This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json) Hash identifier: yA0erieXAAErFlDElsrGvbklRP1ZAB1fHG3Vm48z2AQ= Subject key identifier: 83:48:F1:28:55:3C:74:46:28:61:9E:6E:C6:8F:8E:96:43:3B:04:D3 Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Certificate serial: 019C427D8684DDF5734D5B3D37561A533017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft Manifest number: 173F Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: hBm5sqEsYgYzGLvahciDaWXB5tc.roa (hash: B8HbKYDNFdLFprrv9ZSAbv02c/Z7c5d/cp8eKIMZxIo=) 2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: GZv+l03rmszzp6sj7KWy+Q4t6w3TCYK2KbYUh+DBmsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:86:84:dd:f5:73:4d:5b:3d:37:56:1a:53:30:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=8348f128553c744628619e6ec68f8e96433b04d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:fb:61:85:a7:78:e5:a7:4e:8b:53:98:d6: 4e:12:19:51:5a:7a:d7:ba:d0:56:68:e6:46:a0:47: 11:2f:09:f5:45:f0:a9:d6:6f:af:87:93:47:b3:af: 25:6b:23:4c:f3:43:f5:1a:b4:00:d7:d6:f0:08:d2: ce:1a:2a:62:4c:2f:1c:76:4f:95:b4:47:ce:bd:61: 83:44:5e:9a:85:d2:a6:3d:cd:6f:d3:19:81:32:c6: 73:ac:2d:d8:0a:db:e5:f7:ee:ab:4b:cd:c6:24:fc: 2d:86:b8:8c:b4:99:22:98:d4:24:2e:0c:1c:94:c2: 53:52:c1:74:a1:4b:61:84:83:30:29:8c:ee:95:53: 8d:7e:78:6d:a7:5c:ec:93:44:cc:d1:74:4f:20:42: c0:aa:70:24:f3:a4:8e:4b:ab:e9:d2:93:34:d8:35: 41:80:be:bd:c8:67:ba:22:14:20:e6:8b:f4:33:0d: 45:0d:da:c1:81:e7:a4:20:38:93:90:b1:ee:83:bb: f4:0e:ee:39:fd:06:33:2b:61:82:74:d3:63:b6:e7: c5:de:3e:6e:9b:7a:b1:b6:a9:41:77:ba:fe:82:ae: 45:52:f4:25:10:37:d9:33:4d:0e:36:9e:da:28:9a: 4f:5e:e8:d3:5f:05:1a:43:63:01:45:a6:87:f0:f3: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:48:F1:28:55:3C:74:46:28:61:9E:6E:C6:8F:8E:96:43:3B:04:D3 X509v3 Authority Key Identifier: keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b5:f0:a4:29:9f:1a:35:69:14:57:02:cf:ed:79:97:fe:43: 53:c6:0f:94:d5:d2:b4:46:ed:31:08:d8:fe:27:74:c1:d2:ce: 0e:41:23:52:bb:66:ce:c5:32:71:20:de:e0:d8:18:2e:07:f2: 4f:bc:d5:cf:31:d9:f5:9b:e2:46:ad:b3:b4:e4:32:26:63:57: f0:8f:d1:ff:69:f0:83:63:0c:d5:cd:2a:15:92:71:bb:57:af: 08:fe:a2:aa:eb:fb:df:1b:5e:5f:f2:86:6f:7f:56:cb:30:7d: 06:87:86:24:fc:8c:14:29:43:0d:44:af:ce:82:03:0c:5a:ec: 84:01:65:c5:68:91:08:85:ec:43:bd:6a:94:9e:48:65:0e:f3: ab:ce:52:29:33:4c:e6:fd:92:b1:6c:1d:29:7c:60:f6:ed:22: af:93:6a:5f:7f:be:0d:37:d9:5f:3b:86:38:a1:6b:47:4c:ab: 69:05:3a:bb:98:e2:28:4f:f7:84:ad:56:41:9b:58:2b:34:d5: 40:9c:53:04:e6:ba:20:8c:cd:f6:b8:b5:48:5c:58:b7:58:a0: ad:61:ba:08:cd:f8:f2:b4:63:31:f9:22:8e:a6:cb:aa:8c:15: 6c:9b:42:e9:56:ae:8d:df:1d:66:30:9d:57:92:07:42:18:c2: 56:e2:a5:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYaE3fVzTVs9N1YaUzAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh YzRlNWQwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg4MzQ4ZjEyODU1M2M3NDQ2Mjg2MTllNmVjNjhmOGU5NjQzM2IwNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3P7YYWneOWnTotTmNZOEhlRWnrX utBWaOZGoEcRLwn1RfCp1m+vh5NHs68layNM80P1GrQA19bwCNLOGipiTC8cdk+V tEfOvWGDRF6ahdKmPc1v0xmBMsZzrC3YCtvl9+6rS83GJPwthriMtJkimNQkLgwc lMJTUsF0oUthhIMwKYzulVONfnhtp1zsk0TM0XRPIELAqnAk86SOS6vp0pM02DVB gL69yGe6IhQg5ov0Mw1FDdrBgeekIDiTkLHug7v0Du45/QYzK2GCdNNjtufF3j5u m3qxtqlBd7r+gq5FUvQlEDfZM00ONp7aKJpPXujTXwUaQ2MBRaaH8PPyXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINI8ShVPHRGKGGebsaPjpZDOwTTMB8GA1UdIwQY MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLXwpCmf GjVpFFcCz+15l/5DU8YPlNXStEbtMQjY/id0wdLODkEjUrtmzsUycSDe4NgYLgfy T7zVzzHZ9ZviRq2ztOQyJmNX8I/R/2nwg2MM1c0qFZJxu1evCP6iquv73xteX/KG b39WyzB9BoeGJPyMFClDDUSvzoIDDFrshAFlxWiRCIXsQ71qlJ5IZQ7zq85SKTNM 5v2SsWwdKXxg9u0ir5NqX3++DTfZXzuGOKFrR0yraQU6u5jiKE/3hK1WQZtYKzTV QJxTBOa6IIzN9ri1SFxYt1igrWG6CM348rRjMfkijqbLqowVbJtC6Vaujd8dZjCd V5IHQhjCVuKltA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:24 2026 by rpki-client