This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json) Hash identifier: Toa/u/K6WGsRxMPWEMx6zOBKLrhvQwwELMA/AG3ZvNg= Subject key identifier: 7D:D4:F0:CA:AF:F7:B3:D9:AB:C0:72:D0:2A:3B:A7:F9:2C:5E:E7:BF Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995 Certificate serial: 019C432216C582129498320DF06481E84678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft Manifest number: 181D Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: cyi+iXZHK1wTffn2rouVPXemwHhI3fICNmOhf9TMejU=) 2: YTCh_KTvg3_khxNc30C-teYdFt8.roa (hash: Q0VAnidH4TLtzlGY3yDgOA7gaxF3mxZbgN5VU2AOhNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:16:c5:82:12:94:98:32:0d:f0:64:81:e8:46:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995 Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=7dd4f0caaff7b3d9abc072d02a3ba7f92c5ee7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:ec:11:a5:99:0b:f1:4d:26:01:d3:22:db: 10:61:c1:00:de:54:5f:58:17:06:a0:46:7f:7a:7c: 64:4b:b3:c0:cc:e5:2a:6f:3b:5a:ad:9b:77:c8:16: ce:f3:d8:78:3f:17:e4:6e:a8:b0:39:ef:0b:e4:23: bd:a7:5d:25:17:e9:c3:33:b8:6c:4c:7d:b5:6f:48: 50:cb:9c:42:b2:7b:62:f1:39:97:e1:f8:51:f5:66: 35:c8:cf:f8:c5:cf:17:04:aa:cc:ad:83:da:5a:a4: 37:e5:7d:84:24:38:0f:d2:42:a6:50:06:bc:53:d0: aa:eb:30:06:e6:9c:40:cb:c3:db:9d:e0:0b:c5:d3: 9d:3f:24:c0:6c:01:1e:75:85:24:bc:a4:32:f7:22: 22:98:38:e0:7a:f9:0b:bc:67:b4:4c:c7:e5:47:2e: 60:2c:51:46:43:27:a4:23:24:37:3d:44:72:3f:1c: 1a:30:bc:16:bf:03:61:63:a3:61:f4:92:1e:33:53: 6b:9f:3e:11:c5:c9:50:3e:6f:d5:c1:5d:f9:09:ad: 37:dc:16:c2:e1:05:14:33:e2:73:f0:51:47:49:aa: ef:4c:4d:5d:96:4d:90:1b:44:c6:c3:ec:d4:f7:a3: c0:81:19:07:ca:31:da:f9:4e:4f:43:2b:52:65:f5: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:F0:CA:AF:F7:B3:D9:AB:C0:72:D0:2A:3B:A7:F9:2C:5E:E7:BF X509v3 Authority Key Identifier: keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:13:e4:e5:d1:0c:b0:6f:9d:97:ce:42:72:b7:3b:d9:a7:ba: 83:af:0c:3b:77:1f:19:60:b0:53:3b:09:a2:b2:52:ca:fc:ec: 3a:17:45:34:ad:03:ee:df:5f:b7:25:3f:c1:0d:24:12:87:ab: 08:a3:9a:1d:f2:9a:c6:df:21:53:02:2d:5e:72:3a:7d:e9:a4: 4d:41:10:83:94:45:e5:46:c4:26:fe:38:0f:2b:47:33:15:da: 4d:f6:96:09:9c:3a:43:49:6c:10:5e:4c:51:41:59:76:5d:70: 83:fe:c0:f6:15:b6:35:b0:f4:3a:11:49:e9:86:ec:71:37:7c: e7:34:e9:08:bf:42:5d:4f:9a:dd:44:66:8b:1f:ba:e4:0e:e9: a9:c1:5c:56:d5:7a:e4:72:3b:ce:45:83:e0:26:f4:c4:41:cb: 5a:7f:fd:dd:48:ff:8c:85:2c:95:da:8f:6b:ce:4b:ef:e0:0c: 44:3a:45:d5:f2:bb:ae:7f:62:b6:d8:66:62:6f:19:a6:4c:05: 02:1b:40:ed:2c:1e:cf:ae:7f:53:3c:00:34:16:31:b3:8f:5e: 79:9f:73:50:b4:8b:3f:0b:b7:c4:d2:78:2e:4a:67:5d:b9:4a: 11:8c:f6:49:71:71:12:74:33:ea:bc:0d:6b:73:3c:cb:25:fb: 23:7a:cf:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhbFghKUmDIN8GSB6EZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk NjU5OTUwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD Eyg3ZGQ0ZjBjYWFmZjdiM2Q5YWJjMDcyZDAyYTNiYTdmOTJjNWVlN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SbsEaWZC/FNJgHTItsQYcEA3lRf WBcGoEZ/enxkS7PAzOUqbztarZt3yBbO89h4PxfkbqiwOe8L5CO9p10lF+nDM7hs TH21b0hQy5xCsnti8TmX4fhR9WY1yM/4xc8XBKrMrYPaWqQ35X2EJDgP0kKmUAa8 U9Cq6zAG5pxAy8PbneALxdOdPyTAbAEedYUkvKQy9yIimDjgevkLvGe0TMflRy5g LFFGQyekIyQ3PURyPxwaMLwWvwNhY6Nh9JIeM1Nrnz4RxclQPm/VwV35Ca033BbC 4QUUM+Jz8FFHSarvTE1dlk2QG0TGw+zU96PAgRkHyjHa+U5PQytSZfW/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3U8Mqv97PZq8By0Co7p/ksXue/MB8GA1UdIwQY MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBPk5dEM sG+dl85Ccrc72ae6g68MO3cfGWCwUzsJorJSyvzsOhdFNK0D7t9ftyU/wQ0kEoer CKOaHfKaxt8hUwItXnI6femkTUEQg5RF5UbEJv44DytHMxXaTfaWCZw6Q0lsEF5M UUFZdl1wg/7A9hW2NbD0OhFJ6YbscTd85zTpCL9CXU+a3URmix+65A7pqcFcVtV6 5HI7zkWD4Cb0xEHLWn/93Uj/jIUsldqPa85L7+AMRDpF1fK7rn9itthmYm8ZpkwF AhtA7Swez65/UzwANBYxs49eeZ9zULSLPwu3xNJ4LkpnXblKEYz2SXFxEnQz6rwN a3M8yyX7I3rPnw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:34 2026 by rpki-client