This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json) Hash identifier: zMDZxxi2AoFr+LLlI3r5NoQQKJiAAoGdBSLghUZE7Zk= Subject key identifier: 8A:0A:E2:C8:D4:A1:BF:C3:E0:70:9E:B5:57:31:E3:B9:9D:8E:10:14 Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9 Certificate serial: 019C4390A797014642109F6A6F31D7F65064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 18:01:19 +0000 Manifest this update: Mon 09 Feb 2026 18:01:19 +0000 Manifest next update: Tue 10 Feb 2026 18:01:19 +0000 Files and hashes: 1: ZhycJ5-Nudz4jzFAN7KNypEk_qY.roa (hash: Sy4qxp/vjChSs7LGRbsdrKBPDJPwQ9QRGo9byWidGTE=) 2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: nBG/xv9m/fK7QGHmRVqzkRsMUpM0NAUajTmz7liJBXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a7:97:01:46:42:10:9f:6a:6f:31:d7:f6:50:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9 Validity Not Before: Feb 9 18:01:19 2026 GMT Not After : Feb 10 18:01:19 2026 GMT Subject: CN=8a0ae2c8d4a1bfc3e0709eb55731e3b99d8e1014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:61:f0:06:27:19:32:a6:1f:ec:06:e3:c2: 0e:e1:0e:26:26:f8:34:26:e0:dc:6a:78:5a:7d:20: bc:36:5f:35:c5:f3:0a:51:15:32:16:e6:89:1c:e7: 72:b3:c9:7e:dd:94:3d:e4:01:cb:02:a8:37:a3:e4: e6:df:ac:56:a6:40:92:06:59:de:5c:8a:9d:28:af: f9:bc:cf:6e:5e:f1:d9:57:5c:43:da:2e:5e:36:d6: 03:f9:e7:cc:a8:11:bf:80:0e:20:c6:57:65:a1:4e: 77:04:78:43:72:d7:db:69:97:7d:56:98:6d:e0:7c: c3:6f:1b:db:88:e4:3f:f8:41:de:96:ec:71:a2:eb: aa:4f:c5:e4:e6:9c:ce:3f:7d:74:e9:e7:0b:87:9b: b1:b6:6d:e3:45:0d:4d:93:2b:cc:88:8b:ed:9e:3c: de:8a:55:f4:5a:f5:f0:39:73:26:a1:e4:ce:bd:09: d1:d5:fc:6b:28:e4:62:14:f2:4e:88:78:88:10:a4: 9a:85:e0:2a:22:cb:6f:60:42:36:4e:42:23:38:e0: 9f:9f:96:ad:27:0b:c8:91:61:bd:33:d2:1c:f9:c5: c4:e1:21:19:44:93:2a:e1:89:4e:26:37:c2:22:10: 09:ee:68:ca:b3:65:6c:d5:cc:6f:95:3f:41:70:3b: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:E2:C8:D4:A1:BF:C3:E0:70:9E:B5:57:31:E3:B9:9D:8E:10:14 X509v3 Authority Key Identifier: keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:9c:21:08:9d:01:f6:dc:0f:06:33:78:d1:8d:9b:05:5a:8a: 7e:70:14:f6:29:c7:a6:5b:3c:9c:7b:0d:23:aa:63:00:e6:56: b1:ea:9e:3c:44:93:fc:1b:66:59:7a:7d:45:6e:60:e9:5c:8e: 90:66:6c:b8:1b:08:43:a0:30:6f:35:e8:8c:c5:c8:0d:9c:ad: 04:ae:a7:6b:29:c1:0d:15:80:b7:4a:1f:bc:2b:5b:ae:8e:cd: f8:ae:be:7b:1e:47:f2:7b:29:ed:c2:49:e4:67:83:f3:bf:4c: ba:22:8d:25:46:00:d1:63:19:6b:72:db:3c:74:05:c3:e1:88: 13:59:88:fc:38:9e:2d:e1:0b:f2:cd:d9:8d:db:a4:82:59:f2: 32:6d:03:96:83:62:4d:af:86:6f:8c:80:49:e8:cb:1b:08:37: fd:10:1a:2d:23:22:6b:f6:3d:92:37:27:72:15:db:8e:67:76: 57:16:10:6c:6a:b0:a5:a0:d9:d1:ae:ff:b7:8d:6b:64:77:c8: d4:79:dc:93:a7:eb:15:34:8d:dc:a7:3c:45:fd:1d:b7:31:f1: 10:f5:8e:76:b0:b9:f0:58:15:1e:a0:6a:fd:d8:6b:e1:1c:4d: 6d:3f:a6:e5:19:07:33:80:eb:51:b8:e6:1c:05:f9:d5:81:c0: 03:da:0f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKeXAUZCEJ9qbzHX9lBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx MTk4YTkwHhcNMjYwMjA5MTgwMTE5WhcNMjYwMjEwMTgwMTE5WjAzMTEwLwYDVQQD Eyg4YTBhZTJjOGQ0YTFiZmMzZTA3MDllYjU1NzMxZTNiOTlkOGUxMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmth8AYnGTKmH+wG48IO4Q4mJvg0 JuDcanhafSC8Nl81xfMKURUyFuaJHOdys8l+3ZQ95AHLAqg3o+Tm36xWpkCSBlne XIqdKK/5vM9uXvHZV1xD2i5eNtYD+efMqBG/gA4gxldloU53BHhDctfbaZd9Vpht 4HzDbxvbiOQ/+EHeluxxouuqT8Xk5pzOP3106ecLh5uxtm3jRQ1NkyvMiIvtnjze ilX0WvXwOXMmoeTOvQnR1fxrKORiFPJOiHiIEKSaheAqIstvYEI2TkIjOOCfn5at JwvIkWG9M9Ic+cXE4SEZRJMq4YlOJjfCIhAJ7mjKs2Vs1cxvlT9BcDtspwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoK4sjUob/D4HCetVcx47mdjhAUMB8GA1UdIwQY MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt N2NjYmI0NWRjYTUxLzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJwhCJ0B 9twPBjN40Y2bBVqKfnAU9inHpls8nHsNI6pjAOZWseqePEST/BtmWXp9RW5g6VyO kGZsuBsIQ6AwbzXojMXIDZytBK6naynBDRWAt0ofvCtbro7N+K6+ex5H8nsp7cJJ 5GeD879MuiKNJUYA0WMZa3LbPHQFw+GIE1mI/DieLeEL8s3ZjdukglnyMm0DloNi Ta+Gb4yASejLGwg3/RAaLSMia/Y9kjcnchXbjmd2VxYQbGqwpaDZ0a7/t41rZHfI 1Hnck6frFTSN3Kc8Rf0dtzHxEPWOdrC58FgVHqBq/dhr4RxNbT+m5RkHM4DrUbjm HAX51YHAA9oPcg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:44 2026 by rpki-client