This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json) Hash identifier: ehzgc5uymRAQ2wDkWYj2MLp6AekmIeEJY9RSuN8Kc2E= Subject key identifier: 0A:7B:A7:B5:0A:AD:B1:B1:A7:4E:81:99:84:93:69:C2:08:3B:E4:4F Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Certificate serial: 019C41A161F2A6B782DCBEDAF5C8991D8E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft Manifest number: 08D5 Signing time: Mon 09 Feb 2026 09:00:21 +0000 Manifest this update: Mon 09 Feb 2026 09:00:21 +0000 Manifest next update: Tue 10 Feb 2026 09:00:21 +0000 Files and hashes: 1: BsUK6q4arJHbcNcyqOOvwteXiS0.roa (hash: mH5FcSTjVNeSVMSPqpSkXYdFczl7hZ5yzWhcRGubmnk=) 2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: eTv3YLHsG/l/geFe5p8DEWzpnFDK7o/U5qkY/faQ3KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:61:f2:a6:b7:82:dc:be:da:f5:c8:99:1d:8e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Validity Not Before: Feb 9 09:00:21 2026 GMT Not After : Feb 10 09:00:21 2026 GMT Subject: CN=0a7ba7b50aadb1b1a74e8199849369c2083be44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:cf:16:2c:17:11:76:48:63:93:7b:ab:d8: a0:af:a3:54:7f:cf:71:23:a7:bf:d6:63:e3:3b:23: 37:19:85:37:3f:b8:66:04:09:1d:d0:83:6f:83:5c: 39:01:61:fe:33:50:f5:96:20:47:0f:a3:7f:24:13: 33:ef:96:bb:5d:34:99:ab:48:41:52:81:11:5e:f7: b6:9a:df:ea:e2:87:3f:ef:a2:8b:cc:30:14:16:54: 08:2d:7b:f7:ef:c7:da:7d:ee:13:4b:6c:64:93:6d: 20:49:cc:2f:a7:cf:76:6a:5a:c7:c7:8f:6e:c6:0b: 2d:64:fd:47:57:b4:2c:04:60:96:6e:40:bc:61:92: 3c:a9:81:48:39:d6:91:63:00:f2:79:a4:36:12:02: 50:0a:e6:0a:8d:99:59:99:30:1b:97:ab:8b:64:75: a9:e4:0c:ed:b5:58:d2:f7:61:cd:76:78:1f:bc:73: bd:dd:dd:bb:23:f1:ac:b8:6d:29:1f:ea:3d:4f:f8: ee:04:36:31:ca:9a:a1:bb:51:42:c1:f9:cc:9a:33: a8:b5:7e:c5:ed:16:a6:91:66:14:cc:1e:3c:1b:7c: 1b:71:3d:b6:db:c4:93:5c:76:fa:92:b4:81:96:08: 9c:ef:72:1a:a5:fd:9c:a7:8f:df:86:d5:ad:e2:cb: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7B:A7:B5:0A:AD:B1:B1:A7:4E:81:99:84:93:69:C2:08:3B:E4:4F X509v3 Authority Key Identifier: keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cf:3f:4f:62:68:dd:f1:58:ae:c7:16:f6:0c:6d:2a:6d:01: b2:da:e5:3d:b3:22:0c:e8:51:8d:fb:d5:fc:c5:bd:56:db:56: 23:67:4c:0d:11:ad:49:1e:2a:0e:8d:bf:15:02:1c:cc:29:78: bc:15:d2:ec:94:f7:a7:9a:04:ff:19:35:e4:1e:44:e8:33:62: 1f:a2:c3:f8:2c:44:8e:10:13:59:d0:e2:a9:35:93:38:46:6d: fd:0c:aa:a8:94:b1:1b:4a:57:80:10:68:cf:06:8b:15:e0:42: 8d:c7:c7:72:99:28:bf:bf:07:67:55:76:d5:be:a1:dd:5b:42: f3:35:86:71:8c:46:c2:70:59:ae:e6:22:b7:1a:1d:7b:4c:56: 23:f9:48:59:e4:fb:7b:1d:11:e1:e0:fe:f5:a1:44:85:83:00: a6:70:c2:17:cb:4e:ff:27:70:7b:4c:32:fc:cc:ae:e5:46:65: bf:d9:78:1b:04:8e:3b:c1:cf:52:3f:8b:25:3d:61:39:c4:50: 53:68:8a:cb:2d:c1:64:8b:16:b4:94:71:8d:27:68:c5:cf:53: 58:7f:97:24:75:61:9e:a8:db:d9:5f:38:3a:b9:47:54:e6:a2: 6e:91:49:b0:e9:e3:29:a4:75:6d:ac:42:0f:b4:cb:39:f8:10: b7:db:ee:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWHypreC3L7a9ciZHY5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODVlMDVkODA1OTJjNmNmMTEzMjBlYjUwMjljYWMwNGE0 ZDliYjQwHhcNMjYwMjA5MDkwMDIxWhcNMjYwMjEwMDkwMDIxWjAzMTEwLwYDVQQD EygwYTdiYTdiNTBhYWRiMWIxYTc0ZTgxOTk4NDkzNjljMjA4M2JlNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BPPFiwXEXZIY5N7q9igr6NUf89x I6e/1mPjOyM3GYU3P7hmBAkd0INvg1w5AWH+M1D1liBHD6N/JBMz75a7XTSZq0hB UoERXve2mt/q4oc/76KLzDAUFlQILXv378fafe4TS2xkk20gScwvp892alrHx49u xgstZP1HV7QsBGCWbkC8YZI8qYFIOdaRYwDyeaQ2EgJQCuYKjZlZmTAbl6uLZHWp 5AzttVjS92HNdngfvHO93d27I/GsuG0pH+o9T/juBDYxypqhu1FCwfnMmjOotX7F 7RamkWYUzB48G3wbcT2228STXHb6krSBlgic73Iapf2cp4/fhtWt4svMGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp7p7UKrbGxp06BmYSTacIIO+RPMB8GA1UdIwQY MBaAFIaF4F2AWSxs8RMg61ApysBKTZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAt NjhlZjI0Y2Y1ZWY5LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAtNjhlZjI0Y2Y1ZWY5 LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc8/T2Jo 3fFYrscW9gxtKm0BstrlPbMiDOhRjfvV/MW9VttWI2dMDRGtSR4qDo2/FQIczCl4 vBXS7JT3p5oE/xk15B5E6DNiH6LD+CxEjhATWdDiqTWTOEZt/QyqqJSxG0pXgBBo zwaLFeBCjcfHcpkov78HZ1V21b6h3VtC8zWGcYxGwnBZruYitxode0xWI/lIWeT7 ex0R4eD+9aFEhYMApnDCF8tO/ydwe0wy/Myu5UZlv9l4GwSOO8HPUj+LJT1hOcRQ U2iKyy3BZIsWtJRxjSdoxc9TWH+XJHVhnqjb2V84OrlHVOaibpFJsOnjKaR1baxC D7TLOfgQt9vuhw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:30 2026 by rpki-client