This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json) Hash identifier: XVCPYRJA6ms46KaHuj/hDpPalD+btVCAyIJL0X3YUWk= Subject key identifier: A5:8F:4B:F9:F5:67:2F:EE:B8:9B:6E:F7:A3:58:3E:47:63:44:53:59 Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f Certificate serial: 019C420F4155D7424ED735459AC6F1647E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:21 +0000 Manifest this update: Mon 09 Feb 2026 11:00:21 +0000 Manifest next update: Tue 10 Feb 2026 11:00:21 +0000 Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: vc9ucqwIu2DRutOQdCqLCGdu9ERkx9We5S+sdz+1JVs=) 2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:41:55:d7:42:4e:d7:35:45:9a:c6:f1:64:7e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f Validity Not Before: Feb 9 11:00:21 2026 GMT Not After : Feb 10 11:00:21 2026 GMT Subject: CN=a58f4bf9f5672feeb89b6ef7a3583e4763445359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:f2:13:b4:0b:2a:3d:8b:1c:29:16:09:e8: 79:68:4e:f3:10:e8:04:a9:fe:15:a4:6a:8a:f2:c6: 99:88:7b:7f:98:80:a6:82:69:7b:6a:5b:bb:02:be: 41:d6:f1:28:55:7b:b3:f6:f8:7b:73:29:5c:fb:d2: 07:7c:b4:14:21:ea:64:48:a1:a5:4b:93:83:04:90: 0a:1a:ab:9f:43:89:46:7c:40:98:6a:8d:f2:10:5f: 55:be:6d:f3:96:36:cd:d7:b2:29:ed:3b:a9:69:57: ff:7b:97:0c:d1:85:38:30:a5:e4:fa:57:4f:d4:47: bc:bc:2e:e5:df:b6:4e:c9:7f:22:68:4b:7c:02:67: 7e:ce:ce:95:34:18:df:fb:08:5c:68:3f:df:00:59: b6:61:34:e0:74:9c:de:dc:55:ac:fa:0b:0d:c6:71: 9d:9e:3d:34:dd:ea:11:8e:07:23:be:bf:8b:88:47: 1a:49:78:c7:2e:34:ce:7b:c8:87:ba:a8:76:3a:44: 30:9c:07:e1:98:98:03:85:c4:3a:f4:27:e9:7d:69: 75:a8:48:32:35:e7:cb:80:f3:6d:cc:98:7d:a9:c9: 01:2a:51:58:b0:c3:ab:2e:f0:40:e3:96:54:e7:0d: c4:ac:db:83:62:04:c6:d2:9b:06:75:c3:83:16:b4: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8F:4B:F9:F5:67:2F:EE:B8:9B:6E:F7:A3:58:3E:47:63:44:53:59 X509v3 Authority Key Identifier: keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:87:d6:84:e2:11:13:62:81:5a:05:89:2f:be:30:e5:18: 38:52:65:a5:8a:98:72:ba:65:bc:11:b7:00:71:55:48:0b:d4: 9f:c1:3e:c9:28:b6:0d:af:ed:18:55:0f:0e:ac:5c:88:13:9a: 4d:a4:c1:77:42:f9:71:c3:ba:e8:f8:42:41:bb:90:f8:95:ea: 4a:f1:e1:8a:8d:51:67:59:85:41:41:0c:53:bc:6f:47:6a:53: 3a:f5:7a:e8:c0:b7:0a:a8:b0:d9:af:7d:cb:e6:19:b8:ea:8c: c6:39:3c:a0:dc:c7:bd:14:a3:55:09:2b:29:48:f4:51:83:db: 5a:45:d2:ab:ae:ea:ea:9e:88:a0:c4:ad:69:5f:ec:83:82:57: ae:95:2a:be:a1:01:24:93:49:dd:4f:08:2f:12:2f:cc:55:71: 75:cd:aa:ae:ac:a4:3a:4c:2d:dc:e5:b7:80:a5:c0:c1:ff:1f: b3:ce:ca:bf:92:34:65:6b:1a:96:18:f1:a8:08:36:95:0c:01: eb:7d:d0:b4:72:44:0f:94:8b:09:9b:4e:3f:32:a0:c3:d9:8d: aa:71:21:10:de:b6:81:b7:7b:ca:ba:ad:e9:06:08:73:03:e5: 07:4c:55:f2:ad:34:b9:ea:1a:92:81:df:c3:5b:9e:5e:3c:7d: c4:70:eb:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0FV10JO1zVFmsbxZH4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk YWY0MGYwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD EyhhNThmNGJmOWY1NjcyZmVlYjg5YjZlZjdhMzU4M2U0NzYzNDQ1MzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupjyE7QLKj2LHCkWCeh5aE7zEOgE qf4VpGqK8saZiHt/mICmgml7alu7Ar5B1vEoVXuz9vh7cylc+9IHfLQUIepkSKGl S5ODBJAKGqufQ4lGfECYao3yEF9Vvm3zljbN17Ip7TupaVf/e5cM0YU4MKXk+ldP 1Ee8vC7l37ZOyX8iaEt8Amd+zs6VNBjf+whcaD/fAFm2YTTgdJze3FWs+gsNxnGd nj003eoRjgcjvr+LiEcaSXjHLjTOe8iHuqh2OkQwnAfhmJgDhcQ69CfpfWl1qEgy NefLgPNtzJh9qckBKlFYsMOrLvBA45ZU5w3ErNuDYgTG0psGdcODFrQp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWPS/n1Zy/uuJtu96NYPkdjRFNZMB8GA1UdIwQY MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0 LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiOH1oTi ERNigVoFiS++MOUYOFJlpYqYcrplvBG3AHFVSAvUn8E+ySi2Da/tGFUPDqxciBOa TaTBd0L5ccO66PhCQbuQ+JXqSvHhio1RZ1mFQUEMU7xvR2pTOvV66MC3Cqiw2a99 y+YZuOqMxjk8oNzHvRSjVQkrKUj0UYPbWkXSq67q6p6IoMStaV/sg4JXrpUqvqEB JJNJ3U8ILxIvzFVxdc2qrqykOkwt3OW3gKXAwf8fs87Kv5I0ZWsalhjxqAg2lQwB 633QtHJED5SLCZtOPzKgw9mNqnEhEN62gbd7yrqt6QYIcwPlB0xV8q00ueoakoHf w1ueXjx9xHDrRg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:40 2026 by rpki-client