This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json) Hash identifier: 0vUH9IH1kKDfV9oTFrF7Ro40SP0ZivdNUNVuW3bFEEo= Subject key identifier: 1D:52:90:8B:D3:E9:B3:FC:36:9D:5A:53:97:C4:25:2E:16:B1:0A:65 Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050 Certificate serial: 019C43FDBFB45D7223CB1D0436A41E42DD8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft Manifest number: 0243 Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: YlweCdXETCwygWT9aILZtAcLkjesoQru8SqZGulhlpk=) 2: wgOrbEyyTMVtSYdFg1xc1vTbqbA.roa (hash: 3Lc51OHAGzzjJJFJIOMiaDX6wEIJm4jehUS0UTUJBEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:bf:b4:5d:72:23:cb:1d:04:36:a4:1e:42:dd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050 Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=1d52908bd3e9b3fc369d5a5397c4252e16b10a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:97:4a:3d:33:e9:d4:14:38:21:0c:94:f2: 38:31:4e:f6:59:c7:86:62:09:31:73:8a:77:c0:c8: 10:13:52:76:c0:ff:78:3d:06:d0:2a:95:7d:b3:07: 2c:87:3d:d9:c6:69:1e:1f:85:87:f1:c6:a8:b2:a7: c4:45:2b:75:fa:7e:a3:ca:1e:c9:34:a3:cd:a9:ea: db:fc:8b:44:03:e2:a8:a6:4b:65:b2:d4:00:4e:e6: 1a:1c:df:06:36:e6:fa:80:43:38:b2:e3:71:3c:7b: 18:80:a4:03:de:57:53:73:13:14:be:f6:ad:4e:f9: 0b:c4:57:2f:f2:f2:3b:ce:bb:62:41:61:d3:a8:1b: af:69:81:6d:3f:9e:c9:8f:c1:38:37:e7:aa:fd:bc: f7:82:2e:95:d5:2c:59:86:b3:d7:75:a4:93:e0:75: 94:b8:30:77:4e:4e:83:e4:1f:c9:14:a5:b4:b7:79: 5e:46:67:ad:cd:82:59:b7:03:f4:ee:69:4e:a9:cc: 0d:7f:46:2e:e6:e4:f2:b1:70:91:70:f1:9e:2e:d6: 94:5b:cc:f4:c1:a6:e1:d3:c9:d8:e4:2f:0d:3c:27: 34:c3:02:bc:e0:bd:17:79:6b:d3:19:4a:c8:b9:f0: 6a:29:97:f2:72:76:d4:5c:6d:90:ad:8f:f9:7d:68: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:90:8B:D3:E9:B3:FC:36:9D:5A:53:97:C4:25:2E:16:B1:0A:65 X509v3 Authority Key Identifier: keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c0:de:1a:b8:ef:6b:ce:0a:ff:ca:13:60:fa:9e:93:29:65: aa:c5:35:33:6d:f2:9d:d1:ad:d9:b7:2f:3e:8f:2b:60:45:a4: bb:a6:3f:d1:40:ea:ce:d5:91:56:ed:3a:b0:16:d5:5d:5c:88: f1:c4:88:19:cf:94:12:21:20:01:a4:f2:03:8d:59:9b:3b:02: 8f:1e:20:9f:af:92:89:41:63:b9:8f:e0:d3:2c:62:93:b4:83: e3:bf:b6:26:c4:be:5e:92:e6:46:e6:b4:cc:fa:9b:c7:32:8d: 9c:2e:08:33:b6:75:af:b1:bd:40:a3:54:7a:3a:91:4d:d7:ba: cd:43:08:c0:db:cd:6a:7b:97:25:0a:4c:ae:95:42:8c:41:01: d2:aa:e3:33:b5:70:1a:2c:b9:61:37:0e:a9:77:88:87:be:73: 70:7f:20:55:22:e9:2d:63:85:99:b7:b4:e2:2f:73:f4:77:a3: b2:8b:7c:24:77:62:34:aa:89:e6:47:6f:b1:63:40:65:4f:f4: 0e:53:5b:b5:07:12:d4:bd:61:99:9d:ad:ff:e9:9f:3c:a8:78: d6:53:16:3d:4c:80:a9:06:20:49:ae:84:73:e4:51:b0:16:55: b8:8d:77:67:ca:51:ca:da:b8:64:cc:85:c1:b0:75:ab:3c:39: 2f:45:df:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/b+0XXIjyx0ENqQeQt2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNzI0NzFlMDI1ZGUzYTgyYThkZjU4YWFlNmUxMmUzMWQ2 Y2QwNTAwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD EygxZDUyOTA4YmQzZTliM2ZjMzY5ZDVhNTM5N2M0MjUyZTE2YjEwYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4eXSj0z6dQUOCEMlPI4MU72WceG Ygkxc4p3wMgQE1J2wP94PQbQKpV9swcshz3ZxmkeH4WH8caosqfERSt1+n6jyh7J NKPNqerb/ItEA+KopktlstQATuYaHN8GNub6gEM4suNxPHsYgKQD3ldTcxMUvvat TvkLxFcv8vI7zrtiQWHTqBuvaYFtP57Jj8E4N+eq/bz3gi6V1SxZhrPXdaST4HWU uDB3Tk6D5B/JFKW0t3leRmetzYJZtwP07mlOqcwNf0Yu5uTysXCRcPGeLtaUW8z0 wabh08nY5C8NPCc0wwK84L0XeWvTGUrIufBqKZfycnbUXG2QrY/5fWg4VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1SkIvT6bP8Np1aU5fEJS4WsQplMB8GA1UdIwQY MBaAFB1yRx4CXeOoKo31iq5uEuMdbNBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2Yt YmU0YjA2YzVjNDJmLzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2YtYmU0YjA2YzVjNDJm LzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8DeGrjv a84K/8oTYPqekyllqsU1M23yndGt2bcvPo8rYEWku6Y/0UDqztWRVu06sBbVXVyI 8cSIGc+UEiEgAaTyA41ZmzsCjx4gn6+SiUFjuY/g0yxik7SD47+2JsS+XpLmRua0 zPqbxzKNnC4IM7Z1r7G9QKNUejqRTde6zUMIwNvNanuXJQpMrpVCjEEB0qrjM7Vw Giy5YTcOqXeIh75zcH8gVSLpLWOFmbe04i9z9Hejsot8JHdiNKqJ5kdvsWNAZU/0 DlNbtQcS1L1hmZ2t/+mfPKh41lMWPUyAqQYgSa6Ec+RRsBZVuI13Z8pRytq4ZMyF wbB1qzw5L0XfNA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:56 2026 by rpki-client