This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json) Hash identifier: zHdhgUQ+3eb2HWTEJrWO4iwa+DGWC7wZE5grZZkTkyU= Subject key identifier: 26:8C:80:E7:1A:7C:B4:52:76:7E:D8:25:97:A8:FF:16:63:ED:C9:EC Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45 Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445 Certificate serial: 019C439093A34A6A60065BA8943C42638A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft Manifest number: 1427 Signing time: Mon 09 Feb 2026 18:01:14 +0000 Manifest this update: Mon 09 Feb 2026 18:01:14 +0000 Manifest next update: Tue 10 Feb 2026 18:01:14 +0000 Files and hashes: 1: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: d8aOsRWlnohpuCFKDVhdpjwEB6jEV0otspO5MZfJBWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:93:a3:4a:6a:60:06:5b:a8:94:3c:42:63:8a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c237b6883697912957f8d3373702bc906d26445 Validity Not Before: Feb 9 18:01:14 2026 GMT Not After : Feb 10 18:01:14 2026 GMT Subject: CN=268c80e71a7cb452767ed82597a8ff1663edc9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:91:21:8f:98:61:99:ed:34:9b:1f:f6:41: 25:41:79:bd:4b:0a:e3:db:43:7d:d3:4b:f2:30:c9: 3a:4f:ab:0a:2b:82:61:39:98:ce:29:3a:c5:5c:94: 3a:63:52:7f:be:c0:5a:41:fd:81:30:c4:9f:b5:f6: ce:d2:0d:57:af:f0:5f:10:25:f0:91:1b:8b:03:8a: b9:ae:93:68:f5:0c:2e:53:e7:d3:03:51:ae:6a:e6: f4:0c:63:ee:d0:ae:34:a1:41:47:cc:a6:49:1c:6d: eb:99:52:c8:0f:69:bf:40:35:fc:e2:b0:fd:37:25: f0:8e:f2:99:73:4d:0d:aa:48:6b:3a:be:68:1d:7d: 20:90:c8:5a:1b:60:6f:df:fa:67:48:73:8d:5e:fe: ec:da:42:2f:83:7d:a9:73:0c:78:bf:b6:10:43:86: 10:b7:be:80:d5:76:25:cf:ca:d5:cd:70:63:c1:b5: 1a:96:e6:48:88:5f:12:91:28:39:2d:b8:28:bd:99: 91:5a:40:91:27:4a:7a:61:78:b1:43:6a:c7:58:fb: ab:1d:d3:73:10:0d:77:b1:f6:26:46:21:f9:78:d1: bf:ea:5e:01:ed:11:a0:cc:7c:76:38:20:99:3f:78: 5f:d0:c7:c6:36:aa:20:5d:96:13:30:39:02:32:d2: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8C:80:E7:1A:7C:B4:52:76:7E:D8:25:97:A8:FF:16:63:ED:C9:EC X509v3 Authority Key Identifier: keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:69:53:9a:a2:1b:76:7f:13:5e:4c:ab:ca:cf:2f:27:9d:70: 14:f9:69:ff:09:7b:94:57:fe:cf:96:b9:0e:a2:83:1f:af:8d: 55:cf:47:f1:73:e9:7d:de:24:d7:75:d6:b8:a0:f9:0c:52:8b: ee:bd:7b:78:8a:3c:fe:d5:80:3d:04:d6:f4:ea:38:a3:2d:26: 47:fc:2b:f2:ba:9c:88:61:50:fc:76:57:16:1c:60:2e:dc:ba: 01:24:7a:5c:9f:aa:c1:d7:07:d3:32:e8:58:81:2e:ce:61:a7: 10:6b:b5:cc:54:4f:0c:9a:62:0f:10:15:86:69:46:04:90:39: 37:3c:8a:2d:04:44:db:7e:d5:c3:79:35:e7:e9:33:dd:7a:4c: a8:8b:5a:19:a1:79:7e:50:3c:11:62:62:60:a6:20:13:46:03: b8:bb:f6:9a:e8:86:d4:21:58:36:79:59:7f:c8:02:70:6c:1d: 51:35:82:7e:a9:59:54:e5:65:49:08:02:ca:41:db:02:47:9a: 88:2f:69:fa:3c:c4:68:b8:8b:da:6f:6a:15:0d:e0:d5:94:df: d8:1d:c9:18:8b:62:fc:01:8c:0d:91:58:1f:d3:83:90:c8:42: 04:a8:b8:be:2f:06:21:a0:81:f5:2d:31:dc:24:92:67:7f:4f: 86:e8:d3:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJOjSmpgBluolDxCY4oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjM3YjY4ODM2OTc5MTI5NTdmOGQzMzczNzAyYmM5MDZk MjY0NDUwHhcNMjYwMjA5MTgwMTE0WhcNMjYwMjEwMTgwMTE0WjAzMTEwLwYDVQQD EygyNjhjODBlNzFhN2NiNDUyNzY3ZWQ4MjU5N2E4ZmYxNjYzZWRjOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgCRIY+YYZntNJsf9kElQXm9Swrj 20N900vyMMk6T6sKK4JhOZjOKTrFXJQ6Y1J/vsBaQf2BMMSftfbO0g1Xr/BfECXw kRuLA4q5rpNo9QwuU+fTA1Guaub0DGPu0K40oUFHzKZJHG3rmVLID2m/QDX84rD9 NyXwjvKZc00NqkhrOr5oHX0gkMhaG2Bv3/pnSHONXv7s2kIvg32pcwx4v7YQQ4YQ t76A1XYlz8rVzXBjwbUaluZIiF8SkSg5LbgovZmRWkCRJ0p6YXixQ2rHWPurHdNz EA13sfYmRiH5eNG/6l4B7RGgzHx2OCCZP3hf0MfGNqogXZYTMDkCMtIzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaMgOcafLRSdn7YJZeo/xZj7cnsMB8GA1UdIwQY MBaAFBwje2iDaXkSlX+NM3NwK8kG0mRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENON2FJTnBlUktWZjQwemMzQXJ5UWJTWkVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kN2JlNWUtODU0Ni00YWNhLThiNmUt YTMzZThlYjVhNTM4LzEvSENON2FJTnBlUktWZjQwemMzQXJ5UWJTWkVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kN2JlNWUtODU0Ni00YWNhLThiNmUtYTMzZThlYjVhNTM4 LzEvSENON2FJTnBlUktWZjQwemMzQXJ5UWJTWkVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmlTmqIb dn8TXkyrys8vJ51wFPlp/wl7lFf+z5a5DqKDH6+NVc9H8XPpfd4k13XWuKD5DFKL 7r17eIo8/tWAPQTW9Oo4oy0mR/wr8rqciGFQ/HZXFhxgLty6ASR6XJ+qwdcH0zLo WIEuzmGnEGu1zFRPDJpiDxAVhmlGBJA5NzyKLQRE237Vw3k15+kz3XpMqItaGaF5 flA8EWJiYKYgE0YDuLv2muiG1CFYNnlZf8gCcGwdUTWCfqlZVOVlSQgCykHbAkea iC9p+jzEaLiL2m9qFQ3g1ZTf2B3JGIti/AGMDZFYH9ODkMhCBKi4vi8GIaCB9S0x 3CSSZ39PhujT9w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:03 2026 by rpki-client