This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json) Hash identifier: bkYW17lxP0dDjvLkJK31U3VpSA2tXcXAbFluhkfkFB4= Subject key identifier: 95:B9:D9:56:DD:AC:FE:2E:30:22:E4:10:AE:75:04:12:99:57:9F:0A Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99 Certificate serial: 019C4322F49255718C19F3BDA52718B324F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:30 +0000 Manifest this update: Mon 09 Feb 2026 16:01:30 +0000 Manifest next update: Tue 10 Feb 2026 16:01:30 +0000 Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: hTQFi9IrjYVPsfqkdtTtrfTdA5SQ4NVA7dU05DpznKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f4:92:55:71:8c:19:f3:bd:a5:27:18:b3:24:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99 Validity Not Before: Feb 9 16:01:30 2026 GMT Not After : Feb 10 16:01:30 2026 GMT Subject: CN=95b9d956ddacfe2e3022e410ae75041299579f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:d7:16:3b:df:a2:d7:83:10:a1:40:b7:bf: 8c:e7:bf:7e:13:47:a1:2e:d4:91:d1:d4:9f:52:59: 86:95:23:25:37:e2:29:4d:02:88:98:63:1c:bd:40: 34:8a:e9:75:33:38:c5:dc:01:39:50:f1:8c:79:16: 77:a9:52:53:ac:fd:db:5e:08:cf:07:57:14:02:97: 75:4b:9b:9b:40:55:e0:cb:46:60:f3:c2:f7:0c:2d: f4:70:72:2d:40:02:df:10:dd:6e:8b:e3:62:c7:4f: 41:ba:6c:d1:27:89:d3:42:b1:94:77:9f:7f:da:da: 6a:20:83:2e:39:9e:08:ac:6c:a1:82:46:b0:53:35: 2c:89:d5:12:a5:18:07:b9:c5:ea:e9:67:2c:0d:9c: bd:c3:aa:a2:17:8e:1b:e9:1d:98:86:a5:6b:08:b4: 62:0e:05:69:04:d9:b0:b8:c3:49:15:ab:47:dd:f4: 99:41:5f:11:c4:99:56:81:01:bf:c8:64:bc:20:ce: a9:17:d1:24:aa:6e:67:ae:80:d9:12:ba:2f:3e:c4: 61:41:73:6b:77:bf:b7:72:5f:e5:c3:19:de:c0:92: fd:37:70:f8:c2:74:ee:ea:0b:80:3b:bd:a9:a3:32: 24:f7:21:33:8b:07:d7:a5:ff:e4:c4:09:6c:43:93: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:D9:56:DD:AC:FE:2E:30:22:E4:10:AE:75:04:12:99:57:9F:0A X509v3 Authority Key Identifier: keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1c:7f:76:c3:5a:48:2f:8a:59:64:6d:6a:78:eb:c8:c1:c7: 07:51:54:13:ef:8b:24:cb:67:20:fb:3b:38:37:49:3a:e6:33: 41:c8:18:f7:6a:c9:62:d2:b9:48:bd:75:9c:0d:c1:18:c2:d9: 95:5a:11:d5:29:e5:12:52:36:b2:f3:41:f1:f7:0c:c0:bb:48: 9a:7f:a3:52:19:bb:14:c4:81:ff:d0:91:0e:6e:0e:e6:fc:7c: 27:87:20:0d:76:db:8c:23:5b:8b:c7:a0:8c:a8:b2:8e:97:82: b4:c0:70:a5:2d:e3:52:5a:80:63:a9:9f:b9:91:74:14:50:90: e7:9c:5f:85:1e:c8:1b:79:bc:ed:7b:e2:29:03:05:e2:69:94: 6e:8a:a8:8f:10:8b:20:17:62:d5:62:73:18:9b:cc:67:fb:36: ba:22:8e:cb:24:72:29:b5:52:e7:2c:3c:dd:43:68:86:90:c2: 82:96:15:78:3d:62:d3:04:f3:4d:35:c6:9a:57:a6:cd:f2:2e: 08:12:d5:de:cf:30:f5:ca:4d:fd:6e:36:c0:d8:ea:62:fc:c9: 4f:59:7d:d2:d5:2d:b4:45:87:b1:b0:70:3c:2f:84:d5:2a:88: 4e:28:ef:d2:67:74:fd:44:4b:e5:50:74:2f:27:ed:12:0b:52: 84:92:6b:dd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIvSSVXGMGfO9pScYsyT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2 N2ZlOTkwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD Eyg5NWI5ZDk1NmRkYWNmZTJlMzAyMmU0MTBhZTc1MDQxMjk5NTc5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbHXFjvfoteDEKFAt7+M579+E0eh LtSR0dSfUlmGlSMlN+IpTQKImGMcvUA0iul1MzjF3AE5UPGMeRZ3qVJTrP3bXgjP B1cUApd1S5ubQFXgy0Zg88L3DC30cHItQALfEN1ui+Nix09BumzRJ4nTQrGUd59/ 2tpqIIMuOZ4IrGyhgkawUzUsidUSpRgHucXq6WcsDZy9w6qiF44b6R2YhqVrCLRi DgVpBNmwuMNJFatH3fSZQV8RxJlWgQG/yGS8IM6pF9Ekqm5nroDZErovPsRhQXNr d7+3cl/lwxnewJL9N3D4wnTu6guAO72pozIk9yEziwfXpf/kxAlsQ5NwqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJW52VbdrP4uMCLkEK51BBKZV58KMB8GA1UdIwQY MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBx/ dsNaSC+KWWRtanjryMHHB1FUE++LJMtnIPs7ODdJOuYzQcgY92rJYtK5SL11nA3B GMLZlVoR1SnlElI2svNB8fcMwLtImn+jUhm7FMSB/9CRDm4O5vx8J4cgDXbbjCNb i8egjKiyjpeCtMBwpS3jUlqAY6mfuZF0FFCQ55xfhR7IG3m87XviKQMF4mmUboqo jxCLIBdi1WJzGJvMZ/s2uiKOyyRyKbVS5yw83UNohpDCgpYVeD1i0wTzTTXGmlem zfIuCBLV3s8w9cpN/W42wNjqYvzJT1l90tUttEWHsbBwPC+E1SqITijv0md0/URL 5VB0LyftEgtShJJr3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:31 2026 by rpki-client