This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json) Hash identifier: 73Ds9ndFILzREMWY8yvFYLiiIcxhUqSuzw6iChoTbBY= Subject key identifier: F5:BA:17:93:1C:76:58:16:B7:54:BE:0A:BC:A7:FF:FA:FF:63:C6:54 Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Certificate serial: 019C427DB45B42DD3CA18ACFD95AACEF9CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft Manifest number: 1551 Signing time: Mon 09 Feb 2026 13:01:00 +0000 Manifest this update: Mon 09 Feb 2026 13:01:00 +0000 Manifest next update: Tue 10 Feb 2026 13:01:00 +0000 Files and hashes: 1: 5sNgYfzumUf7Ww-tVdXZ2drJDck.roa (hash: RjBuFrMSbcH679kVv4NcjMBWXv9A5eiZerb+NKF9kzQ=) 2: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: xvbx2i5bigItWZKoTpeCMJJ1UIMD0T5qhE0buMaXbNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b4:5b:42:dd:3c:a1:8a:cf:d9:5a:ac:ef:9c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Validity Not Before: Feb 9 13:01:00 2026 GMT Not After : Feb 10 13:01:00 2026 GMT Subject: CN=f5ba17931c765816b754be0abca7fffaff63c654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:4d:0f:ef:31:82:17:6e:23:d4:5b:99:44: 98:2d:c3:5b:de:80:d6:2a:46:d4:07:78:cf:10:03: 7e:b9:41:75:52:62:60:c9:ab:4e:4a:bc:fd:07:7c: 06:dd:8d:c4:71:cb:f1:60:90:66:65:24:4c:2d:7c: 9f:3e:c8:2d:fd:78:77:c0:21:1f:92:0c:4e:7f:16: 09:a8:ae:50:85:d3:f1:c1:5b:ac:6c:9a:09:24:c8: b1:a6:0c:9a:ce:0b:86:6c:23:30:70:aa:19:6d:04: 2c:42:3f:bc:fd:90:5d:6c:8f:0c:51:0a:09:43:95: 9d:e2:51:e1:32:68:64:ba:c0:b6:fd:bc:8f:f7:1e: e2:8d:68:46:00:05:ee:d4:b5:e9:35:74:d0:2d:a6: 57:a6:3b:21:0a:2d:53:6d:d8:ab:bb:33:b0:80:aa: 44:d7:cb:54:82:7f:1e:e3:68:f1:66:e9:2b:1b:5e: 70:e7:6f:ad:01:60:7d:4d:ed:e6:c0:49:ab:df:8e: e6:5a:a1:1e:2b:8b:0b:5b:4b:e4:76:f3:98:4f:ab: ae:ba:ab:25:f2:35:68:3e:c5:f6:fa:f4:fe:40:89: 6d:5b:ea:9a:2e:df:14:c7:f2:54:58:74:1e:7b:7c: cf:5b:9d:88:8a:44:fe:3f:fd:e1:96:d4:86:0b:3b: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BA:17:93:1C:76:58:16:B7:54:BE:0A:BC:A7:FF:FA:FF:63:C6:54 X509v3 Authority Key Identifier: keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c1:23:44:78:66:90:38:d4:74:33:db:5a:8f:19:e0:af:9d: cb:7b:2f:de:1d:6b:88:c6:da:f0:ff:d4:c0:65:13:41:8f:87: 05:8b:00:b9:f0:92:6f:0b:0a:fb:aa:f3:45:25:13:4b:ee:d3: fa:64:5c:43:54:82:b5:7b:46:b5:d0:a2:16:f8:88:a9:bf:2a: f8:0e:f9:97:57:c7:e9:b5:ea:0b:f4:d4:b3:78:a4:d5:db:18: 0e:7b:21:50:37:48:06:75:3c:0a:cb:f6:c4:53:15:b2:94:85: 28:b1:27:9f:1e:8e:df:8b:07:ee:7a:55:19:13:29:8a:b9:f5: 35:2b:5e:9b:f2:24:d3:c8:e2:52:1a:dc:69:2a:e7:ae:58:ac: 77:07:6e:20:e3:87:e6:fa:02:9f:ba:79:b2:a9:58:b5:03:e6: 9b:05:34:24:a8:23:79:94:3c:bd:fe:19:10:20:a3:28:34:59: 1e:7d:a1:b5:49:db:aa:bf:1d:e8:a5:e5:aa:d4:37:40:d7:67: 20:9d:a2:96:98:64:a9:99:65:fe:97:cc:0e:ff:b6:54:91:59: e1:4c:dd:59:18:e1:d6:32:ad:4b:9d:6c:18:fb:e2:4e:32:46: 6b:ab:88:84:55:f8:91:65:59:07:aa:ca:e6:a5:4b:0b:48:a3: 85:e9:4e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbRbQt08oYrP2Vqs75ylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3 ZTMzZDQwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD EyhmNWJhMTc5MzFjNzY1ODE2Yjc1NGJlMGFiY2E3ZmZmYWZmNjNjNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoJND+8xghduI9RbmUSYLcNb3oDW KkbUB3jPEAN+uUF1UmJgyatOSrz9B3wG3Y3EccvxYJBmZSRMLXyfPsgt/Xh3wCEf kgxOfxYJqK5QhdPxwVusbJoJJMixpgyazguGbCMwcKoZbQQsQj+8/ZBdbI8MUQoJ Q5Wd4lHhMmhkusC2/byP9x7ijWhGAAXu1LXpNXTQLaZXpjshCi1TbdiruzOwgKpE 18tUgn8e42jxZukrG15w52+tAWB9Te3mwEmr347mWqEeK4sLW0vkdvOYT6uuuqsl 8jVoPsX2+vT+QIltW+qaLt8Ux/JUWHQee3zPW52IikT+P/3hltSGCzvgawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW6F5McdlgWt1S+Cryn//r/Y8ZUMB8GA1UdIwQY MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMEjRHhm kDjUdDPbWo8Z4K+dy3sv3h1riMba8P/UwGUTQY+HBYsAufCSbwsK+6rzRSUTS+7T +mRcQ1SCtXtGtdCiFviIqb8q+A75l1fH6bXqC/TUs3ik1dsYDnshUDdIBnU8Csv2 xFMVspSFKLEnnx6O34sH7npVGRMpirn1NStem/Ik08jiUhrcaSrnrlisdwduIOOH 5voCn7p5sqlYtQPmmwU0JKgjeZQ8vf4ZECCjKDRZHn2htUnbqr8d6KXlqtQ3QNdn IJ2ilphkqZll/pfMDv+2VJFZ4UzdWRjh1jKtS51sGPviTjJGa6uIhFX4kWVZB6rK 5qVLC0ijhelO7w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:07 2026 by rpki-client