This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json) Hash identifier: O6DmgPCUYzbb3hJ6XdIWM0dqMQDi0+eVT6NeDt0bZJM= Subject key identifier: 28:0D:7C:4B:FA:F5:05:DE:A2:29:B3:AD:BF:1B:58:05:A1:68:15:72 Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Certificate serial: 019C42EBB0321E24EA66606F38A4E7DB5C0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 15:01:08 +0000 Manifest this update: Mon 09 Feb 2026 15:01:08 +0000 Manifest next update: Tue 10 Feb 2026 15:01:08 +0000 Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: CFDWHGsDjVyU0MqCy8ow0st2gJzC+EC6++HBTdk7ip0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b0:32:1e:24:ea:66:60:6f:38:a4:e7:db:5c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Validity Not Before: Feb 9 15:01:08 2026 GMT Not After : Feb 10 15:01:08 2026 GMT Subject: CN=280d7c4bfaf505dea229b3adbf1b5805a1681572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:72:c4:45:63:14:c3:5f:94:74:56:d7:01: aa:fc:d4:58:cd:4b:7d:10:6a:ce:a7:44:e3:b6:31: 90:e5:90:25:4a:57:c3:00:66:6b:6d:db:02:5d:f0: 1d:f8:ed:3d:d7:da:98:25:92:3d:e4:e8:97:c8:0a: 20:46:6e:73:68:c8:68:0e:7e:fe:62:bb:69:53:b0: 43:0b:ce:3a:f2:70:ad:06:4a:70:c1:52:ac:5a:b7: 53:f1:37:29:1a:fd:ec:c7:55:9d:a1:9d:06:ca:bf: 95:a4:93:a1:b1:63:8a:cb:86:50:4c:0c:95:c6:ae: 62:5a:c8:62:f5:66:a1:e8:a0:4f:fe:d8:dd:14:8a: d6:02:e7:47:52:1b:af:c0:c8:67:cf:fc:65:81:dd: 76:6c:71:58:15:6f:74:39:43:2e:d6:1d:50:49:3f: d6:4e:93:dc:49:bd:e0:7b:24:c3:ac:5f:dc:f6:c7: fe:64:66:0e:7e:f8:65:2d:dc:25:dc:33:ef:eb:ee: 00:51:de:e8:93:3a:ff:e3:d0:ce:07:96:6e:63:cd: ed:0d:c5:13:b1:76:06:8a:43:be:63:e7:76:41:05: 84:e3:df:13:78:23:d7:96:23:24:bf:ce:6b:01:52: 7a:70:42:13:04:83:44:34:b8:be:1b:81:7d:3c:95: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0D:7C:4B:FA:F5:05:DE:A2:29:B3:AD:BF:1B:58:05:A1:68:15:72 X509v3 Authority Key Identifier: keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:62:b9:88:bc:39:08:e1:4e:88:43:e5:2e:ad:cf:2b:56:3c: ba:55:4c:d4:b9:c7:3d:0c:cc:ca:3b:2c:8e:d5:49:63:c0:5b: 44:6a:83:1c:61:1a:5e:39:e9:6b:ad:ac:8e:fb:ac:0a:ac:a2: ed:bf:2a:6c:b2:40:cf:ff:85:ff:a5:e5:21:2a:66:a3:f3:1d: f6:a0:0b:9d:7e:d5:24:6c:f0:69:6b:16:8a:31:0d:de:6d:42: bc:d4:4a:dd:8d:52:3e:36:c2:1b:0a:8d:03:04:2a:b2:9c:54: 21:0a:14:50:f9:f4:66:94:e9:96:f6:46:83:6a:0e:51:dc:d3: d9:21:f4:ee:9d:b8:73:21:c7:d6:82:c3:01:98:2a:0b:18:de: 43:a0:9e:a9:00:be:ca:3b:1f:ce:e0:0c:8b:8f:2c:cc:d9:9b: 5e:c1:e3:63:ae:d7:01:7c:86:dc:60:77:7a:a2:19:0c:79:77: ab:16:b5:64:3c:99:76:7a:05:a7:48:12:8a:35:e9:f7:c5:d5: cf:17:bf:0e:c1:6e:f9:cb:05:82:9e:dd:5e:54:4d:25:39:c0: f8:5e:30:27:a7:a0:57:13:f0:c2:70:08:12:96:7c:4b:04:f0: a0:79:81:5d:9d:e0:6a:82:aa:6f:cf:c0:25:1b:35:6e:5f:ed: 0d:ab:f8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67AyHiTqZmBvOKTn21wKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3 MWRjOTMwHhcNMjYwMjA5MTUwMTA4WhcNMjYwMjEwMTUwMTA4WjAzMTEwLwYDVQQD EygyODBkN2M0YmZhZjUwNWRlYTIyOWIzYWRiZjFiNTgwNWExNjgxNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3tyxEVjFMNflHRW1wGq/NRYzUt9 EGrOp0TjtjGQ5ZAlSlfDAGZrbdsCXfAd+O0919qYJZI95OiXyAogRm5zaMhoDn7+ YrtpU7BDC8468nCtBkpwwVKsWrdT8TcpGv3sx1WdoZ0Gyr+VpJOhsWOKy4ZQTAyV xq5iWshi9Wah6KBP/tjdFIrWAudHUhuvwMhnz/xlgd12bHFYFW90OUMu1h1QST/W TpPcSb3geyTDrF/c9sf+ZGYOfvhlLdwl3DPv6+4AUd7okzr/49DOB5ZuY83tDcUT sXYGikO+Y+d2QQWE498TeCPXliMkv85rAVJ6cEITBINENLi+G4F9PJWG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgNfEv69QXeoimzrb8bWAWhaBVyMB8GA1UdIwQY MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWK5iLw5 COFOiEPlLq3PK1Y8ulVM1LnHPQzMyjssjtVJY8BbRGqDHGEaXjnpa62sjvusCqyi 7b8qbLJAz/+F/6XlISpmo/Md9qALnX7VJGzwaWsWijEN3m1CvNRK3Y1SPjbCGwqN AwQqspxUIQoUUPn0ZpTplvZGg2oOUdzT2SH07p24cyHH1oLDAZgqCxjeQ6CeqQC+ yjsfzuAMi48szNmbXsHjY67XAXyG3GB3eqIZDHl3qxa1ZDyZdnoFp0gSijXp98XV zxe/DsFu+csFgp7dXlRNJTnA+F4wJ6egVxPwwnAIEpZ8SwTwoHmBXZ3gaoKqb8/A JRs1bl/tDav47w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:23 2026 by rpki-client