This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json) Hash identifier: 8bGgNeYIaXLprxMPD8Bct26H1fOhUDIC3JvbFeCyGLQ= Subject key identifier: 49:65:03:83:3C:01:86:4E:E2:13:B2:95:AB:49:CF:EB:1B:F4:D4:3F Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84 Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884 Certificate serial: 019C41A21CF6C498CA433AACC2D7C847A91B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft Manifest number: 083B Signing time: Mon 09 Feb 2026 09:01:09 +0000 Manifest this update: Mon 09 Feb 2026 09:01:09 +0000 Manifest next update: Tue 10 Feb 2026 09:01:09 +0000 Files and hashes: 1: cIAjOguDSgqReQ62gGNwhDs3FsM.roa (hash: TFf8FnZKCR2DKzKeOZFiA2ziGDoeOIEoz46aZNZ0n6U=) 2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: YX832CL6DI39eyoVCnu5twzpEXdEzp7rZ46rmRkRNJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1c:f6:c4:98:ca:43:3a:ac:c2:d7:c8:47:a9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884 Validity Not Before: Feb 9 09:01:09 2026 GMT Not After : Feb 10 09:01:09 2026 GMT Subject: CN=496503833c01864ee213b295ab49cfeb1bf4d43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:c0:b5:92:1c:d5:9c:9b:0d:ea:77:8c:8c: 30:b7:c7:aa:a8:34:63:e0:7d:f9:9a:46:44:0b:f1: 2b:c8:25:5c:d5:38:95:79:90:c0:0a:03:7c:d8:2e: 1e:61:6f:2d:3c:8c:2f:77:ec:42:21:1c:c7:7e:90: 52:07:3a:3a:df:7a:ca:f6:83:ec:41:9c:b8:f5:05: 62:52:fe:f5:6d:c0:7d:68:02:94:21:d5:8f:21:6a: 72:3e:25:86:e6:8c:fa:7a:c9:a3:84:8d:da:61:71: e7:36:d6:a7:47:aa:2c:5d:c2:cd:7f:5a:a2:2e:0e: 9c:e4:5d:55:0c:53:5d:65:56:89:33:80:a4:1c:97: 86:55:73:43:dc:07:78:eb:7e:15:62:1b:b0:6b:69: 58:0c:10:09:13:11:f2:25:2d:f8:08:c8:ad:04:d2: 2d:78:40:6c:e2:8f:d3:12:f1:5e:63:91:b7:1f:f2: 8e:cd:8b:01:44:05:32:e0:14:74:db:dd:44:a8:c7: b9:8d:00:08:75:43:6b:94:46:5c:16:fc:67:f6:31: 8d:4a:d3:3b:39:81:55:71:5e:9d:4f:ad:3c:5e:c9: f4:a6:6d:6d:a9:5c:ed:7a:6d:04:10:b3:08:6c:96: e4:ef:83:a0:b0:51:7c:52:8b:9a:0c:2b:c5:7b:c9: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:03:83:3C:01:86:4E:E2:13:B2:95:AB:49:CF:EB:1B:F4:D4:3F X509v3 Authority Key Identifier: keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:15:c0:0e:ab:47:7f:f3:e0:17:10:e8:c7:ad:27:06:2b:0b: 8d:db:74:7d:61:a4:78:2d:8a:06:92:06:d5:6d:f9:2c:49:9a: 5e:67:1e:d7:ed:1c:b2:9d:0a:9c:f7:eb:4b:e0:94:7a:37:d1: de:d8:b5:2c:3f:fc:3a:6c:64:b1:17:8e:32:f8:e3:2c:01:df: c9:6e:4e:43:b4:50:cc:36:ca:48:f4:35:69:83:37:30:76:65: 8b:32:4b:3c:02:b0:5a:a7:a6:04:e9:42:7d:2e:83:39:50:23: 50:fa:ee:25:65:35:20:60:59:0b:61:b4:e4:fa:dc:b3:3f:f9: be:68:e6:1e:cf:aa:87:08:56:7b:b6:16:5d:b5:c0:09:05:06: cb:33:f7:93:67:6a:42:d3:60:97:9d:69:af:74:15:71:10:87: 44:d4:1b:cb:bb:12:46:44:9c:08:8e:db:db:3f:de:53:de:83: a7:60:7d:4f:ad:fb:64:05:d7:46:7d:8c:52:b4:30:31:3c:1f: 88:ab:64:8e:c5:19:92:6b:b8:f1:8b:80:a8:64:ea:da:71:9f: c8:de:05:09:19:f1:94:56:bf:06:ea:08:93:30:28:75:29:5d: 10:38:d1:0b:98:46:04:52:22:66:4d:8e:64:ec:42:d7:cf:1a: b6:fd:2c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohz2xJjKQzqswtfIR6kbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MjFkMTAzZmM3M2U5MDc1ZGNmMWUyMmJjODI0MmI3MGY5 OGM4ODQwHhcNMjYwMjA5MDkwMTA5WhcNMjYwMjEwMDkwMTA5WjAzMTEwLwYDVQQD Eyg0OTY1MDM4MzNjMDE4NjRlZTIxM2IyOTVhYjQ5Y2ZlYjFiZjRkNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqHAtZIc1ZybDep3jIwwt8eqqDRj 4H35mkZEC/EryCVc1TiVeZDACgN82C4eYW8tPIwvd+xCIRzHfpBSBzo633rK9oPs QZy49QViUv71bcB9aAKUIdWPIWpyPiWG5oz6esmjhI3aYXHnNtanR6osXcLNf1qi Lg6c5F1VDFNdZVaJM4CkHJeGVXND3Ad4634VYhuwa2lYDBAJExHyJS34CMitBNIt eEBs4o/TEvFeY5G3H/KOzYsBRAUy4BR0291EqMe5jQAIdUNrlEZcFvxn9jGNStM7 OYFVcV6dT608Xsn0pm1tqVztem0EELMIbJbk74OgsFF8UouaDCvFe8lqQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEllA4M8AYZO4hOylatJz+sb9NQ/MB8GA1UdIwQY MBaAFIUh0QP8c+kHXc8eIryCQrcPmMiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUt ZTQwZGUwODQxM2ZhLzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUtZTQwZGUwODQxM2Zh LzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRXADqtH f/PgFxDox60nBisLjdt0fWGkeC2KBpIG1W35LEmaXmce1+0csp0KnPfrS+CUejfR 3ti1LD/8OmxksReOMvjjLAHfyW5OQ7RQzDbKSPQ1aYM3MHZlizJLPAKwWqemBOlC fS6DOVAjUPruJWU1IGBZC2G05Prcsz/5vmjmHs+qhwhWe7YWXbXACQUGyzP3k2dq QtNgl51pr3QVcRCHRNQby7sSRkScCI7b2z/eU96Dp2B9T637ZAXXRn2MUrQwMTwf iKtkjsUZkmu48YuAqGTq2nGfyN4FCRnxlFa/BuoIkzAodSldEDjRC5hGBFIiZk2O ZOxC188atv0siQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:39 2026 by rpki-client