This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json) Hash identifier: IVZt7pUkWxeJEnWaqLCNGxtHaSMDBtpkUL0TcBaxsec= Subject key identifier: AD:95:07:7B:74:33:5D:54:C7:B0:68:14:4F:7D:F2:37:3C:35:AC:BF Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7 Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7 Certificate serial: 019C42EAFEE5C22E8989C23C261E922D81D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft Manifest number: 11D9 Signing time: Mon 09 Feb 2026 15:00:22 +0000 Manifest this update: Mon 09 Feb 2026 15:00:22 +0000 Manifest next update: Tue 10 Feb 2026 15:00:22 +0000 Files and hashes: 1: 0Esi1JdAsAMlcmdtnGTaonQpuF8.roa (hash: jA0reA7/GEa0j86CVpuQcx390RyaeWC5ePIdBFA+M1E=) 2: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: jiV8a/YlsTRdtj7qPEpdVW5Aw4mwCagOrdhr+YwVlLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fe:e5:c2:2e:89:89:c2:3c:26:1e:92:2d:81:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7 Validity Not Before: Feb 9 15:00:22 2026 GMT Not After : Feb 10 15:00:22 2026 GMT Subject: CN=ad95077b74335d54c7b068144f7df2373c35acbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:1e:4f:bc:ea:3a:9a:06:b9:d7:df:3d:80: 4f:7d:01:8e:d5:f0:a9:d4:af:35:c0:97:fa:f2:e1: 1f:77:59:a6:6e:2c:a7:0c:70:06:3c:a5:3b:12:eb: d4:71:88:32:c9:26:f4:3e:7f:a4:22:04:71:48:33: c7:fc:da:6e:29:f0:17:62:b6:ac:2a:0f:f8:de:b4: f3:c9:30:02:fc:fb:f5:3c:0a:30:d8:5b:56:79:df: 94:c3:bc:31:61:0d:08:e6:3d:44:f5:ae:1c:e7:b6: e7:ad:d5:7b:73:db:56:ad:76:5e:69:ce:52:e5:b9: 6c:10:a5:ac:2a:43:ad:e3:ab:a8:7a:ef:9b:18:bb: 57:84:f2:58:78:b1:9f:c9:17:a7:e4:51:84:9d:c4: 4c:b6:05:2f:8e:d2:c0:35:c6:75:48:81:83:0e:b9: 58:d2:b5:b9:75:6a:b7:d0:9c:00:6c:be:df:8b:9e: 3d:2f:04:2d:95:a9:bc:38:6a:e5:25:10:da:ff:b4: 0b:40:6e:fd:f8:a6:15:93:52:4a:d3:ad:89:db:a7: 4e:19:9e:6e:f8:60:40:1a:e0:ee:14:43:db:0d:e4: 5c:2d:c2:78:78:cb:e7:ed:16:95:f2:26:5a:1e:dc: 4c:c9:1a:24:20:94:2b:2a:19:e2:40:da:8d:fa:bb: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:07:7B:74:33:5D:54:C7:B0:68:14:4F:7D:F2:37:3C:35:AC:BF X509v3 Authority Key Identifier: keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ed:4a:8c:05:71:46:4d:8e:ee:b1:84:54:e0:93:fc:3b:5f: 6c:51:12:d9:81:11:4c:f9:52:cf:95:74:7a:32:c9:99:ea:94: de:fb:41:7c:ea:71:d0:9f:55:84:52:d4:da:dc:8e:c9:b6:a5: 0e:71:ba:aa:fa:1b:20:bb:c5:e2:ec:91:e0:60:5b:27:a5:10: 07:8a:63:97:7e:ac:a5:b7:c7:8e:e6:bc:c2:36:9d:5e:1e:75: 12:02:a7:d7:52:d9:5f:c7:b7:05:cf:ac:25:f1:1f:d6:00:be: d2:57:f0:11:8b:35:05:c8:59:e8:21:5b:58:13:43:7c:4b:ed: b0:4b:8d:f6:ad:ae:07:28:41:3c:f6:89:77:9e:81:97:f8:4b: eb:4f:6a:e1:dc:52:73:47:98:60:1a:d5:e1:48:53:ad:75:b8: d9:5c:d3:ce:42:23:2c:90:cb:24:c1:34:dc:b8:67:be:ef:48: 7c:5e:93:91:d6:2f:f8:c3:84:09:28:a4:d4:b1:b9:d3:fa:0a: f0:39:d8:c4:85:52:74:ee:75:82:02:ee:e6:6b:26:a3:bd:7a: 3a:7b:e4:eb:51:45:8d:af:7e:cf:d7:83:37:50:a5:7d:d2:8c: 04:0b:70:e8:37:03:90:6b:3d:4e:b2:2c:4d:96:37:cf:f4:a5: f6:de:67:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6v7lwi6JicI8Jh6SLYHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZmZhNTQyZjNkOGM5YjA3YmY3NmVhZThhODY5ODVhM2Q3 YjRkYzcwHhcNMjYwMjA5MTUwMDIyWhcNMjYwMjEwMTUwMDIyWjAzMTEwLwYDVQQD EyhhZDk1MDc3Yjc0MzM1ZDU0YzdiMDY4MTQ0ZjdkZjIzNzNjMzVhY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2UeT7zqOpoGudffPYBPfQGO1fCp 1K81wJf68uEfd1mmbiynDHAGPKU7EuvUcYgyySb0Pn+kIgRxSDPH/NpuKfAXYras Kg/43rTzyTAC/Pv1PAow2FtWed+Uw7wxYQ0I5j1E9a4c57bnrdV7c9tWrXZeac5S 5blsEKWsKkOt46uoeu+bGLtXhPJYeLGfyRen5FGEncRMtgUvjtLANcZ1SIGDDrlY 0rW5dWq30JwAbL7fi549LwQtlam8OGrlJRDa/7QLQG79+KYVk1JK062J26dOGZ5u +GBAGuDuFEPbDeRcLcJ4eMvn7RaV8iZaHtxMyRokIJQrKhniQNqN+rtFiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2VB3t0M11Ux7BoFE998jc8Nay/MB8GA1UdIwQY MBaAFIT/pULz2Mmwe/duroqGmFo9e03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEt N2MwZmQyOWNmM2U5LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEtN2MwZmQyOWNmM2U5 LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe1KjAVx Rk2O7rGEVOCT/DtfbFES2YERTPlSz5V0ejLJmeqU3vtBfOpx0J9VhFLU2tyOybal DnG6qvobILvF4uyR4GBbJ6UQB4pjl36spbfHjua8wjadXh51EgKn11LZX8e3Bc+s JfEf1gC+0lfwEYs1BchZ6CFbWBNDfEvtsEuN9q2uByhBPPaJd56Bl/hL609q4dxS c0eYYBrV4UhTrXW42VzTzkIjLJDLJME03Lhnvu9IfF6TkdYv+MOECSik1LG50/oK 8DnYxIVSdO51ggLu5msmo716Onvk61FFja9+z9eDN1ClfdKMBAtw6DcDkGs9TrIs TZY3z/Sl9t5nnw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:42 2026 by rpki-client