This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json) Hash identifier: 2bBzsXUiqUT03Vflru6nknL5JsESa6VL+xHR/ReERUs= Subject key identifier: E0:63:AA:20:DC:EE:6A:71:73:19:6E:63:CD:1D:4F:FD:F4:56:DF:13 Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35 Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35 Certificate serial: 019C44D9D3DCD5374978BE8B328CF703580B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft Manifest number: 1518 Signing time: Tue 10 Feb 2026 00:00:52 +0000 Manifest this update: Tue 10 Feb 2026 00:00:52 +0000 Manifest next update: Wed 11 Feb 2026 00:00:52 +0000 Files and hashes: 1: IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa (hash: /GSM9iyQcMrc7fSWc8netDxH1YSxmTdh4UOLgqibrf0=) 2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: LAoDUzDZQFuh0YUrq/vVPTYg2XFNBhsWdOKNXI9kvEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:d3:dc:d5:37:49:78:be:8b:32:8c:f7:03:58:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35 Validity Not Before: Feb 10 00:00:52 2026 GMT Not After : Feb 11 00:00:52 2026 GMT Subject: CN=e063aa20dcee6a7173196e63cd1d4ffdf456df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:47:fc:b4:87:6a:02:ec:dd:78:dd:16:08: a5:0f:57:e8:2e:45:4e:fa:4c:30:ab:01:4d:18:d1: 63:c6:5f:8a:64:01:29:57:b6:6e:b5:ad:7d:c4:5f: 19:c3:65:fd:e7:ac:22:b9:3b:1a:57:ab:47:6a:6b: 41:db:3a:fb:16:c7:e4:26:76:72:fe:f4:7d:4e:f2: 62:2d:63:f3:3f:ee:87:1a:5b:ba:75:ea:bd:90:3e: b2:62:33:d3:6d:2c:ae:09:ab:91:8b:5b:09:22:ce: 0b:35:08:e0:14:fa:e3:62:22:ec:59:1c:c2:02:e1: aa:09:9d:2d:a1:31:54:35:1a:94:ea:9f:f6:17:15: eb:e3:9e:1c:d0:95:c6:7b:7c:50:6e:52:2c:2e:41: 86:86:79:1e:42:55:60:74:73:c0:b7:84:fd:58:b0: dc:28:9b:dc:d0:f9:0d:83:3e:a2:4b:68:ca:80:e5: ad:cc:76:0b:72:ab:11:8a:aa:80:54:f2:1e:9d:f1: a5:27:a9:22:54:30:14:5e:69:0c:e2:28:03:66:7a: f3:87:b1:25:66:12:28:b0:72:be:1c:8c:54:d1:c9: fc:9c:01:97:a7:21:67:d2:66:47:2f:3c:e4:71:7c: fc:2c:99:db:13:d4:05:37:ed:2f:48:19:2a:a0:9a: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:63:AA:20:DC:EE:6A:71:73:19:6E:63:CD:1D:4F:FD:F4:56:DF:13 X509v3 Authority Key Identifier: keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:35:ca:18:38:2c:c2:c1:04:f6:a4:45:8a:71:8c:73:11:cf: 9e:6a:c0:90:8e:ab:87:f2:93:24:92:e8:b6:a7:cc:ce:c6:a1: 63:55:61:93:de:08:57:96:e0:dc:31:d5:42:08:81:cb:7c:89: b9:c0:fd:f0:bb:85:9a:cd:d1:85:17:56:30:3f:8c:70:08:7c: 08:8e:01:4c:33:0b:8c:c8:03:f1:43:21:b5:8c:47:5f:f1:66: 87:f7:66:a4:ba:b9:f5:02:d2:5e:d8:7e:e4:3f:ee:85:80:8a: 57:84:67:98:cc:f7:9d:d5:e0:d3:84:e2:0d:6e:99:12:ee:a7: 91:47:87:9e:fe:fc:0f:47:fe:91:c3:9e:58:85:88:9a:3d:00: 3b:93:4a:32:e4:0f:fb:c6:05:1d:a5:16:9a:1e:f8:5a:1a:c5: e5:64:5a:24:4b:18:f7:42:61:31:87:b2:25:9f:e4:9a:d0:6c: f3:2e:fc:5b:90:c4:7b:35:fc:ee:32:9a:e3:b4:4d:11:f8:e6: 0b:ff:89:0c:6f:6c:65:b6:0e:1d:83:8d:2f:cc:50:94:9b:a8: a4:ed:52:6a:56:11:16:da:b6:6b:f3:39:1b:a7:0b:e1:2b:f2: d7:7a:58:f8:4f:f6:92:e1:4f:ce:97:bc:4a:34:5c:91:8b:23: 9b:f1:de:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2dPc1TdJeL6LMoz3A1gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5 ZmJkMzUwHhcNMjYwMjEwMDAwMDUyWhcNMjYwMjExMDAwMDUyWjAzMTEwLwYDVQQD EyhlMDYzYWEyMGRjZWU2YTcxNzMxOTZlNjNjZDFkNGZmZGY0NTZkZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruRH/LSHagLs3XjdFgilD1foLkVO +kwwqwFNGNFjxl+KZAEpV7Zuta19xF8Zw2X956wiuTsaV6tHamtB2zr7FsfkJnZy /vR9TvJiLWPzP+6HGlu6deq9kD6yYjPTbSyuCauRi1sJIs4LNQjgFPrjYiLsWRzC AuGqCZ0toTFUNRqU6p/2FxXr454c0JXGe3xQblIsLkGGhnkeQlVgdHPAt4T9WLDc KJvc0PkNgz6iS2jKgOWtzHYLcqsRiqqAVPIenfGlJ6kiVDAUXmkM4igDZnrzh7El ZhIosHK+HIxU0cn8nAGXpyFn0mZHLzzkcXz8LJnbE9QFN+0vSBkqoJpQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBjqiDc7mpxcxluY80dT/30Vt8TMB8GA1UdIwQY MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt OGE5NjYwNGM4MjZkLzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzXKGDgs wsEE9qRFinGMcxHPnmrAkI6rh/KTJJLotqfMzsahY1Vhk94IV5bg3DHVQgiBy3yJ ucD98LuFms3RhRdWMD+McAh8CI4BTDMLjMgD8UMhtYxHX/Fmh/dmpLq59QLSXth+ 5D/uhYCKV4RnmMz3ndXg04TiDW6ZEu6nkUeHnv78D0f+kcOeWIWImj0AO5NKMuQP +8YFHaUWmh74WhrF5WRaJEsY90JhMYeyJZ/kmtBs8y78W5DEezX87jKa47RNEfjm C/+JDG9sZbYOHYONL8xQlJuopO1SalYRFtq2a/M5G6cL4Svy13pY+E/2kuFPzpe8 SjRckYsjm/HeBw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:16 2026 by rpki-client