This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json) Hash identifier: 4sG4fx2LBRhtfhMEoTs3RovXYm5aKORPcPvoKLTz3C4= Subject key identifier: 73:B6:3E:B7:C2:A9:D3:B8:96:14:0A:B3:ED:F7:C3:73:68:7C:20:B6 Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Certificate serial: 019C413364A2BAEC8E08FF24ACAF2A045262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft Manifest number: 0920 Signing time: Mon 09 Feb 2026 07:00:12 +0000 Manifest this update: Mon 09 Feb 2026 07:00:12 +0000 Manifest next update: Tue 10 Feb 2026 07:00:12 +0000 Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: pCHE7Uz3uremleJxlNcfggjAZ6ZVMtL2t/ZkKaw4wAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:64:a2:ba:ec:8e:08:ff:24:ac:af:2a:04:52:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Validity Not Before: Feb 9 07:00:12 2026 GMT Not After : Feb 10 07:00:12 2026 GMT Subject: CN=73b63eb7c2a9d3b896140ab3edf7c373687c20b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:6b:09:12:b7:6b:58:be:6c:d2:62:7d:e2: 06:51:63:69:27:d3:e9:e3:8f:fd:91:a5:62:c8:a8: 30:5c:11:8c:ea:6f:48:5b:ea:a8:b7:dd:74:a7:16: 70:f7:92:f3:27:00:78:33:35:b1:04:0e:b4:4a:85: 72:8a:51:45:26:51:e0:cc:70:5f:1d:41:2b:02:65: e6:e4:01:01:ec:2b:a0:8a:52:6a:26:60:c3:2a:91: df:df:98:ca:bb:c6:af:80:30:20:2f:1b:70:ad:b0: 4f:cb:64:0b:4c:fe:57:62:b2:45:e0:49:a0:f2:ed: e1:f5:16:91:63:8a:80:7a:39:ab:8b:0c:44:93:bd: aa:f1:43:ac:ed:b6:43:73:2d:7c:1e:8e:fd:53:5f: 8a:13:7a:f9:95:24:3f:b6:41:f1:38:9f:37:aa:14: 8f:d4:d1:5f:b6:e5:6b:f1:7f:00:74:ce:90:2c:04: 72:38:d5:db:03:73:6e:7a:bf:e7:0d:49:28:fe:6a: 66:d9:37:b4:05:1d:e3:8b:2d:55:9b:a9:71:c2:2f: 05:18:58:06:6f:16:78:1a:8d:cf:a0:2a:92:df:06: dd:a6:0f:11:bc:0f:51:00:b2:42:76:41:12:93:7c: 26:49:71:1b:11:5b:cb:04:bb:08:80:37:b4:61:d4: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:3E:B7:C2:A9:D3:B8:96:14:0A:B3:ED:F7:C3:73:68:7C:20:B6 X509v3 Authority Key Identifier: keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f8:11:5e:3e:6c:fd:b9:08:bc:39:cc:70:d5:d9:2d:12:50: 84:4e:7d:47:54:03:dd:03:44:c3:e8:6e:d7:3f:a4:2e:a0:74: 86:05:45:07:3b:ee:4d:57:f1:bc:46:54:75:6c:8a:6b:9a:83: 8a:0e:7e:e5:2d:ce:2b:66:8b:5b:ef:e7:2e:4b:76:c4:66:42: d5:07:85:31:5e:47:88:b3:3f:cf:fa:e5:1a:e4:f3:e4:56:d6: 20:c9:0c:b7:1e:98:37:6e:40:66:3b:b2:88:78:91:8b:06:58: 63:46:95:67:85:70:26:31:bb:e0:f4:28:a7:3f:00:99:21:d4: 02:a0:17:06:59:1a:b3:30:6e:f0:d8:c2:98:c4:c6:6d:a3:18: 47:6b:2b:f4:4c:da:b1:2a:cf:5e:c2:0e:a4:9f:34:b3:68:1d: 0b:85:85:53:45:c4:9a:79:af:31:08:d9:52:71:96:30:43:d6: da:ac:fe:15:bb:4d:4f:8b:77:84:e6:a5:5e:6f:00:7b:cc:76: 3f:ac:99:9f:0c:47:ce:15:c7:b7:fc:cb:7d:24:67:db:41:56: ad:2c:1f:0b:3b:46:1b:a2:d5:23:07:47:df:94:24:43:2f:bd: 84:9b:6f:b6:ff:1a:f9:bf:84:1d:ca:eb:e7:47:b2:49:52:b7: a8:70:85:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM2SiuuyOCP8krK8qBFJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDQyNmI3NGU4Y2Y2ZmZkZWRiN2IwNjA0MTgwODMyYTg2 MjVmMzIwHhcNMjYwMjA5MDcwMDEyWhcNMjYwMjEwMDcwMDEyWjAzMTEwLwYDVQQD Eyg3M2I2M2ViN2MyYTlkM2I4OTYxNDBhYjNlZGY3YzM3MzY4N2MyMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA761rCRK3a1i+bNJifeIGUWNpJ9Pp 44/9kaViyKgwXBGM6m9IW+qot910pxZw95LzJwB4MzWxBA60SoVyilFFJlHgzHBf HUErAmXm5AEB7CugilJqJmDDKpHf35jKu8avgDAgLxtwrbBPy2QLTP5XYrJF4Emg 8u3h9RaRY4qAejmriwxEk72q8UOs7bZDcy18Ho79U1+KE3r5lSQ/tkHxOJ83qhSP 1NFftuVr8X8AdM6QLARyONXbA3Nuer/nDUko/mpm2Te0BR3jiy1Vm6lxwi8FGFgG bxZ4Go3PoCqS3wbdpg8RvA9RALJCdkESk3wmSXEbEVvLBLsIgDe0YdT8QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO2PrfCqdO4lhQKs+33w3NofCC2MB8GA1UdIwQY MBaAFB5EJrdOjPb/3tt7BgQYCDKoYl8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEt YjQ3NDBhMjE1OGYwLzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEtYjQ3NDBhMjE1OGYw LzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/gRXj5s /bkIvDnMcNXZLRJQhE59R1QD3QNEw+hu1z+kLqB0hgVFBzvuTVfxvEZUdWyKa5qD ig5+5S3OK2aLW+/nLkt2xGZC1QeFMV5HiLM/z/rlGuTz5FbWIMkMtx6YN25AZjuy iHiRiwZYY0aVZ4VwJjG74PQopz8AmSHUAqAXBlkaszBu8NjCmMTGbaMYR2sr9Eza sSrPXsIOpJ80s2gdC4WFU0XEmnmvMQjZUnGWMEPW2qz+FbtNT4t3hOalXm8Ae8x2 P6yZnwxHzhXHt/zLfSRn20FWrSwfCztGG6LVIwdH35QkQy+9hJtvtv8a+b+EHcrr 50eySVK3qHCF7g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:16 2026 by rpki-client