This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json) Hash identifier: 9wTwd28aAij59vOwNwBKsXnTlRGWsxHEP6mRmNYHb+0= Subject key identifier: CE:94:15:C1:A6:81:ED:8C:13:BA:92:93:0A:60:40:34:39:15:AC:BB Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf Certificate serial: 019C4390583AB00D661036F406D1D7E33B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 18:00:59 +0000 Manifest this update: Mon 09 Feb 2026 18:00:59 +0000 Manifest next update: Tue 10 Feb 2026 18:00:59 +0000 Files and hashes: 1: CMoH5Cyx1SfbFkp_AVi7WFSimSI.roa (hash: UPKbCnfFUk0J12uscJpZ+uKcHazd2OTNHLlOMouWxhg=) 2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: VoLzShZux2AyotapGFAC3b6wAKjdqwXTGvKDrt0Fjaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:58:3a:b0:0d:66:10:36:f4:06:d1:d7:e3:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf Validity Not Before: Feb 9 18:00:59 2026 GMT Not After : Feb 10 18:00:59 2026 GMT Subject: CN=ce9415c1a681ed8c13ba92930a6040343915acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:ca:e1:3c:b0:be:f0:b5:91:db:0f:e3:36: 9e:d4:bc:24:59:5c:e3:59:86:83:ec:58:ad:3e:b2: 25:4d:d1:5f:e7:d7:4d:42:45:ff:58:21:63:3d:d4: 41:ae:bb:00:25:d8:a4:34:b4:d5:5f:08:a5:3a:f4: be:8a:51:76:9d:e9:eb:6e:1f:e2:e3:a9:98:ef:ea: ad:c6:fd:b6:d4:5f:e6:19:4e:d5:92:90:32:d7:ea: b6:23:b5:ea:4b:e3:6b:4f:73:1f:0f:68:bd:0b:26: aa:e3:a6:6a:fc:b7:fb:7b:89:fa:5d:46:89:4a:77: ff:cb:27:6e:5e:84:88:8f:68:68:26:70:49:90:e4: 60:7d:ce:b0:68:46:1a:9f:02:01:b7:3b:e3:64:70: ac:58:0f:ac:98:a8:e3:78:bc:46:b5:09:5e:1a:e4: 61:4b:06:7b:4f:5a:63:c6:f8:b6:ff:85:70:ed:d9: 89:19:17:aa:da:7f:50:20:65:c3:bb:f7:da:7e:df: f4:9f:55:80:33:cf:b1:bb:93:6d:ed:05:0a:77:06: 0a:d6:c4:26:81:00:d6:88:82:88:bf:44:a2:6f:77: 07:9f:03:7b:56:71:fd:49:f2:04:7f:45:d9:7d:e7: 64:46:a5:ac:1b:c0:69:30:7a:15:bc:87:33:68:32: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:94:15:C1:A6:81:ED:8C:13:BA:92:93:0A:60:40:34:39:15:AC:BB X509v3 Authority Key Identifier: keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ce:56:56:15:e3:9d:77:9a:84:5d:92:99:8f:e8:3a:6f:81: 88:41:4b:8c:68:d7:c6:ee:45:57:db:6e:9e:8f:96:7c:ee:f3: 6c:8d:b6:e2:6d:e4:a1:0b:d9:a1:20:a1:92:4a:65:11:e2:c8: cb:f0:ea:5f:3b:da:b2:73:db:1e:67:b6:9e:29:e8:aa:4a:e7: 8d:ef:6f:7e:0d:33:0f:3c:28:88:d7:b5:9e:04:74:d7:cb:e4: 6b:a0:c9:db:27:84:b6:ee:0e:9b:f2:c8:cf:dc:40:f1:6d:56: 1c:f9:27:41:b1:c6:6a:b4:d4:38:1c:cb:9e:10:f2:03:1f:7c: 52:2c:fc:61:b1:0a:62:1c:0f:c7:7a:0d:61:81:63:1f:62:5b: 57:70:df:9b:db:80:75:2b:10:f7:39:a7:b6:d3:a6:48:fd:61: 36:04:8e:5c:fa:52:f8:7c:0c:fd:2a:81:9e:f9:ef:76:8c:f2: 78:6c:a4:39:4c:14:01:bb:7a:ee:c0:94:f9:d3:e5:6c:07:60: f5:94:bc:44:e2:d1:1b:65:35:5d:b9:8b:23:d7:c3:cc:d3:95: 6e:95:65:56:db:ec:94:9c:ba:1c:66:71:db:a8:9d:c7:25:8d: b6:a2:90:52:5f:9b:21:85:04:06:d2:31:1b:11:76:82:8e:00: b7:80:36:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFg6sA1mEDb0BtHX4ztwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWY1MzEwODA1ZWM3NTYxYTFhMjJmOWM4OTBjOTczMWZi NmRlYmYwHhcNMjYwMjA5MTgwMDU5WhcNMjYwMjEwMTgwMDU5WjAzMTEwLwYDVQQD EyhjZTk0MTVjMWE2ODFlZDhjMTNiYTkyOTMwYTYwNDAzNDM5MTVhY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH3K4TywvvC1kdsP4zae1LwkWVzj WYaD7FitPrIlTdFf59dNQkX/WCFjPdRBrrsAJdikNLTVXwilOvS+ilF2nenrbh/i 46mY7+qtxv221F/mGU7VkpAy1+q2I7XqS+NrT3MfD2i9Cyaq46Zq/Lf7e4n6XUaJ Snf/yyduXoSIj2hoJnBJkORgfc6waEYanwIBtzvjZHCsWA+smKjjeLxGtQleGuRh SwZ7T1pjxvi2/4Vw7dmJGReq2n9QIGXDu/faft/0n1WAM8+xu5Nt7QUKdwYK1sQm gQDWiIKIv0Sib3cHnwN7VnH9SfIEf0XZfedkRqWsG8BpMHoVvIczaDJ4vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6UFcGmge2ME7qSkwpgQDQ5Fay7MB8GA1UdIwQY MBaAFIWvUxCAXsdWGhoi+ciQyXMftt6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTct NzUyODM1MGQ0YzEzLzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTctNzUyODM1MGQ0YzEz LzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd85WVhXj nXeahF2SmY/oOm+BiEFLjGjXxu5FV9tuno+WfO7zbI224m3koQvZoSChkkplEeLI y/DqXzvasnPbHme2ninoqkrnje9vfg0zDzwoiNe1ngR018vka6DJ2yeEtu4Om/LI z9xA8W1WHPknQbHGarTUOBzLnhDyAx98Uiz8YbEKYhwPx3oNYYFjH2JbV3Dfm9uA dSsQ9zmnttOmSP1hNgSOXPpS+HwM/SqBnvnvdozyeGykOUwUAbt67sCU+dPlbAdg 9ZS8ROLRG2U1XbmLI9fDzNOVbpVlVtvslJy6HGZx26idxyWNtqKQUl+bIYUEBtIx GxF2go4At4A2zA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:31 2026 by rpki-client