This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json) Hash identifier: ZQ9UPT4Rwwert1gx1NSCt0COfYYZtuJIvfzocfMwJkc= Subject key identifier: 3F:A6:EF:63:0A:60:B6:C0:F8:99:D5:3B:05:7F:5A:17:51:FA:C5:FD Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43 Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643 Certificate serial: 019C42100A3A8F42EE18B140928AC46E4A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft Manifest number: 0CB9 Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: 0gaZPuJ9hZLX3C2RPIScOYX1LCpxnvgFxJ5ajCrnhVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0a:3a:8f:42:ee:18:b1:40:92:8a:c4:6e:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=3fa6ef630a60b6c0f899d53b057f5a1751fac5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:37:fe:5e:cb:ea:4f:fc:07:1a:be:c7:ea: e4:7e:a7:c3:ea:73:9d:2c:8a:c4:82:80:2b:2b:a7: c4:82:bf:c2:3d:74:91:9d:95:d3:4c:00:c3:e8:ed: 43:7c:7b:31:0c:37:65:56:4a:cf:59:e8:d7:37:83: 4d:46:3e:18:5a:41:ea:59:d8:80:21:42:3f:b9:61: 25:f7:c6:4d:2e:7e:aa:54:56:61:6c:99:a3:6a:b2: ef:03:5c:d6:87:16:5f:03:24:5d:47:42:db:24:37: 11:0f:7f:9a:d3:d1:4e:27:67:ee:ef:25:db:41:cb: 38:48:eb:8e:10:9d:41:61:50:38:b8:ae:86:8b:5f: 78:b6:40:9b:fc:5b:df:d4:76:9c:4e:9e:a4:7f:72: ea:27:55:de:c0:de:b3:b1:4a:2c:ff:40:b4:bf:9d: f5:51:68:f1:14:85:66:6f:a4:0b:18:5e:11:9c:29: c4:4f:72:fd:d5:ca:0e:3f:2c:58:d0:35:8c:a3:a9: 61:b9:b8:be:54:32:99:fb:3d:3e:c4:46:64:e5:17: 5f:85:c2:61:2d:cb:3a:55:2a:fe:23:2c:df:84:60: d9:04:b1:e5:83:e4:5b:cb:5f:d9:dc:cf:6b:63:09: ae:3c:8f:1d:8d:83:eb:4a:fb:bf:45:e4:15:62:dd: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A6:EF:63:0A:60:B6:C0:F8:99:D5:3B:05:7F:5A:17:51:FA:C5:FD X509v3 Authority Key Identifier: keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:33:01:a2:4d:98:f6:80:b9:73:df:d1:ee:b1:2a:f5:75:16: 13:3f:e8:b5:cc:a8:fb:9d:f1:1f:bc:46:35:38:eb:ef:16:b4: db:21:de:1e:07:b0:99:5f:2d:c3:d7:12:c7:23:83:5d:54:5a: 0e:6d:8f:69:62:63:f5:74:fd:9a:a3:c7:52:6a:29:4c:a1:9f: db:c7:c9:e6:04:7e:bb:e9:5d:47:22:37:ee:6a:3e:53:80:ad: dd:ff:e8:a1:65:c6:91:3a:14:9d:5f:be:2f:5c:79:67:86:ab: a3:57:d8:01:74:1c:0b:1c:36:f6:24:b9:eb:c6:2b:e5:60:2d: 3c:2d:0b:10:30:40:38:04:5d:52:4f:18:38:44:49:3b:5b:12: 4a:50:70:24:b3:2f:fc:ef:22:52:dc:6f:78:58:cc:65:1b:e5: b2:e6:2d:b8:38:fc:40:81:b3:d9:15:77:35:7a:8c:cd:4b:eb: a8:ee:d1:14:5a:68:65:c1:a5:29:46:4c:da:04:56:5b:25:99: 60:46:8e:ac:6a:a1:24:45:8d:fc:0f:2b:f2:40:c3:5b:a7:a1: ca:09:81:78:8c:01:77:25:b9:db:fd:ce:63:cb:36:62:4e:1e: 8d:34:97:ed:26:04:57:1f:02:5f:e2:80:7f:55:a8:82:fa:24: 57:b0:1e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAo6j0LuGLFAkorEbkpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTIwMmFlNjdiMDQ2NTM0N2Q2ZGRmOTBmNjQ2MmZhZTZl NGU2NDMwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD EygzZmE2ZWY2MzBhNjBiNmMwZjg5OWQ1M2IwNTdmNWExNzUxZmFjNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsI3/l7L6k/8Bxq+x+rkfqfD6nOd LIrEgoArK6fEgr/CPXSRnZXTTADD6O1DfHsxDDdlVkrPWejXN4NNRj4YWkHqWdiA IUI/uWEl98ZNLn6qVFZhbJmjarLvA1zWhxZfAyRdR0LbJDcRD3+a09FOJ2fu7yXb Qcs4SOuOEJ1BYVA4uK6Gi194tkCb/Fvf1HacTp6kf3LqJ1XewN6zsUos/0C0v531 UWjxFIVmb6QLGF4RnCnET3L91coOPyxY0DWMo6lhubi+VDKZ+z0+xEZk5RdfhcJh Lcs6VSr+IyzfhGDZBLHlg+Rby1/Z3M9rYwmuPI8djYPrSvu/ReQVYt1JpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+m72MKYLbA+JnVOwV/WhdR+sX9MB8GA1UdIwQY MBaAFB6SAq5nsEZTR9bd+Q9kYvrm5OZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBJQ3JtZXdSbE5IMXQzNUQyUmktdWJrNWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZWZkZDUtMGNjYy00MjVmLTkzMDEt NTQwYTM0OGRkMjIzLzEvSHBJQ3JtZXdSbE5IMXQzNUQyUmktdWJrNWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS81ZWZkZDUtMGNjYy00MjVmLTkzMDEtNTQwYTM0OGRkMjIz LzEvSHBJQ3JtZXdSbE5IMXQzNUQyUmktdWJrNWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDMBok2Y 9oC5c9/R7rEq9XUWEz/otcyo+53xH7xGNTjr7xa02yHeHgewmV8tw9cSxyODXVRa Dm2PaWJj9XT9mqPHUmopTKGf28fJ5gR+u+ldRyI37mo+U4Ct3f/ooWXGkToUnV++ L1x5Z4aro1fYAXQcCxw29iS568Yr5WAtPC0LEDBAOARdUk8YOERJO1sSSlBwJLMv /O8iUtxveFjMZRvlsuYtuDj8QIGz2RV3NXqMzUvrqO7RFFpoZcGlKUZM2gRWWyWZ YEaOrGqhJEWN/A8r8kDDW6ehygmBeIwBdyW52/3OY8s2Yk4ejTSX7SYEVx8CX+KA f1WogvokV7Aegg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:28 2026 by rpki-client