This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json) Hash identifier: DK38teDP1tURKkedhu1YQdqiPGzPE8TDRZM6KFOA7dQ= Subject key identifier: A5:58:A8:8D:83:99:08:68:1E:C0:0A:58:45:23:68:FC:4E:18:BE:BF Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821 Certificate serial: 019C4435283BC114A11B61FA33DBDF32DCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft Manifest number: 0F85 Signing time: Mon 09 Feb 2026 21:01:00 +0000 Manifest this update: Mon 09 Feb 2026 21:01:00 +0000 Manifest next update: Tue 10 Feb 2026 21:01:00 +0000 Files and hashes: 1: 6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa (hash: Ee0DlgRuUV1WD66xgP4nuWzTz+9zaw/a3ltY55J5D/I=) 2: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: 3/A6rqX7h28mq69tz/ZP/78oWSK4/jFU7z+aEpydKls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:28:3b:c1:14:a1:1b:61:fa:33:db:df:32:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821 Validity Not Before: Feb 9 21:01:00 2026 GMT Not After : Feb 10 21:01:00 2026 GMT Subject: CN=a558a88d839908681ec00a58452368fc4e18bebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:6b:3d:71:99:38:c1:8a:20:85:52:98:6a: b8:ad:b7:a3:ac:91:a8:5e:e2:e5:00:fc:8a:44:a1: 22:36:4c:d4:89:83:b1:f7:c3:c1:d2:30:18:d9:07: 64:64:50:4d:52:38:d9:1f:00:b7:b1:d8:7f:08:c7: b0:e3:f6:fe:9d:66:c5:d9:86:0c:ec:f0:fd:78:50: 03:1c:5e:cd:43:7b:8e:67:71:18:bb:e5:f5:8b:41: 9a:8e:5f:ee:8c:7b:c4:ab:8a:06:81:1b:57:85:64: b8:8a:32:3c:dc:cb:52:25:88:21:a9:8b:5c:47:4b: fb:4a:95:f1:ac:64:75:cc:bf:49:e7:94:10:87:73: 05:18:a0:07:01:dd:0e:dd:81:66:2d:74:19:42:1a: a9:01:fd:bf:82:fe:bc:14:65:fb:9d:0d:15:c8:6d: d2:35:66:eb:0b:ec:a1:d2:42:46:e9:2f:25:3e:21: 28:ca:d4:7d:a3:77:0c:e3:1d:2e:41:6c:21:f7:29: e9:83:15:e7:98:ef:8c:c1:2a:fc:17:af:6c:c6:6e: 5e:9a:f5:91:5b:86:b5:64:44:c1:05:1b:7c:3a:1b: 16:c5:4b:0e:a6:d3:71:1f:6e:f5:e3:e7:ce:c7:bb: 67:78:1b:c0:20:f3:f5:f9:70:4d:ff:d9:a4:c8:a3: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:58:A8:8D:83:99:08:68:1E:C0:0A:58:45:23:68:FC:4E:18:BE:BF X509v3 Authority Key Identifier: keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:29:86:24:ae:d3:83:00:49:ad:88:be:86:3a:4b:fb:23:3c: 11:c9:ab:55:1e:03:cf:46:53:e4:cf:f1:ea:be:35:38:23:20: c2:e4:38:bb:72:c7:06:ac:c8:b2:9a:ff:a0:89:7d:b8:e1:3e: aa:c7:ea:a7:d2:a3:fc:ea:ba:39:d8:fa:54:a1:21:74:51:95: 0d:70:a3:6b:c3:0b:34:70:c0:57:0a:cf:fd:4a:f5:8a:dc:42: dc:85:2d:c9:51:39:2a:5f:6f:20:75:66:79:02:ad:53:8a:ee: 71:d5:d0:5f:df:17:0d:2d:ff:1c:a9:ac:fc:53:40:ee:02:4e: b6:0f:72:df:cb:39:f1:84:ac:80:4d:57:40:21:ef:25:e6:01: 30:6a:07:fd:ff:ad:c3:4d:ab:ba:d3:92:30:33:36:96:e4:19: 33:3b:2e:d2:50:49:d8:d3:24:f0:e5:92:15:4c:e4:58:bf:b2: b0:8b:fc:cd:4f:7c:86:83:a0:a5:4a:b9:16:fb:af:dc:ca:e2: 41:bc:32:04:02:d5:c1:0d:54:13:92:c2:ea:15:d2:b9:c8:29: fd:8d:77:33:f7:d9:66:5c:c4:c2:41:f2:76:df:a8:06:a9:b3: 20:c2:9c:3b:34:cb:c4:25:2a:96:24:3c:3e:71:05:fe:87:c4: ab:fd:8c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENSg7wRShG2H6M9vfMtzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDhhNTllZDk4ZjU5YTBlYTBlNmM0Mzc5YzMwZjViZDVm MjA4MjEwHhcNMjYwMjA5MjEwMTAwWhcNMjYwMjEwMjEwMTAwWjAzMTEwLwYDVQQD EyhhNTU4YTg4ZDgzOTkwODY4MWVjMDBhNTg0NTIzNjhmYzRlMThiZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMRrPXGZOMGKIIVSmGq4rbejrJGo XuLlAPyKRKEiNkzUiYOx98PB0jAY2QdkZFBNUjjZHwC3sdh/CMew4/b+nWbF2YYM 7PD9eFADHF7NQ3uOZ3EYu+X1i0Gajl/ujHvEq4oGgRtXhWS4ijI83MtSJYghqYtc R0v7SpXxrGR1zL9J55QQh3MFGKAHAd0O3YFmLXQZQhqpAf2/gv68FGX7nQ0VyG3S NWbrC+yh0kJG6S8lPiEoytR9o3cM4x0uQWwh9ynpgxXnmO+MwSr8F69sxm5emvWR W4a1ZETBBRt8OhsWxUsOptNxH2714+fOx7tneBvAIPP1+XBN/9mkyKPAMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVYqI2DmQhoHsAKWEUjaPxOGL6/MB8GA1UdIwQY MBaAFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDct MWY0MDczYmE0MzZmLzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDctMWY0MDczYmE0MzZm LzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSmGJK7T gwBJrYi+hjpL+yM8EcmrVR4Dz0ZT5M/x6r41OCMgwuQ4u3LHBqzIspr/oIl9uOE+ qsfqp9Kj/Oq6Odj6VKEhdFGVDXCja8MLNHDAVwrP/Ur1itxC3IUtyVE5Kl9vIHVm eQKtU4rucdXQX98XDS3/HKms/FNA7gJOtg9y38s58YSsgE1XQCHvJeYBMGoH/f+t w02rutOSMDM2luQZMzsu0lBJ2NMk8OWSFUzkWL+ysIv8zU98hoOgpUq5Fvuv3Mri QbwyBALVwQ1UE5LC6hXSucgp/Y13M/fZZlzEwkHydt+oBqmzIMKcOzTLxCUqliQ8 PnEF/ofEq/2Mqg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:08 2026 by rpki-client