This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json) Hash identifier: ODWW07OH1g28nLYlsmVRRrRkHn4djfADbpWZxFTNb+A= Subject key identifier: 13:FF:F7:49:CC:C1:D7:09:19:E8:87:21:FD:E3:CC:C8:6A:2D:88:27 Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a Certificate serial: 019C43591C34778D60A2FDF2EC0CAD525783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft Manifest number: 1330 Signing time: Mon 09 Feb 2026 17:00:39 +0000 Manifest this update: Mon 09 Feb 2026 17:00:39 +0000 Manifest next update: Tue 10 Feb 2026 17:00:39 +0000 Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: R38ogOhyjo78SK5NugMoBYcqfKCMc1cbG01tzc5UHxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:1c:34:77:8d:60:a2:fd:f2:ec:0c:ad:52:57:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a Validity Not Before: Feb 9 17:00:39 2026 GMT Not After : Feb 10 17:00:39 2026 GMT Subject: CN=13fff749ccc1d70919e88721fde3ccc86a2d8827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:62:90:16:3c:7a:bf:33:fe:7f:fc:2c:a8: d1:a6:54:6e:88:18:03:cc:3d:42:1e:9f:5b:5a:70: 55:f0:e9:2c:c7:cc:00:50:7d:5f:c6:8a:52:bc:04: f0:00:f8:71:b0:5d:05:25:4a:8e:6f:7d:0a:a5:08: 2f:35:3e:6e:b0:ec:aa:f3:ca:29:44:bc:a6:8a:f8: 47:5b:fb:dc:ab:9f:00:67:33:ea:c7:1d:0c:c5:41: c3:83:d7:1c:c9:b3:d9:4c:3c:14:91:2f:29:e1:0d: b2:06:11:1b:ae:66:a5:04:06:8f:6b:f8:8d:b3:4b: 1f:51:c6:d7:b8:a5:b8:c7:06:6b:07:6d:d8:a5:5e: d7:18:71:42:9d:12:d9:d2:cd:25:03:43:da:92:14: dd:1f:57:fd:e4:f8:a1:aa:42:6b:c8:58:88:8c:af: 94:e3:39:cc:c1:72:c1:52:a4:df:24:cf:af:a1:ec: eb:68:52:8e:16:f7:7f:97:49:a7:e1:7f:f6:22:4e: b7:73:ec:0c:f0:2d:ec:bf:52:26:a9:45:3e:e9:88: 0e:85:31:c1:30:3c:97:f4:c6:63:bc:80:02:5f:26: 01:70:c0:df:fb:91:31:4b:7b:1b:e9:8f:78:e6:a2: c4:21:e2:58:bc:51:05:1a:9c:2c:e2:88:02:bc:ca: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FF:F7:49:CC:C1:D7:09:19:E8:87:21:FD:E3:CC:C8:6A:2D:88:27 X509v3 Authority Key Identifier: keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7e:6e:ec:92:20:e9:b5:cb:f7:fd:65:d6:bf:3d:69:59:af: e8:cb:53:7b:ea:68:67:06:88:53:75:78:ee:39:78:b1:e2:0a: 9d:31:48:d6:f5:12:0e:4e:cd:57:f6:49:29:d4:fd:4a:0f:2e: 81:e6:0f:6d:de:55:0a:0a:10:69:c5:98:73:c0:b1:10:f8:da: a2:6e:8c:8f:46:50:a0:4d:ca:1a:25:cc:ce:19:31:af:e5:fb: fe:2b:21:e1:d9:fd:78:51:0d:33:d9:5e:68:e5:9d:1f:bf:cb: c2:c7:82:1a:5c:be:e7:32:6f:13:c7:c8:d2:5d:34:5c:1c:83: a4:10:65:d2:b7:a3:42:93:8a:67:07:ec:02:f4:67:71:1a:37: 69:a5:9a:05:75:23:8b:fd:59:fa:3c:0c:32:22:20:22:94:cb: c0:f0:33:37:9a:87:11:9f:13:62:68:87:ae:b2:6f:f1:ae:51: 22:74:05:91:d4:41:30:b0:14:a9:df:02:fb:4d:a2:ad:f7:5f: 4c:a6:1d:9f:93:81:ae:1c:49:02:33:07:72:f0:60:2b:e1:25: db:ee:0d:c7:9c:73:dd:7a:28:35:5c:75:5a:89:d8:21:23:cb: 94:dc:97:46:16:b0:b2:e7:b3:66:c0:27:fc:30:d1:c5:4b:4e: a0:34:2e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRw0d41gov3y7AytUleDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0 MDk1NmEwHhcNMjYwMjA5MTcwMDM5WhcNMjYwMjEwMTcwMDM5WjAzMTEwLwYDVQQD EygxM2ZmZjc0OWNjYzFkNzA5MTllODg3MjFmZGUzY2NjODZhMmQ4ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKlikBY8er8z/n/8LKjRplRuiBgD zD1CHp9bWnBV8Oksx8wAUH1fxopSvATwAPhxsF0FJUqOb30KpQgvNT5usOyq88op RLymivhHW/vcq58AZzPqxx0MxUHDg9ccybPZTDwUkS8p4Q2yBhEbrmalBAaPa/iN s0sfUcbXuKW4xwZrB23YpV7XGHFCnRLZ0s0lA0PakhTdH1f95PihqkJryFiIjK+U 4znMwXLBUqTfJM+voezraFKOFvd/l0mn4X/2Ik63c+wM8C3sv1ImqUU+6YgOhTHB MDyX9MZjvIACXyYBcMDf+5ExS3sb6Y945qLEIeJYvFEFGpws4ogCvMqgoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP/90nMwdcJGeiHIf3jzMhqLYgnMB8GA1UdIwQY MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxH5u7JIg 6bXL9/1l1r89aVmv6MtTe+poZwaIU3V47jl4seIKnTFI1vUSDk7NV/ZJKdT9Sg8u geYPbd5VCgoQacWYc8CxEPjaom6Mj0ZQoE3KGiXMzhkxr+X7/ish4dn9eFENM9le aOWdH7/LwseCGly+5zJvE8fI0l00XByDpBBl0rejQpOKZwfsAvRncRo3aaWaBXUj i/1Z+jwMMiIgIpTLwPAzN5qHEZ8TYmiHrrJv8a5RInQFkdRBMLAUqd8C+02irfdf TKYdn5OBrhxJAjMHcvBgK+El2+4Nx5xz3XooNVx1WonYISPLlNyXRhawsuezZsAn /DDRxUtOoDQuQg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:43 2026 by rpki-client