This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json) Hash identifier: P+oXq7UAUuJU1P7B814LDuPZncdLtNqfgo0ZPTakwOE= Subject key identifier: 37:5A:91:C5:D3:AC:E5:B3:22:56:B1:22:5C:DD:9D:C2:2D:4A:77:73 Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Certificate serial: 019C42B3F530BD4938054ED1FC6FC3D746EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft Manifest number: 068C Signing time: Mon 09 Feb 2026 14:00:15 +0000 Manifest this update: Mon 09 Feb 2026 14:00:15 +0000 Manifest next update: Tue 10 Feb 2026 14:00:15 +0000 Files and hashes: 1: Hwz33O3GEhUPQENUYSweMk7o9iA.roa (hash: 1HTvbTcGZV1b8MpfW8YABdSoijcVRUnqTe0YqNWbdPc=) 2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: qxqG43eEGf7hyuxS1AxzYP3GBo0F+Pn+IPuYZmtk8Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f5:30:bd:49:38:05:4e:d1:fc:6f:c3:d7:46:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Validity Not Before: Feb 9 14:00:15 2026 GMT Not After : Feb 10 14:00:15 2026 GMT Subject: CN=375a91c5d3ace5b32256b1225cdd9dc22d4a7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:68:2e:fd:f7:5c:c2:09:87:15:55:e3:8d:a5: 55:8e:d7:bc:fe:a7:40:45:8b:e4:26:b3:e7:af:94: 85:1f:35:c7:34:87:42:5b:a5:d4:a1:81:03:6e:43: 7e:0e:64:da:a7:19:56:a6:29:f6:f6:be:bc:3d:96: ce:44:16:59:f7:a0:5a:6c:e9:1c:56:27:03:7a:ba: 85:eb:78:13:75:c9:33:f2:b8:b0:77:2b:0e:9e:9c: 57:df:dc:cb:f0:bb:90:8d:5e:05:67:bb:85:06:56: 6b:16:9c:2d:57:64:f9:c6:7a:2f:20:39:f7:e9:47: a2:86:6a:3c:76:5c:e8:42:f8:8d:dd:36:90:a5:ec: a7:22:f9:ae:4d:56:6d:b1:0e:00:87:b1:e6:ce:31: e5:09:2a:fa:ff:05:83:c9:f4:1d:c7:cd:91:ad:26: 50:a1:2c:05:38:21:45:0a:9e:66:65:1b:8b:5f:96: 57:63:52:a9:85:f8:60:c9:a9:2b:fc:cf:bf:86:78: 08:9e:96:88:fb:a9:d8:14:e8:3f:12:eb:03:f5:06: 20:8a:a0:82:11:42:03:db:73:3e:51:9c:37:b3:26: 72:87:62:65:34:67:12:72:60:a4:2a:11:c2:4a:3d: a0:ee:05:62:06:67:c3:31:22:de:dd:f3:54:6e:93: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:91:C5:D3:AC:E5:B3:22:56:B1:22:5C:DD:9D:C2:2D:4A:77:73 X509v3 Authority Key Identifier: keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:d9:40:3e:ed:61:60:f8:36:b8:b6:a2:96:1d:ac:25:55: 3e:cf:83:86:6d:06:71:80:76:de:7e:37:04:6e:3b:0c:e1:af: 3d:dd:ab:3c:6d:cc:c3:25:a8:49:d0:c7:c0:33:42:9c:12:a0: 65:77:b6:d1:1d:d8:04:75:d5:b1:cf:d2:db:5d:73:3e:c7:95: e0:81:0c:3d:7e:64:40:8b:76:0d:cb:5c:07:11:b5:b8:fe:d6: 51:96:3a:24:b9:ec:cf:16:c6:57:5c:5c:cc:5b:18:8c:f6:a3: 57:ad:6c:a8:94:f7:ab:14:05:97:fc:29:83:1f:0a:71:f0:69: 33:80:ab:f7:2c:68:cd:d4:5e:3f:e5:e8:29:9e:3e:d4:0f:a5: c9:cb:31:09:9f:ab:1e:6c:d8:98:b0:33:de:28:f1:d9:d0:cd: 4c:87:ea:ab:a2:33:28:7f:ef:c4:42:66:8b:6d:98:24:0c:9f: 24:b7:d0:7d:a3:bc:0a:f6:ca:53:0d:75:f4:a1:77:ef:5d:40: 0a:95:a1:e3:c8:3d:32:2d:56:ba:88:da:99:15:46:f3:c5:34: b6:5f:a8:71:0a:e8:80:92:10:f5:c0:c7:bb:95:c2:d2:e3:25: 94:1f:04:45:a8:2a:a6:1c:f9:76:b0:bd:b9:56:64:fe:c2:cf: c3:3b:91:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/UwvUk4BU7R/G/D10buMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDU2ZTIyZGQxMjNjODM0YzBhNGFhNzQ1MTZkNWZiM2Nj NzdkZDEwHhcNMjYwMjA5MTQwMDE1WhcNMjYwMjEwMTQwMDE1WjAzMTEwLwYDVQQD EygzNzVhOTFjNWQzYWNlNWIzMjI1NmIxMjI1Y2RkOWRjMjJkNGE3NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82gu/fdcwgmHFVXjjaVVjte8/qdA RYvkJrPnr5SFHzXHNIdCW6XUoYEDbkN+DmTapxlWpin29r68PZbORBZZ96BabOkc VicDerqF63gTdckz8riwdysOnpxX39zL8LuQjV4FZ7uFBlZrFpwtV2T5xnovIDn3 6Ueihmo8dlzoQviN3TaQpeynIvmuTVZtsQ4Ah7HmzjHlCSr6/wWDyfQdx82RrSZQ oSwFOCFFCp5mZRuLX5ZXY1Kphfhgyakr/M+/hngInpaI+6nYFOg/EusD9QYgiqCC EUID23M+UZw3syZyh2JlNGcScmCkKhHCSj2g7gViBmfDMSLe3fNUbpOIzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdakcXTrOWzIlaxIlzdncItSndzMB8GA1UdIwQY MBaAFIQFbiLdEjyDTApKp0UW1fs8x33RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMt NTljOWMzZmI5OTQ3LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMtNTljOWMzZmI5OTQ3 LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8XZQD7t YWD4Nri2opYdrCVVPs+Dhm0GcYB23n43BG47DOGvPd2rPG3MwyWoSdDHwDNCnBKg ZXe20R3YBHXVsc/S211zPseV4IEMPX5kQIt2DctcBxG1uP7WUZY6JLnszxbGV1xc zFsYjPajV61sqJT3qxQFl/wpgx8KcfBpM4Cr9yxozdReP+XoKZ4+1A+lycsxCZ+r HmzYmLAz3ijx2dDNTIfqq6IzKH/vxEJmi22YJAyfJLfQfaO8CvbKUw119KF3711A CpWh48g9Mi1WuojamRVG88U0tl+ocQrogJIQ9cDHu5XC0uMllB8ERagqphz5drC9 uVZk/sLPwzuR+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:48 2026 by rpki-client