This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json) Hash identifier: P/KjVX3Aw/6IdntLrxmzbsqtAkgONwsj/Tfg65CTPng= Subject key identifier: DD:32:A7:E1:74:5A:88:51:7E:0F:98:4E:A2:11:EB:ED:5B:50:1F:94 Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019C1EA8555C00533D65AA9D9BEE3BFC9715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft Manifest number: 1384 Signing time: Mon 02 Feb 2026 14:01:14 +0000 Manifest this update: Mon 02 Feb 2026 14:01:14 +0000 Manifest next update: Tue 03 Feb 2026 14:01:14 +0000 Files and hashes: 1: 3MbENdJT26XzCCTRISyB_iPykiw.roa (hash: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs=) 2: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (hash: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg=) 3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: HHKoP/C2Yq5RqCUSBwEsFTZC/dX/2/R5aO1na4SNxS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:a8:55:5c:00:53:3d:65:aa:9d:9b:ee:3b:fc:97:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Feb 2 14:01:14 2026 GMT Not After : Feb 3 14:01:14 2026 GMT Subject: CN=dd32a7e1745a88517e0f984ea211ebed5b501f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:18:1e:55:7f:b3:4f:8b:f5:97:2e:a7:c6: f9:8b:31:30:a3:10:1c:92:5f:e2:fc:4b:b8:f8:b4: f1:15:7e:91:0f:8e:1e:61:55:f2:ae:76:fc:be:37: 9c:d7:a6:60:7a:b0:bb:63:d3:72:58:ad:e1:8a:ac: e2:c7:aa:a6:b2:e5:53:96:0c:cb:58:86:53:3b:81: 04:24:38:11:56:e9:f5:da:9e:c9:83:65:e5:83:7a: db:dd:c0:7a:a2:3d:a0:6c:7c:c0:30:e2:79:64:48: 12:25:2b:89:9f:50:68:c2:25:79:4d:f2:be:7b:92: 9b:ee:c8:7a:da:dc:69:33:87:ce:50:32:57:aa:0f: 56:eb:10:ac:7a:b4:8e:82:a1:0b:30:8c:c5:ea:3a: e1:37:66:9f:9c:d8:98:89:85:07:a1:d3:b2:2f:7a: 3d:93:42:8c:92:f3:45:c7:12:54:8a:3d:9d:38:9a: 23:e0:2c:7a:40:8d:92:a8:a4:27:b5:c8:4d:4e:63: 65:80:bc:e6:9d:d7:78:d9:00:e4:ed:46:00:44:0a: 85:d6:8c:bf:4d:42:c3:7c:64:52:31:08:e3:2b:47: f1:79:8d:51:5b:a0:2d:da:3b:b9:03:8f:f5:a0:64: f3:74:72:8f:96:f9:ca:02:21:34:44:43:40:47:5f: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:32:A7:E1:74:5A:88:51:7E:0F:98:4E:A2:11:EB:ED:5B:50:1F:94 X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ee:50:83:d4:69:97:b0:c7:05:ef:11:e1:a7:74:7b:eb:3d: c7:d2:fd:d1:60:8c:3c:e6:00:7c:82:84:19:c7:88:dc:27:45: 6b:6b:74:4d:ad:04:d7:ca:d8:c8:8c:fd:71:2c:a6:20:0e:e0: a8:08:33:6d:e8:ed:84:d2:3c:f3:01:b2:a9:31:ad:90:31:c0: 70:56:78:72:1a:95:57:a7:29:21:cc:2e:86:45:69:60:07:98: a2:d9:ba:15:0a:a1:12:9a:07:74:6b:38:bf:57:a0:ba:f9:da: be:72:0a:73:c9:07:07:ec:38:f2:6a:33:c6:67:2a:39:43:d1: 9f:6e:16:75:d4:49:0b:ed:51:9b:f8:42:02:75:61:3e:f9:cd: 04:ae:93:49:86:c2:71:6d:9a:e0:dc:49:94:ca:ed:ad:59:36: 00:91:71:6c:e2:80:b0:0c:8c:58:91:1b:36:05:85:7f:f0:2c: a9:25:ea:c9:89:85:f5:f9:42:f4:52:92:62:7b:4e:fe:75:38: 51:38:d6:99:cd:0b:09:15:ec:68:a1:93:d5:5c:a1:93:af:0b: 23:cc:6f:4a:16:4f:98:dc:44:73:5b:85:bb:02:67:4a:da:d7: 49:9f:06:19:ba:02:41:c6:ec:7c:1c:f3:4a:19:30:1d:36:a0: 14:24:18:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweqFVcAFM9Zaqdm+47/JcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjYwMjAyMTQwMTE0WhcNMjYwMjAzMTQwMTE0WjAzMTEwLwYDVQQD EyhkZDMyYTdlMTc0NWE4ODUxN2UwZjk4NGVhMjExZWJlZDViNTAxZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL8YHlV/s0+L9Zcup8b5izEwoxAc kl/i/Eu4+LTxFX6RD44eYVXyrnb8vjec16ZgerC7Y9NyWK3hiqzix6qmsuVTlgzL WIZTO4EEJDgRVun12p7Jg2Xlg3rb3cB6oj2gbHzAMOJ5ZEgSJSuJn1BowiV5TfK+ e5Kb7sh62txpM4fOUDJXqg9W6xCserSOgqELMIzF6jrhN2afnNiYiYUHodOyL3o9 k0KMkvNFxxJUij2dOJoj4Cx6QI2SqKQntchNTmNlgLzmndd42QDk7UYARAqF1oy/ TULDfGRSMQjjK0fxeY1RW6At2ju5A4/1oGTzdHKPlvnKAiE0RENAR19lRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0yp+F0WohRfg+YTqIR6+1bUB+UMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe5Qg9Rp l7DHBe8R4ad0e+s9x9L90WCMPOYAfIKEGceI3CdFa2t0Ta0E18rYyIz9cSymIA7g qAgzbejthNI88wGyqTGtkDHAcFZ4chqVV6cpIcwuhkVpYAeYotm6FQqhEpoHdGs4 v1eguvnavnIKc8kHB+w48mozxmcqOUPRn24WddRJC+1Rm/hCAnVhPvnNBK6TSYbC cW2a4NxJlMrtrVk2AJFxbOKAsAyMWJEbNgWFf/AsqSXqyYmF9flC9FKSYntO/nU4 UTjWmc0LCRXsaKGT1Vyhk68LI8xvShZPmNxEc1uFuwJnStrXSZ8GGboCQcbsfBzz ShkwHTagFCQY4w== -----END CERTIFICATE-----Generated at Mon Feb 2 17:15:25 2026 by rpki-client