This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft File: hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json) Hash identifier: bzlrZzKUM+kliTpUQp1uJ0QSHwHwAgsjQqdeP4eS9aw= Subject key identifier: CF:98:26:D3:46:56:BF:27:AC:07:D7:ED:48:FF:BE:EF:C3:68:1A:62 Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B Certificate issuer: /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b Certificate serial: 019C424693E81118BBABEC01D329D602CD8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft Manifest number: 093E Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: gjfqpbIpyEvhzLHY8FTDJl7DmuTdfXzjMvv/WbopfbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:93:e8:11:18:bb:ab:ec:01:d3:29:d6:02:cd:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=cf9826d34656bf27ac07d7ed48ffbeefc3681a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:b9:51:f2:35:e1:75:f2:b0:11:15:b4:34: 49:8f:9d:50:9e:a5:1d:4a:b5:71:83:3b:31:7a:c7: 4e:1a:48:04:fc:dc:f1:68:cc:ec:51:f6:b5:63:8a: 9c:d1:89:a7:09:de:6b:e2:ff:fa:22:5f:c9:14:ae: a7:0a:74:37:3d:ed:1f:d4:52:22:16:e8:d3:1c:85: ee:ca:b6:3a:31:44:5a:55:bc:71:55:df:de:f5:88: 65:92:46:eb:71:56:ce:72:b1:e1:30:1b:79:eb:52: e3:33:48:46:a3:9f:16:cd:d5:46:e6:84:e1:04:96: ae:9a:4f:a3:26:43:e9:8c:59:69:a2:4f:0a:1b:4b: 36:ec:3e:29:76:7c:8e:13:e8:68:02:aa:26:01:bd: 41:0b:6b:0c:a0:af:6c:1f:a4:7e:72:e4:1f:83:a3: 14:cd:13:66:a1:d8:c5:37:85:53:85:ae:fa:6f:8a: f2:70:8d:0b:c6:36:eb:4d:5b:f9:73:01:6c:cf:b9: 3a:4b:aa:3c:23:82:47:b7:7b:56:f2:b2:c6:bf:2b: 18:5b:8f:98:72:d7:3c:b6:f9:fd:fc:8c:d3:94:59: be:bc:5c:77:ac:28:fb:98:c4:f6:ea:8d:58:fc:03: 2e:28:6c:e5:7e:b7:95:bd:d5:6f:7c:5b:e9:84:92: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:26:D3:46:56:BF:27:AC:07:D7:ED:48:FF:BE:EF:C3:68:1A:62 X509v3 Authority Key Identifier: keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:70:f1:32:44:63:14:8d:72:01:c3:03:4e:12:42:01:b7: 5e:64:40:ea:4c:59:f7:46:b0:15:e6:49:af:ab:92:bf:30:a4: ec:e4:3c:1e:87:2d:49:66:23:2c:01:c7:7a:8c:4a:13:85:7e: ac:91:17:ef:8d:ab:6a:22:fc:72:06:1b:a9:55:4f:e4:b4:42: 18:90:ca:16:00:c5:b6:26:b0:17:1d:4e:fa:25:38:17:83:ab: bc:df:b3:d6:1d:84:72:15:21:95:66:d3:15:8f:80:2e:04:0c: d6:cb:da:d9:f9:63:06:09:ff:db:2b:7d:41:a7:2e:5c:e6:8a: 4b:31:35:46:fc:ca:b0:72:61:5a:2f:22:03:0a:a8:64:8f:8e: 92:d6:ee:60:0e:70:54:9a:51:83:84:d2:da:75:7f:51:0d:a8: 67:b3:8a:29:79:8f:63:ec:a0:33:cd:e0:62:b1:64:fe:99:df: 5a:ec:92:79:f2:b4:f6:bc:a8:bb:74:0c:ab:a7:31:f4:82:15: 45:1c:91:df:a0:b2:fe:f2:54:57:f5:5e:2c:63:6c:84:a8:d8: 60:38:08:0a:b1:58:3b:28:78:97:87:74:89:e4:7c:42:dd:56: 0c:3a:e2:72:6c:a7:0c:98:42:5a:dc:14:ce:61:25:4b:f6:49: 66:09:3e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpPoERi7q+wB0ynWAs2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDYwZDI1MmQ3Y2I2NWM0OTM0Y2VhY2I0NmZhOTZkY2I2 YjU3MGIwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD EyhjZjk4MjZkMzQ2NTZiZjI3YWMwN2Q3ZWQ0OGZmYmVlZmMzNjgxYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszi5UfI14XXysBEVtDRJj51QnqUd SrVxgzsxesdOGkgE/NzxaMzsUfa1Y4qc0YmnCd5r4v/6Il/JFK6nCnQ3Pe0f1FIi FujTHIXuyrY6MURaVbxxVd/e9YhlkkbrcVbOcrHhMBt561LjM0hGo58WzdVG5oTh BJaumk+jJkPpjFlpok8KG0s27D4pdnyOE+hoAqomAb1BC2sMoK9sH6R+cuQfg6MU zRNmodjFN4VTha76b4rycI0LxjbrTVv5cwFsz7k6S6o8I4JHt3tW8rLGvysYW4+Y ctc8tvn9/IzTlFm+vFx3rCj7mMT26o1Y/AMuKGzlfreVvdVvfFvphJKyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+YJtNGVr8nrAfX7Uj/vu/DaBpiMB8GA1UdIwQY MBaAFIVGDSUtfLZcSTTOrLRvqW3La1cLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2Qt OTI2YTBiMmQ1N2FkLzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2QtOTI2YTBiMmQ1N2Fk LzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb9w8TJE YxSNcgHDA04SQgG3XmRA6kxZ90awFeZJr6uSvzCk7OQ8HoctSWYjLAHHeoxKE4V+ rJEX742raiL8cgYbqVVP5LRCGJDKFgDFtiawFx1O+iU4F4OrvN+z1h2EchUhlWbT FY+ALgQM1sva2fljBgn/2yt9QacuXOaKSzE1RvzKsHJhWi8iAwqoZI+OktbuYA5w VJpRg4TS2nV/UQ2oZ7OKKXmPY+ygM83gYrFk/pnfWuySefK09ryou3QMq6cx9IIV RRyR36Cy/vJUV/VeLGNshKjYYDgICrFYOyh4l4d0ieR8Qt1WDDricmynDJhCWtwU zmElS/ZJZgk+jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:52 2026 by rpki-client