This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json) Hash identifier: TgqkCfC0msqk9M4W4Hh1a6Z5FAo+6qcllCGflUhArlQ= Subject key identifier: 73:CC:77:FA:1F:0A:87:D6:2C:B5:64:F4:0A:65:0D:47:7E:16:27:E3 Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Certificate serial: 019C427D90A1E4777BC3C7B74D98DCB12C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft Manifest number: 13DE Signing time: Mon 09 Feb 2026 13:00:51 +0000 Manifest this update: Mon 09 Feb 2026 13:00:51 +0000 Manifest next update: Tue 10 Feb 2026 13:00:51 +0000 Files and hashes: 1: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: gPqQS6WUU1+6xr8d1RbOzlfdKha+RqXbqL6hI0EAdhg=) 2: xjZQLy8vRD61BJY6zdBKr_UBjVY.roa (hash: SELpzilV3F78kMxps90YOTYAH+UvWHxqXIdoDWHgTLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:90:a1:e4:77:7b:c3:c7:b7:4d:98:dc:b1:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Validity Not Before: Feb 9 13:00:51 2026 GMT Not After : Feb 10 13:00:51 2026 GMT Subject: CN=73cc77fa1f0a87d62cb564f40a650d477e1627e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:cc:dd:18:72:12:d6:4d:ac:7d:f2:32:6b: 76:8b:df:07:66:f0:8a:21:78:85:91:30:7e:9a:95: ce:09:58:05:dc:dc:4c:68:6c:84:31:10:36:32:89: dd:85:89:ad:97:fb:ec:d2:7b:8a:53:d6:8b:4b:de: 18:a1:e9:0b:17:67:66:76:a3:a1:e9:35:31:5b:1d: d4:86:f6:78:cf:fb:b7:56:2d:d7:78:46:1b:0c:38: e2:00:e6:6a:0a:59:f8:fe:9b:30:ce:58:0b:93:05: 39:55:e1:d5:97:cb:24:3a:33:43:2b:dd:d4:5f:68: 34:bb:8e:0f:8c:4d:47:53:7e:50:a7:d4:bd:51:32: 77:6d:2b:0f:29:44:82:f3:b5:89:df:0d:e8:1c:fd: 48:95:86:47:1b:7d:fd:4e:2b:91:67:37:30:c8:62: 02:3d:75:bc:4d:c9:d6:2e:54:a3:71:e3:eb:07:2d: a0:0d:2c:39:46:26:6f:5b:c2:ba:07:3c:5a:6c:df: 4f:4d:37:b4:2f:2c:a2:44:f2:36:b9:5e:57:8b:44: 59:38:d0:32:ae:f7:dd:ac:dd:fd:5a:d2:4c:11:83: 16:7c:b2:f6:60:65:0c:b2:3e:80:1a:95:e5:0d:fa: 73:91:4c:1f:5c:ff:ce:15:04:1c:1b:25:e5:4f:b8: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CC:77:FA:1F:0A:87:D6:2C:B5:64:F4:0A:65:0D:47:7E:16:27:E3 X509v3 Authority Key Identifier: keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:70:55:2e:eb:31:12:ae:71:24:a9:9c:d9:7a:db:14:90:01: 31:df:f2:dc:4c:68:46:81:40:dd:bc:d7:bd:9e:e3:09:cc:ea: 59:f4:88:30:20:76:1a:8e:c2:86:71:cb:9e:97:5b:69:d5:6d: af:02:82:42:47:f8:f9:b0:a9:7c:b1:a3:3d:95:a3:f3:06:b4: 3f:84:6f:11:03:70:60:15:60:f5:2c:35:ef:73:c6:af:3f:d8: 8e:56:4e:f1:ac:86:0a:60:1e:6d:b1:24:b2:d3:99:f0:23:42: 1d:9d:2f:8f:f1:de:60:39:28:59:93:94:23:52:ca:f6:1f:be: fe:be:24:e0:de:ed:03:92:7e:6e:ef:14:cb:10:3c:02:ad:93: 29:00:cc:da:c4:48:e4:39:46:57:05:e4:0b:dc:30:44:4f:42: a9:41:ba:ea:fc:11:7d:00:92:5d:15:fc:5c:9b:c1:a9:c2:a1: bf:53:ed:9a:fe:81:ec:05:a2:a5:27:e0:a5:c0:d2:c2:aa:0b: 85:e4:89:bc:8b:e3:a1:b4:df:ab:3f:f4:9f:f1:93:a6:29:d2: 21:0c:a4:a2:c2:40:f7:99:f4:f0:b4:f5:ad:68:cc:61:03:0b: 3e:6b:88:69:85:0c:26:3c:ac:d7:66:22:ac:6a:50:60:7e:0a: 1b:bb:57:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZCh5Hd7w8e3TZjcsSyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl MGFjYzAwHhcNMjYwMjA5MTMwMDUxWhcNMjYwMjEwMTMwMDUxWjAzMTEwLwYDVQQD Eyg3M2NjNzdmYTFmMGE4N2Q2MmNiNTY0ZjQwYTY1MGQ0NzdlMTYyN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzM3RhyEtZNrH3yMmt2i98HZvCK IXiFkTB+mpXOCVgF3NxMaGyEMRA2MondhYmtl/vs0nuKU9aLS94YoekLF2dmdqOh 6TUxWx3UhvZ4z/u3Vi3XeEYbDDjiAOZqCln4/pswzlgLkwU5VeHVl8skOjNDK93U X2g0u44PjE1HU35Qp9S9UTJ3bSsPKUSC87WJ3w3oHP1IlYZHG339TiuRZzcwyGIC PXW8TcnWLlSjcePrBy2gDSw5RiZvW8K6BzxabN9PTTe0LyyiRPI2uV5Xi0RZONAy rvfdrN39WtJMEYMWfLL2YGUMsj6AGpXlDfpzkUwfXP/OFQQcGyXlT7i6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPMd/ofCofWLLVk9AplDUd+FifjMB8GA1UdIwQY MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4 LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXBVLusx Eq5xJKmc2XrbFJABMd/y3ExoRoFA3bzXvZ7jCczqWfSIMCB2Go7ChnHLnpdbadVt rwKCQkf4+bCpfLGjPZWj8wa0P4RvEQNwYBVg9Sw173PGrz/YjlZO8ayGCmAebbEk stOZ8CNCHZ0vj/HeYDkoWZOUI1LK9h++/r4k4N7tA5J+bu8UyxA8Aq2TKQDM2sRI 5DlGVwXkC9wwRE9CqUG66vwRfQCSXRX8XJvBqcKhv1Ptmv6B7AWipSfgpcDSwqoL heSJvIvjobTfqz/0n/GTpinSIQykosJA95n08LT1rWjMYQMLPmuIaYUMJjys12Yi rGpQYH4KG7tXHw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:11 2026 by rpki-client