This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft File: h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json) Hash identifier: 5fyyTInmf1lwF/BHHG9AucuhKknWQgmhQ9oMRe+gilo= Subject key identifier: AF:DE:7D:CE:85:4D:8D:EE:39:6A:72:C9:58:DE:92:FD:40:41:50:BE Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA Certificate issuer: /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa Certificate serial: 019C43907977C7EDD813DC6AA98C8A67FA3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft Manifest number: 0771 Signing time: Mon 09 Feb 2026 18:01:07 +0000 Manifest this update: Mon 09 Feb 2026 18:01:07 +0000 Manifest next update: Tue 10 Feb 2026 18:01:07 +0000 Files and hashes: 1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: ciNnzi1L8D/D6Q9PQFSikm8YTQZP4KX3s4daml6ju0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:79:77:c7:ed:d8:13:dc:6a:a9:8c:8a:67:fa:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa Validity Not Before: Feb 9 18:01:07 2026 GMT Not After : Feb 10 18:01:07 2026 GMT Subject: CN=afde7dce854d8dee396a72c958de92fd404150be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:1d:9e:41:92:be:c5:7c:b1:ad:55:77:e0: 2b:a2:17:75:73:1f:55:90:d9:36:2b:1a:ce:d1:44: d7:0d:98:88:50:5a:02:3b:eb:99:b8:96:ea:4b:b9: d8:ca:7d:ae:3f:a9:52:17:1c:5d:1e:41:80:c6:27: 2f:76:e7:72:b7:23:99:a6:57:fb:88:a5:b3:14:95: 52:c1:df:88:b6:82:f6:b7:9f:05:c8:29:75:30:03: a2:40:e9:0d:cc:46:4e:82:c2:62:c7:6d:b1:8b:14: 65:5d:7b:88:13:32:91:68:6c:4c:76:3b:fe:e1:b0: 68:22:f0:44:24:5e:09:a0:3b:65:33:01:41:b9:e7: 98:a4:00:ee:dd:f5:e0:1c:a8:39:1a:17:27:5f:5b: dd:02:ec:ae:31:81:74:b2:58:04:14:f8:5d:4f:bc: 7b:59:ff:b6:f5:40:c1:72:29:74:14:53:d4:c6:b5: d4:3c:d1:46:f4:58:2f:ea:e5:d8:2e:7e:20:48:74: 38:f3:aa:2f:73:80:02:63:71:78:70:68:51:99:b1: 76:dd:f9:7a:57:c7:0c:61:78:9e:ca:2c:6a:5c:f9: ed:68:33:59:77:23:56:95:5d:01:ba:87:c1:6e:6e: 87:1a:9d:b9:03:78:bf:78:85:d5:20:84:fa:b8:aa: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DE:7D:CE:85:4D:8D:EE:39:6A:72:C9:58:DE:92:FD:40:41:50:BE X509v3 Authority Key Identifier: keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:81:65:5d:07:5e:75:31:49:b6:dd:c1:df:35:ff:39:36:a6: 72:63:52:19:09:46:6b:09:2e:85:cc:8a:ce:b7:52:d6:83:df: 86:84:b2:50:72:47:da:ce:0f:b5:79:a9:67:c5:9e:f0:b2:3e: c9:cf:33:a9:60:2d:b8:0b:8d:f8:99:e0:70:0a:9c:4a:9c:35: 1f:77:08:68:e5:6e:f7:89:86:4c:61:46:f2:79:75:01:4d:4e: 2e:e1:78:b8:79:09:ef:cd:7d:c5:46:a3:f0:53:ed:b9:37:03: 32:69:17:37:44:be:1f:b2:46:1f:16:b9:47:dd:73:8e:53:30: 02:79:ed:6d:f2:8a:c8:4c:bd:78:28:96:92:94:ba:25:c3:fc: 5f:e2:d9:7b:f8:7a:21:46:f6:23:11:c4:45:32:23:36:bd:3c: 34:6b:ae:e0:57:79:d9:72:af:f3:93:8c:b7:f1:42:83:6a:f0: f4:5c:bf:32:ac:5b:ec:36:4b:2e:9d:47:c3:23:24:62:e2:bc: 6f:14:ee:63:89:f6:76:fc:b5:1d:48:90:f4:c8:de:d2:0e:0c: 6e:3c:fc:d1:9f:ff:1a:66:68:84:b8:bf:a3:8b:1b:40:5e:06: 74:16:9d:14:d6:e2:48:2b:87:b6:49:45:a4:7b:5f:26:37:f5: 9d:e1:19:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHl3x+3YE9xqqYyKZ/o7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWVhOTk5Y2RiYzYwMDRjNzFhNTQ3MGNhMGVjN2FlNzM4 MjA4ZmEwHhcNMjYwMjA5MTgwMTA3WhcNMjYwMjEwMTgwMTA3WjAzMTEwLwYDVQQD EyhhZmRlN2RjZTg1NGQ4ZGVlMzk2YTcyYzk1OGRlOTJmZDQwNDE1MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeYdnkGSvsV8sa1Vd+Arohd1cx9V kNk2KxrO0UTXDZiIUFoCO+uZuJbqS7nYyn2uP6lSFxxdHkGAxicvdudytyOZplf7 iKWzFJVSwd+ItoL2t58FyCl1MAOiQOkNzEZOgsJix22xixRlXXuIEzKRaGxMdjv+ 4bBoIvBEJF4JoDtlMwFBueeYpADu3fXgHKg5GhcnX1vdAuyuMYF0slgEFPhdT7x7 Wf+29UDBcil0FFPUxrXUPNFG9Fgv6uXYLn4gSHQ486ovc4ACY3F4cGhRmbF23fl6 V8cMYXieyixqXPntaDNZdyNWlV0BuofBbm6HGp25A3i/eIXVIIT6uKpmpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/efc6FTY3uOWpyyVjekv1AQVC+MB8GA1UdIwQY MBaAFIdeqZnNvGAExxpUcMoOx65zggj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ODdmMTAtMTc0NC00OWRmLWJkN2Ut NGQxMmZkMjVkOTc4LzEvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ODdmMTAtMTc0NC00OWRmLWJkN2UtNGQxMmZkMjVkOTc4 LzEvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoFlXQde dTFJtt3B3zX/OTamcmNSGQlGawkuhcyKzrdS1oPfhoSyUHJH2s4PtXmpZ8We8LI+ yc8zqWAtuAuN+JngcAqcSpw1H3cIaOVu94mGTGFG8nl1AU1OLuF4uHkJ7819xUaj 8FPtuTcDMmkXN0S+H7JGHxa5R91zjlMwAnntbfKKyEy9eCiWkpS6JcP8X+LZe/h6 IUb2IxHERTIjNr08NGuu4Fd52XKv85OMt/FCg2rw9Fy/Mqxb7DZLLp1HwyMkYuK8 bxTuY4n2dvy1HUiQ9Mje0g4Mbjz80Z//GmZohLi/o4sbQF4GdBadFNbiSCuHtklF pHtfJjf1neEZNA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:03 2026 by rpki-client