This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json) Hash identifier: lHClNfgr8T5a+KvFhatcDZYqgbL9CgGhBx8UdRK+y3I= Subject key identifier: C4:1B:25:5B:F8:38:7D:63:F4:92:A9:72:03:F3:FF:6A:66:4C:2A:A0 Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Certificate serial: 019C427D529EA7C0ECED7669A0A10E5EC3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: RfQsjBoeK1QzLgDsXzpoHQd7zxWHJN1ngU6YkKm4ods=) 2: ib3cAwbg8C9r2aqBWyNBb5uSoms.roa (hash: KrmwOWhj2jFqWpLOhPbRuQeJTVBkN+LvN0H+FMdxOSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:52:9e:a7:c0:ec:ed:76:69:a0:a1:0e:5e:c3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=c41b255bf8387d63f492a97203f3ff6a664c2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:6f:5f:69:de:70:cb:d2:8d:f0:24:de:fc: 0d:af:1e:8a:22:d1:9c:3b:ee:f2:bc:9a:6c:38:74: 96:70:08:6a:3a:08:d6:a4:50:25:1a:98:e5:56:d5: 6a:e3:39:04:4b:7a:1f:dc:f3:e8:3f:1b:38:19:82: d3:ae:ac:fb:8f:75:35:ab:74:2c:08:36:56:08:b1: 94:4d:a1:63:1d:26:01:42:ff:19:2f:d4:4d:0c:81: 49:f1:ce:aa:61:5b:d8:37:35:23:4c:29:63:ab:89: 48:dd:c1:74:6b:5b:38:24:91:85:5c:c9:42:52:c9: b9:0e:89:e9:d4:be:5d:ef:23:a9:e9:2d:b9:5a:9b: 45:2e:f8:9d:f0:bc:b7:f8:42:a1:66:f1:d3:44:d5: b3:40:04:1a:68:c4:f1:0b:c5:dd:b0:1a:47:76:f6: 0a:26:5e:09:35:c7:71:82:20:90:92:40:aa:3c:7f: 91:fc:0e:8a:ba:6a:ac:63:d9:ea:74:6e:25:8b:47: a5:d4:92:03:ee:fe:33:44:c9:54:4d:e3:d1:f5:52: 32:ff:34:87:e6:8b:1c:b7:52:df:4e:f3:d3:24:51: a5:6a:27:78:79:ed:c4:52:bc:de:15:47:c3:bc:1d: 49:1c:cd:aa:39:57:d5:9e:7c:81:c6:ca:ec:ae:58: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1B:25:5B:F8:38:7D:63:F4:92:A9:72:03:F3:FF:6A:66:4C:2A:A0 X509v3 Authority Key Identifier: keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:27:71:6b:0b:43:6e:1b:a5:55:26:93:f1:bb:6d:d2:12:f6: 4a:cc:33:7f:82:19:90:9c:2b:37:66:49:21:0d:3b:9e:c9:f4: 83:b2:41:8c:a2:e6:64:2b:9b:a0:d0:fd:89:8a:60:bb:70:2c: f9:53:78:88:60:8d:c1:e3:63:d2:2a:66:a0:f2:0d:17:6a:35: e2:59:dd:ad:af:a4:36:b6:bd:12:ec:43:15:f7:92:f9:ca:6a: c6:a8:51:4e:b1:30:e8:2b:9e:b4:9f:51:89:bb:67:66:d6:fb: 30:ab:ef:ad:c1:95:0c:95:be:53:61:54:00:0e:34:aa:b6:8e: b3:e4:bf:c4:16:5d:fe:0a:27:7d:02:50:cd:f9:72:86:b7:c9: e4:c4:1b:75:5b:b1:9f:6e:e3:d6:95:65:d4:b8:15:1a:40:74: e7:63:35:34:bd:72:11:98:6f:5f:5e:18:da:46:2e:82:14:3b: 44:85:cb:75:57:4c:d2:9e:22:77:56:7f:8f:38:e6:da:a7:9d: ea:28:5b:8f:ed:04:80:42:56:8c:1c:3e:03:66:54:48:58:9a: bf:43:34:09:b8:85:2a:e3:5d:aa:0b:11:45:43:5a:b4:37:38: 70:16:35:cf:41:c3:08:e4:df:86:63:04:28:c8:a1:8a:72:ef: f2:5a:d6:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVKep8Ds7XZpoKEOXsPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDlhOTQ2NzllYzlhYjMzZTY1ZTA2OWM5YWE0NDBkYjI3 M2UxNGUwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EyhjNDFiMjU1YmY4Mzg3ZDYzZjQ5MmE5NzIwM2YzZmY2YTY2NGMyYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf5vX2necMvSjfAk3vwNrx6KItGc O+7yvJpsOHSWcAhqOgjWpFAlGpjlVtVq4zkES3of3PPoPxs4GYLTrqz7j3U1q3Qs CDZWCLGUTaFjHSYBQv8ZL9RNDIFJ8c6qYVvYNzUjTCljq4lI3cF0a1s4JJGFXMlC Usm5Donp1L5d7yOp6S25WptFLvid8Ly3+EKhZvHTRNWzQAQaaMTxC8XdsBpHdvYK Jl4JNcdxgiCQkkCqPH+R/A6KumqsY9nqdG4li0el1JID7v4zRMlUTePR9VIy/zSH 5osct1LfTvPTJFGlaid4ee3EUrzeFUfDvB1JHM2qOVfVnnyBxsrsrljvkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQbJVv4OH1j9JKpcgPz/2pmTCqgMB8GA1UdIwQY MBaAFB3ZqUZ57JqzPmXgacmqRA2yc+FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYt MjdkZDBhZDJhZGYzLzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYtMjdkZDBhZDJhZGYz LzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCdxawtD bhulVSaT8btt0hL2Sswzf4IZkJwrN2ZJIQ07nsn0g7JBjKLmZCuboND9iYpgu3As +VN4iGCNweNj0ipmoPINF2o14lndra+kNra9EuxDFfeS+cpqxqhRTrEw6CuetJ9R ibtnZtb7MKvvrcGVDJW+U2FUAA40qraOs+S/xBZd/gonfQJQzflyhrfJ5MQbdVux n27j1pVl1LgVGkB052M1NL1yEZhvX14Y2kYughQ7RIXLdVdM0p4id1Z/jzjm2qed 6ihbj+0EgEJWjBw+A2ZUSFiav0M0CbiFKuNdqgsRRUNatDc4cBY1z0HDCOTfhmME KMihinLv8lrWfw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:26 2026 by rpki-client