This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json) Hash identifier: U+/c64u2nSHevQ2LKL5nWTL+npv2TwUZmhD2HkIiLUI= Subject key identifier: A8:C9:BD:41:B4:A9:E4:6F:2D:C6:82:36:FA:FB:DC:66:CA:B1:B9:34 Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Certificate serial: 019C43FE0410069695572B80A7B31A95D787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft Manifest number: 08BA Signing time: Mon 09 Feb 2026 20:00:46 +0000 Manifest this update: Mon 09 Feb 2026 20:00:46 +0000 Manifest next update: Tue 10 Feb 2026 20:00:46 +0000 Files and hashes: 1: XiklanRbiidoE85zKpbvsUmN5qA.roa (hash: 8135ww+Xdljchx0NgMI539w6J7mtMHiGCI+yUaoZKJc=) 2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: nTYLlFCnHT2uwouPoCjfh1CTcFcbDcixM3HI3IB1kjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:04:10:06:96:95:57:2b:80:a7:b3:1a:95:d7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Validity Not Before: Feb 9 20:00:46 2026 GMT Not After : Feb 10 20:00:46 2026 GMT Subject: CN=a8c9bd41b4a9e46f2dc68236fafbdc66cab1b934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:d9:f0:e9:42:2b:0a:2b:a2:d8:e1:8f:62: 2c:af:3e:63:9a:3e:5d:d9:ed:13:86:7e:66:a1:6e: d5:9d:e9:d9:d0:90:36:7f:95:03:5f:4a:94:d3:b3: a4:6c:3a:11:a5:1a:fb:d8:c8:45:a9:86:4c:00:a2: 8c:d7:b8:29:1e:70:91:d1:3b:8a:68:9b:52:d1:cc: c4:b9:07:9a:92:61:c6:53:e8:c6:b1:5e:48:8b:b8: 0b:99:6d:2f:3f:4e:3c:9b:c3:24:d3:91:ee:de:f4: 86:2e:5b:6a:cb:07:6d:6f:41:8a:5d:99:c4:95:bc: 54:a1:be:05:a7:0a:e1:2d:3e:90:71:d7:d4:05:e3: 3c:ec:f5:e5:98:e5:dc:1e:9f:d2:33:1c:0d:a2:6b: 30:ca:1e:06:cc:72:4d:a3:02:6f:04:ef:21:74:81: ce:c9:32:06:08:6c:11:42:ac:82:78:99:c4:88:ce: b6:70:6b:77:c0:b9:79:b1:2b:ac:fb:d5:38:46:45: 63:35:12:59:b1:fc:38:aa:c4:ec:bb:12:14:83:f8: b9:8e:a2:59:f0:aa:f8:dd:b0:58:ed:df:b0:47:b1: 3b:c5:c3:d9:40:1a:d8:e1:53:82:3f:b1:1f:ca:19: 0e:31:f3:f4:ba:33:a0:55:0b:9d:12:06:79:f1:cc: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:BD:41:B4:A9:E4:6F:2D:C6:82:36:FA:FB:DC:66:CA:B1:B9:34 X509v3 Authority Key Identifier: keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fb:ce:c5:ee:1d:a8:9e:c6:75:2c:e7:40:69:a8:e3:c2:5c: 52:1c:ad:90:1b:b3:8e:07:39:51:d0:b8:0f:9e:11:25:83:a8: 75:1b:ac:90:70:68:d4:bc:04:12:c2:fc:fc:48:a5:1a:53:43: f9:d6:1a:d9:e5:fb:9e:3e:4d:db:8c:b4:be:11:58:c9:42:8d: 7b:cf:c1:af:35:b4:3d:cd:d5:9a:69:72:36:16:e4:62:ea:5a: 62:51:b5:d1:fc:cf:85:02:8e:ea:f3:15:9f:d1:ab:6b:a5:44: d6:01:cf:39:ce:9a:ea:ac:67:bc:ab:2a:85:2c:b7:af:44:12: 60:22:6f:4f:8e:65:a8:d0:3c:c6:17:c4:e3:ce:06:7e:6b:d6: 83:8d:12:75:28:2d:fa:e2:e3:f2:9e:78:9b:a0:98:18:8f:3b: fa:88:30:29:03:cf:f0:1f:0a:84:4a:74:66:0f:24:bd:60:74: 94:60:ea:b4:a5:29:39:67:4f:ab:23:a2:86:ed:d6:36:98:21: 98:ee:11:f5:ad:7e:37:33:34:b2:3e:25:b6:41:a9:6e:11:ad: b5:7d:76:d4:35:0c:89:1f:5d:e3:76:e3:93:61:f0:01:29:ca: 5e:0a:24:1b:f7:34:91:1c:b5:53:24:3e:ae:55:9a:bb:a1:ad: ad:df:b3:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/gQQBpaVVyuAp7MaldeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx ZWU1MzcwHhcNMjYwMjA5MjAwMDQ2WhcNMjYwMjEwMjAwMDQ2WjAzMTEwLwYDVQQD EyhhOGM5YmQ0MWI0YTllNDZmMmRjNjgyMzZmYWZiZGM2NmNhYjFiOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnbZ8OlCKworotjhj2Isrz5jmj5d 2e0Thn5moW7VnenZ0JA2f5UDX0qU07OkbDoRpRr72MhFqYZMAKKM17gpHnCR0TuK aJtS0czEuQeakmHGU+jGsV5Ii7gLmW0vP048m8Mk05Hu3vSGLltqywdtb0GKXZnE lbxUob4FpwrhLT6QcdfUBeM87PXlmOXcHp/SMxwNomswyh4GzHJNowJvBO8hdIHO yTIGCGwRQqyCeJnEiM62cGt3wLl5sSus+9U4RkVjNRJZsfw4qsTsuxIUg/i5jqJZ 8Kr43bBY7d+wR7E7xcPZQBrY4VOCP7EfyhkOMfP0ujOgVQudEgZ58cx49wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjJvUG0qeRvLcaCNvr73GbKsbk0MB8GA1UdIwQY MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2 LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvvOxe4d qJ7GdSznQGmo48JcUhytkBuzjgc5UdC4D54RJYOodRuskHBo1LwEEsL8/EilGlND +dYa2eX7nj5N24y0vhFYyUKNe8/BrzW0Pc3VmmlyNhbkYupaYlG10fzPhQKO6vMV n9Gra6VE1gHPOc6a6qxnvKsqhSy3r0QSYCJvT45lqNA8xhfE484GfmvWg40SdSgt +uLj8p54m6CYGI87+ogwKQPP8B8KhEp0Zg8kvWB0lGDqtKUpOWdPqyOihu3WNpgh mO4R9a1+NzM0sj4ltkGpbhGttX121DUMiR9d43bjk2HwASnKXgokG/c0kRy1UyQ+ rlWau6Gtrd+zzQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:14 2026 by rpki-client