This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json) Hash identifier: BMvRUgZHftT0mTSv0se2kiFlHpTQzoZqOjT6vjI+7gk= Subject key identifier: 3F:B9:1A:13:B2:FE:F4:77:00:99:B6:2F:C3:9F:02:61:8E:66:9D:EE Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c Certificate serial: 019C4321CD4245F6C40E950B14095B969E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft Manifest number: 04E4 Signing time: Mon 09 Feb 2026 16:00:14 +0000 Manifest this update: Mon 09 Feb 2026 16:00:14 +0000 Manifest next update: Tue 10 Feb 2026 16:00:14 +0000 Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: XiEpMpSqcQYOSThh6NaSnm0bWTaK6AUYw0Vl3yMQUn4=) 2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:cd:42:45:f6:c4:0e:95:0b:14:09:5b:96:9e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c Validity Not Before: Feb 9 16:00:14 2026 GMT Not After : Feb 10 16:00:14 2026 GMT Subject: CN=3fb91a13b2fef4770099b62fc39f02618e669dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:b6:90:95:43:3c:4e:7c:f8:c6:0a:7d:f9: 7f:62:6d:d4:6c:c7:43:fd:56:71:33:cf:6f:3a:de: 1c:77:6c:d3:28:3d:d2:f5:21:cd:61:48:a5:8b:5a: 53:e9:d3:00:71:bf:10:43:4e:ed:5a:ea:13:be:74: a9:d5:50:10:89:03:8d:ec:a8:d1:c2:47:a5:a8:e2: b2:1f:df:18:1e:d4:ce:9c:03:c9:4f:c5:48:ff:a6: de:05:1c:4c:d5:77:fb:8f:62:22:bb:21:3b:bf:d6: a0:20:f4:11:9b:ee:ce:84:2f:07:19:8e:a2:02:00: de:b1:a5:49:d8:17:a1:13:65:0d:e2:f5:a3:f2:ad: 33:a2:f7:e2:c2:4d:00:ea:b5:b2:bc:e3:7e:bd:67: 89:9f:e5:f1:c9:52:03:f2:23:fa:55:5b:7e:75:03: b0:42:44:55:02:d7:af:28:ac:50:2f:93:09:f1:98: ec:ed:58:a4:80:e9:c3:69:e3:59:16:7e:35:05:80: 12:f4:50:56:f9:11:17:2b:32:46:c4:f0:59:ff:01: 73:7e:e6:42:26:d2:d3:58:e8:a1:69:b2:92:36:4c: be:20:b1:8d:65:75:f1:e7:eb:93:f7:d0:5a:6e:d9: fa:8d:0b:5d:b4:7d:0f:43:76:16:cb:ad:f9:f0:05: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B9:1A:13:B2:FE:F4:77:00:99:B6:2F:C3:9F:02:61:8E:66:9D:EE X509v3 Authority Key Identifier: keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:69:8b:cc:7f:96:06:c1:61:65:6d:33:a3:61:c9:26:a9:cb: 0c:6b:22:af:65:c4:70:ec:fc:8d:7f:16:f7:9b:32:6c:3b:e8: a0:3d:06:fe:44:c9:e5:1e:b2:30:f9:f6:3c:6e:8b:12:7b:7f: bc:02:7b:87:98:ec:01:3e:e6:78:05:bb:6e:bf:22:48:30:bb: 69:f6:ea:22:6f:67:64:6f:68:f2:40:15:83:8c:31:e5:d9:43: eb:8b:e0:d9:48:35:d3:e9:e7:be:4a:6b:c8:d6:fa:26:4e:28: d5:2e:20:82:72:6a:5f:2f:fa:67:5b:9b:42:1a:5e:72:55:8f: ba:d2:f4:1c:19:3c:44:68:ab:95:9d:88:30:bc:9e:6a:d3:af: 2b:07:3a:4d:5f:34:cb:e5:46:fa:56:fb:bf:19:b2:36:8f:7b: 01:18:fa:af:e5:02:f6:e4:ce:3e:cb:85:e8:e9:cc:e0:f9:14: 97:35:37:16:99:81:7a:7b:fa:fc:f8:79:bb:c5:db:ed:6f:c5: f2:dc:32:b5:08:03:f3:f4:72:67:84:b5:71:70:c7:d6:da:a1: 01:83:d2:e2:7f:d5:d4:5c:d0:ef:45:e6:d5:f5:e7:da:ad:45: 93:eb:f7:da:3e:53:cf:83:e1:13:c5:12:3a:f2:31:00:e2:3b: 85:b2:be:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIc1CRfbEDpULFAlblp6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm ODc3NGMwHhcNMjYwMjA5MTYwMDE0WhcNMjYwMjEwMTYwMDE0WjAzMTEwLwYDVQQD EygzZmI5MWExM2IyZmVmNDc3MDA5OWI2MmZjMzlmMDI2MThlNjY5ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nW2kJVDPE58+MYKffl/Ym3UbMdD /VZxM89vOt4cd2zTKD3S9SHNYUili1pT6dMAcb8QQ07tWuoTvnSp1VAQiQON7KjR wkelqOKyH98YHtTOnAPJT8VI/6beBRxM1Xf7j2IiuyE7v9agIPQRm+7OhC8HGY6i AgDesaVJ2BehE2UN4vWj8q0zovfiwk0A6rWyvON+vWeJn+XxyVID8iP6VVt+dQOw QkRVAtevKKxQL5MJ8Zjs7VikgOnDaeNZFn41BYAS9FBW+REXKzJGxPBZ/wFzfuZC JtLTWOihabKSNky+ILGNZXXx5+uT99Babtn6jQtdtH0PQ3YWy6358AXOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+5GhOy/vR3AJm2L8OfAmGOZp3uMB8GA1UdIwQY MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGmLzH+W BsFhZW0zo2HJJqnLDGsir2XEcOz8jX8W95sybDvooD0G/kTJ5R6yMPn2PG6LEnt/ vAJ7h5jsAT7meAW7br8iSDC7afbqIm9nZG9o8kAVg4wx5dlD64vg2Ug10+nnvkpr yNb6Jk4o1S4ggnJqXy/6Z1ubQhpeclWPutL0HBk8RGirlZ2IMLyeatOvKwc6TV80 y+VG+lb7vxmyNo97ARj6r+UC9uTOPsuF6OnM4PkUlzU3FpmBenv6/Ph5u8Xb7W/F 8twytQgD8/RyZ4S1cXDH1tqhAYPS4n/V1FzQ70Xm1fXn2q1Fk+v32j5Tz4PhE8US OvIxAOI7hbK+gA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:44 2026 by rpki-client