This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json) Hash identifier: yViRZOX11PCxKW0ccVIeviNalyaV0SkH5TMfSLw8xHE= Subject key identifier: 64:EA:7C:F2:96:4A:59:59:69:60:C4:69:E3:25:E9:B3:87:E4:34:2C Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B Certificate issuer: /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Certificate serial: 019C41A200661D95B5C88D3969E63EEC4F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft Manifest number: 067B Signing time: Mon 09 Feb 2026 09:01:01 +0000 Manifest this update: Mon 09 Feb 2026 09:01:01 +0000 Manifest next update: Tue 10 Feb 2026 09:01:01 +0000 Files and hashes: 1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: AQjwqYtqDB5GRsyfDIGiNlKcZF3CZb/MJSzMvIVMDdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:00:66:1d:95:b5:c8:8d:39:69:e6:3e:ec:4f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Validity Not Before: Feb 9 09:01:01 2026 GMT Not After : Feb 10 09:01:01 2026 GMT Subject: CN=64ea7cf2964a59596960c469e325e9b387e4342c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:87:1e:03:08:f5:82:ef:6b:6f:0c:0a:20: 85:53:00:47:7c:de:a3:80:ba:3d:b8:f8:69:a4:ef: 34:c8:da:4b:10:40:d7:c5:63:bc:8c:d9:23:0a:f6: 76:43:8d:92:cc:37:e5:65:ab:d2:74:2e:99:e9:bb: 26:7d:0e:11:ee:ae:01:4c:72:de:89:d2:d1:bb:27: 35:ab:5c:2d:d3:e2:48:b8:a1:77:45:bc:33:57:66: 10:e9:42:25:85:3a:65:5a:2f:33:b2:32:10:07:6b: 2e:60:d5:29:7c:fe:74:d0:1f:c3:3f:6a:2b:30:80: d7:18:a9:6c:dd:a2:a6:c7:2f:ab:90:46:58:fe:48: 32:79:83:18:ff:dd:b0:c8:cd:cc:69:90:9a:d1:78: 1a:56:22:0d:0a:e1:e1:57:61:34:3a:31:9d:a3:1d: 3f:88:17:09:57:23:d9:f9:aa:6a:c9:f3:2c:c9:62: d1:02:2f:50:c2:e6:4c:40:d3:1d:9d:19:a6:78:6b: 46:f8:be:00:b6:a3:69:9f:09:70:ba:c8:11:db:81: 32:09:02:7d:fb:b0:1f:13:31:12:80:2e:64:16:39: d8:44:ee:2e:33:c2:7f:9b:71:af:03:cb:ec:cc:e7: 49:8a:d2:d7:a5:a0:59:47:9b:b6:6d:ea:18:df:8c: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:7C:F2:96:4A:59:59:69:60:C4:69:E3:25:E9:B3:87:E4:34:2C X509v3 Authority Key Identifier: keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a0:8a:e3:7b:bf:d9:15:86:50:ce:d8:aa:ad:e2:5e:10:65: f7:a7:66:b3:c2:fe:82:40:6e:14:1b:e5:a6:23:9c:b9:86:c1: ba:87:b3:00:80:99:3d:f3:c0:b4:df:8d:fc:b5:dc:2d:07:c0: 1a:ae:91:da:0f:4a:ae:8c:31:4f:6a:fe:bb:b4:99:79:f3:d6: 5a:5a:9f:e9:71:c4:04:c2:65:03:b2:66:dd:b0:f9:19:9f:45: 54:c4:9a:85:62:59:99:9a:45:b2:49:fc:73:4e:64:e1:86:92: 8d:b3:be:8d:60:ca:86:55:df:df:1a:7b:5b:ad:23:d9:53:c8: 8c:13:55:96:a4:68:94:40:6e:99:2e:bb:16:99:fe:2a:de:4e: 0f:ff:54:2d:4b:41:09:7d:f1:c9:44:ce:d0:89:2a:02:f9:da: 21:1d:c3:c9:ea:dd:67:de:fb:c5:db:b0:3e:87:90:81:2f:e6: 10:28:d8:33:19:55:14:f2:50:6d:ca:e3:f4:8a:e6:de:6c:ac: 8a:9c:de:84:d2:52:e4:95:2f:9f:ce:24:5a:91:77:b4:39:ff: 06:41:98:3c:51:b0:ac:85:aa:1e:39:d6:76:64:d0:ec:73:b1: 02:5a:ec:4d:9f:36:d5:ef:85:7d:1c:bf:14:5e:e9:e9:19:1f: bc:20:0b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogBmHZW1yI05aeY+7E+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjk1YmZjZjU5NWY0NjUwZmYzMTIyNTQzNjJhZDI2NjZi MWNkNmIwHhcNMjYwMjA5MDkwMTAxWhcNMjYwMjEwMDkwMTAxWjAzMTEwLwYDVQQD Eyg2NGVhN2NmMjk2NGE1OTU5Njk2MGM0NjllMzI1ZTliMzg3ZTQzNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2CHHgMI9YLva28MCiCFUwBHfN6j gLo9uPhppO80yNpLEEDXxWO8jNkjCvZ2Q42SzDflZavSdC6Z6bsmfQ4R7q4BTHLe idLRuyc1q1wt0+JIuKF3RbwzV2YQ6UIlhTplWi8zsjIQB2suYNUpfP500B/DP2or MIDXGKls3aKmxy+rkEZY/kgyeYMY/92wyM3MaZCa0XgaViINCuHhV2E0OjGdox0/ iBcJVyPZ+apqyfMsyWLRAi9QwuZMQNMdnRmmeGtG+L4AtqNpnwlwusgR24EyCQJ9 +7AfEzESgC5kFjnYRO4uM8J/m3GvA8vszOdJitLXpaBZR5u2beoY34xrcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTqfPKWSllZaWDEaeMl6bOH5DQsMB8GA1UdIwQY MBaAFB75W/z1lfRlD/MSJUNirSZmsc1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEt NTUwZTEwMThmY2JmLzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEtNTUwZTEwMThmY2Jm LzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKCK43u/ 2RWGUM7Yqq3iXhBl96dms8L+gkBuFBvlpiOcuYbBuoezAICZPfPAtN+N/LXcLQfA Gq6R2g9KrowxT2r+u7SZefPWWlqf6XHEBMJlA7Jm3bD5GZ9FVMSahWJZmZpFskn8 c05k4YaSjbO+jWDKhlXf3xp7W60j2VPIjBNVlqRolEBumS67Fpn+Kt5OD/9ULUtB CX3xyUTO0IkqAvnaIR3DyerdZ977xduwPoeQgS/mECjYMxlVFPJQbcrj9Irm3mys ipzehNJS5JUvn84kWpF3tDn/BkGYPFGwrIWqHjnWdmTQ7HOxAlrsTZ821e+FfRy/ FF7p6RkfvCALyg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:20 2026 by rpki-client