This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json) Hash identifier: MVtbBUxzo3uu8FwALVxdv2+ix4LdX7AzeNWFZPp2Aqk= Subject key identifier: EF:8D:AA:2D:DB:42:1C:CF:D8:BA:5E:12:61:4D:68:45:E7:E1:02:C5 Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Certificate serial: 019C1B6FFFCECF65892782B7D05EBE3B525B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft Manifest number: B8 Signing time: Sun 01 Feb 2026 23:00:50 +0000 Manifest this update: Sun 01 Feb 2026 23:00:50 +0000 Manifest next update: Mon 02 Feb 2026 23:00:50 +0000 Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: mqnGLIObwj54Y5Mzan+vG6Lmou5eZdALWREEuNvVg30=) 2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:6f:ff:ce:cf:65:89:27:82:b7:d0:5e:be:3b:52:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Validity Not Before: Feb 1 23:00:50 2026 GMT Not After : Feb 2 23:00:50 2026 GMT Subject: CN=ef8daa2ddb421ccfd8ba5e12614d6845e7e102c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:37:d0:69:3f:f4:11:e9:1b:91:5a:65:51: 0a:6e:69:60:be:b6:fa:f7:64:9c:d3:2d:26:3b:76: 4a:51:88:9a:9b:da:60:b6:87:da:de:d9:69:a2:35: f6:e6:e5:5f:cc:18:c8:4a:8a:60:5a:dd:32:e2:cf: c2:67:37:7a:a0:f2:cc:f2:95:c1:54:42:d8:f3:a7: 15:27:6c:79:1e:eb:61:fd:25:8b:12:40:bc:ce:1d: dc:5f:a0:05:9b:65:4b:c2:6b:a8:1a:dc:f8:98:76: ae:28:bb:50:0d:eb:d1:67:f8:6d:c4:b0:80:f8:01: d0:98:e8:bb:e2:3f:f5:fd:1d:21:f5:b8:e4:4a:02: 3b:63:b7:99:bd:38:d8:3a:5d:6c:d9:0d:1d:84:92: 2b:5b:0f:bc:f4:05:e5:e9:a4:39:51:86:ff:8f:d5: b8:1d:ac:1c:e7:eb:99:0e:da:82:a3:ad:6c:af:50: 74:31:84:ed:18:01:48:5b:c9:9a:90:b3:78:72:10: 81:fb:4e:6a:34:93:2c:60:61:b0:54:90:a4:e9:e9: 30:46:a3:4f:bc:d6:74:95:c5:99:7d:d7:57:47:dd: bb:b9:03:cb:1c:e5:4f:e1:bf:0a:e1:8e:ab:dc:34: 04:98:4e:f3:31:a5:92:6a:79:03:5d:71:7a:da:53: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:AA:2D:DB:42:1C:CF:D8:BA:5E:12:61:4D:68:45:E7:E1:02:C5 X509v3 Authority Key Identifier: keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:49:35:fb:6b:76:8c:60:4e:61:55:2f:91:cd:b3:6b:7d:be: 8a:b2:62:68:42:ed:cd:c0:e4:d8:d2:13:06:59:ce:fb:e1:97: dc:b6:69:9c:6a:f0:69:d4:35:85:06:9c:f6:97:df:af:59:60: ae:c4:9b:48:c2:f1:d8:21:0e:9b:51:a9:33:07:9b:f5:67:42: 95:06:18:9a:55:db:2a:0a:21:00:3b:7b:e3:81:84:f9:bd:7a: 2f:c9:b1:3c:a7:c3:c2:5f:ca:f5:74:3a:d7:9b:4b:a2:49:70: 34:03:41:3f:e6:53:04:ac:46:fb:dc:26:08:db:0e:57:4a:29: ad:de:f8:de:ff:e2:00:18:c5:c9:41:fe:92:cb:65:b6:ad:d1: a9:fe:97:47:df:09:a3:97:00:fa:1a:59:38:55:85:9f:bc:26: c6:e8:33:6a:fc:e6:c1:02:22:1a:e9:69:13:ce:02:1a:67:3f: ce:6b:d3:c0:28:be:f2:51:22:7b:c7:d5:67:89:f0:39:9b:69: 60:5c:12:5f:6d:2a:e4:ac:14:87:25:7b:fb:67:67:11:3b:c9: e5:82:f2:64:42:d5:32:ad:89:7a:04:23:a4:c8:f8:8a:c4:dc: 8f:fe:46:04:16:18:1c:f7:04:71:11:6e:74:eb:43:80:15:23: 94:04:9a:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbb//Oz2WJJ4K30F6+O1JbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzZiMzFmOWRlOWQzNTk0OTU5ZDFlNTlkNjZjOWI3ZTkz ZmVkNjYwHhcNMjYwMjAxMjMwMDUwWhcNMjYwMjAyMjMwMDUwWjAzMTEwLwYDVQQD EyhlZjhkYWEyZGRiNDIxY2NmZDhiYTVlMTI2MTRkNjg0NWU3ZTEwMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluY30Gk/9BHpG5FaZVEKbmlgvrb6 92Sc0y0mO3ZKUYiam9pgtofa3tlpojX25uVfzBjISopgWt0y4s/CZzd6oPLM8pXB VELY86cVJ2x5Huth/SWLEkC8zh3cX6AFm2VLwmuoGtz4mHauKLtQDevRZ/htxLCA +AHQmOi74j/1/R0h9bjkSgI7Y7eZvTjYOl1s2Q0dhJIrWw+89AXl6aQ5UYb/j9W4 Hawc5+uZDtqCo61sr1B0MYTtGAFIW8makLN4chCB+05qNJMsYGGwVJCk6ekwRqNP vNZ0lcWZfddXR927uQPLHOVP4b8K4Y6r3DQEmE7zMaWSankDXXF62lOlewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+Nqi3bQhzP2LpeEmFNaEXn4QLFMB8GA1UdIwQY MBaAFB7Gsx+d6dNZSVnR5Z1mybfpP+1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDct ODU3ODM4OGE1N2ZmLzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDctODU3ODM4OGE1N2Zm LzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUk1+2t2 jGBOYVUvkc2za32+irJiaELtzcDk2NITBlnO++GX3LZpnGrwadQ1hQac9pffr1lg rsSbSMLx2CEOm1GpMweb9WdClQYYmlXbKgohADt744GE+b16L8mxPKfDwl/K9XQ6 15tLoklwNANBP+ZTBKxG+9wmCNsOV0oprd743v/iABjFyUH+kstltq3Rqf6XR98J o5cA+hpZOFWFn7wmxugzavzmwQIiGulpE84CGmc/zmvTwCi+8lEie8fVZ4nwOZtp YFwSX20q5KwUhyV7+2dnETvJ5YLyZELVMq2JegQjpMj4isTcj/5GBBYYHPcEcRFu dOtDgBUjlASaJA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:17:43 2026 by rpki-client