This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json) Hash identifier: +aIINL2ZKAFsQbocrRS1vfPVrQuUb/Y+bMdYstFsnts= Subject key identifier: 61:43:9E:03:2F:99:DF:B8:F0:3F:CF:62:81:76:6E:D3:3E:51:29:5A Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01 Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001 Certificate serial: 019C43905B8D014906BCC1EB7B250082A153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft Manifest number: 020B Signing time: Mon 09 Feb 2026 18:00:59 +0000 Manifest this update: Mon 09 Feb 2026 18:00:59 +0000 Manifest next update: Tue 10 Feb 2026 18:00:59 +0000 Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: L3kWS5bTwVxiT3HeQ6lzo5cd4+nxlsFDiA5I0dVVueg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5b:8d:01:49:06:bc:c1:eb:7b:25:00:82:a1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001 Validity Not Before: Feb 9 18:00:59 2026 GMT Not After : Feb 10 18:00:59 2026 GMT Subject: CN=61439e032f99dfb8f03fcf6281766ed33e51295a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:25:9d:fa:d1:aa:3f:9f:f7:6b:5e:ed:76:00: 36:a1:79:fc:4b:b7:cd:33:4a:85:e9:be:ab:4a:3e: e9:ea:32:b8:37:8a:b4:dc:e3:45:59:6f:28:5a:62: 71:20:6e:d1:ad:43:fc:74:bc:88:c6:2e:02:e8:80: 88:5b:4e:91:08:78:92:bd:55:43:0c:d2:1f:43:dd: d9:bc:2f:cb:5f:1b:8e:60:13:04:87:f4:72:ec:9d: 69:b1:7b:dc:55:f6:68:0f:c9:cf:a3:b3:1e:e2:a0: 29:c9:c0:30:4c:29:ab:d1:5e:b6:7a:3a:d7:99:79: 38:c6:fd:1d:d3:83:b8:10:74:7f:5d:bf:c5:9e:6b: a1:30:fd:59:a7:90:44:50:12:9d:37:52:f1:50:06: 5a:39:a6:80:f1:75:98:e2:6e:5e:fa:85:0d:76:59: 92:31:e4:89:08:d3:8d:61:d7:b0:75:f9:7f:04:7f: 6d:08:35:0e:3c:91:20:04:aa:36:f0:b6:9a:bc:07: 28:72:19:67:42:26:fd:5e:c1:11:55:45:e4:bb:c9: 5b:85:9a:b0:50:35:25:1c:a3:7b:20:4a:fd:f2:bc: 48:42:52:29:21:e5:28:6b:01:82:fa:c7:05:a2:60: bd:d6:26:6c:aa:c7:3d:c4:98:ba:b9:ea:3b:27:b9: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:43:9E:03:2F:99:DF:B8:F0:3F:CF:62:81:76:6E:D3:3E:51:29:5A X509v3 Authority Key Identifier: keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0c:f3:ba:e5:43:59:30:ef:8d:a0:96:fe:8a:c5:6d:23:f0: ae:2b:9d:a4:d2:e2:71:8b:04:5e:a9:f8:0e:16:b1:72:29:84: 84:c6:61:25:c2:86:90:99:3c:85:21:22:f3:11:6e:d2:de:87: 06:ac:ce:c5:e9:8b:65:fc:7e:23:f7:aa:64:10:e0:26:b6:3a: e2:30:74:cf:2f:f4:c8:57:68:71:dd:31:cd:0e:7a:f1:42:8f: 61:86:03:05:a2:14:97:7d:29:e3:7d:2b:d9:d0:44:b6:b4:77: fa:bc:9c:3b:df:d5:19:bd:6c:66:24:31:8a:09:75:3e:41:23: 8a:cf:f9:85:3f:d6:e0:41:be:d2:7c:85:70:f3:5a:cb:2b:d9: dc:eb:2e:a5:3b:30:4d:1e:83:bf:c6:fa:7a:88:e2:6f:3a:79: eb:bf:9f:42:e2:f8:29:c2:e7:91:aa:bd:05:81:f8:15:4f:11: 04:26:9f:ab:75:05:2a:c2:1e:0e:51:86:97:a7:65:56:11:a5: fe:9b:e8:42:a9:f1:79:cc:66:99:c4:62:cf:a0:03:69:4c:1b: 15:e7:7f:c2:aa:95:09:52:8c:7a:15:c0:10:de:fc:69:ce:bc: 38:31:58:45:cb:b8:14:9a:19:4d:34:5b:8d:e1:82:88:23:4e: b8:ab:6c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFuNAUkGvMHreyUAgqFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZGQ4N2FiMTE1NGZlZDVmOWJkMmI4YjU1MWExNTJiMTI3 NWMwMDEwHhcNMjYwMjA5MTgwMDU5WhcNMjYwMjEwMTgwMDU5WjAzMTEwLwYDVQQD Eyg2MTQzOWUwMzJmOTlkZmI4ZjAzZmNmNjI4MTc2NmVkMzNlNTEyOTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CWd+tGqP5/3a17tdgA2oXn8S7fN M0qF6b6rSj7p6jK4N4q03ONFWW8oWmJxIG7RrUP8dLyIxi4C6ICIW06RCHiSvVVD DNIfQ93ZvC/LXxuOYBMEh/Ry7J1psXvcVfZoD8nPo7Me4qApycAwTCmr0V62ejrX mXk4xv0d04O4EHR/Xb/FnmuhMP1Zp5BEUBKdN1LxUAZaOaaA8XWY4m5e+oUNdlmS MeSJCNONYdewdfl/BH9tCDUOPJEgBKo28LaavAcochlnQib9XsERVUXku8lbhZqw UDUlHKN7IEr98rxIQlIpIeUoawGC+scFomC91iZsqsc9xJi6ueo7J7kMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFDngMvmd+48D/PYoF2btM+USlaMB8GA1UdIwQY MBaAFB/dh6sRVP7V+b0ri1UaFSsSdcABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUt YjQxN2FjOWJiZmEzLzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUtYjQxN2FjOWJiZmEz LzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQzzuuVD WTDvjaCW/orFbSPwriudpNLicYsEXqn4DhaxcimEhMZhJcKGkJk8hSEi8xFu0t6H BqzOxemLZfx+I/eqZBDgJrY64jB0zy/0yFdocd0xzQ568UKPYYYDBaIUl30p430r 2dBEtrR3+rycO9/VGb1sZiQxigl1PkEjis/5hT/W4EG+0nyFcPNayyvZ3OsupTsw TR6Dv8b6eojibzp567+fQuL4KcLnkaq9BYH4FU8RBCafq3UFKsIeDlGGl6dlVhGl /pvoQqnxecxmmcRiz6ADaUwbFed/wqqVCVKMehXAEN78ac68ODFYRcu4FJoZTTRb jeGCiCNOuKts2A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:57 2026 by rpki-client