This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json) Hash identifier: 7jwe0wzi/FBLDsBQR3nsqzB5D7PD9moeZ+osGbD3Nu0= Subject key identifier: 3E:4F:5F:21:46:DB:C0:5E:00:CC:34:CE:47:7C:FD:A4:5F:15:37:4B Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97 Certificate serial: 019C432271518EA5F2AA4E31307AC006B1C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft Manifest number: 178A Signing time: Mon 09 Feb 2026 16:00:56 +0000 Manifest this update: Mon 09 Feb 2026 16:00:56 +0000 Manifest next update: Tue 10 Feb 2026 16:00:56 +0000 Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: UJe7PsanTNDj00N5FWWCJpM1WM7lsoe80JJOEmCdfb8=) 2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:71:51:8e:a5:f2:aa:4e:31:30:7a:c0:06:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97 Validity Not Before: Feb 9 16:00:56 2026 GMT Not After : Feb 10 16:00:56 2026 GMT Subject: CN=3e4f5f2146dbc05e00cc34ce477cfda45f15374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:08:a2:3e:d5:b1:ba:4c:62:92:40:8a:b0: ed:bf:2b:48:b6:13:b1:d6:52:99:fb:dd:bc:7f:d0: 69:a3:80:6e:dc:3d:d1:4e:d7:c2:25:1d:35:49:2f: 06:10:03:f2:f0:33:20:86:db:24:10:c2:3a:2c:be: f5:d1:30:a3:e9:34:98:44:26:c2:03:f1:8e:b0:ed: 70:f5:bf:b2:30:3f:d6:09:bf:cc:fb:0f:04:00:a8: bb:54:a0:8e:0e:0c:6f:03:cc:f8:dc:7a:5d:ea:19: 57:f8:ee:26:07:e8:f4:03:93:86:94:9e:ad:2a:d6: 53:b5:7f:c0:d3:49:df:7a:4e:f2:58:bf:9a:ea:2c: 8d:ed:cc:44:9d:9a:06:26:20:3a:80:41:eb:d7:61: 4c:19:e9:1d:f9:d0:60:7b:b2:f0:7a:ff:06:65:43: 64:3b:fa:1f:85:4e:d4:68:68:e0:5f:c2:65:dd:54: df:61:72:95:8f:af:aa:51:3c:7b:11:b3:86:c7:a5: 08:cc:07:b7:d4:dd:33:7a:2e:b5:61:42:e0:b0:79: 23:36:d9:7d:a9:0d:f1:3c:43:a1:09:36:c1:ac:f6: 64:89:31:2e:71:e7:8c:8f:69:30:0a:b1:6d:8f:47: fb:9d:df:6f:7d:2e:7d:f6:d5:33:6c:c2:de:ca:35: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4F:5F:21:46:DB:C0:5E:00:CC:34:CE:47:7C:FD:A4:5F:15:37:4B X509v3 Authority Key Identifier: keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:bd:90:9f:5b:68:54:ac:69:93:58:62:17:03:3c:9a:d5:10: 96:47:32:25:ab:b0:4c:ff:d2:e3:7e:db:b7:76:ac:b6:fd:ee: 3c:68:9b:a7:2f:4d:36:08:b2:c1:8d:89:48:b9:df:2e:66:08: 34:b0:28:bd:12:a0:ff:8c:12:f8:d3:a8:0b:9a:69:af:b6:6e: dd:ea:0d:4e:8e:d8:1b:37:eb:87:30:4e:84:b9:16:c2:b2:af: 16:0d:50:16:bf:f0:b0:f0:9c:c0:36:d0:24:ed:6f:39:25:92: 0c:f5:6b:f7:80:19:4d:fc:a7:60:aa:10:b5:1b:05:0e:5e:44: 8c:58:b6:40:84:a1:74:24:bd:a6:64:e2:df:39:d4:2d:6e:87: 6c:49:b4:92:76:ee:16:3a:2a:38:4d:4e:9a:30:77:54:a2:e5: 1f:4d:67:0b:fe:46:d9:58:e3:79:6b:fd:ec:4c:33:88:13:4d: e9:96:57:d7:b7:fe:4f:49:97:7f:fe:a5:5b:70:ab:74:75:d8: 0d:73:29:ee:d9:19:a0:33:1c:ee:3e:b5:6b:bb:41:a3:93:87: 39:f9:68:57:b3:b9:da:56:c7:ae:fc:5d:29:59:38:51:58:98: 3e:40:6b:57:ef:f1:1e:08:07:45:8b:09:94:10:c8:0d:9a:cc: cc:81:26:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInFRjqXyqk4xMHrABrHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDVjYzY5YjRkMWVlMTUxYjUwMjc0NDJmYmJhOTQ0YzI3 NGRmOTcwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD EygzZTRmNWYyMTQ2ZGJjMDVlMDBjYzM0Y2U0NzdjZmRhNDVmMTUzNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9oIoj7VsbpMYpJAirDtvytIthOx 1lKZ+928f9Bpo4Bu3D3RTtfCJR01SS8GEAPy8DMghtskEMI6LL710TCj6TSYRCbC A/GOsO1w9b+yMD/WCb/M+w8EAKi7VKCODgxvA8z43Hpd6hlX+O4mB+j0A5OGlJ6t KtZTtX/A00nfek7yWL+a6iyN7cxEnZoGJiA6gEHr12FMGekd+dBge7Lwev8GZUNk O/ofhU7UaGjgX8Jl3VTfYXKVj6+qUTx7EbOGx6UIzAe31N0zei61YULgsHkjNtl9 qQ3xPEOhCTbBrPZkiTEuceeMj2kwCrFtj0f7nd9vfS599tUzbMLeyjVpcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5PXyFG28BeAMw0zkd8/aRfFTdLMB8GA1UdIwQY MBaAFB5FzGm00e4VG1AnRC+7qUTCdN+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUt YzI0NDNhYTU0N2UyLzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUtYzI0NDNhYTU0N2Uy LzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL2Qn1to VKxpk1hiFwM8mtUQlkcyJauwTP/S437bt3astv3uPGibpy9NNgiywY2JSLnfLmYI NLAovRKg/4wS+NOoC5ppr7Zu3eoNTo7YGzfrhzBOhLkWwrKvFg1QFr/wsPCcwDbQ JO1vOSWSDPVr94AZTfynYKoQtRsFDl5EjFi2QIShdCS9pmTi3znULW6HbEm0knbu FjoqOE1OmjB3VKLlH01nC/5G2VjjeWv97EwziBNN6ZZX17f+T0mXf/6lW3CrdHXY DXMp7tkZoDMc7j61a7tBo5OHOfloV7O52lbHrvxdKVk4UViYPkBrV+/xHggHRYsJ lBDIDZrMzIEmig== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:41 2026 by rpki-client