This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json) Hash identifier: k753EzSyLsY/zzZJcPTLvX/4yPRG9ck7ekBk5bvau0Y= Subject key identifier: D1:20:6F:EF:52:87:C6:F1:3C:48:5C:2A:E0:43:46:61:98:53:80:3F Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320 Certificate serial: 019C43FE15B28533DCD4DA0ED122062D9E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft Manifest number: 0288 Signing time: Mon 09 Feb 2026 20:00:51 +0000 Manifest this update: Mon 09 Feb 2026 20:00:51 +0000 Manifest next update: Tue 10 Feb 2026 20:00:51 +0000 Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=) 2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: Fq4fywFl3niZuE14jV+hT3xeCzS85vBIR3SCPoCWYJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:15:b2:85:33:dc:d4:da:0e:d1:22:06:2d:9e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320 Validity Not Before: Feb 9 20:00:51 2026 GMT Not After : Feb 10 20:00:51 2026 GMT Subject: CN=d1206fef5287c6f13c485c2ae04346619853803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:27:e9:73:91:1c:2a:53:87:60:da:30:f3: 42:c1:c3:40:a8:46:20:e0:51:1e:c1:ae:ae:59:b8: 40:62:d7:df:21:61:33:5c:a2:47:b0:53:0b:cc:61: 9b:3e:2c:e2:dc:86:48:e0:ed:27:ce:0a:8c:bd:cb: 1b:fd:2a:7a:97:c3:be:a2:fa:ac:4c:b2:ba:87:d5: 30:1b:f9:7b:55:4c:18:51:80:72:ac:e6:b8:d9:f5: 79:a4:f9:97:2f:41:81:2c:26:2b:fb:20:2c:c9:fe: 14:57:bc:03:aa:90:18:2c:50:fe:47:f0:e5:c1:01: 83:bf:fe:30:77:ff:13:e8:f9:c1:c4:e1:95:d4:1a: f6:15:a3:52:04:ff:c0:dc:9a:bf:1d:74:d7:15:cb: 24:eb:48:65:ff:68:36:d7:18:8c:85:9a:34:ec:d9: 63:e8:42:c3:80:70:eb:83:28:d9:9b:6c:f8:d9:c4: 08:0d:6d:0c:64:3d:77:b6:c8:57:30:ef:fa:87:15: 23:86:61:7a:5a:22:c2:0f:df:70:c6:33:8a:f7:0a: f5:da:d3:df:20:d9:c1:f2:b3:0f:61:e3:6e:c6:a9: 4a:18:ae:dc:b7:2b:5a:ef:ce:0c:1d:21:8f:0c:8b: 39:5c:99:73:44:15:7a:01:69:07:0a:d6:06:15:30: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:20:6F:EF:52:87:C6:F1:3C:48:5C:2A:E0:43:46:61:98:53:80:3F X509v3 Authority Key Identifier: keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:5f:ae:dd:c2:05:1b:2a:1d:bf:12:82:0d:93:ed:32:ff: b1:ce:2c:80:95:88:27:52:fe:bc:db:73:80:b4:c4:cf:30:77: 6a:8f:7b:9e:25:cf:04:a2:98:70:6d:0a:14:b2:e9:38:0b:97: 76:5f:b4:10:ab:70:ea:34:f3:99:74:e0:87:64:ef:6e:61:0a: 10:e2:4e:61:74:b8:cf:3c:2b:53:0d:c2:bc:dd:79:e4:1d:c6: f9:49:d9:d4:7a:7d:a9:4c:d8:42:7b:4b:80:b1:6b:e5:cb:a5: 77:00:3a:c7:c2:cb:74:c8:88:be:ad:0f:a0:af:02:11:32:41: d4:1b:97:07:7f:e5:5e:de:f5:6f:91:65:3f:17:38:e3:97:59: 9a:af:89:53:84:e5:a1:d7:ac:87:d2:c7:f6:61:cd:f0:e6:2c: 7c:82:ca:e8:64:57:57:19:86:33:7a:32:03:74:cc:1b:df:e8: d8:a4:8b:45:fd:95:19:6a:fd:6e:18:7e:23:09:0c:6f:d0:8e: fb:d7:41:4e:6f:47:4b:73:1d:e8:b4:2e:38:7c:c3:1b:49:55: 75:96:8d:f5:2b:3c:df:0a:ab:a6:9f:e6:95:3a:15:8d:99:ea: 70:60:7e:0c:79:15:25:a8:25:68:99:a1:bd:11:33:a6:64:88: 16:a8:5c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/hWyhTPc1NoO0SIGLZ4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy ZjAzMjAwHhcNMjYwMjA5MjAwMDUxWhcNMjYwMjEwMjAwMDUxWjAzMTEwLwYDVQQD EyhkMTIwNmZlZjUyODdjNmYxM2M0ODVjMmFlMDQzNDY2MTk4NTM4MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRsn6XORHCpTh2DaMPNCwcNAqEYg 4FEewa6uWbhAYtffIWEzXKJHsFMLzGGbPizi3IZI4O0nzgqMvcsb/Sp6l8O+ovqs TLK6h9UwG/l7VUwYUYByrOa42fV5pPmXL0GBLCYr+yAsyf4UV7wDqpAYLFD+R/Dl wQGDv/4wd/8T6PnBxOGV1Br2FaNSBP/A3Jq/HXTXFcsk60hl/2g21xiMhZo07Nlj 6ELDgHDrgyjZm2z42cQIDW0MZD13tshXMO/6hxUjhmF6WiLCD99wxjOK9wr12tPf INnB8rMPYeNuxqlKGK7ctyta784MHSGPDIs5XJlzRBV6AWkHCtYGFTBx2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEgb+9Sh8bxPEhcKuBDRmGYU4A/MB8GA1UdIwQY MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1 LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQxfrt3C BRsqHb8Sgg2T7TL/sc4sgJWIJ1L+vNtzgLTEzzB3ao97niXPBKKYcG0KFLLpOAuX dl+0EKtw6jTzmXTgh2TvbmEKEOJOYXS4zzwrUw3CvN155B3G+UnZ1Hp9qUzYQntL gLFr5culdwA6x8LLdMiIvq0PoK8CETJB1BuXB3/lXt71b5FlPxc445dZmq+JU4Tl odesh9LH9mHN8OYsfILK6GRXVxmGM3oyA3TMG9/o2KSLRf2VGWr9bhh+IwkMb9CO +9dBTm9HS3Md6LQuOHzDG0lVdZaN9Ss83wqrpp/mlToVjZnqcGB+DHkVJaglaJmh vREzpmSIFqhcyg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:24 2026 by rpki-client