This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json) Hash identifier: +UEDc83Qc+rb9r0BtxC/zGxkxoSsQSPZBnvydMWa2IE= Subject key identifier: 88:50:90:1F:F0:5D:68:35:91:07:B0:06:72:60:0F:F5:62:0E:34:2C Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674 Certificate serial: 019C30E502930A2A9510DA35285DD937AFA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft Manifest number: 0CF8 Signing time: Fri 06 Feb 2026 03:00:40 +0000 Manifest this update: Fri 06 Feb 2026 03:00:40 +0000 Manifest next update: Sat 07 Feb 2026 03:00:40 +0000 Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=) 2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: +TzmIc9ryqWGhoz6LELEFcVgyvrvD4kH9lIGTPOz07E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:30:e5:02:93:0a:2a:95:10:da:35:28:5d:d9:37:af:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674 Validity Not Before: Feb 6 03:00:40 2026 GMT Not After : Feb 7 03:00:40 2026 GMT Subject: CN=8850901ff05d68359107b00672600ff5620e342c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:fa:4f:d1:36:a8:53:79:57:02:c2:3d:0a: 0a:1c:5b:65:05:b8:d7:75:fb:8d:32:12:6d:45:66: d1:9f:8e:66:05:35:52:6e:64:e0:00:3f:bd:88:98: 67:18:17:08:f7:4d:79:48:43:81:29:1b:f2:d2:66: 67:d8:a3:70:8b:01:b5:d5:27:99:ef:c3:69:c1:c6: 02:9c:d6:bb:e8:24:f3:04:5c:b6:33:3e:dd:91:02: 46:76:56:a4:79:5c:1e:e5:0c:01:57:1f:3e:53:5a: 4e:0f:5c:d7:92:0b:dd:f6:1a:4e:53:81:b3:2f:79: 64:69:f3:91:68:83:42:19:db:ba:74:1d:2f:47:6d: 04:65:5a:b9:8a:3f:3c:ec:83:da:f5:39:d2:ab:d2: a9:31:ee:3e:ab:4f:92:65:57:ea:3b:90:9f:bd:c4: 35:03:c8:df:45:8b:45:ff:3f:16:7a:f0:82:8e:97: a1:3e:e9:21:6f:57:3c:72:31:cf:44:c4:6c:44:06: 75:b3:4a:72:fb:c4:70:37:b9:88:75:c7:97:63:0b: da:f1:ef:42:aa:69:5e:24:c2:ad:27:33:e9:52:b2: 43:a0:70:f9:3d:2d:f0:39:97:92:e9:d6:a3:27:65: 68:36:0d:9b:1b:7e:73:2f:4d:fa:98:f8:00:65:76: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:90:1F:F0:5D:68:35:91:07:B0:06:72:60:0F:F5:62:0E:34:2C X509v3 Authority Key Identifier: keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:7d:2c:f8:1e:09:71:7e:b6:c0:67:d4:36:26:6d:45:d6: 23:d9:f5:41:a3:3d:f4:54:0b:6f:6d:83:2a:2f:8f:24:b2:44: 7d:1b:4d:74:45:e3:64:d5:c7:9a:91:b3:a4:9e:ca:c0:c0:1f: 17:3f:3e:15:a3:03:75:90:13:51:dd:70:00:06:19:08:74:ad: c3:5a:53:3c:39:b4:91:9d:37:bd:78:7c:eb:02:46:e5:37:c6: 0b:a3:5e:15:6d:ed:7e:1d:28:da:8c:25:c5:57:5b:f4:5a:13: eb:47:14:55:0c:2e:63:ed:7c:e9:a5:6d:30:14:1f:bb:62:8f: 8d:78:73:6c:4b:02:f4:33:54:43:a3:89:ba:94:2d:b4:ce:ab: d4:f9:5b:09:fb:36:e0:33:a0:e1:fd:69:9f:7c:95:8d:c4:45: cc:22:11:86:89:de:a6:cd:95:d2:c8:b2:65:6d:e1:a0:aa:1c: c4:df:23:48:e0:34:74:65:8e:8f:c6:b9:bc:40:fb:88:d9:a4: 5d:56:9f:3a:86:70:43:41:d8:9d:d9:cc:9b:91:32:31:92:10: 9d:ba:7c:de:c2:6c:53:b9:5b:c1:77:5a:ff:42:14:bb:8d:3c: 00:ad:89:ef:d3:8c:3f:81:63:d3:73:85:96:b1:34:3e:8f:5a: 87:44:cd:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZww5QKTCiqVENo1KF3ZN6+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl M2I2NzQwHhcNMjYwMjA2MDMwMDQwWhcNMjYwMjA3MDMwMDQwWjAzMTEwLwYDVQQD Eyg4ODUwOTAxZmYwNWQ2ODM1OTEwN2IwMDY3MjYwMGZmNTYyMGUzNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6P6T9E2qFN5VwLCPQoKHFtlBbjX dfuNMhJtRWbRn45mBTVSbmTgAD+9iJhnGBcI9015SEOBKRvy0mZn2KNwiwG11SeZ 78NpwcYCnNa76CTzBFy2Mz7dkQJGdlakeVwe5QwBVx8+U1pOD1zXkgvd9hpOU4Gz L3lkafORaINCGdu6dB0vR20EZVq5ij887IPa9TnSq9KpMe4+q0+SZVfqO5CfvcQ1 A8jfRYtF/z8WevCCjpehPukhb1c8cjHPRMRsRAZ1s0py+8RwN7mIdceXYwva8e9C qmleJMKtJzPpUrJDoHD5PS3wOZeS6dajJ2VoNg2bG35zL036mPgAZXa+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhQkB/wXWg1kQewBnJgD/ViDjQsMB8GA1UdIwQY MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj399LPge CXF+tsBn1DYmbUXWI9n1QaM99FQLb22DKi+PJLJEfRtNdEXjZNXHmpGzpJ7KwMAf Fz8+FaMDdZATUd1wAAYZCHStw1pTPDm0kZ03vXh86wJG5TfGC6NeFW3tfh0o2owl xVdb9FoT60cUVQwuY+186aVtMBQfu2KPjXhzbEsC9DNUQ6OJupQttM6r1PlbCfs2 4DOg4f1pn3yVjcRFzCIRhoneps2V0siyZW3hoKocxN8jSOA0dGWOj8a5vED7iNmk XVafOoZwQ0HYndnMm5EyMZIQnbp83sJsU7lbwXda/0IUu408AK2J79OMP4Fj03OF lrE0Po9ah0TNsA== -----END CERTIFICATE-----Generated at Fri Feb 6 11:37:56 2026 by rpki-client