This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json) Hash identifier: 1RVIvjhIySl2MaanEbvL6Oqqts8/UtORJUMPAm2yU6c= Subject key identifier: 94:0F:19:35:CB:8C:70:59:5A:6E:ED:0A:01:DD:F3:81:8A:C0:BC:71 Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00 Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00 Certificate serial: 019C432286D55DC9BA6BB94B2F1FEC05FED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft Manifest number: 18 Signing time: Mon 09 Feb 2026 16:01:02 +0000 Manifest this update: Mon 09 Feb 2026 16:01:02 +0000 Manifest next update: Tue 10 Feb 2026 16:01:02 +0000 Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=) 2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: iZh8XWP30tjU2Lg/6EQUsr2Gv2D58rmnw/enANUsVu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:86:d5:5d:c9:ba:6b:b9:4b:2f:1f:ec:05:fe:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00 Validity Not Before: Feb 9 16:01:02 2026 GMT Not After : Feb 10 16:01:02 2026 GMT Subject: CN=940f1935cb8c70595a6eed0a01ddf3818ac0bc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:65:54:65:db:29:34:c7:e5:fb:3f:b2:8e:7c: 3d:5c:d5:8c:e4:30:f8:53:d0:5b:7e:80:6f:10:5b: 9b:91:e3:b8:fc:4b:3f:a9:de:dd:dc:5b:8d:a3:20: 68:5c:15:3d:f1:c7:4c:e7:4c:34:5f:7f:31:79:c4: 05:3a:00:76:a0:4a:c6:d1:35:60:2f:e7:f8:45:0d: cd:e4:37:46:6b:b1:d8:d6:1f:15:d2:98:2a:bc:69: e1:1b:f2:62:3b:b3:0e:65:ae:2f:ab:d5:3b:14:82: 72:e2:93:6c:aa:d5:6f:0a:91:23:75:69:d0:83:5c: d3:de:ab:19:44:23:1f:3c:60:f8:4e:9f:0b:9a:04: 1a:be:24:13:9f:05:80:21:d4:ce:91:b0:2a:e0:b4: fc:40:48:8c:8d:87:27:9e:c1:df:d3:a0:c7:5a:53: 1d:24:47:54:ba:19:99:83:a2:70:a6:e0:0c:c3:78: 4a:f9:95:3a:ea:ba:3b:71:41:a1:b8:7f:dd:ae:f1: 1e:26:df:0e:c2:2b:96:a8:6d:4f:3a:e2:e8:e7:af: b7:26:7f:71:2d:2b:e5:5e:8d:78:0d:9e:50:42:17: c6:c9:15:e7:89:72:42:05:75:f7:a5:f4:51:00:b3: ca:75:38:2b:1b:0b:56:26:21:b8:b4:ba:57:ac:3e: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0F:19:35:CB:8C:70:59:5A:6E:ED:0A:01:DD:F3:81:8A:C0:BC:71 X509v3 Authority Key Identifier: keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ad:b2:bc:11:40:b3:57:43:45:30:f6:4a:6f:49:75:4c:69: 1c:73:bb:80:29:09:ab:e4:a9:dc:95:03:cb:15:3f:69:43:c3: 85:f6:a9:e6:28:cc:50:88:b1:55:e8:95:bf:8f:5f:61:32:ac: 91:0e:9e:bb:66:ec:d4:ab:6b:51:25:30:2b:2f:16:38:2d:5d: fa:a5:fd:95:1e:8d:1c:91:13:46:cd:0c:67:98:b1:69:29:b8: 6e:f9:e1:e7:d4:91:13:b8:7b:ef:b5:ab:76:29:0c:5b:7e:2c: 6f:39:82:a4:4a:2e:4f:86:2e:9b:08:e4:40:25:08:81:5b:64: d4:7a:ac:56:55:59:04:36:73:3b:eb:95:e0:41:ff:58:87:f6: ea:fd:7a:37:26:6c:2f:14:74:80:f1:6f:ac:39:4b:e6:c4:26: 7d:20:5c:53:36:9c:71:af:06:f3:62:32:0c:80:15:5f:01:32: fe:d5:3f:b0:73:09:48:68:27:25:a8:93:9c:f0:72:26:ab:37: 95:29:b2:98:55:ed:3b:7e:37:0a:f1:44:2a:9c:5e:44:ab:6b: 7a:f2:23:48:48:0f:fc:16:23:bc:fb:5e:43:4f:d1:ed:f2:b2: c3:a5:00:7e:d6:6a:b9:d0:1a:7b:ff:2c:d7:21:7a:3d:3a:79: 20:94:8f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIobVXcm6a7lLLx/sBf7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2N2IzMzdjZTRjMzRmZWI0YTcxZmZmODU1OWU1ZTRjOThl NDJiMDAwHhcNMjYwMjA5MTYwMTAyWhcNMjYwMjEwMTYwMTAyWjAzMTEwLwYDVQQD Eyg5NDBmMTkzNWNiOGM3MDU5NWE2ZWVkMGEwMWRkZjM4MThhYzBiYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/GVUZdspNMfl+z+yjnw9XNWM5DD4 U9BbfoBvEFubkeO4/Es/qd7d3FuNoyBoXBU98cdM50w0X38xecQFOgB2oErG0TVg L+f4RQ3N5DdGa7HY1h8V0pgqvGnhG/JiO7MOZa4vq9U7FIJy4pNsqtVvCpEjdWnQ g1zT3qsZRCMfPGD4Tp8LmgQaviQTnwWAIdTOkbAq4LT8QEiMjYcnnsHf06DHWlMd JEdUuhmZg6JwpuAMw3hK+ZU66ro7cUGhuH/drvEeJt8OwiuWqG1POuLo56+3Jn9x LSvlXo14DZ5QQhfGyRXniXJCBXX3pfRRALPKdTgrGwtWJiG4tLpXrD4OXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQPGTXLjHBZWm7tCgHd84GKwLxxMB8GA1UdIwQY MBaAFIZ7M3zkw0/rSnH/+FWeXkyY5CsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQt OTBhY2ZkYjAxZTkwLzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQtOTBhY2ZkYjAxZTkw LzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl62yvBFA s1dDRTD2Sm9JdUxpHHO7gCkJq+Sp3JUDyxU/aUPDhfap5ijMUIixVeiVv49fYTKs kQ6eu2bs1KtrUSUwKy8WOC1d+qX9lR6NHJETRs0MZ5ixaSm4bvnh59SRE7h777Wr dikMW34sbzmCpEouT4YumwjkQCUIgVtk1HqsVlVZBDZzO+uV4EH/WIf26v16NyZs LxR0gPFvrDlL5sQmfSBcUzacca8G82IyDIAVXwEy/tU/sHMJSGgnJaiTnPByJqs3 lSmymFXtO343CvFEKpxeRKtrevIjSEgP/BYjvPteQ0/R7fKyw6UAftZqudAae/8s 1yF6PTp5IJSPqg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:54 2026 by rpki-client