This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json) Hash identifier: XbWQOEj8d4wbmVIiUpDf88ABE92YSFYXCile5WuwQJA= Subject key identifier: 24:B4:EB:1F:BF:A6:A9:BD:ED:CA:2E:AE:A8:31:B3:F2:77:F5:C3:AA Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c Certificate serial: 019C41A211C8EA9946E7A0F4C32D1D182B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: V3VZg0OeXEvmWjNHBOAUvkPquQz9/6aeMHZdHbOKwG8=) 2: qNAwNr9sOtlnmTZXNsD7ZTCA6FQ.roa (hash: dZNLxY2R+OMbFcczhFdBzgHwABmB4UkJwEeAYi+FzG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:11:c8:ea:99:46:e7:a0:f4:c3:2d:1d:18:2b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=24b4eb1fbfa6a9bdedca2eaea831b3f277f5c3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:71:c3:c5:30:69:ea:6d:ee:d4:1d:43:8e: d9:28:d5:1d:86:7f:2c:fe:7e:f4:60:73:95:60:70: 47:05:e8:6e:ab:ac:ea:13:45:3e:76:bd:1c:fb:aa: 52:af:38:79:e9:f9:08:96:25:01:82:4f:d4:23:b7: 57:fc:f3:a8:6b:4a:5e:d9:f4:9e:08:5c:7a:38:c0: 29:b8:79:8c:e0:73:7a:11:b8:79:f8:43:2f:f0:3b: 77:3e:8e:8a:99:ad:7c:2d:b9:d0:0d:23:e6:17:10: 5f:c3:ad:e9:13:1d:3f:09:0c:bc:44:bf:8c:89:32: 6a:bd:ef:04:c2:14:d4:4f:12:8b:66:45:5d:1e:b0: 41:ef:69:26:8a:b2:90:51:e8:67:a6:a4:0a:4e:1d: ce:c3:9f:bd:a4:a1:16:62:75:83:93:ac:6b:53:79: be:2e:0c:99:45:6e:16:23:a3:87:dd:31:94:f6:b8: fe:08:e0:9d:d8:ca:60:d2:29:b3:c3:ba:43:bf:78: 95:d8:40:e5:54:89:00:fe:bf:7f:6c:68:91:c4:01: 72:c1:99:d8:f1:b4:d0:d4:78:52:27:83:bf:e9:d5: 1e:49:0e:40:96:63:f7:43:0a:75:97:ef:a3:1e:78: 05:15:9e:c9:99:0f:40:70:a3:27:76:c6:0b:86:7f: 7d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:EB:1F:BF:A6:A9:BD:ED:CA:2E:AE:A8:31:B3:F2:77:F5:C3:AA X509v3 Authority Key Identifier: keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:81:1f:a0:b2:ce:ab:d7:3f:ca:67:1d:b8:2f:1e:38:2b:f7: e3:ad:2d:53:80:04:bb:12:66:a9:54:38:c5:41:b3:4a:76:c6: cf:44:0e:55:82:9a:4e:fe:76:46:90:64:bd:13:2c:4d:9c:aa: c5:6a:4e:e3:ac:30:23:04:ca:30:5a:4b:7a:ed:86:6d:85:17: b0:d2:5e:27:6c:53:f2:34:a2:19:2a:9d:5a:cc:68:fe:14:3d: 0a:82:b7:79:13:3f:a1:57:75:e4:84:7f:2e:c9:cf:13:c0:37: 8a:45:87:65:e6:05:9a:16:86:4b:97:27:2a:ad:d6:b2:b9:d9: 29:85:e9:97:0a:7a:65:26:2d:5a:18:4a:d9:1a:4c:c4:92:07: 39:42:49:ee:51:e3:48:31:d5:9b:bd:28:4c:93:30:e4:be:48: 04:23:32:7e:cb:0b:23:a8:75:a9:72:f7:58:f4:b1:e1:83:e1: 8e:93:cf:f9:f6:cc:5a:86:a7:18:f4:d7:14:f0:55:56:22:bc: 52:13:6d:15:bb:01:8d:53:62:63:1a:e9:cf:ea:20:c2:31:01: 35:b3:dc:59:ee:3f:df:44:10:6a:bb:98:82:25:78:25:90:05: 6d:16:6c:63:5e:a7:41:8d:2b:df:64:3e:f8:f2:6a:ac:2e:8e: 5e:c5:1e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohHI6plG56D0wy0dGCtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYWUxYTI2OTY3ZGZlMjg3ZWI2MDI3NDllYzJjNmYwNWFm YmI1N2MwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD EygyNGI0ZWIxZmJmYTZhOWJkZWRjYTJlYWVhODMxYjNmMjc3ZjVjM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Vxw8Uwaept7tQdQ47ZKNUdhn8s /n70YHOVYHBHBehuq6zqE0U+dr0c+6pSrzh56fkIliUBgk/UI7dX/POoa0pe2fSe CFx6OMApuHmM4HN6Ebh5+EMv8Dt3Po6Kma18LbnQDSPmFxBfw63pEx0/CQy8RL+M iTJqve8EwhTUTxKLZkVdHrBB72kmirKQUehnpqQKTh3Ow5+9pKEWYnWDk6xrU3m+ LgyZRW4WI6OH3TGU9rj+COCd2Mpg0imzw7pDv3iV2EDlVIkA/r9/bGiRxAFywZnY 8bTQ1HhSJ4O/6dUeSQ5AlmP3Qwp1l++jHngFFZ7JmQ9AcKMndsYLhn99+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS06x+/pqm97courqgxs/J39cOqMB8GA1UdIwQY MBaAFByuGiaWff4ofrYCdJ7CxvBa+7V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt NzQ5OTA1YzMyN2IxLzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix LzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6YEfoLLO q9c/ymcduC8eOCv3460tU4AEuxJmqVQ4xUGzSnbGz0QOVYKaTv52RpBkvRMsTZyq xWpO46wwIwTKMFpLeu2GbYUXsNJeJ2xT8jSiGSqdWsxo/hQ9CoK3eRM/oVd15IR/ LsnPE8A3ikWHZeYFmhaGS5cnKq3WsrnZKYXplwp6ZSYtWhhK2RpMxJIHOUJJ7lHj SDHVm70oTJMw5L5IBCMyfssLI6h1qXL3WPSx4YPhjpPP+fbMWoanGPTXFPBVViK8 UhNtFbsBjVNiYxrpz+ogwjEBNbPcWe4/30QQaruYgiV4JZAFbRZsY16nQY0r32Q+ +PJqrC6OXsUeCw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:48 2026 by rpki-client