This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json) Hash identifier: 4e7+J710cAgCYxfZMX9T2q99ipn1F5ZgNNoKcOgU3pw= Subject key identifier: 56:A5:13:C1:D5:F3:20:DB:B9:40:30:04:79:AC:68:D3:AC:F5:5F:30 Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40 Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340 Certificate serial: 019C424619154C0D73DB8D439218B6795D77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft Manifest number: 02D5 Signing time: Mon 09 Feb 2026 12:00:15 +0000 Manifest this update: Mon 09 Feb 2026 12:00:15 +0000 Manifest next update: Tue 10 Feb 2026 12:00:15 +0000 Files and hashes: 1: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: WakEyCzSv2swlt6Xd7cBpv5Uvxy5cILOdWV2qMjWJlc=) 2: dnhblZcylCcbRj12R5ofCpHt7LU.roa (hash: oRIsfhmT16Rl0vK9L5ENWVnifqieHto224vdnp4iUt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:19:15:4c:0d:73:db:8d:43:92:18:b6:79:5d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8fba993650348a135152eec348a119430e6340 Validity Not Before: Feb 9 12:00:15 2026 GMT Not After : Feb 10 12:00:15 2026 GMT Subject: CN=56a513c1d5f320dbb940300479ac68d3acf55f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:d6:4d:78:6c:9f:9f:71:98:11:49:11:0d: b4:8b:ff:9c:03:84:1b:a3:ba:6e:15:1b:04:50:fc: ea:b5:cd:35:4c:22:07:60:f7:40:4f:41:15:d6:a9: 12:a0:e6:38:2d:cb:57:bf:c0:74:88:53:d1:ac:1d: ca:57:f8:61:36:fa:02:93:a1:be:0c:44:05:29:4f: 1c:5c:63:1e:d2:0a:31:9f:37:74:b7:12:f2:6e:fa: 25:d6:0b:7e:a9:41:cb:65:40:db:dc:ef:81:d8:9e: 8a:d1:2e:4f:38:c5:31:4e:2d:2a:00:f5:82:13:9c: b3:7c:09:3a:38:6d:55:4d:90:35:ad:10:8f:31:6f: cd:5f:b7:be:8f:3f:b2:c5:cd:6f:c3:7c:18:69:00: 4d:ea:1e:2c:fc:64:7b:b6:56:1a:e0:97:48:60:cb: 0a:c2:7f:22:e1:49:4f:33:9a:56:d4:62:94:4d:23: 58:91:b0:c9:c1:0d:02:18:a4:75:75:7c:a2:09:5c: 45:3e:e5:48:9f:fa:05:35:c1:32:9e:7f:5c:3f:6e: f1:b6:92:ce:d1:e0:16:07:bc:a8:1c:9a:51:41:bc: 65:4d:60:ef:22:13:3d:b0:84:d5:b2:c6:61:9f:3e: 7e:aa:aa:8e:55:82:83:aa:fe:e0:f6:bf:42:4b:51: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A5:13:C1:D5:F3:20:DB:B9:40:30:04:79:AC:68:D3:AC:F5:5F:30 X509v3 Authority Key Identifier: keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:12:3b:b8:29:9c:c8:ed:94:2d:b2:61:a8:d9:ec:55:c6: 44:a1:f5:1c:03:7d:40:42:45:6d:43:6c:0a:47:aa:c1:e5:76: 0c:5e:9b:dc:61:77:fa:9c:00:dd:1b:51:eb:a7:fc:cd:d5:5f: f5:5c:bb:8c:61:02:28:f5:93:14:f3:5b:df:a4:b6:44:40:c5: 34:de:66:d6:0d:11:d3:8e:e9:10:3e:52:6e:ed:c9:31:9f:0a: cd:4e:ca:51:1a:68:f1:32:83:ed:74:39:e5:82:79:b2:a0:ca: c9:8d:68:a0:60:0c:bc:da:d3:59:30:d7:0d:4e:19:43:34:e0: 02:4c:4d:1a:92:14:35:e1:b5:bc:dc:95:83:59:4e:2f:16:38: 4b:6f:5c:3b:c0:70:a8:b9:15:c5:e8:5e:fa:6a:18:3e:11:4e: f1:9a:30:b2:3a:aa:86:3f:e2:0a:c0:e7:89:3e:cd:30:86:ba: c7:43:57:35:e2:10:13:b2:9c:5c:5c:b2:3a:49:73:bf:f4:2d: ef:e7:03:a4:3e:24:ba:37:bc:56:39:c5:8c:ec:94:5e:33:89: 02:1c:83:c8:2d:dc:3e:df:e6:fa:34:61:7b:1a:99:32:d1:46: 39:9d:dd:3f:66:5a:3f:8f:b8:e2:ad:12:58:57:3b:18:e0:5d: d0:3c:c7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhkVTA1z241Dkhi2eV13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGZiYTk5MzY1MDM0OGExMzUxNTJlZWMzNDhhMTE5NDMw ZTYzNDAwHhcNMjYwMjA5MTIwMDE1WhcNMjYwMjEwMTIwMDE1WjAzMTEwLwYDVQQD Eyg1NmE1MTNjMWQ1ZjMyMGRiYjk0MDMwMDQ3OWFjNjhkM2FjZjU1ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMfWTXhsn59xmBFJEQ20i/+cA4Qb o7puFRsEUPzqtc01TCIHYPdAT0EV1qkSoOY4LctXv8B0iFPRrB3KV/hhNvoCk6G+ DEQFKU8cXGMe0goxnzd0txLybvol1gt+qUHLZUDb3O+B2J6K0S5POMUxTi0qAPWC E5yzfAk6OG1VTZA1rRCPMW/NX7e+jz+yxc1vw3wYaQBN6h4s/GR7tlYa4JdIYMsK wn8i4UlPM5pW1GKUTSNYkbDJwQ0CGKR1dXyiCVxFPuVIn/oFNcEynn9cP27xtpLO 0eAWB7yoHJpRQbxlTWDvIhM9sITVssZhnz5+qqqOVYKDqv7g9r9CS1EAtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFalE8HV8yDbuUAwBHmsaNOs9V8wMB8GA1UdIwQY MBaAFByPupk2UDSKE1FS7sNIoRlDDmNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMGI4NGItMTE0NS00MDYzLTg2Yjct ZDVkOGI0NGZjZTM0LzEvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMGI4NGItMTE0NS00MDYzLTg2YjctZDVkOGI0NGZjZTM0 LzEvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIMSO7gp nMjtlC2yYajZ7FXGRKH1HAN9QEJFbUNsCkeqweV2DF6b3GF3+pwA3RtR66f8zdVf 9Vy7jGECKPWTFPNb36S2REDFNN5m1g0R047pED5Sbu3JMZ8KzU7KURpo8TKD7XQ5 5YJ5sqDKyY1ooGAMvNrTWTDXDU4ZQzTgAkxNGpIUNeG1vNyVg1lOLxY4S29cO8Bw qLkVxehe+moYPhFO8Zowsjqqhj/iCsDniT7NMIa6x0NXNeIQE7KcXFyyOklzv/Qt 7+cDpD4kuje8VjnFjOyUXjOJAhyDyC3cPt/m+jRhexqZMtFGOZ3dP2ZaP4+44q0S WFc7GOBd0DzHjg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:21 2026 by rpki-client