This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json) Hash identifier: IO0/iGF6SFs99F/mufawlr87wg5iKjQMMnHggTX+z3U= Subject key identifier: 25:81:C0:1C:30:99:BD:68:AF:D9:54:40:A3:1D:71:A4:BB:80:ED:02 Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970 Certificate serial: 019C41D8B6BD6A881F5D2ABFD2EB096EBC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft Manifest number: 064F Signing time: Mon 09 Feb 2026 10:00:47 +0000 Manifest this update: Mon 09 Feb 2026 10:00:47 +0000 Manifest next update: Tue 10 Feb 2026 10:00:47 +0000 Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: tkowkW/HjXjoJoaVPyQrLtjvcU1zZ7sEoqbPmgKx29c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b6:bd:6a:88:1f:5d:2a:bf:d2:eb:09:6e:bc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7862c299d6088718760a96168272fccbfda970 Validity Not Before: Feb 9 10:00:47 2026 GMT Not After : Feb 10 10:00:47 2026 GMT Subject: CN=2581c01c3099bd68afd95440a31d71a4bb80ed02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:08:ea:d1:27:4e:70:d4:e2:9a:12:ad:52: ac:10:a9:e1:e2:80:3d:bd:e8:a8:71:81:08:50:dc: 6c:7c:6d:ee:d1:93:8e:29:e6:57:a8:a3:bf:69:4a: 01:19:0c:34:96:fe:52:a9:df:22:be:0e:a0:07:50: d2:f5:1e:3d:cd:8c:af:4c:3f:9f:8e:d7:12:46:68: 8f:ef:32:b0:af:68:62:3e:9d:cb:ab:16:c2:e1:37: 0b:8e:e2:88:74:e4:2f:35:51:0c:b1:cb:1d:2a:7d: 1e:a0:44:46:84:e0:b1:76:53:f8:a1:09:b5:2d:10: c4:7b:cf:07:61:93:02:e1:23:2f:b6:f1:5c:34:a9: 6b:6b:a0:0b:1d:2c:5c:3f:ea:62:09:3a:4f:da:9a: d8:fe:0a:7f:2b:34:89:31:0c:97:f4:5b:17:97:ca: 30:8b:47:32:44:e4:00:96:a3:d4:be:f7:3f:02:d8: da:0f:bd:3f:40:62:42:b3:2c:2c:bc:25:1a:9e:c5: 36:41:fd:01:da:8f:3d:18:a4:7a:43:4e:60:3a:19: db:b4:24:02:2a:f1:a8:11:29:98:f5:0e:df:56:85: 07:15:da:03:d8:9e:4f:74:88:6d:e9:76:dc:b4:d8: 56:a4:14:7f:b4:f3:02:0d:d2:d1:60:68:0f:9b:0f: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:81:C0:1C:30:99:BD:68:AF:D9:54:40:A3:1D:71:A4:BB:80:ED:02 X509v3 Authority Key Identifier: keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:6b:7c:ba:74:84:bc:12:5b:9a:9d:bf:2b:17:ca:3a:60: 5d:64:95:e8:5e:06:ef:3d:68:aa:e4:cd:8e:bc:f5:e9:13:db: 3b:03:07:ac:5f:4d:e9:42:c3:72:29:43:c1:03:79:c9:fc:af: 56:ab:e2:65:87:d4:f1:24:f6:99:be:46:41:08:1e:de:b1:91: 77:c6:7b:f2:1e:7f:ce:bf:85:d2:18:5c:71:48:63:f1:a8:20: 0e:d7:a2:ca:f1:68:b4:14:3c:2e:88:b8:65:9d:a9:b5:ca:e8: a6:9e:b6:73:25:39:06:e3:16:04:47:e1:4d:83:d3:dd:ee:41: 5f:fd:87:e7:75:5d:8e:4d:ec:c2:26:7b:c8:2a:3b:3d:96:22: bd:f6:54:da:a0:a6:26:f0:3d:53:e2:89:ce:45:92:b1:30:9d: 67:94:c1:b0:1f:2b:a5:b0:5e:ad:cf:4a:1c:c5:51:8d:a1:f8: 3c:30:86:9b:5c:ac:fd:75:5f:53:bd:ef:36:96:cc:ca:06:e5: e4:b0:f0:ea:4b:98:d0:48:4e:3b:ca:3c:65:0e:0e:5c:4c:8b: e6:b4:be:f2:f9:ec:21:3a:54:37:3a:4a:fc:6c:a1:c2:d0:3d: da:82:09:8a:96:c8:b6:a7:98:25:6c:a4:08:b8:28:d7:90:12: 44:2d:d9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2La9aogfXSq/0usJbrwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm ZGE5NzAwHhcNMjYwMjA5MTAwMDQ3WhcNMjYwMjEwMTAwMDQ3WjAzMTEwLwYDVQQD EygyNTgxYzAxYzMwOTliZDY4YWZkOTU0NDBhMzFkNzFhNGJiODBlZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYII6tEnTnDU4poSrVKsEKnh4oA9 veiocYEIUNxsfG3u0ZOOKeZXqKO/aUoBGQw0lv5Sqd8ivg6gB1DS9R49zYyvTD+f jtcSRmiP7zKwr2hiPp3LqxbC4TcLjuKIdOQvNVEMscsdKn0eoERGhOCxdlP4oQm1 LRDEe88HYZMC4SMvtvFcNKlra6ALHSxcP+piCTpP2prY/gp/KzSJMQyX9FsXl8ow i0cyROQAlqPUvvc/AtjaD70/QGJCsywsvCUansU2Qf0B2o89GKR6Q05gOhnbtCQC KvGoESmY9Q7fVoUHFdoD2J5PdIht6XbctNhWpBR/tPMCDdLRYGgPmw/x3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWBwBwwmb1or9lUQKMdcaS7gO0CMB8GA1UdIwQY MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvhrfLp0 hLwSW5qdvysXyjpgXWSV6F4G7z1oquTNjrz16RPbOwMHrF9N6ULDcilDwQN5yfyv VqviZYfU8ST2mb5GQQge3rGRd8Z78h5/zr+F0hhccUhj8aggDteiyvFotBQ8Loi4 ZZ2ptcropp62cyU5BuMWBEfhTYPT3e5BX/2H53Vdjk3swiZ7yCo7PZYivfZU2qCm JvA9U+KJzkWSsTCdZ5TBsB8rpbBerc9KHMVRjaH4PDCGm1ys/XVfU73vNpbMygbl 5LDw6kuY0EhOO8o8ZQ4OXEyL5rS+8vnsITpUNzpK/GyhwtA92oIJipbItqeYJWyk CLgo15ASRC3ZuA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:30 2026 by rpki-client