This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json) Hash identifier: 2mlZrrbMksk4ZhyqwPkE2jxK646bWKKHcGMh9v4Pge0= Subject key identifier: A8:86:D7:1A:2A:16:07:BE:CC:C4:EB:73:04:A6:59:23:9F:50:92:11 Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570 Certificate serial: 019C4390294C461B67B5C27E7C324B4211D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft Manifest number: 0725 Signing time: Mon 09 Feb 2026 18:00:46 +0000 Manifest this update: Mon 09 Feb 2026 18:00:46 +0000 Manifest next update: Tue 10 Feb 2026 18:00:46 +0000 Files and hashes: 1: WxnDI9dSFugc7Iy0b5YqreC9wbU.roa (hash: z//4HqyEyKzOrY+CM2iIO8ckIeunZSzbquuEiF28tBw=) 2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: XfrNp27/kh2dtdn+sxp3R4NC8sPvUargS5pgi/URbSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:29:4c:46:1b:67:b5:c2:7e:7c:32:4b:42:11:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570 Validity Not Before: Feb 9 18:00:46 2026 GMT Not After : Feb 10 18:00:46 2026 GMT Subject: CN=a886d71a2a1607beccc4eb7304a659239f509211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:48:52:41:c1:e4:b1:18:44:a2:6d:cf:55: e1:c9:a9:3d:29:f8:80:55:8a:a1:9a:f8:a5:38:52: c0:04:a0:bc:75:b5:0a:ed:11:63:5e:eb:e0:44:4a: 1f:3d:6f:a2:63:ca:03:35:5e:b0:70:63:aa:ee:8b: 2e:79:14:f0:7b:fd:f1:cc:d2:53:49:27:52:b9:da: 59:4f:73:81:03:43:8d:bf:36:7f:70:55:41:17:9f: 2a:3b:03:4b:19:82:1b:90:9d:97:59:e1:bc:cf:71: 63:4c:85:a0:82:70:21:04:9f:b3:2d:94:cf:71:9a: 08:7b:9a:45:a2:05:6f:09:49:db:2b:8f:21:da:67: 75:87:95:1d:61:34:2f:c2:cc:c4:8c:9a:fd:82:9e: 22:ae:99:d4:22:33:5c:32:d3:11:e1:63:87:f0:05: d3:b0:6f:81:e6:57:3e:a9:61:18:b6:36:8d:09:e8: f3:71:1e:ed:e3:96:cb:e0:f2:09:1a:8b:d1:90:25: 1f:67:e0:f0:48:a6:09:00:d9:e4:7a:fa:ed:d3:49: be:d5:d0:d1:a4:f5:9c:03:8e:64:ea:34:2d:06:66: 12:88:57:61:8d:ea:9c:f0:c3:4a:65:1a:65:fd:0a: e4:2d:2f:d0:9a:3c:a4:0d:01:47:3e:c8:54:1e:c1: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:D7:1A:2A:16:07:BE:CC:C4:EB:73:04:A6:59:23:9F:50:92:11 X509v3 Authority Key Identifier: keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ac:d6:4b:cd:a9:b0:b9:6f:f3:f0:a1:fe:1b:b6:75:50:53: 7a:80:c7:f4:7a:55:ee:75:06:48:b2:84:23:84:60:88:23:94: fe:fc:45:23:e5:23:5e:93:38:cf:cb:17:f2:3e:f7:5d:be:41: 57:6b:97:63:c7:fd:68:e4:56:d1:20:6f:6b:6a:54:39:db:24: de:a3:6d:09:07:aa:39:75:c6:e5:fa:1f:87:97:da:91:f1:da: 61:22:32:33:02:bd:b3:2a:a9:85:8f:96:09:27:0a:7e:bc:a3: d2:b6:da:87:6b:96:f4:d4:05:2b:5f:ef:64:b8:d9:aa:95:c1: c2:d5:1c:a4:4c:b8:d2:a3:8b:f1:10:c8:14:69:f4:66:f0:10: be:16:8e:c0:56:02:d2:d9:f6:d7:01:c5:ba:7c:77:98:70:bf: 15:be:28:ff:48:88:5c:99:b7:b2:1e:c6:9c:2c:41:a1:7b:23: 02:d9:75:ae:9c:ac:af:41:e6:f8:be:24:8c:44:6b:3c:ca:51: ae:3d:8e:b8:55:8b:29:d0:66:9a:e6:7e:f4:81:3d:11:56:6a: 34:85:f6:dc:e0:c4:6f:52:45:f5:53:98:50:7e:e6:85:ca:bf: 36:3b:9d:7e:0b:d5:e4:be:48:4a:63:67:a2:87:6a:f4:29:c3: d8:be:a0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkClMRhtntcJ+fDJLQhHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm ZTA1NzAwHhcNMjYwMjA5MTgwMDQ2WhcNMjYwMjEwMTgwMDQ2WjAzMTEwLwYDVQQD EyhhODg2ZDcxYTJhMTYwN2JlY2NjNGViNzMwNGE2NTkyMzlmNTA5MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OZIUkHB5LEYRKJtz1Xhyak9KfiA VYqhmvilOFLABKC8dbUK7RFjXuvgREofPW+iY8oDNV6wcGOq7osueRTwe/3xzNJT SSdSudpZT3OBA0ONvzZ/cFVBF58qOwNLGYIbkJ2XWeG8z3FjTIWggnAhBJ+zLZTP cZoIe5pFogVvCUnbK48h2md1h5UdYTQvwszEjJr9gp4irpnUIjNcMtMR4WOH8AXT sG+B5lc+qWEYtjaNCejzcR7t45bL4PIJGovRkCUfZ+DwSKYJANnkevrt00m+1dDR pPWcA45k6jQtBmYSiFdhjeqc8MNKZRpl/QrkLS/QmjykDQFHPshUHsEwBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiG1xoqFge+zMTrcwSmWSOfUJIRMB8GA1UdIwQY MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5 LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKzWS82p sLlv8/Ch/hu2dVBTeoDH9HpV7nUGSLKEI4RgiCOU/vxFI+UjXpM4z8sX8j73Xb5B V2uXY8f9aORW0SBva2pUOdsk3qNtCQeqOXXG5fofh5fakfHaYSIyMwK9syqphY+W CScKfryj0rbah2uW9NQFK1/vZLjZqpXBwtUcpEy40qOL8RDIFGn0ZvAQvhaOwFYC 0tn21wHFunx3mHC/Fb4o/0iIXJm3sh7GnCxBoXsjAtl1rpysr0Hm+L4kjERrPMpR rj2OuFWLKdBmmuZ+9IE9EVZqNIX23ODEb1JF9VOYUH7mhcq/NjudfgvV5L5ISmNn oodq9CnD2L6gJQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:01 2026 by rpki-client