This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json) Hash identifier: ouOSJ4F0n0MTeL/zfXJw8O7ke++I2B9jJkkG32wod50= Subject key identifier: 46:6C:C6:38:1E:55:7B:3D:12:FE:F9:58:BA:A0:96:85:35:C1:FE:34 Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Certificate serial: 019C427D4185C130D9CF13190F62BF4F5297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft Manifest number: 05BF Signing time: Mon 09 Feb 2026 13:00:30 +0000 Manifest this update: Mon 09 Feb 2026 13:00:30 +0000 Manifest next update: Tue 10 Feb 2026 13:00:30 +0000 Files and hashes: 1: dwuC-Oont7VoWE0EeLLcfQ4EL44.roa (hash: +0Vnu02NvEFbgGKFBmW6kguLObTD4n6atdlC8I4zK9M=) 2: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: MZc4RRS9XMuR9MaE+gV99sp3/SIcTCFLMXRvqhLCbCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:41:85:c1:30:d9:cf:13:19:0f:62:bf:4f:52:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Validity Not Before: Feb 9 13:00:30 2026 GMT Not After : Feb 10 13:00:30 2026 GMT Subject: CN=466cc6381e557b3d12fef958baa0968535c1fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:8f:23:54:fb:9c:b2:44:c0:9f:f4:7e:1e: 4a:70:d8:0f:20:8e:f1:a3:f7:7b:7f:48:fc:9a:b1: ff:b1:ac:05:e1:b0:c2:69:7e:c8:aa:30:96:7c:58: 5f:5e:54:a7:c4:ae:06:54:83:6d:01:5e:9e:28:cc: 7c:83:59:72:1b:6c:9a:5f:f2:f1:60:8c:79:25:29: d9:f7:c2:bb:2d:89:9e:5e:16:a7:e3:a8:45:24:54: a1:31:11:1c:f9:07:8d:f8:e7:77:61:27:08:78:f6: 81:93:6d:b8:b8:c1:11:1d:2d:7d:9a:c9:93:ae:bd: 26:d8:9f:dc:5c:3d:cf:45:e0:5e:92:43:a6:2a:41: de:d2:b3:01:eb:4b:5e:5b:ca:ee:c7:76:10:1d:b4: 7c:c2:1a:a9:5c:da:d6:43:e1:9f:ce:81:29:dd:47: 21:a7:af:e7:13:d7:6f:9d:33:11:0d:1e:10:b8:ba: 5d:c1:03:dc:19:de:16:b7:99:4f:f1:c6:bd:c9:de: 79:2c:2c:62:7c:e5:fd:84:95:f4:81:71:cf:f8:43: 6f:39:4a:70:50:34:cf:29:bf:f1:79:42:b5:14:df: 79:f5:51:3c:4b:82:e5:17:7a:77:8b:11:44:60:9d: 98:2d:b2:32:14:9c:35:a9:e7:47:81:96:bf:a9:22: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6C:C6:38:1E:55:7B:3D:12:FE:F9:58:BA:A0:96:85:35:C1:FE:34 X509v3 Authority Key Identifier: keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a8:8b:e8:ca:49:79:d5:58:41:10:c9:89:c6:68:b0:13:e5: 81:21:17:d8:ab:46:10:c5:25:04:57:3a:62:b1:99:f6:25:ca: bf:bf:58:5b:49:40:11:6c:be:ef:4c:c5:e3:f6:e1:e6:b4:f9: 21:ed:50:de:55:90:15:d5:52:08:c5:30:ef:a8:a5:6c:c9:ad: 59:c7:aa:2e:8d:7b:20:b9:4a:ec:56:9f:a0:c5:d9:70:75:63: 51:9a:50:b8:7d:dc:38:0f:93:79:46:2d:c6:a4:1a:db:4e:93: 6d:79:79:23:c1:9f:7d:46:87:51:8f:4d:41:3d:8e:b3:d0:5a: dc:1b:be:d1:59:0f:b7:ce:76:cf:b5:d4:12:3a:55:9a:1c:ce: ec:d5:2f:5a:94:2a:37:f6:20:4c:23:55:83:1e:4e:85:cb:50: 45:18:2b:c4:e3:ba:e7:29:0d:41:e6:dc:d5:4c:48:cf:e3:b1: 42:e8:99:ae:14:ab:36:b2:b6:26:5e:68:6f:d0:1b:01:49:a5: 0a:4b:21:ff:2f:43:84:05:ec:ee:b8:f2:52:ff:bc:03:30:e5: 59:98:c1:cf:5d:ac:8a:92:a8:05:1a:ce:7f:8d:b1:7d:27:b9: 9e:12:47:94:ac:51:ad:dc:fc:95:cf:71:92:f7:ac:7c:8c:57: 79:67:70:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUGFwTDZzxMZD2K/T1KXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4 MDE5NDkwHhcNMjYwMjA5MTMwMDMwWhcNMjYwMjEwMTMwMDMwWjAzMTEwLwYDVQQD Eyg0NjZjYzYzODFlNTU3YjNkMTJmZWY5NThiYWEwOTY4NTM1YzFmZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UiPI1T7nLJEwJ/0fh5KcNgPII7x o/d7f0j8mrH/sawF4bDCaX7IqjCWfFhfXlSnxK4GVINtAV6eKMx8g1lyG2yaX/Lx YIx5JSnZ98K7LYmeXhan46hFJFShMREc+QeN+Od3YScIePaBk224uMERHS19msmT rr0m2J/cXD3PReBekkOmKkHe0rMB60teW8rux3YQHbR8whqpXNrWQ+GfzoEp3Uch p6/nE9dvnTMRDR4QuLpdwQPcGd4Wt5lP8ca9yd55LCxifOX9hJX0gXHP+ENvOUpw UDTPKb/xeUK1FN959VE8S4LlF3p3ixFEYJ2YLbIyFJw1qedHgZa/qSJQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZsxjgeVXs9Ev75WLqgloU1wf40MB8GA1UdIwQY MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaiL6MpJ edVYQRDJicZosBPlgSEX2KtGEMUlBFc6YrGZ9iXKv79YW0lAEWy+70zF4/bh5rT5 Ie1Q3lWQFdVSCMUw76ilbMmtWceqLo17ILlK7FafoMXZcHVjUZpQuH3cOA+TeUYt xqQa206TbXl5I8GffUaHUY9NQT2Os9Ba3Bu+0VkPt852z7XUEjpVmhzO7NUvWpQq N/YgTCNVgx5OhctQRRgrxOO65ykNQebc1UxIz+OxQuiZrhSrNrK2Jl5ob9AbAUml Cksh/y9DhAXs7rjyUv+8AzDlWZjBz12sipKoBRrOf42xfSe5nhJHlKxRrdz8lc9x kvesfIxXeWdwvA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:59 2026 by rpki-client