This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json) Hash identifier: 428CsQ4WSWATBlsR/IQlj/O92TDfjb7aGvkJYSo55hc= Subject key identifier: 5F:D6:E4:B4:36:9B:A3:75:CE:52:7B:D9:BD:21:2E:4A:CE:47:DA:F2 Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Certificate serial: 019C4322F65B1C591C79F5CC0BBC28BC84A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft Manifest number: 060C Signing time: Mon 09 Feb 2026 16:01:30 +0000 Manifest this update: Mon 09 Feb 2026 16:01:30 +0000 Manifest next update: Tue 10 Feb 2026 16:01:30 +0000 Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: l5Bve3gudTzLsl9Fa83qywKdL8dgrgZQyfDsuh1nI0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f6:5b:1c:59:1c:79:f5:cc:0b:bc:28:bc:84:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Validity Not Before: Feb 9 16:01:30 2026 GMT Not After : Feb 10 16:01:30 2026 GMT Subject: CN=5fd6e4b4369ba375ce527bd9bd212e4ace47daf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:5e:0f:d8:d2:5c:4d:08:03:e0:65:f4:b8: 2a:4d:eb:23:b2:b6:8c:3c:99:86:5c:86:ae:e6:ad: fe:e5:59:62:9f:86:15:99:b8:f3:f6:9e:7f:90:fe: db:74:c9:ae:3c:db:67:f3:71:f8:08:7a:42:cf:e2: f9:10:4a:fe:81:cb:87:25:06:e8:df:96:10:0b:ea: 7b:f2:d8:e6:0a:61:95:86:9d:71:1c:a4:b5:dd:eb: 36:92:6f:a1:fa:e9:2e:e1:e3:f6:85:13:5f:11:30: 7d:e3:d5:5a:41:c6:78:05:ac:40:f5:ba:74:08:9b: ff:5b:46:14:7d:a6:a1:7c:5c:68:55:1b:46:ff:22: 28:8a:9d:1d:47:ae:af:39:b2:29:b3:75:ca:57:94: fb:eb:4e:bc:bb:4c:ea:59:80:a1:e2:55:53:10:76: 4d:69:7f:12:75:21:d9:14:d9:e1:9d:16:df:99:68: 44:9a:49:5d:f3:5b:a3:e1:72:19:1f:0b:27:2c:c7: 24:a8:1f:cd:63:ed:3e:d6:dd:12:46:e2:2b:c4:e9: d4:58:df:12:79:fd:24:00:b6:db:20:f5:2f:b4:d0: 1f:78:39:93:e6:7c:be:33:a2:fe:a6:b2:c4:70:f0: 4f:a8:6e:f0:d1:2c:2f:eb:cf:04:f0:81:76:ee:7d: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D6:E4:B4:36:9B:A3:75:CE:52:7B:D9:BD:21:2E:4A:CE:47:DA:F2 X509v3 Authority Key Identifier: keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3d:46:7e:75:05:b0:f4:80:c3:39:2a:73:51:2c:ef:c2:5e: c8:fd:dd:37:5a:41:b3:8d:1d:9e:d9:c6:05:55:06:3e:4b:10: a4:5b:d6:40:c9:cf:74:bf:dd:4d:b4:5a:07:54:d1:57:c4:11: 34:9c:35:dc:fe:ad:8f:a6:e2:cc:c3:c7:45:10:cf:3f:41:95: 35:8c:ec:23:c8:e8:7f:67:41:f6:ca:d0:28:fd:29:de:9a:aa: 8f:e0:41:df:b7:27:9d:ce:6c:05:80:af:5e:f1:b0:e4:ed:ae: 86:e8:0d:12:d2:9e:c0:8a:cd:4e:31:6b:41:a5:0c:a8:4e:c3: 4a:03:3a:77:32:37:c2:b0:5d:8f:18:cf:b8:9c:9f:b6:b7:ec: dc:e5:3c:3f:53:4e:50:64:21:01:bb:94:10:4b:1e:f5:fc:4a: 2a:a1:3d:bb:fb:55:07:5d:87:88:e8:48:51:32:36:7e:8f:98: fb:62:d1:8e:f4:18:ab:3f:e2:7c:83:e4:81:89:db:0f:27:e3: a8:66:f2:6a:52:68:bf:b1:50:da:b7:e0:2b:70:96:d1:50:4c: bd:1b:53:71:89:ef:95:8d:aa:76:46:96:eb:c8:2b:91:83:1d: cb:c2:f2:95:3e:1e:be:1f:5d:0f:10:75:d7:f8:42:32:f0:64: 61:29:82:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvZbHFkcefXMC7wovISoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWI0MWM5MjczZDVlNzYwNWRhMDAyY2Q2YzQwYmQ3MmU1 YWY0MWEwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD Eyg1ZmQ2ZTRiNDM2OWJhMzc1Y2U1MjdiZDliZDIxMmU0YWNlNDdkYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z5eD9jSXE0IA+Bl9LgqTesjsraM PJmGXIau5q3+5Vlin4YVmbjz9p5/kP7bdMmuPNtn83H4CHpCz+L5EEr+gcuHJQbo 35YQC+p78tjmCmGVhp1xHKS13es2km+h+uku4eP2hRNfETB949VaQcZ4BaxA9bp0 CJv/W0YUfaahfFxoVRtG/yIoip0dR66vObIps3XKV5T76068u0zqWYCh4lVTEHZN aX8SdSHZFNnhnRbfmWhEmkld81uj4XIZHwsnLMckqB/NY+0+1t0SRuIrxOnUWN8S ef0kALbbIPUvtNAfeDmT5ny+M6L+prLEcPBPqG7w0Swv688E8IF27n26HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/W5LQ2m6N1zlJ72b0hLkrOR9ryMB8GA1UdIwQY MBaAFB8bQcknPV52BdoALNbEC9cuWvQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgt NTgxYTdmOTAyMzVhLzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgtNTgxYTdmOTAyMzVh LzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj1GfnUF sPSAwzkqc1Es78JeyP3dN1pBs40dntnGBVUGPksQpFvWQMnPdL/dTbRaB1TRV8QR NJw13P6tj6bizMPHRRDPP0GVNYzsI8jof2dB9srQKP0p3pqqj+BB37cnnc5sBYCv XvGw5O2uhugNEtKewIrNTjFrQaUMqE7DSgM6dzI3wrBdjxjPuJyftrfs3OU8P1NO UGQhAbuUEEse9fxKKqE9u/tVB12HiOhIUTI2fo+Y+2LRjvQYqz/ifIPkgYnbDyfj qGbyalJov7FQ2rfgK3CW0VBMvRtTcYnvlY2qdkaW68grkYMdy8LylT4evh9dDxB1 1/hCMvBkYSmCow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:15 2026 by rpki-client