This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json) Hash identifier: k1vpwEiGTIk6GnJwBHJV4LgyRng3AgqZsyM2rPZu654= Subject key identifier: A5:8B:78:47:68:96:F6:AA:29:7B:9F:F4:0C:79:C1:2A:0D:73:90:2D Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Certificate serial: 019C44DA5A27DCBBF1DE600104DB189E7879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft Manifest number: 0324 Signing time: Tue 10 Feb 2026 00:01:26 +0000 Manifest this update: Tue 10 Feb 2026 00:01:26 +0000 Manifest next update: Wed 11 Feb 2026 00:01:26 +0000 Files and hashes: 1: DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa (hash: IW2dIfGRE8kDdbDSGziwX25n3nT3NtlJvJJCv8rrTuw=) 2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: 9lUTQK0XPVBOmNmz0+sW5z0dVzqVOcO8wAXCrhNdytQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:5a:27:dc:bb:f1:de:60:01:04:db:18:9e:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Validity Not Before: Feb 10 00:01:26 2026 GMT Not After : Feb 11 00:01:26 2026 GMT Subject: CN=a58b78476896f6aa297b9ff40c79c12a0d73902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:27:85:d7:5c:cd:46:72:e2:f2:de:5c:ea: 72:77:75:b5:87:2c:b3:d3:a3:ca:e8:0d:25:ee:75: 77:27:cc:39:aa:40:07:e1:58:cf:4e:e0:9d:04:09: f2:cf:22:0d:d1:e5:70:3e:0f:71:cb:81:7b:ea:f9: f9:34:b2:d1:fd:98:85:a4:c4:97:44:8c:0f:55:98: 59:5f:1f:c1:37:e1:8c:ff:2d:ca:a8:26:bd:1a:b6: 36:9f:83:50:2f:0b:46:93:41:6c:0d:c2:6b:df:3c: 06:47:96:8c:b1:cd:82:df:c4:4f:f5:7e:1c:f5:8a: 7d:06:40:60:6a:02:5f:12:00:a7:ef:e2:5a:64:e2: d0:88:d8:6d:b1:dd:94:5e:2a:83:4f:0a:f7:e1:58: 7a:37:65:07:c9:3f:34:3e:0f:df:25:f4:f3:5d:ca: fb:84:b5:6b:c9:4b:15:48:da:ae:64:8e:a9:dc:d0: 81:9c:1e:85:1f:bf:40:e9:c3:e8:00:24:62:21:bb: 42:e5:da:54:21:d3:2e:99:56:ec:1e:4d:52:ea:ae: f1:5a:d0:51:4e:6d:22:c3:42:12:67:a3:b4:57:48: 5f:ff:d6:44:d8:69:32:ac:8c:3c:77:9d:5e:bd:7e: eb:fc:ae:66:ff:8b:a4:4e:25:e7:9f:c5:bb:20:e8: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8B:78:47:68:96:F6:AA:29:7B:9F:F4:0C:79:C1:2A:0D:73:90:2D X509v3 Authority Key Identifier: keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b3:ad:0e:55:aa:80:7e:59:66:5c:34:bb:33:c2:98:17:49: 25:59:e3:5b:9e:8f:74:a3:d3:48:92:5e:dd:dd:24:b5:16:26: 3c:20:06:f8:25:b9:5d:bf:f0:de:57:a6:42:f3:9f:03:59:9f: 3c:c2:c4:ba:53:c0:79:34:d9:57:b1:d4:75:7d:f7:93:54:c0: aa:58:5b:15:56:65:d7:4c:89:c4:64:66:9b:e5:98:a3:7e:c4: de:f8:af:9a:71:68:1b:4a:ba:6d:82:02:f6:60:50:c6:b8:60: 64:8d:04:40:6c:d9:fd:0a:d1:8a:ea:47:fb:35:da:48:88:24: 7d:2a:c0:08:f8:09:e4:0f:e7:ef:2c:d3:47:71:f2:ee:70:11: d3:e5:60:11:5b:9b:60:de:64:8f:3e:e9:eb:26:c9:5f:36:35: 39:08:8c:dd:71:08:7b:00:36:70:e1:8a:d9:2e:ac:f9:02:d2: 76:14:7d:b0:fa:a8:7f:12:b0:2f:04:3f:cc:1f:c0:c0:1c:6d: 00:b0:f7:bb:b0:67:7a:f5:01:a6:b5:c6:59:21:b8:57:17:00: 36:a1:c3:76:ee:3c:2b:f5:b8:ff:c2:83:f7:96:55:a9:c4:c8: 85:7d:52:3f:51:4f:1e:1a:78:77:d9:d4:9b:11:68:a8:3d:f4: ed:fd:42:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2lon3Lvx3mABBNsYnnh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi ZTZkOTQwHhcNMjYwMjEwMDAwMTI2WhcNMjYwMjExMDAwMTI2WjAzMTEwLwYDVQQD EyhhNThiNzg0NzY4OTZmNmFhMjk3YjlmZjQwYzc5YzEyYTBkNzM5MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3cnhddczUZy4vLeXOpyd3W1hyyz 06PK6A0l7nV3J8w5qkAH4VjPTuCdBAnyzyIN0eVwPg9xy4F76vn5NLLR/ZiFpMSX RIwPVZhZXx/BN+GM/y3KqCa9GrY2n4NQLwtGk0FsDcJr3zwGR5aMsc2C38RP9X4c 9Yp9BkBgagJfEgCn7+JaZOLQiNhtsd2UXiqDTwr34Vh6N2UHyT80Pg/fJfTzXcr7 hLVryUsVSNquZI6p3NCBnB6FH79A6cPoACRiIbtC5dpUIdMumVbsHk1S6q7xWtBR Tm0iw0ISZ6O0V0hf/9ZE2GkyrIw8d51evX7r/K5m/4ukTiXnn8W7IOgR0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWLeEdolvaqKXuf9Ax5wSoNc5AtMB8GA1UdIwQY MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2 LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbOtDlWq gH5ZZlw0uzPCmBdJJVnjW56PdKPTSJJe3d0ktRYmPCAG+CW5Xb/w3lemQvOfA1mf PMLEulPAeTTZV7HUdX33k1TAqlhbFVZl10yJxGRmm+WYo37E3vivmnFoG0q6bYIC 9mBQxrhgZI0EQGzZ/QrRiupH+zXaSIgkfSrACPgJ5A/n7yzTR3Hy7nAR0+VgEVub YN5kjz7p6ybJXzY1OQiM3XEIewA2cOGK2S6s+QLSdhR9sPqofxKwLwQ/zB/AwBxt ALD3u7BnevUBprXGWSG4VxcANqHDdu48K/W4/8KD95ZVqcTIhX1SP1FPHhp4d9nU mxFoqD307f1CZg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:49 2026 by rpki-client