This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json) Hash identifier: 032ITrWDREy74PTvL0y5czRQrbZ0lTa4ZARaR8ozXnA= Subject key identifier: 2E:74:E4:4A:D3:B8:94:A2:06:54:81:72:48:86:B1:95:4D:B1:F4:A9 Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e Certificate serial: 019C427D548CAD53E32C9139A413A407011A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft Manifest number: 0341 Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: gn5iHop81t7RZOHw2yFbMWLVun0rMq32dr8wTgAuA7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:54:8c:ad:53:e3:2c:91:39:a4:13:a4:07:01:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=2e74e44ad3b894a2065481724886b1954db1f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:bd:20:3e:70:8d:d1:d7:37:3a:e7:4f:ce: 72:14:0b:0a:f0:d8:38:e0:2f:b9:b9:b0:16:47:7a: a5:0f:7c:2c:0d:71:a9:ae:e3:74:d4:b1:40:a1:24: 31:14:ce:7c:e4:06:ef:b5:4b:d5:b4:47:c7:84:4d: 7f:0a:3a:69:5d:76:cb:e6:c5:4c:a9:0e:aa:50:c7: bf:bf:00:fc:5a:f2:e3:4a:7a:1d:36:48:d8:41:9f: ac:79:7e:c4:75:61:1c:d7:52:b1:05:3d:83:c7:25: a1:6b:27:56:34:06:c4:3a:bc:c3:24:07:9e:75:78: 92:1e:92:04:f7:6d:fa:8d:de:1f:52:2b:53:ae:93: f6:f2:db:d7:ea:f5:55:1b:6e:63:76:65:90:3b:97: 69:4e:aa:4c:3c:91:89:a1:e8:8f:e9:ca:b7:08:dd: c4:65:eb:3f:ad:ff:0e:33:a5:77:43:9a:25:4b:6b: c7:db:c4:1f:2e:7c:47:56:3f:1b:8f:b0:58:ae:2c: 63:a1:19:59:bd:b8:56:23:8b:7b:bc:3b:30:87:2b: d9:ec:c9:44:46:4d:e0:ba:70:d1:5b:c2:06:f2:e6: d8:04:8f:a3:72:3c:70:65:34:7f:55:f5:08:f6:7a: e0:1d:50:41:0a:17:bb:65:5f:d9:06:d2:21:60:8c: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:E4:4A:D3:B8:94:A2:06:54:81:72:48:86:B1:95:4D:B1:F4:A9 X509v3 Authority Key Identifier: keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:90:f0:8a:6a:2c:99:af:5c:ea:12:b9:e5:70:ea:a1:f4:22: 87:68:bf:b2:90:9d:a2:ec:0b:16:09:14:b4:50:49:90:ff:17: cc:97:6f:ea:fa:9f:68:81:d6:2d:68:cc:98:eb:3d:c6:a5:6d: 2f:b0:85:f2:b8:bd:74:29:5d:fd:d8:41:9a:65:2e:df:a8:b7: 71:d2:66:84:54:a4:08:e8:96:0d:74:e7:83:64:d2:f6:f7:7b: c7:42:fe:10:10:a2:9e:fa:1c:15:f1:78:e3:b2:32:3c:71:ff: 3b:f6:a1:d6:b1:63:bd:6d:b0:8e:3d:1c:65:ae:0b:72:f4:8a: 16:40:73:37:d4:45:59:7f:3e:02:92:d5:35:73:57:15:b6:8c: 80:08:2f:48:84:88:22:bd:8c:a3:90:98:99:c7:1e:61:06:1a: 0b:74:9f:d4:aa:c0:a5:44:e7:9b:1b:a1:6b:24:76:44:12:4f: ea:3e:8b:44:6c:6a:3c:fc:a1:60:4b:52:0a:f6:ce:5c:fc:24: 54:55:c6:08:c0:2a:fc:b0:b7:32:a4:8d:f2:4e:4b:28:ab:d9: 80:eb:1e:4a:54:1c:42:c7:98:d8:f1:64:23:3e:d8:23:ab:a6: 2f:0e:fd:19:60:53:3a:87:17:29:06:19:25:ec:b1:1d:18:ae: ea:3d:21:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVSMrVPjLJE5pBOkBwEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm MTA5NGUwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EygyZTc0ZTQ0YWQzYjg5NGEyMDY1NDgxNzI0ODg2YjE5NTRkYjFmNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbS9ID5wjdHXNzrnT85yFAsK8Ng4 4C+5ubAWR3qlD3wsDXGpruN01LFAoSQxFM585AbvtUvVtEfHhE1/CjppXXbL5sVM qQ6qUMe/vwD8WvLjSnodNkjYQZ+seX7EdWEc11KxBT2DxyWhaydWNAbEOrzDJAee dXiSHpIE9236jd4fUitTrpP28tvX6vVVG25jdmWQO5dpTqpMPJGJoeiP6cq3CN3E Zes/rf8OM6V3Q5olS2vH28QfLnxHVj8bj7BYrixjoRlZvbhWI4t7vDswhyvZ7MlE Rk3gunDRW8IG8ubYBI+jcjxwZTR/VfUI9nrgHVBBChe7ZV/ZBtIhYIwLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC505ErTuJSiBlSBckiGsZVNsfSpMB8GA1UdIwQY MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpDwimos ma9c6hK55XDqofQih2i/spCdouwLFgkUtFBJkP8XzJdv6vqfaIHWLWjMmOs9xqVt L7CF8ri9dCld/dhBmmUu36i3cdJmhFSkCOiWDXTng2TS9vd7x0L+EBCinvocFfF4 47IyPHH/O/ah1rFjvW2wjj0cZa4LcvSKFkBzN9RFWX8+ApLVNXNXFbaMgAgvSISI Ir2Mo5CYmcceYQYaC3Sf1KrApUTnmxuhayR2RBJP6j6LRGxqPPyhYEtSCvbOXPwk VFXGCMAq/LC3MqSN8k5LKKvZgOseSlQcQseY2PFkIz7YI6umLw79GWBTOocXKQYZ JeyxHRiu6j0hlg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:53 2026 by rpki-client