This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json) Hash identifier: LmSfvWE7CMN9O4rWJX8JV5MJ8ELJeh+HnU9mAm/rWN0= Subject key identifier: 6C:23:46:CD:B3:A4:07:61:8D:3C:FA:A0:F9:63:CE:A1:62:8D:44:BB Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1 Certificate serial: 019C43900ADF3593C9B3E3A6BB246D5A91BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft Manifest number: 0CD8 Signing time: Mon 09 Feb 2026 18:00:39 +0000 Manifest this update: Mon 09 Feb 2026 18:00:39 +0000 Manifest next update: Tue 10 Feb 2026 18:00:39 +0000 Files and hashes: 1: VBLtb5anXu8mfDZEd2sf0Q3rh38.roa (hash: ZdPYXywTN4OXgthFTsawnGv2wOYDeomubZS+6zVQngE=) 2: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: kT9tS3t9r+U09XPNzBQzHnxjWvQERcV2+4ygUrFhJ6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:0a:df:35:93:c9:b3:e3:a6:bb:24:6d:5a:91:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1 Validity Not Before: Feb 9 18:00:39 2026 GMT Not After : Feb 10 18:00:39 2026 GMT Subject: CN=6c2346cdb3a407618d3cfaa0f963cea1628d44bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:b6:30:b5:d5:77:7d:91:1d:cd:59:b2:59: 4d:d7:07:8f:6b:eb:cc:83:66:c2:3b:12:91:1d:3b: e7:95:17:bd:83:40:a2:13:38:73:18:53:df:af:b1: 10:bc:2b:ef:07:a3:6e:e6:27:84:f7:35:d3:a6:dc: 5e:39:34:70:6f:e0:aa:0f:27:03:e1:3a:7a:88:01: 1b:35:ba:23:e6:d4:83:80:8c:76:e5:72:c7:e3:cf: b6:e1:39:5d:a7:27:6c:31:62:83:73:0d:74:d6:91: dc:7e:60:d1:3d:54:fb:44:60:29:50:2d:03:22:65: d1:93:98:55:c2:fa:b7:18:79:a5:2c:f5:f9:77:da: d3:b2:b6:99:97:7f:ed:9b:83:2f:1a:dd:31:dd:d6: 4a:b5:8d:23:77:98:28:be:d6:b2:ec:ab:65:9a:16: b0:66:16:83:59:bb:5d:72:28:c1:46:cd:d5:67:0f: a1:a8:70:e8:2c:a8:0c:9b:11:7a:e1:78:26:04:e6: 41:80:0a:90:99:d6:93:d4:2f:28:cb:a2:6f:a4:1c: ae:71:ae:3b:aa:52:5a:da:91:15:fa:e9:53:4a:6a: 09:27:6e:77:f1:c2:9b:76:e1:07:81:cc:7c:3b:11: 9f:07:88:62:63:39:42:a7:ca:33:0b:42:35:e2:0f: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:23:46:CD:B3:A4:07:61:8D:3C:FA:A0:F9:63:CE:A1:62:8D:44:BB X509v3 Authority Key Identifier: keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:54:5e:c2:0f:a9:71:40:e3:88:4c:ec:32:7c:17:9e:66:9e: 02:e1:c0:2a:74:9e:e2:c5:ac:de:df:52:de:db:56:1c:8b:33: 11:ce:bf:f5:49:dc:17:b3:c5:00:d3:6f:ba:75:3a:d7:b9:76: d8:db:b1:a9:0a:ab:17:5a:a8:7e:4a:01:89:91:e2:70:4f:7d: dc:ba:71:95:37:d7:ff:e4:b3:3b:3c:27:30:c4:4a:07:df:3d: 7c:16:5b:6f:4e:2e:2c:48:e2:2c:4f:7b:71:9e:52:be:81:58: 79:2d:20:83:b9:ba:0f:dc:78:54:2a:0c:42:48:bb:f5:58:a4: 4c:b2:78:0c:6f:2d:55:ee:61:f1:1e:83:e5:1b:8f:bc:53:cc: cd:92:48:30:2f:9b:9b:75:57:37:bc:03:ad:f1:50:cf:26:46: 57:00:1d:25:e5:70:21:65:83:ba:d9:d6:79:94:d0:10:77:5d: 95:cc:2d:a4:62:7e:52:63:cf:ae:e7:c1:40:5d:2f:ea:61:ee: e8:55:72:7c:bb:10:bd:67:27:75:7d:46:64:ee:e3:6d:92:50: 7a:c3:e2:22:9f:5f:ab:e7:bf:a0:a3:d6:48:71:33:63:65:34: 02:4e:b6:50:5f:dd:aa:f6:02:e2:70:98:27:0f:c4:25:ad:87: 78:49:a5:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkArfNZPJs+OmuyRtWpG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5 ZDg1ZTEwHhcNMjYwMjA5MTgwMDM5WhcNMjYwMjEwMTgwMDM5WjAzMTEwLwYDVQQD Eyg2YzIzNDZjZGIzYTQwNzYxOGQzY2ZhYTBmOTYzY2VhMTYyOGQ0NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9S2MLXVd32RHc1ZsllN1wePa+vM g2bCOxKRHTvnlRe9g0CiEzhzGFPfr7EQvCvvB6Nu5ieE9zXTptxeOTRwb+CqDycD 4Tp6iAEbNboj5tSDgIx25XLH48+24TldpydsMWKDcw101pHcfmDRPVT7RGApUC0D ImXRk5hVwvq3GHmlLPX5d9rTsraZl3/tm4MvGt0x3dZKtY0jd5govtay7Ktlmhaw ZhaDWbtdcijBRs3VZw+hqHDoLKgMmxF64XgmBOZBgAqQmdaT1C8oy6JvpByuca47 qlJa2pEV+ulTSmoJJ2538cKbduEHgcx8OxGfB4hiYzlCp8ozC0I14g+vlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwjRs2zpAdhjTz6oPljzqFijUS7MB8GA1UdIwQY MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3 LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1Rewg+p cUDjiEzsMnwXnmaeAuHAKnSe4sWs3t9S3ttWHIszEc6/9UncF7PFANNvunU617l2 2NuxqQqrF1qofkoBiZHicE993LpxlTfX/+SzOzwnMMRKB989fBZbb04uLEjiLE97 cZ5SvoFYeS0gg7m6D9x4VCoMQki79VikTLJ4DG8tVe5h8R6D5RuPvFPMzZJIMC+b m3VXN7wDrfFQzyZGVwAdJeVwIWWDutnWeZTQEHddlcwtpGJ+UmPPrufBQF0v6mHu 6FVyfLsQvWcndX1GZO7jbZJQesPiIp9fq+e/oKPWSHEzY2U0Ak62UF/dqvYC4nCY Jw/EJa2HeEmlYQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:51 2026 by rpki-client