This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json) Hash identifier: rW+mipvGtBc7uhu5kVjuPCj06oueqwHQIJIfVcLQbI0= Subject key identifier: 0A:87:BC:69:59:7B:78:FF:BD:05:44:09:00:C2:27:A3:18:48:D4:26 Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a Certificate serial: 019C427DA5F1BEFBA9FBD32DEACA1A493BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft Manifest number: 0E7F Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: FxMKz3jjuQ48veUTxydYouUaEYZWfJM3g1X7Lo8YNZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a5:f1:be:fb:a9:fb:d3:2d:ea:ca:1a:49:3b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=0a87bc69597b78ffbd05440900c227a31848d426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:93:c0:25:08:c2:f5:4d:31:94:14:9f:a8:ff: 57:56:b3:11:3e:c2:aa:2f:36:f2:3c:39:01:ef:0f: ed:4d:88:ad:31:c1:a8:42:87:49:f9:87:b9:fb:0d: 3d:1c:3c:98:a3:84:52:1a:2c:94:d0:8f:9c:ae:15: d0:10:12:bb:2f:6c:0f:94:c4:2f:50:ed:52:2f:3e: 87:31:8c:c3:78:8a:fe:d8:6d:76:5d:53:e0:eb:ff: c8:8a:f3:41:bb:9f:1a:fb:3d:a1:86:2a:b9:f2:9e: da:48:44:53:75:2a:52:b8:42:d1:8c:f8:7b:bb:05: fd:05:08:25:3b:59:de:e8:57:a4:74:05:78:c8:8a: 29:e9:e1:c3:04:6d:38:36:07:dd:a0:ca:97:6c:59: 1a:9a:9d:7b:64:35:92:fb:54:9b:4c:d8:0b:98:c1: d4:43:7c:38:5f:e5:53:04:af:44:bf:6d:3a:c3:c5: 83:f3:48:6c:ec:a1:81:94:dc:96:5d:f4:07:9a:2e: 67:97:d4:02:29:1b:ee:03:78:9c:50:6c:9d:09:44: 7c:f8:53:07:7d:7b:81:2d:fa:d5:7a:b8:e5:ca:48: b1:dd:8b:ec:89:d9:83:ec:2d:44:01:17:71:80:5d: 79:a2:fe:1b:75:50:e2:cc:4b:72:57:92:3e:88:68: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:BC:69:59:7B:78:FF:BD:05:44:09:00:C2:27:A3:18:48:D4:26 X509v3 Authority Key Identifier: keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:55:e3:60:5e:4c:ab:6e:4c:13:21:70:70:15:c9:c2:88:7d: 5b:f7:be:9f:13:26:3d:13:5c:6b:a5:bc:18:9f:5a:62:76:25: 83:91:20:ab:cf:ff:3b:b4:58:ff:45:52:c7:8f:bc:ed:f5:55: 4f:bb:23:b4:82:61:25:fd:87:8d:f0:89:7e:25:31:17:66:6d: 1d:7e:34:cd:50:7e:4b:ab:11:12:a3:a0:67:65:dd:73:8b:9f: 03:54:2e:d3:82:ac:72:cf:65:a8:11:26:aa:fd:e7:76:14:0e: 51:5c:9e:46:1f:c2:a2:c1:9f:4f:8e:0b:10:78:14:08:fc:73: f7:9d:3d:3a:43:6f:a1:f8:bd:23:3c:a6:b1:72:c9:20:4b:f7: 6b:b7:85:94:96:6a:ea:ab:98:20:4d:c5:9c:fe:22:9c:90:2c: 2c:ee:c6:d5:4a:1a:8e:c4:44:8a:dd:b0:bb:06:3c:62:80:83: 49:78:89:be:d5:45:b5:22:40:8a:2c:a8:fc:cf:07:37:a8:c7: d3:b9:c0:74:ed:cd:40:b3:12:c5:45:14:04:31:39:3c:f6:73: 12:dc:14:cd:26:a1:4e:e1:7e:44:8f:a7:3d:b0:48:d6:31:56: 61:01:d6:7b:9c:12:2f:69:0a:3b:c7:66:50:7a:24:c3:36:ec: 74:de:ac:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaXxvvup+9Mt6soaSTvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYTRiZjZjOWE1MGM4MWYwNGIwMjk4MzZhNDI3ODYxYWQ3 MjgyOWEwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EygwYTg3YmM2OTU5N2I3OGZmYmQwNTQ0MDkwMGMyMjdhMzE4NDhkNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZPAJQjC9U0xlBSfqP9XVrMRPsKq LzbyPDkB7w/tTYitMcGoQodJ+Ye5+w09HDyYo4RSGiyU0I+crhXQEBK7L2wPlMQv UO1SLz6HMYzDeIr+2G12XVPg6//IivNBu58a+z2hhiq58p7aSERTdSpSuELRjPh7 uwX9BQglO1ne6FekdAV4yIop6eHDBG04NgfdoMqXbFkamp17ZDWS+1SbTNgLmMHU Q3w4X+VTBK9Ev206w8WD80hs7KGBlNyWXfQHmi5nl9QCKRvuA3icUGydCUR8+FMH fXuBLfrVerjlykix3YvsidmD7C1EARdxgF15ov4bdVDizEtyV5I+iGjupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqHvGlZe3j/vQVECQDCJ6MYSNQmMB8GA1UdIwQY MBaAFBykv2yaUMgfBLApg2pCeGGtcoKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lYmQwNjEtNmMwMC00YzhiLWE4OGUt NWY4NGI2OGRkMDQ0LzEvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lYmQwNjEtNmMwMC00YzhiLWE4OGUtNWY4NGI2OGRkMDQ0 LzEvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVXjYF5M q25MEyFwcBXJwoh9W/e+nxMmPRNca6W8GJ9aYnYlg5Egq8//O7RY/0VSx4+87fVV T7sjtIJhJf2HjfCJfiUxF2ZtHX40zVB+S6sREqOgZ2Xdc4ufA1Qu04Kscs9lqBEm qv3ndhQOUVyeRh/CosGfT44LEHgUCPxz9509OkNvofi9IzymsXLJIEv3a7eFlJZq 6quYIE3FnP4inJAsLO7G1UoajsREit2wuwY8YoCDSXiJvtVFtSJAiiyo/M8HN6jH 07nAdO3NQLMSxUUUBDE5PPZzEtwUzSahTuF+RI+nPbBI1jFWYQHWe5wSL2kKO8dm UHokwzbsdN6slg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:16 2026 by rpki-client