This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json) Hash identifier: t/kTUe2lWcxyzhlhxB37MboQWcUgSoQkNfq0wkCPhc8= Subject key identifier: BF:EC:06:A4:E8:46:9A:D2:1C:92:48:E6:B4:1D:6E:3D:68:CE:00:DB Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421 Certificate serial: 019C4210092130EA6FBB4CD8EB9FA1025074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft Manifest number: 03DB Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: jNhm5PL3U5naCKV12fAz1XOlYNE0/gqjVOVM0nPw+Yc=) 2: sOo_7lt_CItRUPeJIsaf3epL6wo.roa (hash: FUDCuTGox9W1RZs2Qc7K596tec/Dho0eAg3ld5/PpMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:09:21:30:ea:6f:bb:4c:d8:eb:9f:a1:02:50:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421 Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=bfec06a4e8469ad21c9248e6b41d6e3d68ce00db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:01:e2:8a:9d:c8:eb:1a:42:de:2c:92:be: 3a:ef:b5:37:49:31:2b:e8:13:50:39:d4:06:de:71: 76:54:13:c4:d8:7f:74:3f:66:4b:e4:85:de:13:3b: 7f:82:13:c5:a9:0b:7b:0f:aa:02:24:18:6a:fc:84: 3d:df:d5:41:12:9f:db:1d:c8:39:0f:7c:aa:db:d8: 4c:f7:3d:30:1e:69:68:30:ea:2e:b8:e5:2b:ab:ad: 0b:1e:6a:ca:e2:35:21:a7:42:85:6b:37:4e:3d:87: 56:19:4c:b3:c2:c9:b0:a6:f9:a1:ab:1b:c7:82:4a: 39:2e:8f:45:e3:6a:8d:d0:67:a8:3f:ea:08:1c:7b: 12:68:12:02:60:ce:8b:d7:8a:13:2f:61:5f:ff:f3: a7:84:17:a8:df:ad:bc:01:98:bf:41:6f:fa:fc:06: c0:6d:37:32:e8:56:88:d4:cb:cc:e7:69:eb:69:05: 0d:b7:e7:ed:f7:97:0a:8e:37:c3:1f:c1:a1:7b:9e: 87:39:12:cb:1b:99:3a:a9:b3:cc:f8:20:87:91:b3: f2:41:01:90:21:a5:76:86:96:55:35:dd:94:11:6d: 5b:4b:c6:4d:09:b6:a6:32:a6:c4:c2:a7:bd:ac:de: ed:30:d1:2a:bb:5f:3d:35:74:bb:39:42:42:a8:47: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EC:06:A4:E8:46:9A:D2:1C:92:48:E6:B4:1D:6E:3D:68:CE:00:DB X509v3 Authority Key Identifier: keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3d:73:68:34:6e:eb:bf:68:02:b6:f4:94:73:76:31:9b:dd: cb:6e:8d:fd:71:68:be:30:e8:69:4e:47:3b:0a:10:d5:74:9f: bb:c6:b9:28:7c:c3:07:f0:90:99:d6:23:20:56:6f:c6:65:2d: a5:02:52:be:70:57:5e:d4:1b:26:f2:67:86:f5:7a:25:9a:ba: f2:9e:73:13:82:5c:60:56:c0:bb:91:75:19:8c:9d:0a:c7:39: 0a:89:ef:2a:ef:b0:42:70:8c:d9:31:75:20:b5:a9:af:73:5e: 03:08:94:3e:e1:e2:08:ce:55:d5:15:3c:4f:31:5c:d0:5b:c1: 16:d6:44:14:8a:33:d3:6d:b9:13:0f:82:e7:c8:8a:0b:4b:17: 39:86:7b:27:d0:71:b2:6c:cc:01:4d:02:1f:0f:8d:62:2c:04: 49:d0:17:7b:b0:5f:e9:70:d3:c6:32:89:9d:76:ac:b1:65:28: 42:e3:34:6f:dd:54:40:0a:09:94:51:1b:d7:c0:9f:d9:8a:c5: 11:39:31:4a:4d:1a:69:a4:94:18:36:0f:02:47:5c:4f:12:09: 59:87:f4:08:cb:fa:26:89:1d:6a:99:ff:8f:d7:37:a4:e5:2c: 43:e3:e4:10:a3:70:7d:2b:62:39:7b:07:95:23:20:9f:8e:bd: 85:5b:d5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAkhMOpvu0zY65+hAlB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw YWM0MjEwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD EyhiZmVjMDZhNGU4NDY5YWQyMWM5MjQ4ZTZiNDFkNmUzZDY4Y2UwMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZcB4oqdyOsaQt4skr4677U3STEr 6BNQOdQG3nF2VBPE2H90P2ZL5IXeEzt/ghPFqQt7D6oCJBhq/IQ939VBEp/bHcg5 D3yq29hM9z0wHmloMOouuOUrq60LHmrK4jUhp0KFazdOPYdWGUyzwsmwpvmhqxvH gko5Lo9F42qN0GeoP+oIHHsSaBICYM6L14oTL2Ff//OnhBeo3628AZi/QW/6/AbA bTcy6FaI1MvM52nraQUNt+ft95cKjjfDH8Ghe56HORLLG5k6qbPM+CCHkbPyQQGQ IaV2hpZVNd2UEW1bS8ZNCbamMqbEwqe9rN7tMNEqu189NXS7OUJCqEcidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/sBqToRprSHJJI5rQdbj1ozgDbMB8GA1UdIwQY MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD1zaDRu 679oArb0lHN2MZvdy26N/XFovjDoaU5HOwoQ1XSfu8a5KHzDB/CQmdYjIFZvxmUt pQJSvnBXXtQbJvJnhvV6JZq68p5zE4JcYFbAu5F1GYydCsc5ConvKu+wQnCM2TF1 ILWpr3NeAwiUPuHiCM5V1RU8TzFc0FvBFtZEFIoz0225Ew+C58iKC0sXOYZ7J9Bx smzMAU0CHw+NYiwESdAXe7Bf6XDTxjKJnXassWUoQuM0b91UQAoJlFEb18Cf2YrF ETkxSk0aaaSUGDYPAkdcTxIJWYf0CMv6Jokdapn/j9c3pOUsQ+PkEKNwfStiOXsH lSMgn469hVvVQw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:54 2026 by rpki-client