This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json) Hash identifier: Y0W7f25/whzanM8I4f5kYhpeUW2XjOtL7nJfnJOST44= Subject key identifier: 0D:22:88:22:36:DC:C2:F3:44:FF:ED:6C:79:E5:69:64:10:08:47:02 Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe Certificate serial: 019C439034BF3C9F1BB7253A7FB5D6EC62E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft Manifest number: 1402 Signing time: Mon 09 Feb 2026 18:00:49 +0000 Manifest this update: Mon 09 Feb 2026 18:00:49 +0000 Manifest next update: Tue 10 Feb 2026 18:00:49 +0000 Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: Flaq+H6LKVzSQKfb5nuvTIKXo+SBYg4ZOle113FemHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:34:bf:3c:9f:1b:b7:25:3a:7f:b5:d6:ec:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe Validity Not Before: Feb 9 18:00:49 2026 GMT Not After : Feb 10 18:00:49 2026 GMT Subject: CN=0d22882236dcc2f344ffed6c79e5696410084702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:61:6d:e1:fe:14:2e:0e:26:0f:02:2f:72: 80:3e:d5:d6:6a:fc:33:4e:ae:c2:88:d5:6c:c3:9c: d4:6f:f1:35:3a:6d:e0:ee:ce:0b:cf:da:ad:4f:96: e8:bb:61:40:eb:ec:52:15:62:6b:c7:50:f3:63:dd: 66:03:16:bb:30:88:4f:cb:03:b9:60:b7:44:34:68: 2c:09:b5:68:53:aa:fc:2c:35:6e:c9:43:77:80:20: c9:ba:a5:d2:05:29:bb:f4:bb:b5:e0:e0:de:d1:ff: 10:86:c9:08:67:97:b5:6f:35:02:35:15:12:6c:13: fc:a8:7b:a0:11:aa:3e:aa:05:57:cf:60:89:95:9a: 69:4e:57:25:39:09:ac:26:b8:c6:cf:8c:8c:7a:20: f5:ed:88:06:e2:a6:52:82:ae:f4:24:70:5a:1b:f3: 4c:47:1d:03:26:30:ca:e3:f7:a0:84:9f:63:64:a7: 24:4f:d5:02:65:b7:38:5d:9e:eb:29:d5:2c:58:fc: 8c:86:e6:cb:8f:41:0c:5f:22:4b:25:da:b0:e3:2d: c9:96:95:a8:1c:2c:c9:3d:5c:bb:0d:43:bf:8b:58: 8a:b0:8f:69:a8:f3:aa:b2:e7:3f:c4:d1:16:22:cc: 7c:c7:db:67:47:5a:86:ce:a0:60:64:82:52:f5:2c: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:22:88:22:36:DC:C2:F3:44:FF:ED:6C:79:E5:69:64:10:08:47:02 X509v3 Authority Key Identifier: keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a3:c3:25:52:ad:4b:dc:c0:2c:e3:81:39:5c:4c:59:40:3c: 53:ed:c1:3a:61:52:78:d7:a0:ea:45:23:77:52:23:44:42:ad: e2:39:c1:9c:0b:48:35:ab:7d:3d:c5:23:dd:8c:e7:5b:f4:95: 6d:3a:46:a1:d5:f4:cc:ce:86:a4:ce:64:06:4f:4e:d3:b4:79: b9:fd:40:06:61:73:bb:84:87:89:74:c1:9e:2a:70:a1:44:cd: da:fe:6b:ff:5a:04:df:16:0b:db:89:b2:f2:8e:cf:01:cb:c7: ae:1d:00:d5:cd:54:8a:71:9a:86:b5:53:77:2e:30:e8:60:63: 6c:dd:95:da:8f:e6:38:5f:ec:cc:00:55:bf:73:be:6f:b2:ab: 34:41:c5:9b:fb:db:d2:6e:94:2a:93:db:1b:b4:d5:67:36:53: 16:55:b3:35:cf:3d:9d:16:94:4a:76:07:37:69:8b:48:b7:8e: 34:56:8b:82:06:0c:15:58:1c:94:91:cb:d3:8c:66:87:5b:b3: d9:70:78:55:b4:52:58:ea:b4:f6:78:35:ce:f4:67:71:1e:37: cf:1f:15:70:75:7c:a6:9b:02:40:73:38:69:25:2e:9d:e6:83: 64:50:38:9e:96:75:40:ad:be:ef:8d:78:89:81:42:61:8d:bf: 11:17:ac:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDS/PJ8btyU6f7XW7GLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjQ3YjY1YTUyNTMzMjY5YmQyMTk4MTNhNTIwM2FmZGQ5 ZTVkYmUwHhcNMjYwMjA5MTgwMDQ5WhcNMjYwMjEwMTgwMDQ5WjAzMTEwLwYDVQQD EygwZDIyODgyMjM2ZGNjMmYzNDRmZmVkNmM3OWU1Njk2NDEwMDg0NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1hbeH+FC4OJg8CL3KAPtXWavwz Tq7CiNVsw5zUb/E1Om3g7s4Lz9qtT5bou2FA6+xSFWJrx1DzY91mAxa7MIhPywO5 YLdENGgsCbVoU6r8LDVuyUN3gCDJuqXSBSm79Lu14ODe0f8QhskIZ5e1bzUCNRUS bBP8qHugEao+qgVXz2CJlZppTlclOQmsJrjGz4yMeiD17YgG4qZSgq70JHBaG/NM Rx0DJjDK4/eghJ9jZKckT9UCZbc4XZ7rKdUsWPyMhubLj0EMXyJLJdqw4y3JlpWo HCzJPVy7DUO/i1iKsI9pqPOqsuc/xNEWIsx8x9tnR1qGzqBgZIJS9SxJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0iiCI23MLzRP/tbHnlaWQQCEcCMB8GA1UdIwQY MBaAFIX0e2WlJTMmm9IZgTpSA6/dnl2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYt MjQxMzc4MmM3MTY2LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYtMjQxMzc4MmM3MTY2 LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqPDJVKt S9zALOOBOVxMWUA8U+3BOmFSeNeg6kUjd1IjREKt4jnBnAtINat9PcUj3YznW/SV bTpGodX0zM6GpM5kBk9O07R5uf1ABmFzu4SHiXTBnipwoUTN2v5r/1oE3xYL24my 8o7PAcvHrh0A1c1UinGahrVTdy4w6GBjbN2V2o/mOF/szABVv3O+b7KrNEHFm/vb 0m6UKpPbG7TVZzZTFlWzNc89nRaUSnYHN2mLSLeONFaLggYMFVgclJHL04xmh1uz 2XB4VbRSWOq09ng1zvRncR43zx8VcHV8ppsCQHM4aSUuneaDZFA4npZ1QK2+7414 iYFCYY2/EReszw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:06 2026 by rpki-client