This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json) Hash identifier: v/DI9eaXQVm+ydYRBsuVLR2ZMru8TY1bYDrC5+MlvIc= Subject key identifier: 49:06:BA:96:2F:25:6C:8B:6E:4D:D4:D9:DE:73:D0:A8:24:7A:6E:45 Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Certificate serial: 019C420F4F14E6C6D22EE201D56A4F31A0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft Manifest number: 13EB Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: 5SV9yLFClS0rtDz8fvJnS6J9W6g.roa (hash: wxSbJvADvi+JoVtEMjMQ/p8f+j3ecPxHDeFzbrEqmdg=) 2: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: Rf9A9G/frswO7U4Yb2BzQvjKuJQR+YAMOAEJmAu0muk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4f:14:e6:c6:d2:2e:e2:01:d5:6a:4f:31:a0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=4906ba962f256c8b6e4dd4d9de73d0a8247a6e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:da:94:10:fe:ea:d5:df:a0:3e:d6:25:ff: bb:56:08:b5:b4:e1:8a:84:46:95:83:ef:ea:1b:f3: 33:93:e4:21:bd:f8:92:e4:be:e7:44:a1:3b:26:8c: d3:ee:e9:d2:53:8e:aa:ad:a7:17:ed:fc:90:2e:ec: ce:6f:0a:8f:21:2c:31:64:3d:9e:1c:0d:74:18:df: 3d:7c:58:b8:25:f3:db:17:72:0c:04:fe:d9:81:84: ac:1f:16:96:ed:3f:6c:0a:6c:d2:0f:93:cb:1b:5a: b4:bc:cb:fe:30:a6:8d:0a:29:ca:68:6e:c1:76:73: de:c7:45:b5:22:3f:d3:df:d5:62:fc:92:ca:72:be: af:77:48:49:5b:e8:83:e8:f2:a4:6c:23:52:6f:aa: 7d:7f:79:2c:b0:f6:36:24:ed:be:08:8e:82:2f:8e: e2:26:db:4e:15:1a:bc:24:0b:e5:ed:49:07:75:e3: b9:ee:ac:0f:d7:db:0e:8a:bd:4f:e2:74:a3:32:16: 1e:92:8b:d7:27:4b:81:36:3e:0c:8c:db:0f:68:10: b8:db:16:64:36:4f:f4:13:f2:0e:11:06:9a:55:74: 71:ba:68:37:4f:a4:eb:a4:44:58:ed:4b:77:3e:29: 2f:fe:8a:06:1c:24:05:33:43:5c:2a:76:d8:e5:26: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:BA:96:2F:25:6C:8B:6E:4D:D4:D9:DE:73:D0:A8:24:7A:6E:45 X509v3 Authority Key Identifier: keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8f:11:a7:25:f2:be:83:f7:3a:6e:62:e3:ce:24:73:ed:d2: 2a:0f:28:35:f5:45:7b:f0:28:a5:2b:c2:90:92:2f:5f:c8:df: 8f:d9:d5:34:90:b4:36:71:64:9a:72:73:01:a6:83:f5:f7:21: 31:21:f7:69:b9:a9:b3:9b:91:be:ee:5d:c5:a1:d7:2b:e8:1e: e1:1a:4d:6c:ff:80:4e:50:6d:e7:77:47:c3:4d:0f:e6:b2:82: cd:1d:a2:e5:c3:da:56:38:42:c7:d3:ae:5a:09:d5:2f:bb:71: 33:32:a1:d0:c3:5e:1a:9a:6e:ec:ee:61:38:2c:9d:08:4d:1b: b3:e4:20:ae:e9:76:a2:3e:dc:8b:d5:ff:41:0e:2c:b7:04:08: 03:3b:7b:5a:35:87:c0:86:e2:91:5a:98:c9:0d:2b:d7:60:78: 25:76:d1:ea:4f:5f:0d:c3:da:6e:c2:b6:4e:a7:18:02:52:49: 0d:74:c6:9e:31:5b:54:1c:48:6f:6c:6e:9a:5b:e2:0a:bb:1a: 43:20:d4:87:ef:9b:57:f2:ef:f4:bf:9b:1b:44:60:78:55:44: 03:b6:cd:57:45:36:5b:50:77:cc:ea:90:34:f8:72:ca:ef:ff: ec:50:54:51:55:3f:57:de:8c:02:17:52:e5:4a:d0:ca:66:ff: f0:30:4b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD08U5sbSLuIB1WpPMaDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2RjNzY1ZDFhMDM5ZTZmYmQ2YjhmYmI2NGQwN2Q1OGJm NTg0ZjUwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD Eyg0OTA2YmE5NjJmMjU2YzhiNmU0ZGQ0ZDlkZTczZDBhODI0N2E2ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxralBD+6tXfoD7WJf+7Vgi1tOGK hEaVg+/qG/Mzk+QhvfiS5L7nRKE7JozT7unSU46qracX7fyQLuzObwqPISwxZD2e HA10GN89fFi4JfPbF3IMBP7ZgYSsHxaW7T9sCmzSD5PLG1q0vMv+MKaNCinKaG7B dnPex0W1Ij/T39Vi/JLKcr6vd0hJW+iD6PKkbCNSb6p9f3kssPY2JO2+CI6CL47i JttOFRq8JAvl7UkHdeO57qwP19sOir1P4nSjMhYekovXJ0uBNj4MjNsPaBC42xZk Nk/0E/IOEQaaVXRxumg3T6TrpERY7Ut3Pikv/ooGHCQFM0NcKnbY5Sa9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkGupYvJWyLbk3U2d5z0Kgkem5FMB8GA1UdIwQY MBaAFIR9x2XRoDnm+9a4+7ZNB9WL9YT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUt MDljZjdlNzJhMDMzLzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUtMDljZjdlNzJhMDMz LzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo8RpyXy voP3Om5i484kc+3SKg8oNfVFe/AopSvCkJIvX8jfj9nVNJC0NnFkmnJzAaaD9fch MSH3abmps5uRvu5dxaHXK+ge4RpNbP+ATlBt53dHw00P5rKCzR2i5cPaVjhCx9Ou WgnVL7txMzKh0MNeGppu7O5hOCydCE0bs+Qgrul2oj7ci9X/QQ4stwQIAzt7WjWH wIbikVqYyQ0r12B4JXbR6k9fDcPabsK2TqcYAlJJDXTGnjFbVBxIb2xumlviCrsa QyDUh++bV/Lv9L+bG0RgeFVEA7bNV0U2W1B3zOqQNPhyyu//7FBUUVU/V96MAhdS 5UrQymb/8DBLtA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:20 2026 by rpki-client