This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json) Hash identifier: FxaJAlWOUlEH/YLUoz3k0goU3JSuXK/dpdZPwEaK+x8= Subject key identifier: 07:AA:86:E8:2C:72:8F:8D:03:EB:34:1A:A7:B6:7A:C1:9D:38:C5:1B Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2 Certificate serial: 019C42102281A893A911C808CF618C3DEBBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft Manifest number: 0C45 Signing time: Mon 09 Feb 2026 11:01:19 +0000 Manifest this update: Mon 09 Feb 2026 11:01:19 +0000 Manifest next update: Tue 10 Feb 2026 11:01:19 +0000 Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=) 2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: +roYGugEkL8I/UBKKnUAU4ShYqH1skuM8N9W7nxA+Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:22:81:a8:93:a9:11:c8:08:cf:61:8c:3d:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2 Validity Not Before: Feb 9 11:01:19 2026 GMT Not After : Feb 10 11:01:19 2026 GMT Subject: CN=07aa86e82c728f8d03eb341aa7b67ac19d38c51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:09:52:04:e9:bd:f6:0a:95:43:ba:0c:9a: cc:45:0f:9b:70:e9:94:e5:b9:ae:e8:85:49:78:92: 34:82:5f:e8:71:a7:ae:02:5e:4f:7d:d4:5d:17:3c: 8c:37:c5:6d:7e:f7:ef:79:10:10:63:46:c1:b3:80: 64:51:00:2f:80:c7:94:4b:08:56:4c:7b:6a:1e:3b: b7:8a:e0:70:24:c1:fe:cf:b6:26:cd:78:16:94:05: 5c:08:71:8a:73:63:17:12:d2:fe:c2:08:66:a7:6f: b4:12:03:ae:57:e9:7b:4d:14:f6:74:5e:80:d9:43: 70:d7:eb:97:4b:36:9c:d2:84:43:3b:92:10:13:72: 4c:ad:0a:a5:b2:1c:45:17:23:7c:d0:4b:e3:cb:e9: d7:63:33:f1:16:6c:25:84:0e:f5:8f:c5:df:a2:60: b3:a3:7a:64:83:8f:ee:1c:d3:c6:7f:4a:d5:c0:a3: b4:01:00:76:12:9e:4d:1a:be:3d:c4:ff:fc:9b:e0: 78:e2:bd:ec:53:cc:ef:45:5f:71:df:6c:e3:42:d4: c9:0a:df:34:ad:7e:cf:1b:4a:8f:9b:b4:55:43:b3: 61:cf:c4:a9:b1:d6:bf:f8:5b:f4:8a:8e:f2:8a:ab: 17:3c:00:c4:78:7a:dd:58:8e:3a:ba:25:e3:6c:09: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:86:E8:2C:72:8F:8D:03:EB:34:1A:A7:B6:7A:C1:9D:38:C5:1B X509v3 Authority Key Identifier: keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:04:19:64:01:c5:8e:21:ec:0d:6b:1a:ec:bd:12:77:21: fd:3f:c5:f7:90:89:33:c2:9b:a2:1f:d7:b2:3a:aa:00:7d:39: e2:8e:a0:c9:b8:76:10:45:56:27:7d:93:50:b1:28:ee:b7:59: f2:be:a5:2c:32:09:0b:af:e0:de:5e:8c:8e:87:1a:ba:28:56: f7:ce:ec:83:23:a2:a3:11:d5:20:22:ce:81:0f:09:08:6c:c2: 28:3d:84:0c:61:d7:ee:33:dd:49:bb:32:f9:38:6a:e5:84:87: 44:cf:0f:0d:dc:30:c2:f4:51:6b:ee:51:a6:46:6a:c6:c2:14: ca:ed:93:a3:5f:d9:68:93:30:6e:59:e4:2d:66:ef:8d:e8:bf: 02:16:39:88:e6:67:84:9e:38:58:0b:1b:84:a0:a9:48:1f:3e: 31:d3:f6:98:61:ed:6b:ff:82:56:a2:44:f9:b7:eb:5b:7d:c1: 4c:c1:b4:59:86:73:ea:b5:27:a7:e1:d9:8c:03:b5:ff:ab:aa: 42:ad:7d:5b:52:a4:0b:e0:4f:39:dc:b8:16:61:e0:43:11:cf: 76:d9:54:57:27:9e:52:bb:02:4e:e7:e8:e2:9d:5e:49:90:98: 2c:22:87:fa:72:5b:e0:10:c2:a9:9e:3a:2a:a8:88:55:cd:d1: 93:d8:9e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECKBqJOpEcgIz2GMPeu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGU3NDYzZWQ4NDk4MDIwZGQzOTIzMjI0NTlkMmNmNDBm MjI2YjIwHhcNMjYwMjA5MTEwMTE5WhcNMjYwMjEwMTEwMTE5WjAzMTEwLwYDVQQD EygwN2FhODZlODJjNzI4ZjhkMDNlYjM0MWFhN2I2N2FjMTlkMzhjNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1UJUgTpvfYKlUO6DJrMRQ+bcOmU 5bmu6IVJeJI0gl/ocaeuAl5PfdRdFzyMN8VtfvfveRAQY0bBs4BkUQAvgMeUSwhW THtqHju3iuBwJMH+z7YmzXgWlAVcCHGKc2MXEtL+wghmp2+0EgOuV+l7TRT2dF6A 2UNw1+uXSzac0oRDO5IQE3JMrQqlshxFFyN80Evjy+nXYzPxFmwlhA71j8XfomCz o3pkg4/uHNPGf0rVwKO0AQB2Ep5NGr49xP/8m+B44r3sU8zvRV9x32zjQtTJCt80 rX7PG0qPm7RVQ7Nhz8Spsda/+Fv0io7yiqsXPADEeHrdWI46uiXjbAk+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeqhugsco+NA+s0Gqe2esGdOMUbMB8GA1UdIwQY MBaAFB3edGPthJgCDdOSMiRZ0s9A8iayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5Njgt NDNjN2YwMjdjNmU0LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5NjgtNDNjN2YwMjdjNmU0 LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHkEGWQB xY4h7A1rGuy9Ench/T/F95CJM8Kboh/XsjqqAH054o6gybh2EEVWJ32TULEo7rdZ 8r6lLDIJC6/g3l6MjocauihW987sgyOioxHVICLOgQ8JCGzCKD2EDGHX7jPdSbsy +Thq5YSHRM8PDdwwwvRRa+5RpkZqxsIUyu2To1/ZaJMwblnkLWbvjei/AhY5iOZn hJ44WAsbhKCpSB8+MdP2mGHta/+CVqJE+bfrW33BTMG0WYZz6rUnp+HZjAO1/6uq Qq19W1KkC+BPOdy4FmHgQxHPdtlUVyeeUrsCTufo4p1eSZCYLCKH+nJb4BDCqZ46 KqiIVc3Rk9ieAg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client