This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json) Hash identifier: 4CNXBwGhZ9sJParSeWrl7aHBqO/GSR1NMAifmU24dBc= Subject key identifier: F4:87:94:D3:CF:62:F7:9E:2B:C4:22:8D:A4:18:19:60:5F:2D:35:06 Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8 Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8 Certificate serial: 019C43C6F10F12FD863C1B40DB4B0D59EA33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft Manifest number: 1290 Signing time: Mon 09 Feb 2026 19:00:37 +0000 Manifest this update: Mon 09 Feb 2026 19:00:37 +0000 Manifest next update: Tue 10 Feb 2026 19:00:37 +0000 Files and hashes: 1: KDlCkTZJ_trioChGEq3qqR2sW-g.roa (hash: jNNvN3keVzRoRmynZdoMPevs+yPDhsuaoYcA8SI2cJs=) 2: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: LT0Iiof94ZCVyBrFyVv0Ywy/kk2t7RwybJLo0duoWwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:f1:0f:12:fd:86:3c:1b:40:db:4b:0d:59:ea:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8 Validity Not Before: Feb 9 19:00:37 2026 GMT Not After : Feb 10 19:00:37 2026 GMT Subject: CN=f48794d3cf62f79e2bc4228da41819605f2d3506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:bb:78:ab:1b:c4:8f:d0:90:dc:45:28:9d: e0:ce:6c:4a:09:ec:1c:d3:01:6b:0e:a9:a7:48:21: b0:f3:d2:08:92:a4:d2:a0:0d:cb:f5:8a:41:58:5b: c3:1c:fc:2e:2d:42:ca:ab:5c:4d:aa:1f:6e:29:11: c3:3e:c4:b8:35:46:f8:ca:f0:45:c2:91:de:b6:6e: 04:0b:71:1f:33:1a:a9:a8:68:9e:19:76:f9:83:e8: 39:e3:ef:38:72:4f:be:26:9a:99:c6:e8:04:b0:fe: f5:e2:f7:27:7f:70:09:b6:a7:2e:b1:7c:9f:9e:b5: 50:a2:e9:58:d5:f4:f9:ba:43:fd:64:27:9a:a9:b3: db:8e:82:43:e6:dc:b6:e7:9c:0b:8e:8e:3c:3c:a5: 5d:b9:fc:dd:61:de:4b:89:27:d5:c4:d5:96:92:c6: 00:97:1e:91:6b:c2:dd:e3:d8:0d:c1:65:f8:67:1e: 37:72:39:34:01:70:69:6b:22:49:08:9d:2b:18:1f: 54:de:c1:75:3f:4f:5e:7c:fe:a7:f1:e2:56:10:4b: 05:95:bd:db:42:5d:c5:27:35:6c:3f:36:07:f2:32: e6:e7:38:e7:60:12:c4:c0:87:44:28:a1:bf:a5:88: f5:c0:12:6f:96:22:d1:fa:fd:fb:ec:74:a5:3b:7b: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:87:94:D3:CF:62:F7:9E:2B:C4:22:8D:A4:18:19:60:5F:2D:35:06 X509v3 Authority Key Identifier: keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:5c:43:cc:79:46:89:e3:92:64:2d:d2:69:25:f0:5d:40: 05:2e:50:d0:f7:f2:fc:67:0f:31:bd:51:97:7a:2a:b3:55:c2: d2:b5:97:af:55:b0:3c:ec:16:0b:fc:44:de:f9:45:64:fc:e6: 8d:21:10:e5:9e:fc:cc:47:db:19:49:84:e1:7d:77:7b:23:9c: 91:f0:85:e1:e2:78:39:98:25:f8:13:4e:b2:ba:52:1a:88:67: 6e:97:ca:3d:79:e7:cd:25:6c:fd:b2:ca:b1:0f:e0:57:72:39: 21:30:84:3c:4b:e4:ad:b5:58:8c:ee:06:a3:af:0c:7d:62:65: 97:99:fe:2c:5c:cd:4a:02:94:5e:91:9e:11:7e:78:94:64:9f: 34:48:6f:b1:6c:23:1e:15:e4:97:cc:cb:fd:bf:af:37:71:3f: 09:a1:df:1f:79:54:db:66:b8:b2:f5:39:5f:46:8c:c0:46:68: 06:b6:cb:67:56:f0:6b:44:0e:f6:85:5e:08:ac:9f:34:26:4b: f0:82:4e:76:dd:c1:41:28:61:a7:6e:af:a9:da:9c:35:f0:c7: a7:c9:0f:8e:1e:f5:a5:7d:07:f0:7e:f0:45:6f:7a:83:6f:cc: 02:4f:c0:e0:e7:0b:64:53:6a:49:be:2e:3a:0e:bf:02:a3:25: 1f:2e:53:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvEPEv2GPBtA20sNWeozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM1ZjI5OGQ4MWFjYzU1NzNmZDU5ZmIwNWRkODZmMjBh YmNiYTgwHhcNMjYwMjA5MTkwMDM3WhcNMjYwMjEwMTkwMDM3WjAzMTEwLwYDVQQD EyhmNDg3OTRkM2NmNjJmNzllMmJjNDIyOGRhNDE4MTk2MDVmMmQzNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXK7eKsbxI/QkNxFKJ3gzmxKCewc 0wFrDqmnSCGw89IIkqTSoA3L9YpBWFvDHPwuLULKq1xNqh9uKRHDPsS4NUb4yvBF wpHetm4EC3EfMxqpqGieGXb5g+g54+84ck++JpqZxugEsP714vcnf3AJtqcusXyf nrVQoulY1fT5ukP9ZCeaqbPbjoJD5ty255wLjo48PKVdufzdYd5LiSfVxNWWksYA lx6Ra8Ld49gNwWX4Zx43cjk0AXBpayJJCJ0rGB9U3sF1P09efP6n8eJWEEsFlb3b Ql3FJzVsPzYH8jLm5zjnYBLEwIdEKKG/pYj1wBJvliLR+v377HSlO3uRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSHlNPPYveeK8QijaQYGWBfLTUGMB8GA1UdIwQY MBaAFIVMXymNgazFVz/Vn7Bd2G8gq8uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xMjk1ZDAtMzkxMS00YTE4LWE4ZDIt NzUyZDU5YTA0MmMyLzEvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xMjk1ZDAtMzkxMS00YTE4LWE4ZDItNzUyZDU5YTA0MmMy LzEvaFV4ZktZMkJyTVZYUDlXZnNGM1lieUNyeTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPdcQ8x5 RonjkmQt0mkl8F1ABS5Q0Pfy/GcPMb1Rl3oqs1XC0rWXr1WwPOwWC/xE3vlFZPzm jSEQ5Z78zEfbGUmE4X13eyOckfCF4eJ4OZgl+BNOsrpSGohnbpfKPXnnzSVs/bLK sQ/gV3I5ITCEPEvkrbVYjO4Go68MfWJll5n+LFzNSgKUXpGeEX54lGSfNEhvsWwj HhXkl8zL/b+vN3E/CaHfH3lU22a4svU5X0aMwEZoBrbLZ1bwa0QO9oVeCKyfNCZL 8IJOdt3BQShhp26vqdqcNfDHp8kPjh71pX0H8H7wRW96g2/MAk/A4OcLZFNqSb4u Og6/AqMlHy5TSA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:37 2026 by rpki-client