This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json) Hash identifier: bH1o6NiWnd802lGzkjAllSZQSENgXuWEr62SecLGzXs= Subject key identifier: 4E:A9:A6:9F:82:91:D5:46:1E:BE:04:60:30:C9:1E:FB:E8:22:3A:63 Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Certificate serial: 019C41A1724CB245A259C0DB454624625D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft Manifest number: 0432 Signing time: Mon 09 Feb 2026 09:00:25 +0000 Manifest this update: Mon 09 Feb 2026 09:00:25 +0000 Manifest next update: Tue 10 Feb 2026 09:00:25 +0000 Files and hashes: 1: 1-viZKzZcs2hL671huJpZke8oCa8.roa (hash: +mu7L8sH0WKwCKuSeMKrM/p/c/OlxP69D6YYgy4YRII=) 2: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: 9G2u/EwD8MR09V3wBVu5tiKiP8QhqtFGiFC7XAwWEAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:72:4c:b2:45:a2:59:c0:db:45:46:24:62:5d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Validity Not Before: Feb 9 09:00:25 2026 GMT Not After : Feb 10 09:00:25 2026 GMT Subject: CN=4ea9a69f8291d5461ebe046030c91efbe8223a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:59:97:da:34:8b:52:95:b0:f5:1f:f4:6a: 19:2e:c5:a0:e5:bf:c9:3a:68:ab:40:af:1b:49:51: 42:d6:fc:e9:73:1f:81:df:6e:48:d1:0d:f8:a4:e2: 3b:47:20:bf:81:14:35:28:9a:7b:02:e9:c0:62:21: cb:bd:a7:b8:99:3e:bb:14:3d:25:4b:42:4d:c5:74: fa:c2:52:ef:48:8b:3a:5f:bf:54:87:62:36:e1:85: a5:b5:70:25:c9:6f:2f:0c:c4:ba:0a:13:db:8b:3f: 4c:ca:e7:a9:82:ec:b0:11:69:f3:4f:da:9b:1f:60: dc:b8:f4:ff:3a:82:37:6c:2f:25:1e:15:9d:f0:22: 73:14:c2:d1:83:e9:6e:8b:e5:5c:a2:37:8b:fb:d5: b7:1c:cd:c4:13:04:03:ba:41:0d:a5:66:36:be:63: 8e:a5:1f:a6:98:f7:7b:26:b4:66:c2:c7:5f:de:f3: 7f:b3:cf:a1:15:b5:25:cb:9e:b1:70:af:2d:83:56: 01:22:14:c7:4b:59:c8:c8:50:c7:a6:11:f6:f7:e5: 8c:0f:84:0d:9c:ac:0f:fc:e8:6d:c5:7e:fb:1e:1b: 9c:f5:b2:2a:b5:2e:94:81:08:4b:82:e9:87:7e:b0: 73:1e:3d:47:1a:e5:7a:16:2e:92:21:47:e7:56:2f: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:A6:9F:82:91:D5:46:1E:BE:04:60:30:C9:1E:FB:E8:22:3A:63 X509v3 Authority Key Identifier: keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c4:e9:28:ef:07:9d:6a:4b:e2:d6:f8:09:ed:ce:7d:a2:ad: 14:c6:33:ce:df:40:bd:dd:79:49:cb:cb:7e:61:a1:9e:49:e4: 55:8e:ec:1c:77:ba:87:ee:1a:7b:a5:86:65:3b:b8:c5:c9:5f: 78:06:8b:fe:ba:9e:c9:e6:ab:4e:54:33:5a:9d:22:08:06:05: bf:76:91:cd:16:1a:f2:a4:f0:11:e8:fc:c8:19:d9:47:86:5f: 41:70:1c:af:0a:33:14:17:5d:50:33:b6:6f:fe:33:d0:4f:87: 3d:a7:83:cb:b0:8f:f1:63:0c:7a:ac:d0:c1:da:50:96:33:d0: f6:55:11:8c:8a:08:99:9b:60:37:32:8c:99:6f:32:4f:91:50: e3:37:0a:12:53:2c:52:13:ad:d9:c5:9f:53:61:41:f7:d8:38: c6:ba:06:1d:1d:26:3a:8e:e2:cc:37:ee:a8:6a:54:cc:6b:94: 44:cb:2a:6c:aa:52:73:a1:1f:34:52:8b:4c:a0:31:2b:b5:0f: 57:ef:28:0f:e3:d9:b5:37:98:da:95:8b:e9:c3:38:20:12:37: 06:14:3f:e4:1a:bf:dc:55:f9:3e:d2:2a:32:32:d7:ca:05:9b: 3c:0a:61:01:d0:28:81:76:44:be:ae:fe:4d:d2:09:2f:bc:d3: 08:61:90:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXJMskWiWcDbRUYkYl1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2 MjYxMzgwHhcNMjYwMjA5MDkwMDI1WhcNMjYwMjEwMDkwMDI1WjAzMTEwLwYDVQQD Eyg0ZWE5YTY5ZjgyOTFkNTQ2MWViZTA0NjAzMGM5MWVmYmU4MjIzYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDJZl9o0i1KVsPUf9GoZLsWg5b/J OmirQK8bSVFC1vzpcx+B325I0Q34pOI7RyC/gRQ1KJp7AunAYiHLvae4mT67FD0l S0JNxXT6wlLvSIs6X79Uh2I24YWltXAlyW8vDMS6ChPbiz9MyuepguywEWnzT9qb H2DcuPT/OoI3bC8lHhWd8CJzFMLRg+lui+VcojeL+9W3HM3EEwQDukENpWY2vmOO pR+mmPd7JrRmwsdf3vN/s8+hFbUly56xcK8tg1YBIhTHS1nIyFDHphH29+WMD4QN nKwP/OhtxX77Hhuc9bIqtS6UgQhLgumHfrBzHj1HGuV6Fi6SIUfnVi/1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6ppp+CkdVGHr4EYDDJHvvoIjpjMB8GA1UdIwQY MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcTpKO8H nWpL4tb4Ce3OfaKtFMYzzt9Avd15ScvLfmGhnknkVY7sHHe6h+4ae6WGZTu4xclf eAaL/rqeyearTlQzWp0iCAYFv3aRzRYa8qTwEej8yBnZR4ZfQXAcrwozFBddUDO2 b/4z0E+HPaeDy7CP8WMMeqzQwdpQljPQ9lURjIoImZtgNzKMmW8yT5FQ4zcKElMs UhOt2cWfU2FB99g4xroGHR0mOo7izDfuqGpUzGuURMsqbKpSc6EfNFKLTKAxK7UP V+8oD+PZtTeY2pWL6cM4IBI3BhQ/5Bq/3FX5PtIqMjLXygWbPAphAdAogXZEvq7+ TdIJL7zTCGGQ2w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:00 2026 by rpki-client