This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json) Hash identifier: IXwFqX/woGneerSxl9o1B//xhFWcHv9QnXtKZ89hWLY= Subject key identifier: F5:1B:6A:5E:E5:72:B9:7C:11:00:CD:B8:F1:1E:82:D8:4B:7B:95:A8 Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Certificate serial: 019C41A20393AEDFC08B085460890F24EC95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft Manifest number: 16DE Signing time: Mon 09 Feb 2026 09:01:02 +0000 Manifest this update: Mon 09 Feb 2026 09:01:02 +0000 Manifest next update: Tue 10 Feb 2026 09:01:02 +0000 Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: kwcSDojcB+BtVupX6V5Vr6/2tWq3gEszNBAFn6Ddnvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:03:93:ae:df:c0:8b:08:54:60:89:0f:24:ec:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f Validity Not Before: Feb 9 09:01:02 2026 GMT Not After : Feb 10 09:01:02 2026 GMT Subject: CN=f51b6a5ee572b97c1100cdb8f11e82d84b7b95a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:9f:20:1d:60:f5:c1:3a:2c:a2:16:93:8a: 80:ae:d0:c5:78:9e:7e:4a:b3:e5:26:a7:ec:bb:39: a9:fb:ef:f9:79:d9:4f:c4:46:77:eb:b9:77:01:eb: ce:a8:6b:c1:b1:b9:6c:8c:f4:76:79:52:e5:90:1e: 7e:2b:2b:3c:d9:f2:48:7c:e3:c1:7b:6e:83:5e:cd: 9f:cf:f0:1f:70:71:37:7d:14:cb:33:5f:36:36:ff: 3a:a8:66:66:13:08:16:d7:79:c5:fc:a9:db:04:0f: 3f:39:a9:5f:ba:8f:59:eb:d1:46:a9:e8:20:92:08: c4:41:f1:a0:af:60:bf:1a:bd:fd:03:fd:ef:a8:f2: cb:6c:da:cb:6e:f4:04:a1:ba:19:c0:c6:f4:f3:9a: 0e:8b:8f:b9:bb:5d:b8:bc:c1:45:25:ac:21:5a:d9: de:39:f7:38:02:e3:f4:3b:ca:7d:60:e5:1e:55:f9: 4e:f5:9d:f8:6e:27:45:24:2a:c4:42:14:77:48:66: d4:5a:3c:20:65:7e:dc:78:a2:92:7f:37:c0:5f:db: 38:6b:cc:c7:e9:d9:22:f0:07:98:f3:2d:0b:88:a8: 1b:c9:4e:0e:74:a6:29:f7:01:9a:c4:db:6d:b1:75: 71:15:81:d3:20:b2:50:e4:8c:12:a5:bd:97:dd:0c: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:6A:5E:E5:72:B9:7C:11:00:CD:B8:F1:1E:82:D8:4B:7B:95:A8 X509v3 Authority Key Identifier: keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5d:b3:99:69:96:60:77:80:25:9a:36:dc:76:62:93:93:16: a2:93:7f:ed:fd:9d:fb:dc:4b:ca:ea:59:92:f5:ad:ee:7e:01: c6:26:eb:fc:37:60:b5:5d:07:5e:65:ed:c8:10:ea:14:14:bd: ad:41:db:11:c3:6f:d8:99:c3:c5:d8:1f:91:13:8e:21:86:34: af:60:92:34:b9:94:59:44:01:e1:3a:49:26:ba:47:36:8f:5d: 2c:ea:e7:9a:3d:43:ee:a8:fc:ba:10:af:9e:71:1a:48:21:19: 56:82:cd:b2:af:b2:d8:f0:86:b4:d5:21:38:eb:9c:f1:3b:6d: 72:f1:9e:44:f4:b2:25:92:6c:ad:c5:fe:4d:4c:46:72:87:a2: 3b:97:ea:01:7e:47:26:28:76:49:e5:f2:f9:de:d0:c4:dd:7f: c3:f8:db:aa:e5:53:a2:a1:37:f1:55:f2:71:19:26:2e:9d:f0: ee:1b:c8:f8:c4:44:2d:3e:c1:8b:d6:63:4c:6d:7f:91:a7:48: 1a:a3:6d:2d:85:c2:c0:22:83:da:44:3f:84:af:76:a4:00:22: 18:85:7d:51:57:0c:70:c8:8b:f8:1f:dc:d1:37:63:1f:99:cb: 38:64:07:30:9e:0e:2c:78:73:bd:71:a8:32:09:a1:b2:9e:07: 65:cf:45:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogOTrt/AiwhUYIkPJOyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOGNkNWJkYTM0NjEwYWRhZmVkMWZlZDQzYTIyMzQ1ZjA3 NjdlN2YwHhcNMjYwMjA5MDkwMTAyWhcNMjYwMjEwMDkwMTAyWjAzMTEwLwYDVQQD EyhmNTFiNmE1ZWU1NzJiOTdjMTEwMGNkYjhmMTFlODJkODRiN2I5NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA2fIB1g9cE6LKIWk4qArtDFeJ5+ SrPlJqfsuzmp++/5edlPxEZ367l3AevOqGvBsblsjPR2eVLlkB5+Kys82fJIfOPB e26DXs2fz/AfcHE3fRTLM182Nv86qGZmEwgW13nF/KnbBA8/Oalfuo9Z69FGqegg kgjEQfGgr2C/Gr39A/3vqPLLbNrLbvQEoboZwMb085oOi4+5u124vMFFJawhWtne Ofc4AuP0O8p9YOUeVflO9Z34bidFJCrEQhR3SGbUWjwgZX7ceKKSfzfAX9s4a8zH 6dki8AeY8y0LiKgbyU4OdKYp9wGaxNttsXVxFYHTILJQ5IwSpb2X3QySJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUbal7lcrl8EQDNuPEegthLe5WoMB8GA1UdIwQY MBaAFB+M1b2jRhCtr+0f7UOiI0Xwdn5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUt ZWU2ZGJmYTk4ZDJlLzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUtZWU2ZGJmYTk4ZDJl LzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK12zmWmW YHeAJZo23HZik5MWopN/7f2d+9xLyupZkvWt7n4Bxibr/DdgtV0HXmXtyBDqFBS9 rUHbEcNv2JnDxdgfkROOIYY0r2CSNLmUWUQB4TpJJrpHNo9dLOrnmj1D7qj8uhCv nnEaSCEZVoLNsq+y2PCGtNUhOOuc8TttcvGeRPSyJZJsrcX+TUxGcoeiO5fqAX5H Jih2SeXy+d7QxN1/w/jbquVToqE38VXycRkmLp3w7hvI+MRELT7Bi9ZjTG1/kadI GqNtLYXCwCKD2kQ/hK92pAAiGIV9UVcMcMiL+B/c0TdjH5nLOGQHMJ4OLHhzvXGo Mgmhsp4HZc9FJw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:49 2026 by rpki-client