This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json) Hash identifier: DSQ8Uej+iDHCHqI7vI3pBTMASawPnsrvC65fhj3dFWQ= Subject key identifier: 29:AA:6B:E3:7D:2A:E7:8A:3D:D6:99:BF:03:BB:9D:94:5B:8F:9E:C3 Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Certificate serial: 019C42B41AC48C80C0B53EED8F0835F315A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft Manifest number: 1677 Signing time: Mon 09 Feb 2026 14:00:25 +0000 Manifest this update: Mon 09 Feb 2026 14:00:25 +0000 Manifest next update: Tue 10 Feb 2026 14:00:25 +0000 Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: tUDuIC31U62d0oYiJ2+GlEn9FB0BVE3GlHXhcq0IFyk=) 2: _wGjPopaleb7rolTBZPWY4rLAR0.roa (hash: cxMklFmwljucLQ52IKrbd2Z95wZK3+gwqoZkVO4J3co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1a:c4:8c:80:c0:b5:3e:ed:8f:08:35:f3:15:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Validity Not Before: Feb 9 14:00:25 2026 GMT Not After : Feb 10 14:00:25 2026 GMT Subject: CN=29aa6be37d2ae78a3dd699bf03bb9d945b8f9ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:3a:06:69:07:53:66:22:9c:e5:56:fe:3d: 6f:25:f7:3e:c2:9d:41:3c:a6:70:74:22:f0:98:d3: ea:38:10:70:6e:d1:b9:de:1c:5d:f4:63:2a:32:28: dd:48:7d:e6:f0:fc:84:4a:c4:35:cb:2e:a6:7e:ca: 32:48:23:86:c5:12:a0:25:6a:3f:40:95:b2:31:f3: 2a:f4:e0:32:aa:1f:fa:94:1e:a3:cf:2f:aa:47:60: de:02:f8:a2:e1:b8:c5:63:b4:d5:9b:a7:59:c6:28: fe:f4:17:97:dc:ed:76:6e:cc:c7:ca:de:b9:e8:27: 8e:07:d9:d1:2d:44:bd:67:3e:36:cf:7e:8a:23:c4: fd:10:e6:4f:0a:f6:cc:e0:78:57:d1:61:15:ee:4d: 7d:13:3e:fc:bf:c5:09:e2:5e:e7:89:92:b6:b8:6d: 8d:3b:b8:0d:dc:e5:ed:2e:e0:e0:2c:d9:10:42:19: 77:8e:0f:68:55:c5:86:80:ad:88:23:6f:61:5a:a7: 04:5e:9b:8f:4a:e4:79:f6:d7:fc:d5:3d:71:c1:31: 0b:91:a0:68:a4:80:bc:2c:f1:74:1f:68:2e:f3:8c: 5e:1b:b2:d2:13:80:2f:88:b5:0d:0f:5e:4a:30:bb: 97:a0:83:fd:79:fb:f5:43:dd:43:20:93:bf:e2:5b: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AA:6B:E3:7D:2A:E7:8A:3D:D6:99:BF:03:BB:9D:94:5B:8F:9E:C3 X509v3 Authority Key Identifier: keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d3:2e:1e:2c:bc:2f:08:bd:46:96:15:b0:79:34:5d:4b:d6: 09:a0:88:09:c2:eb:cc:2b:82:91:4c:6a:80:ce:df:dd:c8:21: ef:48:fb:b1:71:f0:58:0d:40:b5:c1:f1:e3:ba:97:b7:e5:ba: d4:b9:ab:e8:be:54:79:66:e5:03:a3:5f:10:34:db:02:63:b5: ca:a4:39:33:25:1e:98:37:ac:b0:e7:5d:ad:40:f1:87:51:de: 64:5d:a0:86:65:d1:3a:c1:ec:ab:c6:58:74:f0:ab:36:7b:be: 33:4a:56:ad:7f:79:26:91:ac:ee:af:5b:62:b8:14:fc:c9:c1: a6:26:83:91:86:cf:55:94:a6:05:f8:f6:3a:a6:61:76:73:ce: e2:b3:27:56:f3:5c:dd:e0:ca:11:f4:cd:48:c3:76:02:d8:b0: 2a:82:27:49:0b:e9:eb:00:a5:ca:51:2c:d1:32:cf:d6:79:70: e3:c3:a2:8f:6d:54:c6:d4:e1:23:56:dd:b2:9c:a2:43:af:df: f8:a1:e6:19:e7:1f:31:2f:4d:2f:2e:b3:44:22:a6:e3:01:ac: f8:85:c9:df:bc:75:d7:be:5f:7a:b8:54:a2:c6:07:77:1f:4d: 3f:fa:bd:25:59:21:7f:6f:2e:43:80:8d:ec:15:58:4d:23:38: 11:6f:89:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBrEjIDAtT7tjwg18xWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk ZDMxMWEwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD EygyOWFhNmJlMzdkMmFlNzhhM2RkNjk5YmYwM2JiOWQ5NDViOGY5ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKM6BmkHU2YinOVW/j1vJfc+wp1B PKZwdCLwmNPqOBBwbtG53hxd9GMqMijdSH3m8PyESsQ1yy6mfsoySCOGxRKgJWo/ QJWyMfMq9OAyqh/6lB6jzy+qR2DeAvii4bjFY7TVm6dZxij+9BeX3O12bszHyt65 6CeOB9nRLUS9Zz42z36KI8T9EOZPCvbM4HhX0WEV7k19Ez78v8UJ4l7niZK2uG2N O7gN3OXtLuDgLNkQQhl3jg9oVcWGgK2II29hWqcEXpuPSuR59tf81T1xwTELkaBo pIC8LPF0H2gu84xeG7LSE4AviLUND15KMLuXoIP9efv1Q91DIJO/4ltv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmqa+N9KueKPdaZvwO7nZRbj57DMB8GA1UdIwQY MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0 LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtMuHiy8 Lwi9RpYVsHk0XUvWCaCICcLrzCuCkUxqgM7f3cgh70j7sXHwWA1AtcHx47qXt+W6 1Lmr6L5UeWblA6NfEDTbAmO1yqQ5MyUemDessOddrUDxh1HeZF2ghmXROsHsq8ZY dPCrNnu+M0pWrX95JpGs7q9bYrgU/MnBpiaDkYbPVZSmBfj2OqZhdnPO4rMnVvNc 3eDKEfTNSMN2AtiwKoInSQvp6wClylEs0TLP1nlw48Oij21UxtThI1bdspyiQ6/f +KHmGecfMS9NLy6zRCKm4wGs+IXJ37x1175ferhUosYHdx9NP/q9JVkhf28uQ4CN 7BVYTSM4EW+JQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:08 2026 by rpki-client