This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json) Hash identifier: y3QG0qCZEM0Gee78LJIm1vL3KYpLKZCUfFaqGeUc2g8= Subject key identifier: 58:D5:F3:38:B3:E1:79:77:CD:26:B0:3D:FB:6F:0E:86:A0:D2:33:86 Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c Certificate serial: 019C4358EAB1A584428438CF7ED1EBFB8EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft Manifest number: 0B1A Signing time: Mon 09 Feb 2026 17:00:26 +0000 Manifest this update: Mon 09 Feb 2026 17:00:26 +0000 Manifest next update: Tue 10 Feb 2026 17:00:26 +0000 Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: yZl6lPTcLnsTXFPrVumfBusG3oFcN1XaDELMtrwpeDQ=) 2: LyC_vUctmu4Jy1dYcPIwrODD2Ns.roa (hash: yIwrLI/p+BAFGpVM3yWfqZ2AnOKV2a2znACWvzNWVRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:ea:b1:a5:84:42:84:38:cf:7e:d1:eb:fb:8e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c Validity Not Before: Feb 9 17:00:26 2026 GMT Not After : Feb 10 17:00:26 2026 GMT Subject: CN=58d5f338b3e17977cd26b03dfb6f0e86a0d23386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:38:5f:ba:4b:c1:a2:be:92:70:23:26:d4: 5a:8b:cd:ac:17:04:0a:24:7e:f4:10:ec:cb:bd:77: 9e:e8:6b:20:e2:a6:5c:ac:fe:e0:1e:d1:41:9c:99: 2f:f9:cf:59:be:ab:b9:78:50:42:60:cf:6e:85:d0: 9c:49:6c:3b:d5:98:af:6f:e8:1b:98:a5:d0:8f:86: 0d:79:9c:45:4b:23:e6:e1:1b:bf:51:61:e3:b6:3a: 3c:2c:46:79:24:7b:0b:17:b1:7c:a7:5c:e1:ab:1b: 7c:96:1a:87:89:2e:2b:61:f1:ff:8f:47:7e:7b:ed: 1b:6b:74:c8:34:19:de:79:6e:6b:c2:6c:da:24:ee: bb:63:87:8c:7a:cf:fd:f1:e0:53:79:23:51:97:43: 54:79:06:04:36:99:10:24:34:73:ff:c7:6d:39:2f: 11:f3:7e:74:99:f0:4c:e8:6d:df:60:c9:33:90:60: b8:d6:0b:c4:16:0d:cb:b4:3d:86:d4:f8:c6:fa:e9: 47:af:2e:f0:b6:97:c8:80:2b:f1:7c:68:4c:58:4c: e4:b9:8e:19:d5:58:97:68:86:9c:7c:6b:07:6b:26: 50:6b:f5:ab:80:a3:4c:78:af:0d:38:17:15:5d:70: 82:82:a9:24:c3:df:cf:f1:09:bf:ca:ff:b1:38:79: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D5:F3:38:B3:E1:79:77:CD:26:B0:3D:FB:6F:0E:86:A0:D2:33:86 X509v3 Authority Key Identifier: keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c9:36:ac:c6:9c:86:78:3a:0d:c9:70:5f:a2:50:57:dd:ad: ec:3f:c3:e6:6f:19:3d:fb:39:a2:a5:17:68:7c:65:90:d7:44: 6b:a0:eb:81:37:6e:dc:7d:ba:25:9c:a3:bb:1d:e9:02:86:ea: 3c:0b:71:1c:01:96:e2:9f:89:07:53:da:c2:bc:8c:ea:8f:d6: 54:cc:d1:76:86:8e:96:4f:b7:8e:de:5e:b0:3d:f1:f2:a8:ed: 17:35:b3:dd:bd:45:fc:94:ae:39:e6:2f:9b:d1:36:ee:e3:d8: 7a:24:04:28:ba:b1:f0:6b:ff:39:8d:6f:a5:95:17:7f:2a:be: 62:8d:e6:3d:68:ea:c6:34:af:7d:cb:4e:fe:66:cf:75:1d:69: 6c:a6:fa:17:b0:ab:28:fd:ef:c0:2c:ab:b2:a6:ed:5a:58:a9: 7a:5e:6a:7c:b1:2e:f0:d3:95:dd:db:bb:db:ba:46:d6:85:77: 69:09:89:30:26:af:74:df:26:70:00:45:72:8d:bd:69:40:9b: 3d:a7:cd:15:88:b1:6c:8b:a5:43:39:15:46:d9:05:31:86:81: 5d:f6:34:e1:85:31:d0:7b:4c:09:2e:da:08:ff:3a:2c:92:07: 85:d3:31:35:e2:a9:9d:ba:2a:26:33:ee:1d:5a:0a:5f:a6:ed: 4b:9b:9d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOqxpYRChDjPftHr+46iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTA4YTQ4NWRmYWYwNmE5MzFmNTQzYzA4NWEwMDljNmFl YTJkOWMwHhcNMjYwMjA5MTcwMDI2WhcNMjYwMjEwMTcwMDI2WjAzMTEwLwYDVQQD Eyg1OGQ1ZjMzOGIzZTE3OTc3Y2QyNmIwM2RmYjZmMGU4NmEwZDIzMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7k4X7pLwaK+knAjJtRai82sFwQK JH70EOzLvXee6Gsg4qZcrP7gHtFBnJkv+c9Zvqu5eFBCYM9uhdCcSWw71Zivb+gb mKXQj4YNeZxFSyPm4Ru/UWHjtjo8LEZ5JHsLF7F8p1zhqxt8lhqHiS4rYfH/j0d+ e+0ba3TINBneeW5rwmzaJO67Y4eMes/98eBTeSNRl0NUeQYENpkQJDRz/8dtOS8R 8350mfBM6G3fYMkzkGC41gvEFg3LtD2G1PjG+ulHry7wtpfIgCvxfGhMWEzkuY4Z 1ViXaIacfGsHayZQa/WrgKNMeK8NOBcVXXCCgqkkw9/P8Qm/yv+xOHnHVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjV8ziz4Xl3zSawPftvDoag0jOGMB8GA1UdIwQY MBaAFNYQikhd+vBqkx9UPAhaAJxq6i2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEt YjZmOWRmNDU1MjQ5LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEtYjZmOWRmNDU1MjQ5 LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsk2rMac hng6DclwX6JQV92t7D/D5m8ZPfs5oqUXaHxlkNdEa6DrgTdu3H26JZyjux3pAobq PAtxHAGW4p+JB1PawryM6o/WVMzRdoaOlk+3jt5esD3x8qjtFzWz3b1F/JSuOeYv m9E27uPYeiQEKLqx8Gv/OY1vpZUXfyq+Yo3mPWjqxjSvfctO/mbPdR1pbKb6F7Cr KP3vwCyrsqbtWlipel5qfLEu8NOV3du727pG1oV3aQmJMCavdN8mcABFco29aUCb PafNFYixbIulQzkVRtkFMYaBXfY04YUx0HtMCS7aCP86LJIHhdMxNeKpnboqJjPu HVoKX6btS5udqw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:24 2026 by rpki-client