This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json) Hash identifier: npAPUNikhbqUHrAA+1orPBuB6Qtup4tNTAWuQzytT44= Subject key identifier: AF:C7:AE:8E:7F:0E:75:79:7B:D7:71:56:50:4F:33:16:69:AA:43:BA Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466 Certificate serial: 019C41D8CA43221014E5F354FE747E9D2BFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft Manifest number: 0F19 Signing time: Mon 09 Feb 2026 10:00:52 +0000 Manifest this update: Mon 09 Feb 2026 10:00:52 +0000 Manifest next update: Tue 10 Feb 2026 10:00:52 +0000 Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: y9MiQFH5qCp/EFaQG2qt/4GDMPivHlGhH8x65ADL8Wk=) 2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ca:43:22:10:14:e5:f3:54:fe:74:7e:9d:2b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466 Validity Not Before: Feb 9 10:00:52 2026 GMT Not After : Feb 10 10:00:52 2026 GMT Subject: CN=afc7ae8e7f0e75797bd77156504f331669aa43ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:ce:69:ca:63:28:55:46:4e:77:8b:17:fe: 05:09:de:38:f9:0a:aa:87:e1:22:18:5f:ce:f5:46: 6f:15:73:11:19:78:b1:8e:26:bf:25:61:1c:5d:a0: ec:c6:ac:50:70:5b:8b:4a:9e:19:ab:f5:40:a7:d4: a3:8d:2a:60:f1:1b:87:20:a2:d9:d6:30:7c:87:14: e4:fc:5e:9b:40:26:6a:a4:c1:71:05:fd:7a:65:c6: 95:2c:58:78:c4:5b:62:a4:10:30:00:1b:4e:57:98: 10:95:8c:d8:f9:59:88:c1:ce:2d:12:38:90:9c:7a: 9f:67:38:5e:ba:ea:34:70:a9:85:4c:72:fd:d1:4a: 7b:55:1c:db:b1:b8:d0:29:af:67:f5:7d:cd:b3:7a: 55:1e:e2:af:f5:ca:9f:7e:e2:71:db:b8:73:e4:7e: 47:db:1e:a2:2a:9f:eb:fe:67:70:25:ed:3a:d6:83: ef:18:ff:62:8a:fe:b5:20:5d:33:dd:92:92:b9:8b: 15:82:9d:a6:1d:86:af:b1:93:be:a5:d8:7e:02:4d: 21:cd:59:51:a3:88:ec:04:c7:5a:04:d3:96:4e:6d: 59:12:91:12:fa:a7:d5:4b:98:a0:4f:79:58:d8:5b: 60:b9:d3:94:e8:8b:2e:f3:fb:7e:4f:03:9a:d6:b1: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:AE:8E:7F:0E:75:79:7B:D7:71:56:50:4F:33:16:69:AA:43:BA X509v3 Authority Key Identifier: keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ca:43:d6:54:4f:6b:dc:6c:84:03:e0:14:b6:d8:0b:6a:ce: be:1f:06:f4:c6:5a:c3:47:4f:d0:ea:39:77:c2:3d:1f:39:fc: 25:75:58:d9:91:04:68:bc:b7:4c:38:08:e7:7b:49:ee:ad:50: ef:36:b4:34:60:cd:65:50:d1:5b:90:b2:aa:35:3d:ca:db:a1: 37:6b:ae:99:27:ce:53:af:75:6b:e6:6e:c5:a7:92:04:00:87: 74:ce:cb:07:77:c0:ad:8e:c5:50:33:3b:9a:70:5d:01:1d:af: a8:45:bb:2a:73:d4:24:ff:c1:c2:34:de:a5:1f:66:07:d3:89: bc:60:22:68:d8:00:98:be:ac:c8:70:78:22:54:19:c1:b4:dc: 52:26:44:8f:fa:db:a9:43:f4:e5:69:d4:7c:29:3b:e3:55:f5: 76:ad:95:01:ba:25:a6:08:8d:a1:83:cc:c5:21:e9:09:1f:25: 34:9b:38:3b:47:e2:7e:ae:67:18:ec:f9:14:37:46:c1:88:69: 68:42:78:e3:92:ba:64:7d:98:6a:08:7e:44:c4:f7:8f:bf:4c: 88:d4:28:44:52:15:8f:51:24:1a:4e:09:63:cb:00:63:8d:b3: ba:5e:94:59:a4:da:86:2e:c0:0e:5e:5b:0e:20:0d:61:7f:0e: 32:03:e4:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MpDIhAU5fNU/nR+nSv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0 MDQ0NjYwHhcNMjYwMjA5MTAwMDUyWhcNMjYwMjEwMTAwMDUyWjAzMTEwLwYDVQQD EyhhZmM3YWU4ZTdmMGU3NTc5N2JkNzcxNTY1MDRmMzMxNjY5YWE0M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/vOacpjKFVGTneLF/4FCd44+Qqq h+EiGF/O9UZvFXMRGXixjia/JWEcXaDsxqxQcFuLSp4Zq/VAp9SjjSpg8RuHIKLZ 1jB8hxTk/F6bQCZqpMFxBf16ZcaVLFh4xFtipBAwABtOV5gQlYzY+VmIwc4tEjiQ nHqfZzheuuo0cKmFTHL90Up7VRzbsbjQKa9n9X3Ns3pVHuKv9cqffuJx27hz5H5H 2x6iKp/r/mdwJe061oPvGP9iiv61IF0z3ZKSuYsVgp2mHYavsZO+pdh+Ak0hzVlR o4jsBMdaBNOWTm1ZEpES+qfVS5igT3lY2FtgudOU6Isu8/t+TwOa1rFjcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/Hro5/DnV5e9dxVlBPMxZpqkO6MB8GA1UdIwQY MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcpD1lRP a9xshAPgFLbYC2rOvh8G9MZaw0dP0Oo5d8I9Hzn8JXVY2ZEEaLy3TDgI53tJ7q1Q 7za0NGDNZVDRW5CyqjU9ytuhN2uumSfOU691a+ZuxaeSBACHdM7LB3fArY7FUDM7 mnBdAR2vqEW7KnPUJP/BwjTepR9mB9OJvGAiaNgAmL6syHB4IlQZwbTcUiZEj/rb qUP05WnUfCk741X1dq2VAbolpgiNoYPMxSHpCR8lNJs4O0fifq5nGOz5FDdGwYhp aEJ445K6ZH2Yagh+RMT3j79MiNQoRFIVj1EkGk4JY8sAY42zul6UWaTahi7ADl5b DiANYX8OMgPkVg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:43 2026 by rpki-client