This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json) Hash identifier: 2GycXoWujQJZzfcYTHdSnmOjWjTVAiRJOAvntP/Wzn0= Subject key identifier: 91:CE:FE:56:37:0C:C7:47:92:AF:99:D6:88:91:7E:C5:14:D4:6D:BC Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Certificate serial: 019C43596926CEA0CD74034D652EBA3AC692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft Manifest number: 12C4 Signing time: Mon 09 Feb 2026 17:00:58 +0000 Manifest this update: Mon 09 Feb 2026 17:00:58 +0000 Manifest next update: Tue 10 Feb 2026 17:00:58 +0000 Files and hashes: 1: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: BmrNgpeWyJb0UWYQyfXey0SdUQB19dEnieM1X+m1hm4=) 2: zJjfRJOT22lkDtk4Md7fI6mwZxg.roa (hash: hqAeygJ8Uol5cY/fADfXwnwvoVyU7MDQFKGg1laAxik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:69:26:ce:a0:cd:74:03:4d:65:2e:ba:3a:c6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Validity Not Before: Feb 9 17:00:58 2026 GMT Not After : Feb 10 17:00:58 2026 GMT Subject: CN=91cefe56370cc74792af99d688917ec514d46dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:b1:13:cf:55:1a:56:63:22:9c:be:48:1c: 11:9d:c0:1b:f2:87:1b:1d:13:6e:4b:2a:fc:90:5c: b0:61:3b:6d:df:78:d7:81:85:c2:ef:d9:44:a8:6c: 71:0d:7c:7c:b0:92:ed:ad:a2:95:1f:43:b5:c5:8d: 7e:64:95:86:92:4b:18:75:99:da:6e:7b:85:b6:b1: 6b:92:11:4c:88:55:14:a6:21:03:06:8f:09:78:bd: 61:ba:fe:37:52:51:3e:87:14:26:18:35:7f:8f:ac: cf:67:7d:a8:cc:f2:c0:84:44:74:98:8f:1b:13:56: e4:19:04:f4:6d:98:d4:06:0e:ed:a8:19:de:d8:2a: 4f:f1:5c:be:59:a7:1a:97:28:27:8d:98:39:1d:8c: 77:03:ba:b5:52:19:c0:d0:6e:a6:40:03:bc:33:48: 01:56:45:f0:13:d7:b3:b1:d4:d2:39:a9:29:84:9a: cd:c4:dc:09:04:86:a1:2e:98:05:dc:03:25:6f:d6: ab:45:1c:0f:93:28:d7:da:de:f8:43:1c:10:a0:34: 71:a0:5e:56:8f:dc:bd:b7:23:c5:83:0f:23:13:19: c4:b8:c1:48:d5:d4:2f:7d:8e:f1:62:8c:c9:7e:46: 82:23:81:9f:61:72:2e:b2:7f:f2:3a:07:36:7c:6a: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:FE:56:37:0C:C7:47:92:AF:99:D6:88:91:7E:C5:14:D4:6D:BC X509v3 Authority Key Identifier: keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:86:c7:d6:54:a9:7e:62:42:c6:d4:90:fb:e5:68:6b:b0:d4: b5:f5:44:bc:ad:0a:be:c6:58:e1:55:5c:06:a5:05:91:88:e0: 3c:29:d3:9b:a1:8b:d7:32:22:e0:9b:bd:39:d7:6c:d3:b7:b5: e4:94:6c:5b:bd:51:91:61:49:f0:bf:ce:66:33:09:ec:4a:b8: 37:72:c4:12:7b:8c:60:49:d3:41:39:92:52:86:85:13:f0:df: 41:e5:64:c1:fa:e7:12:91:7c:ac:49:69:e6:9c:7f:c1:48:b9: 74:e5:85:c6:00:01:df:9c:7a:ff:1a:c3:f9:13:be:33:65:77: e9:60:e5:5a:9c:2b:97:dd:86:d0:79:73:6d:84:05:ea:43:c2: be:94:79:05:d6:c0:9f:75:26:d9:6f:d7:aa:1e:bf:e5:37:b6: a5:44:6a:68:fb:38:70:ef:21:b3:81:82:17:08:27:b8:d7:09: 4a:b7:ca:a4:80:8e:11:a2:aa:c6:94:35:74:b6:a5:bb:f5:cf: 80:e7:6c:73:89:68:10:ac:04:ea:85:8b:65:06:f8:09:d3:9d: 4e:82:27:1c:86:52:a1:4c:75:40:8f:41:cf:4e:b9:79:60:4e: 23:79:58:11:b3:b4:d5:e6:85:6d:d7:7d:1d:dd:13:85:9e:ad: fd:83:84:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWkmzqDNdANNZS66OsaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjQzMGQ5YWQ5Y2I5YzQyYzRiZDY2OTBlOWY1ODEyYTQ1 N2EwMmYwHhcNMjYwMjA5MTcwMDU4WhcNMjYwMjEwMTcwMDU4WjAzMTEwLwYDVQQD Eyg5MWNlZmU1NjM3MGNjNzQ3OTJhZjk5ZDY4ODkxN2VjNTE0ZDQ2ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzixE89VGlZjIpy+SBwRncAb8ocb HRNuSyr8kFywYTtt33jXgYXC79lEqGxxDXx8sJLtraKVH0O1xY1+ZJWGkksYdZna bnuFtrFrkhFMiFUUpiEDBo8JeL1huv43UlE+hxQmGDV/j6zPZ32ozPLAhER0mI8b E1bkGQT0bZjUBg7tqBne2CpP8Vy+WacalygnjZg5HYx3A7q1UhnA0G6mQAO8M0gB VkXwE9ezsdTSOakphJrNxNwJBIahLpgF3AMlb9arRRwPkyjX2t74QxwQoDRxoF5W j9y9tyPFgw8jExnEuMFI1dQvfY7xYozJfkaCI4GfYXIusn/yOgc2fGov6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHO/lY3DMdHkq+Z1oiRfsUU1G28MB8GA1UdIwQY MBaAFIT0MNmtnLnELEvWaQ6fWBKkV6AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQt YjkwNTZlYmJjNTc2LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQtYjkwNTZlYmJjNTc2 LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMobH1lSp fmJCxtSQ++Voa7DUtfVEvK0KvsZY4VVcBqUFkYjgPCnTm6GL1zIi4Ju9Odds07e1 5JRsW71RkWFJ8L/OZjMJ7Eq4N3LEEnuMYEnTQTmSUoaFE/DfQeVkwfrnEpF8rElp 5px/wUi5dOWFxgAB35x6/xrD+RO+M2V36WDlWpwrl92G0HlzbYQF6kPCvpR5BdbA n3Um2W/Xqh6/5Te2pURqaPs4cO8hs4GCFwgnuNcJSrfKpICOEaKqxpQ1dLalu/XP gOdsc4loEKwE6oWLZQb4CdOdToInHIZSoUx1QI9Bz065eWBOI3lYEbO01eaFbdd9 Hd0ThZ6t/YOE9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:10 2026 by rpki-client