This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json) Hash identifier: ujmZ4o46UZqb25r/K0/FQ9akccktjnGzSlr6/cgoZAI= Subject key identifier: F2:02:3B:C6:38:3F:D0:0C:8E:64:02:74:D0:15:5A:81:C1:2E:08:72 Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Certificate serial: 019C427DC0D3D9E60BE009F03C5A2D4EF15B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft Manifest number: 119E Signing time: Mon 09 Feb 2026 13:01:03 +0000 Manifest this update: Mon 09 Feb 2026 13:01:03 +0000 Manifest next update: Tue 10 Feb 2026 13:01:03 +0000 Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: 1mmanIh5fXKclFszVzzJA8+KJiYKHmJYP/DlEtFm7oI=) 2: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (hash: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c0:d3:d9:e6:0b:e0:09:f0:3c:5a:2d:4e:f1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Validity Not Before: Feb 9 13:01:03 2026 GMT Not After : Feb 10 13:01:03 2026 GMT Subject: CN=f2023bc6383fd00c8e640274d0155a81c12e0872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:f4:dc:13:16:f6:df:f5:62:9c:9b:a4:ad: 33:d9:33:e7:88:d4:31:c1:10:2e:8a:dd:f3:0e:8a: 3a:a7:64:98:66:88:05:a7:46:e0:6f:73:c1:f3:dc: b8:10:28:78:db:0c:61:cd:f5:9f:e4:d2:9e:bc:54: 6a:da:31:b1:e9:40:4e:39:da:7b:78:5b:86:ca:d3: 35:7a:78:57:44:90:f9:45:5d:f0:86:c4:0d:a1:3d: e6:2b:21:67:1a:25:d2:ae:bf:cc:13:5c:68:e4:a0: 9b:5d:67:54:a1:dc:5d:15:29:fe:67:5b:22:c0:bf: 4c:42:9b:30:fe:54:19:de:16:00:74:b6:cc:7d:1c: 7a:64:bf:b9:07:86:01:c1:45:21:ca:47:7d:a7:b4: f1:2d:10:15:df:ff:12:f2:5c:ca:66:5c:86:98:fa: 4f:5d:d8:72:f6:9d:fd:8e:b9:6c:e3:d1:df:f9:77: 48:0c:84:77:b7:d0:60:d1:3e:48:47:37:cb:97:c9: 2f:8c:00:c6:06:05:68:de:6f:27:68:78:7e:92:3a: 56:01:2b:1e:ef:d0:26:6e:a2:06:50:cf:64:09:96: 82:06:02:17:cb:78:c5:b6:86:82:64:b2:05:04:a4: d1:f7:dd:1e:53:f3:bf:86:d7:7d:7e:48:8f:ad:9e: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:3B:C6:38:3F:D0:0C:8E:64:02:74:D0:15:5A:81:C1:2E:08:72 X509v3 Authority Key Identifier: keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a7:9a:a0:7b:1a:15:3b:ac:f3:69:36:c8:d0:b2:98:98:eb: 39:e1:30:92:ea:77:88:f0:a1:23:f1:7a:32:d9:ee:d9:9e:b5: 72:46:16:15:f2:18:3a:9c:59:87:c4:de:42:49:ef:48:53:65: ec:1c:27:25:79:7f:0e:29:f1:f9:06:ec:6f:2f:11:b5:e3:5e: 69:49:d6:21:9c:db:6c:bc:9b:3f:36:24:cb:da:65:78:de:b2: 89:30:a1:03:cf:3a:56:0a:7a:58:19:0a:58:fe:76:82:ec:fc: e2:79:00:a8:29:e5:90:bf:f8:b5:ef:2a:2d:31:b3:9a:93:4a: 7a:0d:f7:d8:69:55:9e:95:01:11:64:d8:68:a2:ec:19:53:e3: 8b:c9:6c:d4:a7:f3:8b:41:41:4b:1b:43:33:9c:c5:25:46:0d: 07:75:80:18:cb:a1:ad:89:df:29:55:a4:ca:99:31:5d:0f:90: 25:15:2e:4c:b6:c2:15:6d:7b:05:a8:46:bc:34:9a:75:b3:02: b7:62:6c:64:1e:7a:15:ae:59:c0:69:80:17:da:e6:30:89:08: 83:46:61:fa:ed:6d:90:05:28:8e:f9:83:6d:b4:21:48:02:b9: cc:a6:13:64:7c:fc:99:14:e5:04:bb:8a:3a:b9:d3:db:f1:05: 5a:63:0a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcDT2eYL4AnwPFotTvFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2 YTE4YTMwHhcNMjYwMjA5MTMwMTAzWhcNMjYwMjEwMTMwMTAzWjAzMTEwLwYDVQQD EyhmMjAyM2JjNjM4M2ZkMDBjOGU2NDAyNzRkMDE1NWE4MWMxMmUwODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39H03BMW9t/1YpybpK0z2TPniNQx wRAuit3zDoo6p2SYZogFp0bgb3PB89y4ECh42wxhzfWf5NKevFRq2jGx6UBOOdp7 eFuGytM1enhXRJD5RV3whsQNoT3mKyFnGiXSrr/ME1xo5KCbXWdUodxdFSn+Z1si wL9MQpsw/lQZ3hYAdLbMfRx6ZL+5B4YBwUUhykd9p7TxLRAV3/8S8lzKZlyGmPpP Xdhy9p39jrls49Hf+XdIDIR3t9Bg0T5IRzfLl8kvjADGBgVo3m8naHh+kjpWASse 79AmbqIGUM9kCZaCBgIXy3jFtoaCZLIFBKTR990eU/O/htd9fkiPrZ7GWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPICO8Y4P9AMjmQCdNAVWoHBLghyMB8GA1UdIwQY MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt NTI0MWUzMWNkOGRhLzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaeaoHsa FTus82k2yNCymJjrOeEwkup3iPChI/F6Mtnu2Z61ckYWFfIYOpxZh8TeQknvSFNl 7BwnJXl/Dinx+Qbsby8RteNeaUnWIZzbbLybPzYky9pleN6yiTChA886Vgp6WBkK WP52guz84nkAqCnlkL/4te8qLTGzmpNKeg332GlVnpUBEWTYaKLsGVPji8ls1Kfz i0FBSxtDM5zFJUYNB3WAGMuhrYnfKVWkypkxXQ+QJRUuTLbCFW17BahGvDSadbMC t2JsZB56Fa5ZwGmAF9rmMIkIg0Zh+u1tkAUojvmDbbQhSAK5zKYTZHz8mRTlBLuK OrnT2/EFWmMKVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:44 2026 by rpki-client