This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json) Hash identifier: ql3DvqoySITCOTV3luRgX3zFczONoIE2aAToGLuPxNA= Subject key identifier: E1:97:03:06:58:C2:E4:BC:FD:46:E8:BD:B7:61:41:FC:59:76:22:03 Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae Certificate serial: 019C43908A9E56D830132ED9A95EDF3FF62B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft Manifest number: 1607 Signing time: Mon 09 Feb 2026 18:01:11 +0000 Manifest this update: Mon 09 Feb 2026 18:01:11 +0000 Manifest next update: Tue 10 Feb 2026 18:01:11 +0000 Files and hashes: 1: 1n27rvaelRUykey6wf5ROwjIidI.roa (hash: KBBik8Julj24P9mvYdNU35DOMzPd5tmec1o6YPTRHDE=) 2: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: /Yr0pwc+v8Sxh8wcuaHkOQ34aIm7UlDbbJixZWh+MTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:8a:9e:56:d8:30:13:2e:d9:a9:5e:df:3f:f6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae Validity Not Before: Feb 9 18:01:11 2026 GMT Not After : Feb 10 18:01:11 2026 GMT Subject: CN=e197030658c2e4bcfd46e8bdb76141fc59762203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:a6:8c:ff:12:95:73:92:5e:a0:d5:19:66: 16:b8:16:b3:3d:ad:8b:77:3b:51:9c:33:f8:8b:d0: 66:8a:97:c1:44:7e:f8:05:45:84:9e:c3:7f:7b:00: 7d:4f:9f:7f:78:dd:5b:5b:12:42:04:ab:7d:45:7a: 46:65:d5:f3:f6:a3:53:08:1b:f6:b6:96:ac:0a:fe: ed:7c:51:70:3a:64:9f:f2:2c:b0:52:fe:64:c9:64: a4:56:65:a4:ab:eb:1a:26:7d:76:d7:a2:c3:4d:46: 89:82:87:07:fe:4b:2b:29:c4:d4:8d:f5:30:ea:8e: 31:67:b8:e8:c3:73:12:29:f4:8b:8b:49:49:15:43: 50:5e:cd:89:83:bc:43:96:2c:17:68:5e:ad:0e:d8: 96:ae:f0:9a:91:62:f1:9b:44:3e:52:a7:f7:e1:4e: e3:f7:d1:e4:b5:c2:e9:8f:35:41:09:e6:5c:14:23: 4a:43:0d:78:6c:ca:ca:78:34:c2:c8:f3:90:9f:c9: b7:67:61:33:21:59:bf:46:04:e8:b4:b2:e4:b8:cd: 9f:a1:5a:62:34:04:9b:95:db:05:14:b1:b0:88:e0: 2d:7e:00:b9:d8:70:d2:54:ae:d8:92:d9:cc:eb:a0: 77:a4:d4:b0:ca:c7:18:2b:45:bc:7f:6a:2d:ae:44: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:03:06:58:C2:E4:BC:FD:46:E8:BD:B7:61:41:FC:59:76:22:03 X509v3 Authority Key Identifier: keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ac:fa:c2:c9:ed:ac:0b:e9:11:a6:6a:8c:19:ab:17:46:3e: 0e:b3:87:81:65:20:61:34:a1:96:0b:f5:7a:a1:60:4a:86:0c: 94:f2:e4:12:45:9e:e3:fb:14:e7:1b:4e:0f:3d:f0:82:38:81: 56:ce:28:66:ef:ff:9c:33:e2:e1:fd:d4:01:9a:d5:eb:d9:e7: da:a4:6d:e6:ce:02:3a:ea:8f:ef:72:3a:5c:69:fb:bb:d0:3e: d3:49:4a:16:19:9f:1c:dd:e3:03:2f:78:6a:20:f9:78:c9:56: 2e:f7:71:79:1c:70:dc:0a:f2:a0:9a:e4:68:a3:33:7d:af:b7: 5e:cf:2e:7d:ee:09:4f:9e:a2:ec:78:37:bf:d8:9f:8f:8d:cc: 0b:37:83:ba:3d:79:83:35:5b:a4:ab:df:0b:04:2d:34:48:7c: cc:0a:80:1f:06:af:2d:64:5e:05:96:19:a6:1c:d7:e9:21:13: a3:aa:9e:90:3d:eb:80:6e:74:a7:8c:ad:a9:45:9c:4d:d2:ac: 14:0b:0b:8a:ee:c6:ac:86:b6:ad:cb:6c:83:5d:de:38:4b:27: 7d:62:01:81:3d:5d:eb:fb:ab:8e:b9:83:8f:93:ee:30:64:16: fa:25:ae:0e:4b:a1:79:fa:d2:18:03:56:3f:ba:70:26:ec:65: 64:e9:01:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIqeVtgwEy7ZqV7fP/YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2NkNDFkOWU2Y2NmODAzMDZjMWI0NmJkYzBiNTc3YjFl ZTJjYWUwHhcNMjYwMjA5MTgwMTExWhcNMjYwMjEwMTgwMTExWjAzMTEwLwYDVQQD EyhlMTk3MDMwNjU4YzJlNGJjZmQ0NmU4YmRiNzYxNDFmYzU5NzYyMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WmjP8SlXOSXqDVGWYWuBazPa2L dztRnDP4i9BmipfBRH74BUWEnsN/ewB9T59/eN1bWxJCBKt9RXpGZdXz9qNTCBv2 tpasCv7tfFFwOmSf8iywUv5kyWSkVmWkq+saJn1216LDTUaJgocH/ksrKcTUjfUw 6o4xZ7jow3MSKfSLi0lJFUNQXs2Jg7xDliwXaF6tDtiWrvCakWLxm0Q+Uqf34U7j 99HktcLpjzVBCeZcFCNKQw14bMrKeDTCyPOQn8m3Z2EzIVm/RgTotLLkuM2foVpi NASbldsFFLGwiOAtfgC52HDSVK7YktnM66B3pNSwyscYK0W8f2otrkTCEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGXAwZYwuS8/UbovbdhQfxZdiIDMB8GA1UdIwQY MBaAFER81B2ebM+AMGwbRr3AtXex7iyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWIt Yjk3ODM4YzhkNjU4LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWItYjk3ODM4YzhkNjU4 LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6z6wsnt rAvpEaZqjBmrF0Y+DrOHgWUgYTShlgv1eqFgSoYMlPLkEkWe4/sU5xtODz3wgjiB Vs4oZu//nDPi4f3UAZrV69nn2qRt5s4COuqP73I6XGn7u9A+00lKFhmfHN3jAy94 aiD5eMlWLvdxeRxw3AryoJrkaKMzfa+3Xs8ufe4JT56i7Hg3v9ifj43MCzeDuj15 gzVbpKvfCwQtNEh8zAqAHwavLWReBZYZphzX6SETo6qekD3rgG50p4ytqUWcTdKs FAsLiu7GrIa2rctsg13eOEsnfWIBgT1d6/urjrmDj5PuMGQW+iWuDkuhefrSGANW P7pwJuxlZOkBdQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:34 2026 by rpki-client