This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json) Hash identifier: XYxHuRiPkg29XiboY5VTr/MVJMy7zpNXKn4JwiN1mNM= Subject key identifier: 1F:4E:07:71:FC:F1:49:B6:28:5D:49:6B:5A:16:FE:F0:B6:BF:AE:B9 Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013 Certificate serial: 019C43C7421CC329F53849F7F61CA24FB09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft Manifest number: 04D6 Signing time: Mon 09 Feb 2026 19:00:57 +0000 Manifest this update: Mon 09 Feb 2026 19:00:57 +0000 Manifest next update: Tue 10 Feb 2026 19:00:57 +0000 Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=) 2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: NBdE9sQjV4m246xjRE3LdeUECSYc/eviFyNfI2vTHPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:42:1c:c3:29:f5:38:49:f7:f6:1c:a2:4f:b0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013 Validity Not Before: Feb 9 19:00:57 2026 GMT Not After : Feb 10 19:00:57 2026 GMT Subject: CN=1f4e0771fcf149b6285d496b5a16fef0b6bfaeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:ad:4e:d4:6a:93:a0:21:3c:d1:b3:5b:85: 80:4a:88:88:da:5f:42:25:e4:5e:4f:a6:c9:1f:9a: 92:3b:c9:11:37:ad:9c:58:9f:fe:8b:95:6f:24:6f: 0e:4c:2e:9e:cd:44:93:cd:d0:d8:99:ed:8a:eb:8d: 27:6b:72:81:81:d2:53:96:7f:c7:0c:df:0d:bf:43: 00:9f:75:04:2b:bf:d5:0a:60:67:2b:f7:23:11:ee: 3b:cc:82:10:96:b0:d1:ae:63:24:9c:75:3f:96:63: 87:00:dd:3a:02:5e:44:2b:ea:d0:0d:57:3a:a2:dc: e7:77:58:89:85:04:fc:35:1e:52:80:fa:2c:a5:f7: f4:6b:90:2b:13:b5:92:61:35:72:d2:7f:ea:05:5b: c1:da:17:6d:c9:e6:a0:33:36:20:ee:3f:51:fb:78: 6d:b1:8e:d1:1e:4e:2b:58:5f:16:50:ef:9c:b0:67: a9:6f:0d:e6:1f:72:45:67:ba:1e:89:79:3c:48:d8: 26:1b:9d:ce:37:67:b9:68:47:b2:02:89:57:28:34: 3b:0a:c3:87:b8:01:e9:02:4a:b2:1d:85:d7:bf:46: f1:d1:46:d7:ef:8a:ee:ac:cf:19:d6:5c:ec:15:92: b4:0c:5b:2c:91:11:6c:b3:7b:5c:f7:8a:3c:33:91: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:07:71:FC:F1:49:B6:28:5D:49:6B:5A:16:FE:F0:B6:BF:AE:B9 X509v3 Authority Key Identifier: keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:38:c9:c6:08:66:b7:e6:8e:1f:d1:f2:6c:a3:a8:90:bb:95: e0:63:f2:91:73:f1:e4:cc:b2:9b:14:c5:79:03:f6:67:f0:61: b9:03:2c:d8:e4:57:1d:7d:91:80:2d:17:e8:88:24:e9:19:4c: 40:41:15:34:08:e3:0a:37:89:5e:07:6b:4f:19:42:2f:48:3f: 8e:87:e2:91:e8:f8:e2:a8:55:97:52:50:31:19:aa:51:01:50: bf:cf:17:36:08:fb:e9:a1:06:64:2b:50:63:8d:2c:9d:54:86: 6e:8f:40:33:20:e9:c9:de:61:0f:44:76:e7:46:fe:4a:c7:91: 88:00:a1:18:d0:07:dd:8e:3f:98:0a:b9:44:c0:a9:a9:1d:c4: 1c:d6:c0:ac:8d:f2:4c:9e:25:e1:33:f5:0c:15:12:31:51:81: 3a:5f:fc:0f:63:1e:6f:46:8e:da:d8:43:97:0c:25:25:a4:71: a7:4b:20:67:5a:41:0a:2f:82:a9:be:02:d9:e3:e3:56:83:79: 93:36:37:b4:60:7a:5c:67:0c:db:e0:56:b0:d3:de:f8:fe:7b: a5:87:44:cf:d7:9a:07:9a:78:62:a0:82:5d:c5:25:ce:55:8f: 8d:18:83:d4:67:27:55:69:c8:40:99:63:e2:47:e8:70:cb:7c: 6b:dd:2f:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0Icwyn1OEn39hyiT7CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx YzgwMTMwHhcNMjYwMjA5MTkwMDU3WhcNMjYwMjEwMTkwMDU3WjAzMTEwLwYDVQQD EygxZjRlMDc3MWZjZjE0OWI2Mjg1ZDQ5NmI1YTE2ZmVmMGI2YmZhZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7+tTtRqk6AhPNGzW4WASoiI2l9C JeReT6bJH5qSO8kRN62cWJ/+i5VvJG8OTC6ezUSTzdDYme2K640na3KBgdJTln/H DN8Nv0MAn3UEK7/VCmBnK/cjEe47zIIQlrDRrmMknHU/lmOHAN06Al5EK+rQDVc6 otznd1iJhQT8NR5SgPospff0a5ArE7WSYTVy0n/qBVvB2hdtyeagMzYg7j9R+3ht sY7RHk4rWF8WUO+csGepbw3mH3JFZ7oeiXk8SNgmG53ON2e5aEeyAolXKDQ7CsOH uAHpAkqyHYXXv0bx0UbX74rurM8Z1lzsFZK0DFsskRFss3tc94o8M5FwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9OB3H88Um2KF1Ja1oW/vC2v665MB8GA1UdIwQY MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzjJxghm t+aOH9HybKOokLuV4GPykXPx5MyymxTFeQP2Z/BhuQMs2ORXHX2RgC0X6Igk6RlM QEEVNAjjCjeJXgdrTxlCL0g/jofikej44qhVl1JQMRmqUQFQv88XNgj76aEGZCtQ Y40snVSGbo9AMyDpyd5hD0R250b+SseRiAChGNAH3Y4/mAq5RMCpqR3EHNbArI3y TJ4l4TP1DBUSMVGBOl/8D2Meb0aO2thDlwwlJaRxp0sgZ1pBCi+Cqb4C2ePjVoN5 kzY3tGB6XGcM2+BWsNPe+P57pYdEz9eaB5p4YqCCXcUlzlWPjRiD1GcnVWnIQJlj 4kfocMt8a90vcQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:27 2026 by rpki-client