This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json) Hash identifier: 6kT+ufTuOdBmQsbGpz9i/lMDPQzeDcvs9Ld9O7o+bL4= Subject key identifier: 57:FF:DC:7A:12:AA:96:3A:19:B1:C9:8B:0C:AD:3F:26:B2:B8:E5:9A Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a Certificate serial: 019C43221D5397BA2A7357AB5BCF1D454656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: nJATz/FcpWgFfpzJInlLV3xm/a+b5EWh6Ybk9GPvT5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1d:53:97:ba:2a:73:57:ab:5b:cf:1d:45:46:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=57ffdc7a12aa963a19b1c98b0cad3f26b2b8e59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:58:bb:24:d5:f8:a7:ce:6b:9c:98:2a:28: 92:78:62:88:90:48:8b:95:18:64:23:c3:2b:01:71: 6a:7e:a4:86:79:7c:53:99:a9:3d:26:74:a6:ca:0f: 0a:e6:d4:bc:54:9a:1f:0f:5f:f1:06:21:d0:1d:0d: d5:9b:6e:b9:22:4e:58:69:86:46:bc:35:ca:68:e6: 65:15:47:45:5b:02:d8:43:8e:78:7a:8d:fa:2a:c8: 88:e4:31:26:a6:8e:c7:9d:48:e7:18:79:21:cc:a7: d1:e0:f2:39:80:3f:24:54:bd:cc:7a:c4:ab:2a:92: 45:a1:e2:d0:90:f7:8a:6e:66:db:2d:dd:12:51:47: 20:b4:ce:29:3e:38:d2:60:3b:45:20:34:3b:99:d3: be:a2:de:5e:d5:33:3d:a6:46:18:e5:b1:f2:94:81: 35:31:37:21:5f:d8:fc:52:1a:cd:43:20:8f:cd:b0: c8:2d:8f:82:1d:d6:c2:cb:93:16:37:bf:de:9a:5d: 76:6f:36:e0:bf:b2:e1:2e:26:17:f0:0a:cc:27:7d: af:12:3d:d9:a6:1b:13:37:a6:3b:1f:f6:b0:3c:75: 33:af:21:01:d3:62:01:87:bd:5a:6c:c4:a2:6f:f9: c9:c7:84:df:d9:4a:04:c6:8b:37:90:e2:a6:aa:a6: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FF:DC:7A:12:AA:96:3A:19:B1:C9:8B:0C:AD:3F:26:B2:B8:E5:9A X509v3 Authority Key Identifier: keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c9:e2:b4:11:56:f5:14:3f:f3:74:de:83:75:d7:c0:3f:0d: 97:f5:c0:ea:ff:32:ed:91:12:2c:70:1d:78:f0:a1:96:75:6f: 7b:63:a9:50:a3:88:15:bd:02:cb:fb:71:99:5e:d7:4d:c2:9d: 16:ca:fc:b5:30:54:a4:0d:56:34:d9:56:48:b3:8e:79:86:1b: 66:fb:72:fe:81:32:c0:27:c5:02:5d:ba:21:c4:fe:fa:43:3f: 7f:14:c2:77:60:4f:32:64:e7:cc:27:ca:cd:03:f9:c0:94:a3: 49:6c:11:7c:b9:79:9e:0b:fa:52:37:08:72:b0:ba:8a:8a:75: e5:b0:4a:c7:b8:e3:08:5a:f5:0b:78:16:87:e1:83:7b:01:9a: 9b:fc:b8:37:75:3b:68:96:4d:a8:98:7d:a1:38:c7:63:98:74: 7f:2d:48:0a:8d:39:c3:a3:bc:08:5a:7a:70:c3:9e:13:30:52: e1:97:aa:e5:7d:96:6e:49:d0:9a:7f:e5:02:97:0f:47:8c:bb: 87:f7:c0:7d:0c:0e:44:dd:ed:06:57:2e:87:b1:12:73:23:e3: ae:6c:31:cc:93:f0:ea:35:7c:2c:36:71:8d:39:cb:00:f0:0d: 1d:30:21:db:6e:1b:d1:c4:33:78:33:a6:82:25:5d:e6:4f:4b: 69:41:8d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIh1Tl7oqc1erW88dRUZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Y2Y5MTBhOTQ0NDllYTIzYWFjNmM0MDlhMDU4NDliZWRh NWUyNGEwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD Eyg1N2ZmZGM3YTEyYWE5NjNhMTliMWM5OGIwY2FkM2YyNmIyYjhlNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxYuyTV+KfOa5yYKiiSeGKIkEiL lRhkI8MrAXFqfqSGeXxTmak9JnSmyg8K5tS8VJofD1/xBiHQHQ3Vm265Ik5YaYZG vDXKaOZlFUdFWwLYQ454eo36KsiI5DEmpo7HnUjnGHkhzKfR4PI5gD8kVL3MesSr KpJFoeLQkPeKbmbbLd0SUUcgtM4pPjjSYDtFIDQ7mdO+ot5e1TM9pkYY5bHylIE1 MTchX9j8UhrNQyCPzbDILY+CHdbCy5MWN7/eml12bzbgv7LhLiYX8ArMJ32vEj3Z phsTN6Y7H/awPHUzryEB02IBh71abMSib/nJx4Tf2UoExos3kOKmqqYU9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf/3HoSqpY6GbHJiwytPyayuOWaMB8GA1UdIwQY MBaAFIXPkQqURJ6iOqxsQJoFhJvtpeJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjIt NTUyZjAyY2JjMDBlLzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjItNTUyZjAyY2JjMDBl LzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8nitBFW 9RQ/83Teg3XXwD8Nl/XA6v8y7ZESLHAdePChlnVve2OpUKOIFb0Cy/txmV7XTcKd Fsr8tTBUpA1WNNlWSLOOeYYbZvty/oEywCfFAl26IcT++kM/fxTCd2BPMmTnzCfK zQP5wJSjSWwRfLl5ngv6UjcIcrC6iop15bBKx7jjCFr1C3gWh+GDewGam/y4N3U7 aJZNqJh9oTjHY5h0fy1ICo05w6O8CFp6cMOeEzBS4Zeq5X2WbknQmn/lApcPR4y7 h/fAfQwORN3tBlcuh7EScyPjrmwxzJPw6jV8LDZxjTnLAPANHTAh224b0cQzeDOm giVd5k9LaUGNNw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:43 2026 by rpki-client