77:68:64:68: b0:f5:c4:0d:a9:4e:57:a6:d7:78:36:1a:fa:8c:fa: 57:07:32:74:eb:f2:91:18:39:05:14:51:35:b0:1b: dc:3a:8d:c0:56:e3:a4:8e:29:91:2f:55:37:60:d1: d0:35:0e:21:02:6f:ad:16:c4:19:e5:60:23:25:be: 28:9a:27:e7:c5:c6:d0:a7:df:97:6b:78:34:ca:d5: 7c:9b:cc:f8:54:09:d7:46:13:f5:6f:11:23:b1:77: 89:74:2a:dd:69:74:59:bd:d0:a2:ee:1c:43:25:6f: ce:15:f2:42:ad:ba:03:a4:3f:e9:c0:fb:91:19:9f: 9e:63:b9:37:9c:dd:b4:f1:ed:f9:df:30:17:c3:63: ce:45:63:92:b0:5c:7c:fb:a0:bb:8a:fa:9b:6a:51: c2:01:c0:cc:4a:b5:06:45:c8:58:b1:7f:af:b2:e3: ec:c7:0a:54:34:9f:27:b4:ab:3a:d9:41:db:82:2e: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:CF:CD:6F:4B:BC:57:84:4E:CD:32:9D:0C:20:85:43:3A:5B:23 X509v3 Authority Key Identifier: keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:9f:8f:f3:e3:bd:a7:71:7e:bb:a5:55:81:65:5f:59:45:38: fc:e6:34:29:72:28:4b:c6:30:1c:51:b3:e6:87:20:13:33:76: db:27:5f:84:d0:ea:bc:c4:99:5d:f3:29:8e:20:03:7b:62:ba: a6:94:26:20:01:9c:85:84:9d:82:a5:2f:ad:35:67:6f:c0:80: e3:04:e1:4b:42:f9:45:3c:4e:cf:b3:23:70:82:cf:96:ba:71: cf:24:48:66:f6:cc:de:45:81:e8:0e:e6:81:a2:e8:a5:72:db: ef:b3:c0:d4:da:ae:67:9b:a4:0e:e9:6e:ba:11:dc:94:bc:3a: 53:84:bd:56:49:46:87:c1:d7:8d:8f:6f:ea:e9:29:c6:d5:1e: 51:c6:a5:95:6a:87:71:b5:95:bc:6e:16:e1:7f:aa:e3:14:e7: ae:01:26:13:1e:cf:4d:8e:8f:f8:4c:e2:a6:91:a5:e0:45:7a: 13:f4:7e:91:45:56:04:f9:e6:2d:e5:eb:34:c7:c7:aa:aa:fd: 8f:3b:9e:66:53:22:31:95:3c:be:c5:46:78:d4:fd:32:f3:18: fa:cf:0d:24:ff:34:e4:3e:73:f3:ee:ac:dd:8b:80:f1:66:00: a3:4e:47:64:db:03:3c:45:89:70:75:1d:04:ee:7b:d4:04:0c: f4:12:70:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa/AQ8AdMvMnEQGuiCUW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjhiMDdjMTU3YTVkYzYxM2M5MjY0ZGFmODllN2M4NjBl MzNlNjMwHhcNMjYwMjA5MjIwMDUwWhcNMjYwMjEwMjIwMDUwWjAzMTEwLwYDVQQD EyhjZWNhY2ZjZDZmNGJiYzU3ODQ0ZWNkMzI5ZDBjMjA4NTQzM2E1YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkKJ7t8KAm74t6wm9Lu4BN95Jlk4 YkJPx1+ty5Mo3DopCekfUNh05u0j3+TqmvYO1jdoK+3S9j1xFZz7p84h6QMJki6v VXdoZGiw9cQNqU5Xptd4Nhr6jPpXBzJ06/KRGDkFFFE1sBvcOo3AVuOkjimRL1U3 YNHQNQ4hAm+tFsQZ5WAjJb4omifnxcbQp9+Xa3g0ytV8m8z4VAnXRhP1bxEjsXeJ dCrdaXRZvdCi7hxDJW/OFfJCrboDpD/pwPuRGZ+eY7k3nN208e353zAXw2PORWOS sFx8+6C7ivqbalHCAcDMSrUGRchYsX+vsuPsxwpUNJ8ntKs62UHbgi57FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7Kz81vS7xXhE7NMp0MIIVDOlsjMB8GA1UdIwQY MBaAFBwosHwVel3GE8kmTa+J58hg4z5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2Mt OTYzMzM0ODllODU1LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2MtOTYzMzM0ODllODU1 LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5+P8+O9 p3F+u6VVgWVfWUU4/OY0KXIoS8YwHFGz5ocgEzN22ydfhNDqvMSZXfMpjiADe2K6 ppQmIAGchYSdgqUvrTVnb8CA4wThS0L5RTxOz7MjcILPlrpxzyRIZvbM3kWB6A7m gaLopXLb77PA1NquZ5ukDuluuhHclLw6U4S9VklGh8HXjY9v6ukpxtUeUcallWqH cbWVvG4W4X+q4xTnrgEmEx7PTY6P+EzippGl4EV6E/R+kUVWBPnmLeXrNMfHqqr9 jzueZlMiMZU8vsVGeNT9MvMY+s8NJP805D5z8+6s3YuA8WYAo05HZNsDPEWJcHUd BO571AQM9BJwnQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:12 2026 by rpki-client