This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json) Hash identifier: uxkbJzcE0SpEcbKzgTsItfiDSkGhU//APSrnUcK771I= Subject key identifier: BA:51:DA:C1:9E:13:5A:7E:E7:E8:32:38:34:41:93:DF:7C:58:E0:D6 Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a Certificate serial: 019C42EB9034993E261355BC08D5C1F2F62D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 15:00:59 +0000 Manifest this update: Mon 09 Feb 2026 15:00:59 +0000 Manifest next update: Tue 10 Feb 2026 15:00:59 +0000 Files and hashes: 1: GfTuX0KwSdkfHKGDeWKZFDGssWg.roa (hash: EwufZny6b9Jopwvn2m9ePJKhZ4mgvDv4zGEryHxcyLs=) 2: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: LqnmPV4UmONPsB/uqJ5V3R4nBjMzI+jU8x8+U0aYKhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:90:34:99:3e:26:13:55:bc:08:d5:c1:f2:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a Validity Not Before: Feb 9 15:00:59 2026 GMT Not After : Feb 10 15:00:59 2026 GMT Subject: CN=ba51dac19e135a7ee7e83238344193df7c58e0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:b4:89:20:25:34:83:57:93:7f:0f:f2:ec: d7:2a:e1:ef:0c:28:45:b7:29:b1:95:99:27:88:43: 1f:0a:bb:4d:a5:82:8c:20:2a:b6:08:63:43:47:dd: 20:5b:de:8a:e2:ac:3c:69:c1:88:3c:ca:f6:a1:50: 4c:3d:a6:7f:5a:39:90:be:9f:56:23:55:46:67:28: 34:d0:5b:8c:a6:cb:03:e0:65:0d:22:26:f9:6d:3a: c0:5b:af:da:e4:32:92:b9:da:01:f2:3c:82:19:41: 5d:8f:42:1c:66:35:a1:39:e6:b5:d5:20:10:82:12: cf:c8:35:f5:f2:af:dc:2f:31:11:fc:52:57:7d:1c: 77:18:79:0f:7d:a7:24:be:ba:66:cc:b0:2c:11:5d: 2e:bc:d7:79:04:24:61:76:af:59:18:96:37:83:ab: 88:a4:07:a1:34:64:b4:77:ab:1a:8b:a2:7d:b3:53: 77:03:8a:ce:23:ba:f7:f7:b9:0c:f0:bc:b9:6a:cc: 97:77:fb:64:db:56:4e:ad:4f:33:1d:4b:76:15:0a: 67:e4:69:bc:f8:6a:05:b2:a0:cb:e6:94:fc:9a:11: 6d:89:e8:5d:26:80:4a:92:32:77:46:32:cb:e0:1c: 20:66:6a:a5:25:e5:f5:93:c1:65:8c:8a:30:c1:01: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:DA:C1:9E:13:5A:7E:E7:E8:32:38:34:41:93:DF:7C:58:E0:D6 X509v3 Authority Key Identifier: keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:86:68:a3:b0:00:0c:23:57:ef:08:73:a9:07:8a:d0:2e:d8: 89:c5:8e:16:d6:fc:27:ac:23:44:ea:0b:8d:2c:ce:dd:12:bf: 0f:5d:30:4e:9c:9c:c5:a0:d2:3c:ec:2d:6e:34:87:b9:b0:d7: 35:d7:f6:98:cb:c4:67:b9:19:e4:c3:e9:90:2c:c4:51:84:3f: 8e:4c:4b:f4:7b:34:12:0b:77:f8:96:bc:a7:23:0c:74:33:2e: 8f:d9:9a:4f:8b:15:74:f3:a1:13:39:eb:bf:98:7f:f8:96:24: 75:af:da:32:7c:f8:27:58:f3:18:fa:18:4b:67:f9:da:86:42: e4:64:19:27:e7:fc:f1:8f:ac:18:f1:11:bc:7d:ee:4f:e0:45: 17:7f:a0:e7:a5:b9:54:e4:19:71:39:db:78:af:da:61:ba:1e: 32:0c:d0:6e:45:f7:34:17:84:c7:bf:e7:49:01:e7:2b:5d:fe: 04:3e:1c:c6:f3:1e:af:85:f1:3b:12:d0:e0:6f:3f:9e:df:03: 35:54:7d:7a:26:fe:d5:ec:70:5a:b4:7e:d4:09:05:b0:43:8b: e4:64:d3:ce:8a:5e:47:a8:10:c7:30:92:18:83:74:ae:54:1b: 9b:80:25:d2:53:1e:aa:d7:f7:f7:ce:f9:ac:f2:1d:c7:a3:92: 08:be:03:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65A0mT4mE1W8CNXB8vYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw ODJlOGEwHhcNMjYwMjA5MTUwMDU5WhcNMjYwMjEwMTUwMDU5WjAzMTEwLwYDVQQD EyhiYTUxZGFjMTllMTM1YTdlZTdlODMyMzgzNDQxOTNkZjdjNThlMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLW0iSAlNINXk38P8uzXKuHvDChF tymxlZkniEMfCrtNpYKMICq2CGNDR90gW96K4qw8acGIPMr2oVBMPaZ/WjmQvp9W I1VGZyg00FuMpssD4GUNIib5bTrAW6/a5DKSudoB8jyCGUFdj0IcZjWhOea11SAQ ghLPyDX18q/cLzER/FJXfRx3GHkPfackvrpmzLAsEV0uvNd5BCRhdq9ZGJY3g6uI pAehNGS0d6sai6J9s1N3A4rOI7r397kM8Ly5asyXd/tk21ZOrU8zHUt2FQpn5Gm8 +GoFsqDL5pT8mhFtiehdJoBKkjJ3RjLL4BwgZmqlJeX1k8FljIowwQGRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpR2sGeE1p+5+gyODRBk998WODWMB8GA1UdIwQY MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3 LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYZoo7AA DCNX7whzqQeK0C7YicWOFtb8J6wjROoLjSzO3RK/D10wTpycxaDSPOwtbjSHubDX Ndf2mMvEZ7kZ5MPpkCzEUYQ/jkxL9Hs0Egt3+Ja8pyMMdDMuj9maT4sVdPOhEznr v5h/+JYkda/aMnz4J1jzGPoYS2f52oZC5GQZJ+f88Y+sGPERvH3uT+BFF3+g56W5 VOQZcTnbeK/aYboeMgzQbkX3NBeEx7/nSQHnK13+BD4cxvMer4XxOxLQ4G8/nt8D NVR9eib+1exwWrR+1AkFsEOL5GTTzopeR6gQxzCSGIN0rlQbm4Al0lMeqtf39875 rPIdx6OSCL4Dyg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:10 2026 by rpki-client