This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json) Hash identifier: HN7Tn0GhJ6nDvv0ds5BwzxTzHrnqU5Jv02FXbFiOlio= Subject key identifier: B6:EA:D8:30:C9:6D:7D:3E:05:71:08:00:85:C8:BF:CB:8A:B2:53:A6 Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Certificate serial: 019C42469EFB90452E3AA7E53559D1B96B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft Manifest number: 133C Signing time: Mon 09 Feb 2026 12:00:50 +0000 Manifest this update: Mon 09 Feb 2026 12:00:50 +0000 Manifest next update: Tue 10 Feb 2026 12:00:50 +0000 Files and hashes: 1: Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa (hash: DTkKxG2OCn2HUjqRtTQ53+a8mSrOuYj/XPGf19kdObY=) 2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: ThIyOw05hjja57LDBqmrvpxfZK4raaa0Fh8744HA9FM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9e:fb:90:45:2e:3a:a7:e5:35:59:d1:b9:6b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Validity Not Before: Feb 9 12:00:50 2026 GMT Not After : Feb 10 12:00:50 2026 GMT Subject: CN=b6ead830c96d7d3e0571080085c8bfcb8ab253a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:74:56:c7:b8:36:3b:20:aa:c1:49:76:df: ec:15:6b:56:e8:d6:2f:6c:5d:99:64:8b:10:ef:6c: 51:96:05:1d:1f:d8:4c:71:23:0e:03:46:fe:4a:98: 68:32:50:28:5a:9f:77:13:6b:41:5a:c2:69:2e:1e: 1c:ea:6f:35:95:c6:25:8b:36:04:5f:2f:75:af:93: 69:43:cf:a2:47:d3:c1:41:6c:70:86:81:a5:63:f2: e1:91:22:2f:20:13:b2:bd:74:61:42:c3:47:8a:4c: af:56:07:67:7a:69:00:5c:da:09:f7:88:0c:be:17: 79:0f:54:00:66:9e:88:6f:5c:ee:f6:bb:5b:60:96: 38:81:19:aa:06:21:88:ea:f9:b9:03:10:eb:20:7a: 5b:64:9f:7d:43:b0:b8:b7:92:48:74:b9:fa:03:ab: fb:89:c4:d3:c3:d5:a5:e8:ef:35:75:8a:cd:0a:54: c6:79:b1:6c:c3:29:a4:09:70:25:5f:75:ec:4a:51: 71:74:f0:1e:e4:af:15:e6:4d:d1:97:d0:0c:d4:0d: 08:b2:e5:46:48:83:bc:d5:c0:24:ca:f9:d8:69:37: 81:34:64:ce:d1:ad:18:7c:cf:a2:db:20:90:30:a3: 57:e5:8e:2e:50:57:08:87:1c:18:54:b8:ae:1b:82: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:D8:30:C9:6D:7D:3E:05:71:08:00:85:C8:BF:CB:8A:B2:53:A6 X509v3 Authority Key Identifier: keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dd:e1:62:66:85:7c:2b:93:67:4d:b2:01:e6:f1:eb:f8:1f: d6:42:45:52:80:4c:56:96:5f:ec:2f:a6:29:93:52:49:1a:ae: ac:73:39:e9:28:01:ce:38:82:23:42:d7:67:dc:29:34:a8:50: f4:ec:97:df:fb:f7:95:93:7b:7f:4d:48:89:eb:12:b4:61:e7: c4:be:75:01:20:91:ed:a8:2f:ae:02:d4:6a:e5:ac:69:74:5d: fc:13:fa:e5:58:91:11:8d:37:76:88:32:40:34:70:45:81:ec: 7b:f2:12:ef:9e:85:e6:5b:d0:0c:1b:3d:9b:59:6d:c8:47:48: 0b:63:c6:5d:5b:39:7e:27:3b:c5:70:61:c9:c4:92:a8:f6:25: 31:d4:ab:16:01:5b:00:55:1f:e7:7b:64:a3:1e:f8:0e:ee:54: a6:74:ac:b6:dd:42:f5:5d:41:5f:c7:c6:91:ff:16:bf:1b:74: 08:05:35:5c:1c:9d:1f:c5:4d:53:c7:c2:99:8b:e7:67:6f:05: b6:3b:11:a3:9d:74:31:fe:aa:12:d9:97:aa:c4:eb:8a:23:a2: 24:b2:87:13:d8:a9:58:5c:f1:3b:8a:4f:d5:dc:85:23:26:f8: 9b:c8:07:d6:11:59:c6:bc:1a:f8:ed:b4:34:72:ff:67:cc:4b: a6:b2:1a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRp77kEUuOqflNVnRuWsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx YjljMTUwHhcNMjYwMjA5MTIwMDUwWhcNMjYwMjEwMTIwMDUwWjAzMTEwLwYDVQQD EyhiNmVhZDgzMGM5NmQ3ZDNlMDU3MTA4MDA4NWM4YmZjYjhhYjI1M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3d0Vse4NjsgqsFJdt/sFWtW6NYv bF2ZZIsQ72xRlgUdH9hMcSMOA0b+SphoMlAoWp93E2tBWsJpLh4c6m81lcYlizYE Xy91r5NpQ8+iR9PBQWxwhoGlY/LhkSIvIBOyvXRhQsNHikyvVgdnemkAXNoJ94gM vhd5D1QAZp6Ib1zu9rtbYJY4gRmqBiGI6vm5AxDrIHpbZJ99Q7C4t5JIdLn6A6v7 icTTw9Wl6O81dYrNClTGebFswymkCXAlX3XsSlFxdPAe5K8V5k3Rl9AM1A0IsuVG SIO81cAkyvnYaTeBNGTO0a0YfM+i2yCQMKNX5Y4uUFcIhxwYVLiuG4LVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbq2DDJbX0+BXEIAIXIv8uKslOmMB8GA1UdIwQY MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPt3hYmaF fCuTZ02yAebx6/gf1kJFUoBMVpZf7C+mKZNSSRqurHM56SgBzjiCI0LXZ9wpNKhQ 9OyX3/v3lZN7f01IiesStGHnxL51ASCR7agvrgLUauWsaXRd/BP65ViREY03dogy QDRwRYHse/IS756F5lvQDBs9m1ltyEdIC2PGXVs5fic7xXBhycSSqPYlMdSrFgFb AFUf53tkox74Du5UpnSstt1C9V1BX8fGkf8Wvxt0CAU1XBydH8VNU8fCmYvnZ28F tjsRo510Mf6qEtmXqsTriiOiJLKHE9ipWFzxO4pP1dyFIyb4m8gH1hFZxrwa+O20 NHL/Z8xLprIatA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:40 2026 by rpki-client