This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft File: hoRh4GD99IzUHTOtknHIB9Qk60I.mft (raw, json) Hash identifier: c+EBBDMSbuxZjb+CbrgbplR15qo7xGIcE6Llz1mhDT4= Subject key identifier: 2F:01:F6:D1:30:66:42:F1:C8:CB:CF:0E:41:A0:65:EE:A1:37:1D:1E Authority key identifier: 86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42 Certificate issuer: /CN=868461e060fdf48cd41d33ad9271c807d424eb42 Certificate serial: 019C42EB9F7FC2E9F018AD997DFCDD9C8475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft Manifest number: 0335 Signing time: Mon 09 Feb 2026 15:01:03 +0000 Manifest this update: Mon 09 Feb 2026 15:01:03 +0000 Manifest next update: Tue 10 Feb 2026 15:01:03 +0000 Files and hashes: 1: IyUD0cTbm163_nE6Z_KQkHMo9a0.roa (hash: ckmuLvsLe1WHUbDkzeJOW8KVL9BpPwjboxRuotk+r7Y=) 2: hoRh4GD99IzUHTOtknHIB9Qk60I.crl (hash: pgwa3Pxsq2ovJeJ/GqCk1sR1KoevmOXpJ2S3dI2CrHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9f:7f:c2:e9:f0:18:ad:99:7d:fc:dd:9c:84:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868461e060fdf48cd41d33ad9271c807d424eb42 Validity Not Before: Feb 9 15:01:03 2026 GMT Not After : Feb 10 15:01:03 2026 GMT Subject: CN=2f01f6d1306642f1c8cbcf0e41a065eea1371d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:95:9e:a0:44:73:13:e4:99:c6:2c:b1:b8: 00:20:c5:fa:e8:85:09:55:12:2c:f5:8a:e6:a7:45: 31:09:10:80:3a:f2:7d:d3:ef:b7:ec:43:fb:59:c0: 15:9d:35:40:b4:76:8b:f8:b0:1a:24:db:07:68:79: 56:d1:a8:fe:33:94:e2:6e:6d:e3:be:4c:23:39:3b: b9:45:0a:8e:1f:31:8c:b1:3b:c4:e5:82:ce:6f:b1: 0a:6c:de:fb:61:b5:2b:d7:44:b0:b1:76:45:3d:bf: 17:f1:6c:f9:22:2b:73:a2:73:ba:17:44:b6:32:03: 20:ae:0a:61:da:3a:18:dc:7b:f0:15:85:26:36:f0: 9b:26:7b:ea:8f:97:e7:f4:84:1a:9b:59:0c:b9:b3: 5a:a5:26:b5:f0:6b:ea:b4:14:fd:c8:99:59:eb:b2: fb:68:db:64:fc:1a:7d:ce:8a:c1:e3:34:16:b2:b9: 36:1f:13:a1:bb:04:96:31:90:fc:b1:58:c7:19:65: c6:11:39:45:be:30:38:19:c0:92:5d:e7:1f:45:e4: 27:a4:70:04:ae:10:df:d1:28:89:75:f9:a4:d3:c0: 29:41:23:65:d1:25:f2:60:05:d5:34:40:e1:0b:b2: 66:d3:97:81:e8:d7:e3:6c:23:c0:0d:cf:d6:b5:c2: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:F6:D1:30:66:42:F1:C8:CB:CF:0E:41:A0:65:EE:A1:37:1D:1E X509v3 Authority Key Identifier: keyid:86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:76:fb:1a:63:d2:aa:84:ad:b1:a6:94:d7:a7:bb:06:60:ef: 3b:1a:d6:d5:59:93:a0:de:58:29:c7:55:07:01:cf:ee:b0:5a: ed:36:65:34:8a:d5:b7:8d:e5:c3:a3:a8:cf:e1:59:5d:7c:a5: c7:b3:95:3a:93:1a:b3:e1:08:f0:68:fd:78:09:28:4d:f1:97: 6f:d4:26:7f:6a:d3:e3:c3:3f:8e:a5:eb:1c:97:47:cc:d3:ee: 64:c8:70:d6:30:9a:de:14:9f:93:10:88:22:d9:b5:b6:b0:5e: ba:6f:24:6f:c8:42:88:8e:0f:ab:76:5f:b3:41:68:ea:3c:9f: f8:42:3b:64:22:f5:e0:7f:3f:2b:70:f3:11:35:0d:03:76:1a: b8:13:75:ec:41:57:77:77:ce:f2:d3:55:3a:07:5e:fd:49:f6: e8:22:af:c5:92:d0:fa:07:97:70:83:7e:b2:1e:65:e8:93:cc: be:d9:70:9f:6f:a4:da:5c:a6:0c:e0:6e:40:90:aa:7d:1a:e1: cc:08:22:0c:19:fd:91:5a:47:78:f5:5f:78:49:e3:84:9e:d0: 04:84:70:b6:57:48:b2:e3:0c:70:4e:02:d2:f2:1a:de:13:6e: 7e:b5:2c:50:df:73:cb:73:c8:46:a8:1d:c2:40:ba:ac:c2:93: b1:16:57:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC659/wunwGK2ZffzdnIR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODQ2MWUwNjBmZGY0OGNkNDFkMzNhZDkyNzFjODA3ZDQy NGViNDIwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD EygyZjAxZjZkMTMwNjY0MmYxYzhjYmNmMGU0MWEwNjVlZWExMzcxZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkmVnqBEcxPkmcYssbgAIMX66IUJ VRIs9Yrmp0UxCRCAOvJ90++37EP7WcAVnTVAtHaL+LAaJNsHaHlW0aj+M5Tibm3j vkwjOTu5RQqOHzGMsTvE5YLOb7EKbN77YbUr10SwsXZFPb8X8Wz5IitzonO6F0S2 MgMgrgph2joY3HvwFYUmNvCbJnvqj5fn9IQam1kMubNapSa18GvqtBT9yJlZ67L7 aNtk/Bp9zorB4zQWsrk2HxOhuwSWMZD8sVjHGWXGETlFvjA4GcCSXecfReQnpHAE rhDf0SiJdfmk08ApQSNl0SXyYAXVNEDhC7Jm05eB6NfjbCPADc/WtcKe7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8B9tEwZkLxyMvPDkGgZe6hNx0eMB8GA1UdIwQY MBaAFIaEYeBg/fSM1B0zrZJxyAfUJOtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80YWY0YmUtNzBmMS00MTk0LTkxMWYt NTlhYjk2YmMzNWM2LzEvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80YWY0YmUtNzBmMS00MTk0LTkxMWYtNTlhYjk2YmMzNWM2 LzEvaG9SaDRHRDk5SXpVSFRPdGtuSElCOVFrNjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3b7GmPS qoStsaaU16e7BmDvOxrW1VmToN5YKcdVBwHP7rBa7TZlNIrVt43lw6Ooz+FZXXyl x7OVOpMas+EI8Gj9eAkoTfGXb9Qmf2rT48M/jqXrHJdHzNPuZMhw1jCa3hSfkxCI Itm1trBeum8kb8hCiI4Pq3Zfs0Fo6jyf+EI7ZCL14H8/K3DzETUNA3YauBN17EFX d3fO8tNVOgde/Un26CKvxZLQ+geXcIN+sh5l6JPMvtlwn2+k2lymDOBuQJCqfRrh zAgiDBn9kVpHePVfeEnjhJ7QBIRwtldIsuMMcE4C0vIa3hNufrUsUN9zy3PIRqgd wkC6rMKTsRZXdw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:21 2026 by rpki-client