This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft File: HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json) Hash identifier: s8+Vb0NhPrg9mzsnoOX2+yyyd9gcGbG8wqUXsWnK3pE= Subject key identifier: BF:0F:07:39:E3:32:B6:A2:AC:76:0B:4A:A0:2E:39:84:57:F0:E3:35 Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17 Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17 Certificate serial: 019C427DEDA28C5E14EEBE1BDF0D56B01C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: 8y4unuGl8cPPKH8DoyRplBAZq93Rx6ueTjBaUwR6Io8=) 2: aXCzk9LRBuI3wsL45rGUGJ3bjp0.roa (hash: ij7uLV/NpVqVA9kRJtMaYvHqkZsLcjLoJ4SciqjfuAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ed:a2:8c:5e:14:ee:be:1b:df:0d:56:b0:1c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17 Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=bf0f0739e332b6a2ac760b4aa02e398457f0e335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:bd:26:70:17:d1:ce:12:ca:20:1f:bb:54: d8:85:a1:b6:26:e0:f1:1f:5c:20:26:a7:a2:44:e2: 05:03:a8:f8:31:2a:b8:09:b9:76:a4:07:b1:7b:d7: a9:38:f7:5b:f6:f4:d2:95:ad:18:d7:4c:5b:2b:48: da:04:97:ea:1f:ee:94:48:65:69:95:53:71:f4:dc: 6c:a6:70:40:f8:1c:12:20:51:34:4e:09:ce:f5:7f: cb:22:ce:a7:1d:a9:50:e9:53:bc:18:0b:3e:48:cc: 93:5b:64:d5:40:5f:a8:b1:79:d6:98:50:79:2a:fe: e5:e9:28:72:b6:24:1c:4e:fb:10:07:1b:53:d7:b4: a3:1d:0d:2b:fa:f8:02:42:28:d4:85:a1:85:2e:ad: 65:6f:bb:c0:02:98:e3:48:2b:43:a2:77:eb:55:5d: a5:07:56:96:1c:9f:eb:00:c5:e9:34:2d:db:81:19: aa:24:74:4a:75:e0:89:5a:88:dc:d3:65:78:1e:f0: 87:95:c5:c8:74:bb:8d:2f:58:28:a2:d1:04:15:f3: d9:ad:d9:55:86:f2:fe:f6:a8:f7:d2:8d:76:31:e5: f1:89:34:a2:9e:58:f2:59:cd:55:ff:32:e0:be:ba: 08:1f:45:99:53:95:ea:e4:55:ea:43:27:32:94:c5: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0F:07:39:E3:32:B6:A2:AC:76:0B:4A:A0:2E:39:84:57:F0:E3:35 X509v3 Authority Key Identifier: keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cc:36:81:1f:db:d6:3d:77:5a:ff:00:ab:42:4b:21:c8:6e: 38:da:36:fe:91:52:02:37:fc:b6:64:d3:c6:f8:0f:34:10:8d: 3a:01:fd:66:a0:e9:8f:35:e1:93:d4:14:4a:99:90:9d:a9:03: 1a:d9:9a:ea:76:cb:aa:e0:29:15:12:b7:6f:4d:8f:06:94:fd: b7:4f:68:d0:e1:7b:7c:e1:5d:85:c7:aa:8d:92:2f:61:7c:6d: 9b:6d:60:b4:69:cd:9e:22:50:72:f0:bf:28:bb:c6:e6:10:7f: 65:69:c8:6b:1e:e5:7f:4e:2f:f2:96:c8:bb:b0:f7:a7:e7:7b: bc:0d:53:e6:ca:0e:e2:9c:8c:7c:51:4b:fa:a9:bf:d1:92:a8: 46:5b:e8:a1:41:dd:35:44:b5:8f:86:27:cb:8c:8c:55:22:1d: af:34:33:a9:58:0d:0f:e7:6a:b4:da:60:20:e9:39:71:fa:8f: 2f:64:dc:3f:5d:88:40:c3:e6:6d:56:b5:6e:3f:7a:f5:3c:e6: d6:df:51:5a:69:05:33:03:f2:0d:71:a9:1a:5c:76:b6:4c:d5: f5:6d:5a:ed:6c:1e:26:06:f8:7a:8c:f8:8c:3b:5a:a6:6a:37: 27:de:49:ba:7c:c9:eb:59:07:8a:62:70:c4:2a:e6:7a:9d:4f: 0c:eb:84:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfe2ijF4U7r4b3w1WsBwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYWFkOTM5MDhhYWQ4ZDI0NmViNjlmN2U2NmFhNzBkZTVi ZDVhMTcwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD EyhiZjBmMDczOWUzMzJiNmEyYWM3NjBiNGFhMDJlMzk4NDU3ZjBlMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx69JnAX0c4SyiAfu1TYhaG2JuDx H1wgJqeiROIFA6j4MSq4Cbl2pAexe9epOPdb9vTSla0Y10xbK0jaBJfqH+6USGVp lVNx9NxspnBA+BwSIFE0TgnO9X/LIs6nHalQ6VO8GAs+SMyTW2TVQF+osXnWmFB5 Kv7l6ShytiQcTvsQBxtT17SjHQ0r+vgCQijUhaGFLq1lb7vAApjjSCtDonfrVV2l B1aWHJ/rAMXpNC3bgRmqJHRKdeCJWojc02V4HvCHlcXIdLuNL1gootEEFfPZrdlV hvL+9qj30o12MeXxiTSinljyWc1V/zLgvroIH0WZU5Xq5FXqQycylMW6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8PBznjMrairHYLSqAuOYRX8OM1MB8GA1UdIwQY MBaAFByq2TkIqtjSRutp9+Zqpw3lvVoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMt YTc5OGJkYzczMTFmLzEvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hYmI2Y2EtMWExMS00YmE1LTllZTMtYTc5OGJkYzczMTFm LzEvSEtyWk9RaXEyTkpHNjJuMzVtcW5EZVc5V2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8w2gR/b 1j13Wv8Aq0JLIchuONo2/pFSAjf8tmTTxvgPNBCNOgH9ZqDpjzXhk9QUSpmQnakD Gtma6nbLquApFRK3b02PBpT9t09o0OF7fOFdhceqjZIvYXxtm21gtGnNniJQcvC/ KLvG5hB/ZWnIax7lf04v8pbIu7D3p+d7vA1T5soO4pyMfFFL+qm/0ZKoRlvooUHd NUS1j4Yny4yMVSIdrzQzqVgND+dqtNpgIOk5cfqPL2TcP12IQMPmbVa1bj969Tzm 1t9RWmkFMwPyDXGpGlx2tkzV9W1a7WweJgb4eoz4jDtapmo3J95JunzJ61kHimJw xCrmep1PDOuEfw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:01 2026 by rpki-client