This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json) Hash identifier: /ZeVfBQu7np1uKFdPP7f92BS+14XbxxNACnjG1OsK40= Subject key identifier: FF:DE:2F:17:AC:2E:0C:AD:66:8E:A7:61:CE:FA:B9:3A:F5:88:A9:C1 Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c Certificate serial: 019C41D8C0B2779A13564A07290E32BA58A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft Manifest number: 0A9E Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: OjeH/QUVPbM1E006W0vwBVmloG8ewVpqqC7cZo0jdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c0:b2:77:9a:13:56:4a:07:29:0e:32:ba:58:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=ffde2f17ac2e0cad668ea761cefab93af588a9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:c9:65:ed:aa:72:e5:4c:a9:aa:6b:21:b4: 75:20:7b:d9:19:be:e0:63:78:3b:ee:73:da:58:64: 7e:9c:f6:5f:bb:af:94:9b:b2:e7:a8:57:66:ee:69: 81:62:68:b8:24:52:ca:54:8d:d5:fc:2c:fa:86:31: 54:c2:58:bc:cc:3b:88:68:25:91:61:cc:a5:39:7c: 6a:06:b3:1f:cd:01:f6:dd:03:60:c8:e2:e2:4e:c8: 1c:c9:9c:2d:f9:41:33:50:ad:15:67:3e:41:e9:9b: 9e:69:13:66:3a:52:ca:bf:25:90:9b:88:a7:55:af: 4b:99:16:dc:39:d9:55:79:c3:b3:7c:10:e1:1a:0c: 27:56:d0:6d:a8:58:21:d0:61:41:e1:8b:f4:6a:2b: 66:0d:c3:0a:ec:39:f3:e1:d1:15:fc:e7:c5:96:aa: 91:b0:51:4e:a8:33:61:97:08:44:27:02:34:0e:7f: 16:71:6a:13:99:67:02:72:c5:21:00:d9:ec:20:de: 23:8d:d7:c9:e3:db:91:75:a4:f9:79:79:bd:f5:bd: 28:b7:c3:e4:cb:06:61:56:ad:ea:c4:95:f3:f2:5e: b1:12:e7:2a:54:5b:c6:16:a2:64:86:9e:6a:a1:f7: 7c:b7:0f:47:ee:f2:22:b6:91:a5:27:5f:6e:82:ab: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:2F:17:AC:2E:0C:AD:66:8E:A7:61:CE:FA:B9:3A:F5:88:A9:C1 X509v3 Authority Key Identifier: keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2e:76:52:e8:7d:0a:69:8a:b6:ef:81:c4:cd:23:8c:96:73: b8:98:13:19:39:dd:cc:aa:b4:67:0b:9a:1b:b0:52:30:cd:1b: 0f:56:7e:94:00:fe:ac:a4:1f:89:bd:05:af:d5:38:08:39:1a: 9b:45:e1:b9:a6:26:b7:01:74:b4:91:b4:80:a8:7c:ae:ea:48: 44:0d:85:5a:d8:3f:55:5e:d2:14:68:f5:7b:0e:3f:32:8c:33: 8d:87:a1:14:ba:ee:4a:40:ca:58:1b:65:5c:51:1b:9b:44:5d: 01:69:9a:2d:ef:c2:54:e5:4c:f7:c9:78:98:19:e4:c3:27:4b: d4:d2:c8:a1:ec:9b:71:ee:c4:ba:aa:7d:a7:ba:ad:e0:a6:b4: 5e:f3:70:31:19:fe:c1:54:cb:ff:29:8a:ea:d1:81:82:62:ca: cb:02:9f:b9:1d:e2:ed:e5:d2:ad:1f:f4:d8:2a:33:c1:0a:de: 57:79:ec:7c:b1:a8:50:86:90:17:9f:b3:6e:a7:29:ee:d6:30: 9d:4f:29:f7:aa:ba:53:6d:31:0b:a9:c2:7e:db:9f:34:a2:0a: 9a:2e:8f:67:56:92:86:f9:bb:6a:d8:78:0c:63:92:0b:a2:1e: e6:0a:4e:4c:91:16:d6:24:8a:97:0c:fa:6b:e8:5a:44:c6:6a: dc:db:e9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MCyd5oTVkoHKQ4yulimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhN2QxNDIwN2Y3NWM4YjE1ODBkYjI3Zjc1ZTdjM2ZkYjFm Zjg2MGMwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD EyhmZmRlMmYxN2FjMmUwY2FkNjY4ZWE3NjFjZWZhYjkzYWY1ODhhOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iPJZe2qcuVMqaprIbR1IHvZGb7g Y3g77nPaWGR+nPZfu6+Um7LnqFdm7mmBYmi4JFLKVI3V/Cz6hjFUwli8zDuIaCWR YcylOXxqBrMfzQH23QNgyOLiTsgcyZwt+UEzUK0VZz5B6ZueaRNmOlLKvyWQm4in Va9LmRbcOdlVecOzfBDhGgwnVtBtqFgh0GFB4Yv0aitmDcMK7Dnz4dEV/OfFlqqR sFFOqDNhlwhEJwI0Dn8WcWoTmWcCcsUhANnsIN4jjdfJ49uRdaT5eXm99b0ot8Pk ywZhVq3qxJXz8l6xEucqVFvGFqJkhp5qofd8tw9H7vIitpGlJ19ugqvurwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/eLxesLgytZo6nYc76uTr1iKnBMB8GA1UdIwQY MBaAFGp9FCB/dcixWA2yf3Xnw/2x/4YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEt YmVhYTczNzEwYTY1LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEtYmVhYTczNzEwYTY1 LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni52Uuh9 CmmKtu+BxM0jjJZzuJgTGTndzKq0ZwuaG7BSMM0bD1Z+lAD+rKQfib0Fr9U4CDka m0XhuaYmtwF0tJG0gKh8rupIRA2FWtg/VV7SFGj1ew4/MowzjYehFLruSkDKWBtl XFEbm0RdAWmaLe/CVOVM98l4mBnkwydL1NLIoeybce7Euqp9p7qt4Ka0XvNwMRn+ wVTL/ymK6tGBgmLKywKfuR3i7eXSrR/02CozwQreV3nsfLGoUIaQF5+zbqcp7tYw nU8p96q6U20xC6nCftufNKIKmi6PZ1aShvm7ath4DGOSC6Ie5gpOTJEW1iSKlwz6 a+haRMZq3NvppA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:00 2026 by rpki-client