This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json) Hash identifier: i157IOlze41YkOZck4jEgAVpVqr/sjl1o3IBSchpZpE= Subject key identifier: FE:9A:CA:81:C9:AF:CF:E5:DB:08:60:6C:A6:2F:10:F2:86:21:10:53 Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Certificate serial: 019C420FBA7085E070B1A6F4CBD456CCAEC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft Manifest number: 088A Signing time: Mon 09 Feb 2026 11:00:52 +0000 Manifest this update: Mon 09 Feb 2026 11:00:52 +0000 Manifest next update: Tue 10 Feb 2026 11:00:52 +0000 Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: C696y4eveGammNEhk+uazNcf98USzRUAzuKyv43Jyfo=) 2: K3dVJzjb4UxWNn2q6SzagSp02Oo.roa (hash: vSuxNcyOp/bZV6+vMViNTDz5yQOhdkZ3pxgYsBeSdRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ba:70:85:e0:70:b1:a6:f4:cb:d4:56:cc:ae:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Validity Not Before: Feb 9 11:00:52 2026 GMT Not After : Feb 10 11:00:52 2026 GMT Subject: CN=fe9aca81c9afcfe5db08606ca62f10f286211053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:88:c0:12:01:09:57:d3:8f:68:2b:09:d2: cd:a8:dd:4d:97:58:36:7d:fa:fb:80:f4:8f:8b:e4: ef:79:6b:d8:25:c8:10:1f:5b:a6:7e:d4:a9:38:ff: 28:5f:16:22:41:1b:c5:88:54:eb:6b:6d:e0:87:19: dc:fb:c6:ed:55:15:9b:2a:92:b1:01:f3:78:1a:9c: 11:74:1a:eb:59:e0:42:e9:60:96:30:4e:b6:b9:45: 00:66:42:47:c0:05:57:3c:72:90:c3:b7:9b:2a:fb: 12:37:e3:bb:a3:ee:35:8d:ea:4d:24:96:3c:e2:7f: 06:ae:1f:6e:a1:43:6d:5e:31:f9:d4:09:d0:37:42: b4:62:40:46:cb:0d:40:a5:58:38:40:4d:ce:79:df: 31:69:60:bc:98:22:93:cd:26:56:8e:e8:42:3b:b0: e2:33:6f:dd:b6:26:96:bc:50:ad:8b:b7:63:54:ce: 1f:2b:7e:04:a7:c2:0f:eb:cb:cc:80:43:ef:95:da: c6:2a:11:b3:b9:21:9c:1e:9c:cf:99:37:17:aa:9e: 46:80:7b:d4:1a:ab:d3:74:79:e1:cd:91:85:15:d2: 65:b3:8d:fa:92:6d:a6:67:cf:d8:b5:70:fd:b5:92: 30:f5:bb:cb:92:8d:7d:3b:f5:6c:1b:f8:60:30:f8: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:CA:81:C9:AF:CF:E5:DB:08:60:6C:A6:2F:10:F2:86:21:10:53 X509v3 Authority Key Identifier: keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:91:c2:89:7c:c9:df:9f:07:47:bb:52:99:0e:a8:a5:73:09: 63:7c:50:5d:d2:64:7b:eb:9e:64:7e:1f:c9:d0:5c:92:68:cf: 07:a8:c0:c9:56:ca:a2:7b:6d:d3:81:56:2e:0d:78:4d:5d:68: 2a:fa:6c:30:90:8e:61:dc:de:cc:13:7d:f2:14:70:80:30:5e: 1b:17:f9:6d:52:b1:42:23:81:4e:1f:79:c4:d0:e3:a8:ef:5f: 70:7a:fc:c1:e5:68:2c:fe:0c:5a:97:db:af:3e:45:d0:55:ae: a9:34:27:24:91:93:cf:ca:89:05:f5:87:b4:89:f7:ed:6c:b5: d2:ed:62:67:68:b6:61:ed:59:39:a4:5b:6f:bd:5a:59:36:97: b3:97:27:de:a8:9f:23:44:41:fd:70:3c:26:d4:ce:34:31:fa: 78:70:02:1c:70:c5:ad:5d:27:1a:00:92:7a:73:3d:2c:74:11: e3:db:9a:27:cd:a8:41:d4:72:ea:2a:c3:1f:3a:f5:e1:e3:b3: 3b:0b:64:99:2f:34:cf:97:15:0e:d9:43:c7:7b:08:ba:ea:40: 73:65:53:8f:8b:b6:e0:db:27:cf:2f:a4:06:79:03:cd:63:9a: e6:e1:19:3d:cf:76:51:33:32:72:92:bf:23:54:b4:b2:16:67: f5:9d:48:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7pwheBwsab0y9RWzK7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjNhNDdlY2JmY2ZhYTlmNmNmZWNlMjYxNGM3MGU4YjVh ZGI4M2UwHhcNMjYwMjA5MTEwMDUyWhcNMjYwMjEwMTEwMDUyWjAzMTEwLwYDVQQD EyhmZTlhY2E4MWM5YWZjZmU1ZGIwODYwNmNhNjJmMTBmMjg2MjExMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfOIwBIBCVfTj2grCdLNqN1Nl1g2 ffr7gPSPi+TveWvYJcgQH1umftSpOP8oXxYiQRvFiFTra23ghxnc+8btVRWbKpKx AfN4GpwRdBrrWeBC6WCWME62uUUAZkJHwAVXPHKQw7ebKvsSN+O7o+41jepNJJY8 4n8Grh9uoUNtXjH51AnQN0K0YkBGyw1ApVg4QE3Oed8xaWC8mCKTzSZWjuhCO7Di M2/dtiaWvFCti7djVM4fK34Ep8IP68vMgEPvldrGKhGzuSGcHpzPmTcXqp5GgHvU GqvTdHnhzZGFFdJls436km2mZ8/YtXD9tZIw9bvLko19O/VsG/hgMPjw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6ayoHJr8/l2whgbKYvEPKGIRBTMB8GA1UdIwQY MBaAFB5jpH7L/Pqp9s/s4mFMcOi1rbg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEt MzU1YjVjZDVkOTcxLzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEtMzU1YjVjZDVkOTcx LzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpHCiXzJ 358HR7tSmQ6opXMJY3xQXdJke+ueZH4fydBckmjPB6jAyVbKontt04FWLg14TV1o KvpsMJCOYdzezBN98hRwgDBeGxf5bVKxQiOBTh95xNDjqO9fcHr8weVoLP4MWpfb rz5F0FWuqTQnJJGTz8qJBfWHtIn37Wy10u1iZ2i2Ye1ZOaRbb71aWTaXs5cn3qif I0RB/XA8JtTONDH6eHACHHDFrV0nGgCSenM9LHQR49uaJ82oQdRy6irDHzr14eOz OwtkmS80z5cVDtlDx3sIuupAc2VTj4u24Nsnzy+kBnkDzWOa5uEZPc92UTMycpK/ I1S0shZn9Z1Ivw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:32 2026 by rpki-client