This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json) Hash identifier: TkEhR+mPLtPKTedD/OplmxnJ/CibpwoaM80tcNJoRcU= Subject key identifier: BA:79:17:53:45:6D:69:64:24:18:1C:BE:02:C2:B3:1E:E2:40:5C:E0 Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Certificate serial: 019C43FE2146E7CDA8E8E7ABAF9500D2D18E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft Manifest number: 0A5F Signing time: Mon 09 Feb 2026 20:00:53 +0000 Manifest this update: Mon 09 Feb 2026 20:00:53 +0000 Manifest next update: Tue 10 Feb 2026 20:00:53 +0000 Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: G45k9Hd6h9ibwsTahNGw7TZb5hyfNS6z77Sdg8pM4AE=) 2: ZTv1yaUdeeTsSjhgkcbW3sOan8A.roa (hash: vGSSEZMU1rC38w1BEnBzc1B2fso5PDq2a8Oi71K6PZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:21:46:e7:cd:a8:e8:e7:ab:af:95:00:d2:d1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Validity Not Before: Feb 9 20:00:53 2026 GMT Not After : Feb 10 20:00:53 2026 GMT Subject: CN=ba791753456d696424181cbe02c2b31ee2405ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:3b:6f:5f:5d:61:48:55:99:ab:88:23:fd: 12:5b:ae:de:fd:5a:43:5f:29:0a:b0:66:6b:3a:23: c5:91:9a:ca:ed:c9:34:53:6f:51:4d:5f:a9:a0:e1: c2:f0:d1:4a:93:31:2f:a3:74:e6:9f:f5:de:f0:40: b3:4b:a3:f9:1a:4a:6e:48:ed:05:d2:24:5d:2f:a8: 51:02:bb:84:d9:e0:54:9d:47:a3:97:94:07:f4:0d: 34:a8:1c:ea:24:61:b5:ee:5e:10:13:e3:3e:81:4f: 2a:38:cd:2e:5c:88:2b:bc:3c:38:c3:b6:28:0f:e4: ca:e6:c1:df:51:4e:f4:ce:24:ea:94:90:22:ff:47: 13:68:ae:c5:f0:c0:91:71:54:f2:f3:66:c4:15:a4: d4:fe:aa:45:73:93:2c:03:e1:86:ed:37:61:51:c2: 4d:83:5b:54:78:76:48:15:a3:55:88:01:b6:7a:e4: 97:71:b5:2b:d1:16:f9:d0:f3:2e:b8:8e:b1:c8:6b: 3a:41:38:2d:6c:c2:30:a3:01:53:ea:38:1e:59:39: 9c:f0:f4:e5:0b:3d:3f:a6:71:56:40:bb:89:e2:e7: c3:86:79:7a:a9:5d:31:5e:54:d1:af:ec:87:99:66: 21:5a:5b:1a:8a:92:15:7f:ec:8c:d6:39:fc:70:cb: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:17:53:45:6D:69:64:24:18:1C:BE:02:C2:B3:1E:E2:40:5C:E0 X509v3 Authority Key Identifier: keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a1:da:23:41:62:63:b3:5a:23:ba:a3:92:96:c6:15:bb:95: 84:17:c0:08:3a:47:7c:4c:e7:da:92:e7:9a:54:54:d0:21:7c: 9a:73:6a:f6:7e:b5:5e:a3:f8:52:58:82:18:91:56:d3:c0:23: db:9c:d9:1c:56:b5:91:be:04:b6:8b:0c:7b:83:53:0a:c4:5b: fc:de:0b:49:4b:09:6c:14:c0:04:92:e6:3f:24:b1:54:ae:06: 4f:dd:12:1d:e5:90:07:b2:d9:44:6c:2e:cb:e4:33:ba:0a:d3: ba:83:2a:4a:cf:8d:62:bc:52:33:4b:f7:11:3e:82:aa:09:72: e3:67:7a:2a:94:03:5b:bf:12:43:6f:fa:ed:43:21:1e:26:67: ad:5d:e0:4f:22:9d:c0:64:72:cc:b1:00:73:e4:b3:01:d0:72: 85:21:35:85:6f:88:b8:9b:2b:fe:5f:e2:61:18:e5:44:ba:06: 5d:68:27:a3:6e:35:e7:38:06:c0:47:f8:f2:02:a1:38:29:f5: 91:54:de:5c:d3:d0:30:68:d1:c5:40:c6:87:4c:4d:af:31:90: 3a:e6:f3:3a:c7:af:5c:fa:16:72:da:86:91:0a:e3:f3:0e:6c: a3:af:c4:3f:3e:81:1c:f0:7a:2b:f1:c8:49:5e:06:42:74:e7: 48:63:c7:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/iFG582o6Oerr5UA0tGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5 ODBjNzcwHhcNMjYwMjA5MjAwMDUzWhcNMjYwMjEwMjAwMDUzWjAzMTEwLwYDVQQD EyhiYTc5MTc1MzQ1NmQ2OTY0MjQxODFjYmUwMmMyYjMxZWUyNDA1Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq847b19dYUhVmauII/0SW67e/VpD XykKsGZrOiPFkZrK7ck0U29RTV+poOHC8NFKkzEvo3Tmn/Xe8ECzS6P5GkpuSO0F 0iRdL6hRAruE2eBUnUejl5QH9A00qBzqJGG17l4QE+M+gU8qOM0uXIgrvDw4w7Yo D+TK5sHfUU70ziTqlJAi/0cTaK7F8MCRcVTy82bEFaTU/qpFc5MsA+GG7TdhUcJN g1tUeHZIFaNViAG2euSXcbUr0Rb50PMuuI6xyGs6QTgtbMIwowFT6jgeWTmc8PTl Cz0/pnFWQLuJ4ufDhnl6qV0xXlTRr+yHmWYhWlsaipIVf+yM1jn8cMtObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp5F1NFbWlkJBgcvgLCsx7iQFzgMB8GA1UdIwQY MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct ZjcxYTIyMTQ1ZDRlLzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaHaI0Fi Y7NaI7qjkpbGFbuVhBfACDpHfEzn2pLnmlRU0CF8mnNq9n61XqP4UliCGJFW08Aj 25zZHFa1kb4EtosMe4NTCsRb/N4LSUsJbBTABJLmPySxVK4GT90SHeWQB7LZRGwu y+QzugrTuoMqSs+NYrxSM0v3ET6Cqgly42d6KpQDW78SQ2/67UMhHiZnrV3gTyKd wGRyzLEAc+SzAdByhSE1hW+IuJsr/l/iYRjlRLoGXWgno2415zgGwEf48gKhOCn1 kVTeXNPQMGjRxUDGh0xNrzGQOubzOsevXPoWctqGkQrj8w5so6/EPz6BHPB6K/HI SV4GQnTnSGPHCA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:05 2026 by rpki-client