This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: Q10IVHIvhv1Rf+4OTNN1/spna8X9FcOUcAxY2ecbBHM= Subject key identifier: 1A:7B:07:B6:3D:49:C2:8E:01:DE:13:F6:B8:A0:73:11:B8:F5:6F:2A Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019C41D8A1A2E842F6119B8929C50DCBC471 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 151D Signing time: Mon 09 Feb 2026 10:00:42 +0000 Manifest this update: Mon 09 Feb 2026 10:00:42 +0000 Manifest next update: Tue 10 Feb 2026 10:00:42 +0000 Files and hashes: 1: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: cj2MCW1WmFdgziIYHQ3ZELB3hfMN02qlypY8RoJE0O4=) 2: vTbZcHH_wcLQWpBSiiNEOr8soog.roa (hash: qwqHAj9cQHotfU1ZEtxZLN+u16iKUOU9Eiv2ZuFYnLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a1:a2:e8:42:f6:11:9b:89:29:c5:0d:cb:c4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Feb 9 10:00:42 2026 GMT Not After : Feb 10 10:00:42 2026 GMT Subject: CN=1a7b07b63d49c28e01de13f6b8a07311b8f56f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:ac:56:40:6b:3c:f1:fa:59:55:92:dd:88: d7:74:e6:dd:99:d0:6f:e2:a4:b6:c4:89:62:63:7a: be:3a:24:c0:8e:18:5e:aa:3b:b9:fb:a7:af:b1:7d: af:b9:ca:1d:34:1d:4b:fa:c5:a8:73:a8:ca:6e:74: f6:fa:ad:28:2d:1e:da:ee:ba:05:fc:01:76:c7:0a: 07:ee:51:54:a4:ba:68:1b:bb:6b:c7:11:c6:38:20: ea:f8:34:cc:f5:dd:fe:66:34:2a:94:a1:ae:51:50: 46:e5:75:0b:1d:97:a5:a5:ed:20:e1:92:be:84:ba: cd:26:80:c9:61:3d:b3:bc:7a:21:45:c0:28:42:17: 5a:ef:56:6e:eb:34:ff:d7:75:40:24:d0:43:ba:0c: 7f:2f:4b:01:cc:07:0b:27:a4:2f:5f:69:80:f0:01: a1:c9:bd:06:a4:b9:af:e4:6b:6b:77:b8:6d:ae:bc: 0a:2f:78:40:96:c2:6e:ed:c6:13:d4:50:b9:1e:63: 21:e5:9d:0e:d9:63:b5:99:fe:0c:c6:ce:53:f6:31: 4a:3b:27:8e:05:af:f8:ef:ba:ba:49:12:34:0c:b8: 6b:a1:78:c6:d8:01:8e:6f:75:f7:58:00:4b:5f:e2: 47:94:59:ea:2d:fc:7f:92:53:dc:20:87:90:10:5a: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:07:B6:3D:49:C2:8E:01:DE:13:F6:B8:A0:73:11:B8:F5:6F:2A X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fe:98:c7:9a:a1:fb:8a:81:cf:f9:87:66:42:d7:17:16:ba: 05:0b:02:88:c9:35:1a:c4:38:83:4a:1c:e1:ed:3b:22:42:56: 6c:9d:4a:17:9b:38:67:35:7a:16:88:03:67:e1:ab:89:f5:37: 86:73:f6:14:2f:f5:5d:3b:9d:bb:d9:0a:bb:4f:45:0f:3c:69: 95:3c:d4:0f:e0:e3:6a:76:cd:a5:9d:09:3c:9c:ca:d4:56:39: 50:18:9c:a7:81:95:81:36:57:a2:5c:55:d3:a0:7b:67:ed:a0: 18:39:c8:88:50:ea:21:30:18:16:93:23:0f:37:9a:34:c4:34: 4e:33:44:97:18:1e:72:fe:e3:ca:91:04:35:28:76:cf:bf:75: fc:15:53:4f:c1:5f:77:01:6d:56:47:f6:63:c3:3a:a5:fa:e8: 37:3a:92:c1:02:b9:4e:fb:9d:21:e1:f0:99:92:ac:8e:6e:48: 82:8a:da:0b:b1:f7:c9:8a:79:6f:55:68:bd:81:da:ef:1e:26: ec:57:5d:83:e5:e2:78:38:4d:0e:b0:3a:d0:d4:34:f5:cc:dc: a0:5b:0d:51:d1:08:76:47:dd:08:4d:ac:4a:db:49:00:96:e0: e7:fb:0b:bc:2e:d5:bd:a9:7b:41:fe:e1:95:4a:7a:98:32:32: e6:c3:8d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KGi6EL2EZuJKcUNy8RxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjYwMjA5MTAwMDQyWhcNMjYwMjEwMTAwMDQyWjAzMTEwLwYDVQQD EygxYTdiMDdiNjNkNDljMjhlMDFkZTEzZjZiOGEwNzMxMWI4ZjU2ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFqsVkBrPPH6WVWS3YjXdObdmdBv 4qS2xIliY3q+OiTAjhheqju5+6evsX2vucodNB1L+sWoc6jKbnT2+q0oLR7a7roF /AF2xwoH7lFUpLpoG7trxxHGOCDq+DTM9d3+ZjQqlKGuUVBG5XULHZelpe0g4ZK+ hLrNJoDJYT2zvHohRcAoQhda71Zu6zT/13VAJNBDugx/L0sBzAcLJ6QvX2mA8AGh yb0GpLmv5Gtrd7htrrwKL3hAlsJu7cYT1FC5HmMh5Z0O2WO1mf4Mxs5T9jFKOyeO Ba/477q6SRI0DLhroXjG2AGOb3X3WABLX+JHlFnqLfx/klPcIIeQEFr0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp7B7Y9ScKOAd4T9rigcxG49W8qMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/6Yx5qh +4qBz/mHZkLXFxa6BQsCiMk1GsQ4g0oc4e07IkJWbJ1KF5s4ZzV6FogDZ+GrifU3 hnP2FC/1XTudu9kKu09FDzxplTzUD+DjanbNpZ0JPJzK1FY5UBicp4GVgTZXolxV 06B7Z+2gGDnIiFDqITAYFpMjDzeaNMQ0TjNElxgecv7jypEENSh2z791/BVTT8Ff dwFtVkf2Y8M6pfroNzqSwQK5TvudIeHwmZKsjm5IgoraC7H3yYp5b1VovYHa7x4m 7Fddg+XieDhNDrA60NQ09czcoFsNUdEIdkfdCE2sSttJAJbg5/sLvC7Vval7Qf7h lUp6mDIy5sONng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:30 2026 by rpki-client