This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json) Hash identifier: KNU6DqTIK31QOEppm6ujXFSmEDyUhj1U9ioT+iA/OrQ= Subject key identifier: E5:9F:CB:71:F2:A0:8F:43:03:62:5A:AE:5F:49:CE:5A:67:35:8B:2D Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Certificate serial: 019C42462A3430B2AF6EEC86E860B3004CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: 4Wrio_4iNnpl1Y6QGrJWPm_-8xA.roa (hash: 6jBbtoStgIk6zifFLk4lujFoBwI6HFMnQNdG0panh3s=) 2: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: CoZZ0fhSS/LaSCOzkhP9N0G6r4wlIktV8FnAuVYOh3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2a:34:30:b2:af:6e:ec:86:e8:60:b3:00:4c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=e59fcb71f2a08f4303625aae5f49ce5a67358b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:07:0f:63:8e:6a:79:8a:90:a1:50:77:ab: f3:7c:3e:46:9a:0c:ec:14:bf:49:ca:66:47:fa:ca: 3d:51:b3:db:e4:bd:eb:fa:56:c5:0b:e7:e4:8c:6d: e6:05:c4:88:68:ca:45:f0:b6:78:53:d9:27:4b:cb: dc:5c:be:10:a6:af:08:f4:d0:20:ec:24:19:df:fb: d7:c9:a0:40:0f:75:b5:fa:46:08:30:91:b7:78:85: 18:dc:c1:aa:62:6d:cd:91:fb:eb:af:5f:de:e3:9a: eb:a4:bc:3d:0b:9b:3d:f3:04:49:fb:0c:54:e0:5c: d7:73:29:14:8c:27:03:4e:39:83:dc:46:87:8c:21: b4:2f:fe:e8:73:24:ec:87:ed:0b:5e:78:e1:17:9f: 9d:09:89:b6:b4:3f:8f:29:f7:4e:85:13:50:42:df: ca:a5:84:37:69:fd:5a:1c:a4:ab:6c:0e:33:64:13: f1:99:71:6e:0b:f7:2a:33:39:05:14:9d:6e:71:54: 8c:46:13:ef:1c:09:ae:a9:2a:86:7a:2d:2f:31:d4: c7:c9:0f:c0:47:b3:af:ac:0d:81:fb:b4:ad:42:d7: 1d:0c:4d:b0:09:85:09:6f:9e:c6:ed:62:b8:fa:91: 79:8f:ea:fb:39:d8:2a:d6:89:20:23:30:34:24:20: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:CB:71:F2:A0:8F:43:03:62:5A:AE:5F:49:CE:5A:67:35:8B:2D X509v3 Authority Key Identifier: keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8e:38:14:05:1d:8e:4f:e5:df:3d:f4:a8:b0:cc:cd:94:ec: ec:1c:3d:9c:05:f3:d3:b6:0f:e3:bf:78:aa:51:a4:fc:73:fd: 58:50:09:95:bb:9b:da:39:67:fa:25:76:a6:ea:92:f4:77:a1: 65:4a:b9:b5:1d:ac:81:b2:05:dc:6b:dc:72:df:99:97:56:49: 80:8a:e7:1c:38:59:45:1e:27:ad:8d:46:78:01:46:3a:ae:89: 19:12:f7:0f:3e:0f:29:35:cc:1d:f9:96:cd:88:ab:b2:64:d4: 39:d4:9c:26:59:84:cd:de:cf:d2:be:69:8e:0d:c6:0f:ba:2a: a8:b3:08:4a:ee:c8:48:ab:f3:31:7f:10:dc:fd:f9:2b:77:61: 62:27:03:55:ca:dc:62:bd:f1:c8:21:82:4c:f0:c4:bd:c1:5b: 74:52:ed:71:9d:b3:0f:2a:99:2a:65:83:bf:1a:bc:87:c1:ab: be:ea:25:45:18:86:95:e4:df:11:ea:4f:84:3e:9b:43:14:9c: 48:bf:04:7d:39:c3:83:b0:84:a8:c8:c8:b3:07:15:87:b7:f6: 5e:5b:05:5d:07:ab:74:25:6e:25:6b:13:cc:5c:12:c0:2b:e1: e8:83:e5:f2:06:ab:05:b7:bc:cb:cb:00:f5:fd:62:ef:4a:6c: ee:80:bf:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRio0MLKvbuyG6GCzAEy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3 ZjI1ZTQwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD EyhlNTlmY2I3MWYyYTA4ZjQzMDM2MjVhYWU1ZjQ5Y2U1YTY3MzU4YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikHD2OOanmKkKFQd6vzfD5Gmgzs FL9JymZH+so9UbPb5L3r+lbFC+fkjG3mBcSIaMpF8LZ4U9knS8vcXL4Qpq8I9NAg 7CQZ3/vXyaBAD3W1+kYIMJG3eIUY3MGqYm3Nkfvrr1/e45rrpLw9C5s98wRJ+wxU 4FzXcykUjCcDTjmD3EaHjCG0L/7ocyTsh+0LXnjhF5+dCYm2tD+PKfdOhRNQQt/K pYQ3af1aHKSrbA4zZBPxmXFuC/cqMzkFFJ1ucVSMRhPvHAmuqSqGei0vMdTHyQ/A R7OvrA2B+7StQtcdDE2wCYUJb57G7WK4+pF5j+r7Odgq1okgIzA0JCCqZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWfy3HyoI9DA2Jarl9JzlpnNYstMB8GA1UdIwQY MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo44FAUd jk/l3z30qLDMzZTs7Bw9nAXz07YP4794qlGk/HP9WFAJlbub2jln+iV2puqS9Heh ZUq5tR2sgbIF3Gvcct+Zl1ZJgIrnHDhZRR4nrY1GeAFGOq6JGRL3Dz4PKTXMHfmW zYirsmTUOdScJlmEzd7P0r5pjg3GD7oqqLMISu7ISKvzMX8Q3P35K3dhYicDVcrc Yr3xyCGCTPDEvcFbdFLtcZ2zDyqZKmWDvxq8h8GrvuolRRiGleTfEepPhD6bQxSc SL8EfTnDg7CEqMjIswcVh7f2XlsFXQerdCVuJWsTzFwSwCvh6IPl8garBbe8y8sA 9f1i70ps7oC/1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:11 2026 by rpki-client