This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json) Hash identifier: HyWJ07AH6Sd3odLyvZK0DvxFU/F33crIGAbDUenHIms= Subject key identifier: 3C:F6:C5:58:CC:6A:39:FE:BC:6D:07:56:1D:35:65:8F:8F:40:8C:DF Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019C42B417D2FC79DF6A57BF2ED7B4340CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft Manifest number: 1521 Signing time: Mon 09 Feb 2026 14:00:24 +0000 Manifest this update: Mon 09 Feb 2026 14:00:24 +0000 Manifest next update: Tue 10 Feb 2026 14:00:24 +0000 Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: GL8OZ1pZ6kfzvdRM59vPffh+jsT0SzYTYuzBh46vUJ8=) 2: O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa (hash: 0pQ2h4z2SL8hjYjPnGVnHeMv5KcEmo0XbgSaP9LFvxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:17:d2:fc:79:df:6a:57:bf:2e:d7:b4:34:0c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Feb 9 14:00:24 2026 GMT Not After : Feb 10 14:00:24 2026 GMT Subject: CN=3cf6c558cc6a39febc6d07561d35658f8f408cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c0:66:1c:ea:c1:ea:1d:48:fb:ac:eb:af:90: 72:c9:3b:da:48:62:2e:93:21:64:d8:53:c4:ea:74: 6d:5d:86:63:7a:f2:4f:c9:c3:3d:d6:d6:2c:37:f3: 2a:de:14:c2:e4:e4:58:24:7d:f8:92:80:7c:5b:b2: fb:ed:ea:95:66:7e:f7:00:0c:e8:03:1d:71:39:72: cd:29:30:da:f3:60:7e:e6:d9:c3:af:4a:5c:0a:75: be:64:3f:12:ba:d0:d5:c3:ba:dc:1b:b1:c3:f8:c3: 5a:69:f0:ed:52:54:ef:53:cc:00:c4:7a:35:b8:7e: 0d:e7:12:dc:c2:cc:2b:5f:cc:fa:b9:3c:55:e4:51: 55:ac:ba:7e:d2:95:77:d8:4b:33:77:86:b7:b7:60: df:c2:12:3e:14:db:fa:4d:ef:6c:92:33:94:ab:a8: f1:7f:4b:b9:35:86:a6:3e:6f:21:03:52:68:66:0a: 36:cf:3d:19:b7:c5:87:f0:1e:5a:00:00:3b:ea:3c: 26:e9:eb:cb:41:10:3d:74:3c:a0:7e:61:22:ba:eb: d3:27:8c:1e:09:9c:4c:9f:92:9f:fe:b5:d4:d3:70: c5:0d:48:9e:9e:0a:f3:86:99:65:de:8a:80:87:d9: 25:00:d6:56:bc:ef:d5:c3:d3:34:9f:8f:28:88:08: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F6:C5:58:CC:6A:39:FE:BC:6D:07:56:1D:35:65:8F:8F:40:8C:DF X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f3:89:95:f9:b0:9a:80:fd:f1:a7:b3:87:e4:c8:f2:ba:85: 7f:fd:a2:f4:15:54:db:2b:8b:fc:83:66:7d:80:62:32:13:90: c5:34:a8:f0:8d:01:b7:b3:4d:de:4e:39:7d:32:d6:32:16:e4: 42:a3:d6:40:25:e2:ac:47:b3:08:0f:f0:8e:33:8b:a5:5b:72: 51:6f:1f:e9:a8:f6:d4:31:28:20:ed:10:0d:3e:65:bd:94:b1: 10:03:f6:78:0e:75:a2:48:bf:5e:a1:ec:ef:2a:93:ac:92:75: 9e:fb:78:fa:a9:f9:ba:8d:dc:50:22:d9:64:0b:79:41:f3:42: 5b:91:dc:25:fd:6a:9f:fb:86:fa:d4:c1:0c:0b:24:e4:0c:72: f4:f3:91:98:30:4b:98:65:2d:2f:7d:49:ee:8b:90:d7:35:6a: a9:8c:a5:60:e1:1b:68:69:fe:be:09:cd:d3:ef:88:ee:c2:de: a3:38:8c:da:e2:1a:2e:9d:70:d6:97:3c:0b:20:bc:19:4c:5e: 67:e9:a1:69:9b:f3:83:77:47:18:a0:34:c4:40:c8:7b:c4:05: f8:b7:ec:f7:d2:7a:49:9c:7f:a5:1a:13:02:dc:53:6f:1a:45: ce:fb:19:8b:ae:da:73:e1:43:eb:73:4e:aa:36:8c:a7:5a:07: ae:67:e3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBfS/Hnfale/Lte0NAzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjYwMjA5MTQwMDI0WhcNMjYwMjEwMTQwMDI0WjAzMTEwLwYDVQQD EygzY2Y2YzU1OGNjNmEzOWZlYmM2ZDA3NTYxZDM1NjU4ZjhmNDA4Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MBmHOrB6h1I+6zrr5ByyTvaSGIu kyFk2FPE6nRtXYZjevJPycM91tYsN/Mq3hTC5ORYJH34koB8W7L77eqVZn73AAzo Ax1xOXLNKTDa82B+5tnDr0pcCnW+ZD8SutDVw7rcG7HD+MNaafDtUlTvU8wAxHo1 uH4N5xLcwswrX8z6uTxV5FFVrLp+0pV32Eszd4a3t2DfwhI+FNv6Te9skjOUq6jx f0u5NYamPm8hA1JoZgo2zz0Zt8WH8B5aAAA76jwm6evLQRA9dDygfmEiuuvTJ4we CZxMn5Kf/rXU03DFDUiengrzhpll3oqAh9klANZWvO/Vw9M0n48oiAhgSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz2xVjMajn+vG0HVh01ZY+PQIzfMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPOJlfmw moD98aezh+TI8rqFf/2i9BVU2yuL/INmfYBiMhOQxTSo8I0Bt7NN3k45fTLWMhbk QqPWQCXirEezCA/wjjOLpVtyUW8f6aj21DEoIO0QDT5lvZSxEAP2eA51oki/XqHs 7yqTrJJ1nvt4+qn5uo3cUCLZZAt5QfNCW5HcJf1qn/uG+tTBDAsk5Axy9PORmDBL mGUtL31J7ouQ1zVqqYylYOEbaGn+vgnN0++I7sLeoziM2uIaLp1w1pc8CyC8GUxe Z+mhaZvzg3dHGKA0xEDIe8QF+Lfs99J6SZx/pRoTAtxTbxpFzvsZi67ac+FD63NO qjaMp1oHrmfj0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:52 2026 by rpki-client