This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json) Hash identifier: 5bDDSR63TMOHLpjjKCf2ocN3SgOMWeDD78Hny7bQDdU= Subject key identifier: 5E:4E:00:1A:BD:3D:BF:56:43:3B:A8:8D:5B:A4:2A:35:92:16:E8:AA Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Certificate serial: 019C4322CAF4F40BB2A17915EF7BFB58AF51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft Manifest number: 0CDA Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: S0rS7M0jHgECEyRtKN3fnx6OzNVewzCPNYTzwpEaUo8=) 2: wa_X0Ztk6gGA-F3SYbw7eJ_Wsaw.roa (hash: nkKfnaGlzdXn24zbAJ05PRFLv1A+anErfAYzvfBWFcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ca:f4:f4:0b:b2:a1:79:15:ef:7b:fb:58:af:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=5e4e001abd3dbf56433ba88d5ba42a359216e8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:fd:02:73:04:7c:ad:39:bd:cf:73:3b:f1: cc:d4:63:ad:2e:5f:81:ad:0e:4f:d7:68:a9:f1:c9: 12:31:86:c1:70:1c:9a:c2:16:e6:a7:ab:72:82:79: 0c:f8:25:b7:b2:bc:8d:dd:66:e3:4f:de:fc:5b:ed: 35:6e:86:5a:89:ae:48:ca:b3:06:55:6f:85:bb:27: 06:25:f8:db:09:ec:64:ba:ca:7b:b7:7e:0a:32:f4: 20:8a:b5:02:19:9d:07:c5:b8:1a:c2:aa:f5:bd:a1: 67:54:b2:29:59:71:58:65:bc:0a:95:d1:ab:2f:3d: 81:84:fe:40:81:f5:b1:d9:e3:e4:33:4e:0b:bf:93: 6c:2f:fb:a1:5b:00:18:20:c0:31:16:df:d3:de:8d: a9:19:00:e8:28:fb:33:02:12:48:e1:a2:45:68:bb: 30:87:98:65:e8:4c:f2:63:e5:92:34:34:59:89:8e: d9:18:b6:f6:c1:d5:0a:ad:9f:53:58:61:e8:74:f2: e6:ac:00:b6:3d:e5:57:ff:00:77:2f:77:02:e4:a8: 5d:bb:32:3a:c2:6e:cc:84:7f:24:dc:d0:f4:e5:e6: 07:02:7a:88:8c:24:d4:8b:6c:7c:3a:1d:26:08:b3: db:d2:7b:8c:7e:47:da:fc:37:e6:35:02:2e:4c:dd: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4E:00:1A:BD:3D:BF:56:43:3B:A8:8D:5B:A4:2A:35:92:16:E8:AA X509v3 Authority Key Identifier: keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4b:0e:62:ae:77:96:e5:6a:93:55:4b:20:09:97:84:7e:8b: 5c:ef:42:f3:9e:13:7c:61:0a:32:fa:b4:c4:dc:0b:29:bb:30: 46:ed:7f:fa:31:94:25:d3:e1:38:0f:25:27:62:ca:1b:f9:79: 50:15:6a:e2:ad:d6:03:dd:c5:11:63:45:fa:4c:9b:8b:80:92: 9d:61:00:3b:02:b1:a3:e6:f7:3e:bd:fb:45:10:a1:d8:67:f4: 9f:51:1f:aa:78:2f:2c:78:02:1f:64:b4:2a:2c:b3:59:90:97: f0:a3:7b:b7:10:60:bb:57:b1:06:2a:2d:9b:0b:1f:08:ba:a3: 3a:ac:3c:03:93:c2:91:12:2d:9c:c2:62:03:44:d2:0c:d2:ff: 85:8b:d5:fa:ac:85:a8:04:bd:15:3d:3c:dd:6f:f5:f4:cc:5c: 80:8e:42:07:d3:9e:52:10:72:7e:91:d3:04:d9:bf:75:44:3f: 84:1e:0b:bd:f3:dd:c5:a4:25:cd:a3:14:dd:aa:ed:ea:34:43: 0f:ef:4f:96:66:0d:67:fa:12:47:bd:16:4d:ca:83:b7:57:c4: db:52:8d:68:da:e2:0a:4a:5f:e2:11:f8:b2:ad:a2:f0:a0:50: b5:07:a9:cf:66:43:68:21:67:49:24:90:9d:a4:cd:36:3a:37: 01:12:42:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsr09AuyoXkV73v7WK9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1 ZWM3YzIwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD Eyg1ZTRlMDAxYWJkM2RiZjU2NDMzYmE4OGQ1YmE0MmEzNTkyMTZlOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcX9AnMEfK05vc9zO/HM1GOtLl+B rQ5P12ip8ckSMYbBcByawhbmp6tygnkM+CW3sryN3WbjT978W+01boZaia5IyrMG VW+FuycGJfjbCexkusp7t34KMvQgirUCGZ0Hxbgawqr1vaFnVLIpWXFYZbwKldGr Lz2BhP5AgfWx2ePkM04Lv5NsL/uhWwAYIMAxFt/T3o2pGQDoKPszAhJI4aJFaLsw h5hl6EzyY+WSNDRZiY7ZGLb2wdUKrZ9TWGHodPLmrAC2PeVX/wB3L3cC5KhduzI6 wm7MhH8k3ND05eYHAnqIjCTUi2x8Oh0mCLPb0nuMfkfa/DfmNQIuTN2qvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5OABq9Pb9WQzuojVukKjWSFuiqMB8GA1UdIwQY MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3 LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHksOYq53 luVqk1VLIAmXhH6LXO9C854TfGEKMvq0xNwLKbswRu1/+jGUJdPhOA8lJ2LKG/l5 UBVq4q3WA93FEWNF+kybi4CSnWEAOwKxo+b3Pr37RRCh2Gf0n1EfqngvLHgCH2S0 KiyzWZCX8KN7txBgu1exBiotmwsfCLqjOqw8A5PCkRItnMJiA0TSDNL/hYvV+qyF qAS9FT083W/19MxcgI5CB9OeUhByfpHTBNm/dUQ/hB4LvfPdxaQlzaMU3art6jRD D+9PlmYNZ/oSR70WTcqDt1fE21KNaNriCkpf4hH4sq2i8KBQtQepz2ZDaCFnSSSQ naTNNjo3ARJC1g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:12 2026 by rpki-client