This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json) Hash identifier: hOOWKtPzXZ43SxghFD/cT4qhJ9R9gkzldbKBb6WA7/Q= Subject key identifier: 22:2F:23:19:A7:0B:63:A9:17:0D:CB:20:2B:C4:C4:B3:D0:BF:02:A8 Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664 Certificate serial: 019C438FE722288DAE8E84EFF884C9AE143F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft Manifest number: 05D6 Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: L+YRNRU03iLMoSDlKdDOXsaHRuH0pNIASycJ18yT0E4=) 2: YxHsQaRfuH9U7T2oKb-FkpHHoo4.roa (hash: pk3xXRT/YI5ZZlRdgZc1sONUJsTQ601Dr7np29n/iyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e7:22:28:8d:ae:8e:84:ef:f8:84:c9:ae:14:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=222f2319a70b63a9170dcb202bc4c4b3d0bf02a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:76:d8:df:62:84:fe:38:48:48:77:f7:49: 72:46:64:fd:77:7f:e5:f7:de:42:dd:40:25:22:41: 3e:e6:d7:1a:b7:86:c8:73:65:00:14:92:f6:77:e2: a7:95:a8:5d:27:71:bb:62:50:7a:98:8e:37:39:b2: fd:95:72:22:04:2e:de:07:53:2f:4d:9c:10:c5:49: 55:f6:60:20:42:9d:0d:c6:33:4d:ed:a8:f6:b8:ce: a6:8e:fc:13:25:7f:d1:b9:f1:26:b1:de:2e:78:c0: 6a:43:f8:67:62:04:35:e2:6c:c9:11:f1:9a:65:84: ef:3c:f2:d0:06:b0:59:1d:20:b6:e2:fc:fd:b5:bd: 32:88:5a:ac:27:a8:f5:f4:ef:7e:81:94:ca:d4:10: 38:2d:94:46:82:9c:1a:e7:5b:20:ac:e2:76:0d:30: 54:c9:3a:e2:1b:4d:6a:a6:3d:a6:76:a2:e7:bb:c2: 8c:ce:2a:b8:fc:1d:35:49:92:c4:25:07:45:bb:d9: ea:7f:5e:c3:ef:f2:67:1e:97:6a:d5:2e:b5:6c:93: 38:20:75:e4:70:e6:d1:89:d1:47:1c:e2:e0:46:85: 06:04:ac:86:02:b3:e1:df:22:00:33:04:27:3d:04: 15:a6:60:14:5b:80:e4:2c:60:2f:6d:f9:4f:40:1f: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:23:19:A7:0B:63:A9:17:0D:CB:20:2B:C4:C4:B3:D0:BF:02:A8 X509v3 Authority Key Identifier: keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d3:d6:94:c6:56:a3:01:ef:7a:24:7b:d3:c4:0a:0b:f7:4d: 63:b8:85:26:d3:66:45:de:b2:aa:27:b0:b3:d8:ee:4a:ca:ea: 31:c7:8c:29:47:bf:86:72:95:62:51:93:37:fe:fe:d0:36:96: 6c:89:ad:26:b2:26:09:8e:72:30:1b:d1:8e:c3:9a:90:f9:6a: 41:2b:38:7f:10:f1:1f:5b:44:35:bd:91:f8:f0:9c:d0:c9:ec: a8:62:0b:94:fb:d5:60:ef:86:c2:71:30:44:9a:0f:2b:0e:91: 27:44:ce:47:b3:e3:0c:7d:5e:27:90:1e:28:8e:e8:7b:be:5b: 95:6f:23:08:bc:7d:b4:81:e2:09:cf:6d:d8:dc:2f:a5:a3:ae: 1b:52:c1:78:23:eb:ed:7a:9f:50:3e:a3:6d:60:df:55:6c:87: 72:48:2e:0e:59:32:ee:26:a2:70:46:10:ac:74:f5:a0:72:3a: 3b:a1:89:fa:e5:de:55:19:88:b0:39:7c:17:92:eb:fd:fe:02: 34:fb:a1:4c:11:1b:15:d7:8d:5c:f0:42:0c:53:04:b6:4d:0a: 2c:f9:7b:11:52:e7:f0:02:fb:ea:b2:54:bf:e9:6e:d6:e4:d9: 26:4d:f2:29:0b:85:c5:e9:bb:b4:5d:9d:63:3c:03:d3:09:ea: 88:de:61:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+ciKI2ujoTv+ITJrhQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTRiODA3MjM5MjFjZGQ1MWRhNTMzMjVmMTJiM2RiYzY3 ODI2NjQwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD EygyMjJmMjMxOWE3MGI2M2E5MTcwZGNiMjAyYmM0YzRiM2QwYmYwMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUd22N9ihP44SEh390lyRmT9d3/l 995C3UAlIkE+5tcat4bIc2UAFJL2d+KnlahdJ3G7YlB6mI43ObL9lXIiBC7eB1Mv TZwQxUlV9mAgQp0NxjNN7aj2uM6mjvwTJX/RufEmsd4ueMBqQ/hnYgQ14mzJEfGa ZYTvPPLQBrBZHSC24vz9tb0yiFqsJ6j19O9+gZTK1BA4LZRGgpwa51sgrOJ2DTBU yTriG01qpj2mdqLnu8KMziq4/B01SZLEJQdFu9nqf17D7/JnHpdq1S61bJM4IHXk cObRidFHHOLgRoUGBKyGArPh3yIAMwQnPQQVpmAUW4DkLGAvbflPQB+PtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIvIxmnC2OpFw3LICvExLPQvwKoMB8GA1UdIwQY MBaAFB5UuAcjkhzdUdpTMl8Ss9vGeCZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWIt ZGU4MDc5MWExMzg2LzEvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NmEzOGMtNWQ3My00MmI0LWFmZWItZGU4MDc5MWExMzg2 LzEvSGxTNEJ5T1NITjFSMmxNeVh4S3oyOFo0Sm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNPWlMZW owHveiR708QKC/dNY7iFJtNmRd6yqiews9juSsrqMceMKUe/hnKVYlGTN/7+0DaW bImtJrImCY5yMBvRjsOakPlqQSs4fxDxH1tENb2R+PCc0MnsqGILlPvVYO+GwnEw RJoPKw6RJ0TOR7PjDH1eJ5AeKI7oe75blW8jCLx9tIHiCc9t2NwvpaOuG1LBeCPr 7XqfUD6jbWDfVWyHckguDlky7iaicEYQrHT1oHI6O6GJ+uXeVRmIsDl8F5Lr/f4C NPuhTBEbFdeNXPBCDFMEtk0KLPl7EVLn8AL76rJUv+lu1uTZJk3yKQuFxem7tF2d YzwD0wnqiN5huQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:36 2026 by rpki-client