This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json) Hash identifier: r0eXt14wkCE5Tw7Xp6q16/P3btDpxajmfPPUft1eoFU= Subject key identifier: 3F:73:C0:5C:9C:A3:D6:59:23:A6:55:90:6A:BA:5C:FA:CC:2A:4C:0C Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03 Certificate serial: 019C420F53427D3069DE9F143FB274A98E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: QQhw05CFl2CzhPXifYZAlzLHfUfnL05OC6Q4pc2MAkA=) 2: psNr_hTMl_I5KVL4YqNClQzsa0U.roa (hash: iOzy4wHtJLtwL9zu93am3QAJzNv3kq9Sr3PhqUJ5iL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:53:42:7d:30:69:de:9f:14:3f:b2:74:a9:8e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=3f73c05c9ca3d65923a655906aba5cfacc2a4c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:d8:eb:c7:b1:38:5d:a4:38:17:51:ba:89: 45:80:3d:45:87:61:f6:13:64:3d:3d:11:e8:31:f1: 41:0c:6e:ef:19:91:e2:47:62:31:07:35:04:08:26: 5e:4a:f2:38:f8:b0:cc:db:1a:9f:2d:c2:82:48:96: 99:ed:ca:e5:50:d8:b1:09:b6:b9:0b:bb:67:05:a6: 30:43:0d:d7:66:22:d0:08:d2:53:07:24:e5:ca:70: 13:76:8d:cd:da:e0:93:8a:1a:90:ab:3d:39:f4:21: a6:40:12:e0:d8:a9:a1:f4:b0:36:76:c0:7d:ad:22: 9e:7d:49:b2:ed:13:83:92:9e:e8:0a:f7:b6:2c:1b: 6d:1d:44:83:d9:83:42:2e:86:eb:73:50:47:fd:c3: 12:09:7a:8e:83:8d:49:aa:be:50:4d:a0:c1:64:47: 72:91:dd:35:44:79:7f:55:1a:59:1e:3d:03:a2:27: b4:a4:57:43:3f:a5:16:db:70:b5:9f:f2:15:bc:3e: bc:bf:a9:88:63:2a:4c:26:26:b3:03:4c:2f:f9:ad: 8c:a6:c0:b4:46:11:c0:bb:a0:58:99:be:f3:54:0c: a3:3e:d1:d4:65:e6:90:62:a9:7d:e1:e2:78:bd:7a: d1:f1:1b:cb:21:ae:f5:d9:20:31:c1:db:c4:5d:6f: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:C0:5C:9C:A3:D6:59:23:A6:55:90:6A:BA:5C:FA:CC:2A:4C:0C X509v3 Authority Key Identifier: keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:94:bd:d1:88:fd:92:49:55:ed:3f:78:db:e1:01:fd:2a: 95:6a:b9:be:38:1d:a8:bd:38:2e:b9:3a:b5:77:b1:ff:f1:31: c0:c2:94:f6:1c:06:46:ca:c8:d7:f4:5f:e3:15:aa:54:b0:d9: 8c:8f:a8:8f:c3:42:54:b6:a5:93:6e:ad:49:8c:6e:47:c2:1c: 2d:37:d4:e3:54:c6:e4:c8:9e:37:8f:b5:cd:cb:14:1d:3f:be: c4:28:e1:6a:45:1f:de:0a:f8:52:61:12:86:aa:4b:1f:a9:37: 16:7f:28:c9:d8:bc:93:13:76:8b:74:61:19:a2:9a:7f:dc:88: 19:ff:22:32:ca:bb:41:bd:06:2e:01:b2:9f:f4:30:46:d6:e1: 45:4e:35:f0:c1:c3:a8:21:89:3f:8b:e0:71:dc:1b:93:b3:fb: 7b:2a:ba:52:5b:59:15:1d:58:59:73:8f:1e:67:3e:19:02:47: e7:15:b0:2e:5d:2d:0a:14:03:b7:4a:37:f0:47:a9:e4:d8:5f: f0:8d:a6:bc:fa:6f:8a:84:17:24:e8:72:85:49:57:01:3d:c9: 67:f9:51:94:32:09:a1:b2:31:c1:47:79:6b:36:21:07:6a:fd: b4:5e:53:5f:23:ae:02:bf:05:a6:44:ca:cd:d3:d7:b3:c0:e2: 81:36:1d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1NCfTBp3p8UP7J0qY5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz YTJiMDMwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD EygzZjczYzA1YzljYTNkNjU5MjNhNjU1OTA2YWJhNWNmYWNjMmE0YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrY68exOF2kOBdRuolFgD1Fh2H2 E2Q9PRHoMfFBDG7vGZHiR2IxBzUECCZeSvI4+LDM2xqfLcKCSJaZ7crlUNixCba5 C7tnBaYwQw3XZiLQCNJTByTlynATdo3N2uCTihqQqz059CGmQBLg2Kmh9LA2dsB9 rSKefUmy7RODkp7oCve2LBttHUSD2YNCLobrc1BH/cMSCXqOg41Jqr5QTaDBZEdy kd01RHl/VRpZHj0Doie0pFdDP6UW23C1n/IVvD68v6mIYypMJiazA0wv+a2MpsC0 RhHAu6BYmb7zVAyjPtHUZeaQYql94eJ4vXrR8RvLIa712SAxwdvEXW9e6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9zwFyco9ZZI6ZVkGq6XPrMKkwMMB8GA1UdIwQY MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt YWQ0OTU4NThiMzJjLzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL6UvdGI /ZJJVe0/eNvhAf0qlWq5vjgdqL04Lrk6tXex//ExwMKU9hwGRsrI1/Rf4xWqVLDZ jI+oj8NCVLalk26tSYxuR8IcLTfU41TG5MieN4+1zcsUHT++xCjhakUf3gr4UmES hqpLH6k3Fn8oydi8kxN2i3RhGaKaf9yIGf8iMsq7Qb0GLgGyn/QwRtbhRU418MHD qCGJP4vgcdwbk7P7eyq6UltZFR1YWXOPHmc+GQJH5xWwLl0tChQDt0o38Eep5Nhf 8I2mvPpvioQXJOhyhUlXAT3JZ/lRlDIJobIxwUd5azYhB2r9tF5TXyOuAr8FpkTK zdPXs8DigTYdlw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:01 2026 by rpki-client