This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json) Hash identifier: tVPsCuluPvf7d0yYE+/ILB/3pYtFzT1m9vyBBWS6zxQ= Subject key identifier: 73:BE:05:1A:D2:5C:F9:41:D8:D7:A3:70:70:BA:80:F3:BD:3C:0B:AA Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1 Certificate serial: 019C42462DB55E81D28BE320FDBABD900B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft Manifest number: 0365 Signing time: Mon 09 Feb 2026 12:00:21 +0000 Manifest this update: Mon 09 Feb 2026 12:00:21 +0000 Manifest next update: Tue 10 Feb 2026 12:00:21 +0000 Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: dPWP9TFqNi6ryomvFkKnCBFSy1z4EnrcBFO7KqoAsM4=) 2: S55S8Hzi5_Q3lDvpIg173TfOL20.roa (hash: nVY2KJyclpu9SOzeZLMYN+3Xs02J0rwhn0vdFsFFuVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2d:b5:5e:81:d2:8b:e3:20:fd:ba:bd:90:0b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1 Validity Not Before: Feb 9 12:00:21 2026 GMT Not After : Feb 10 12:00:21 2026 GMT Subject: CN=73be051ad25cf941d8d7a37070ba80f3bd3c0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:c7:6c:a6:93:79:45:d1:3e:e0:69:11:40: 29:8f:d3:1c:dc:3a:5e:28:57:e2:fd:6a:95:ed:8f: 8c:38:a7:1c:c4:20:3a:ba:6c:f4:52:a7:e2:9e:12: 10:13:76:fd:fd:55:6f:ef:45:9a:95:e7:a9:fd:62: be:9c:4b:67:3d:2a:0a:a1:83:cf:dd:af:90:7b:c7: ed:b8:66:7a:a2:36:0d:b9:c8:e5:ef:c5:9e:19:93: 6d:66:68:4f:64:aa:78:ac:2d:f3:17:9a:87:ff:27: 9f:9f:4f:e9:96:ec:8e:6d:7f:c5:b3:63:bb:5a:42: ff:f5:34:f3:a3:69:e4:87:31:bf:39:ee:60:fa:52: 77:6c:e3:5c:29:3b:5f:1c:11:1b:b1:28:bb:b9:50: 89:d4:bd:fe:fe:7c:98:c4:85:99:39:b7:8b:51:d0: 2e:d9:f0:43:5b:a9:09:56:99:38:e7:5d:45:2a:af: 69:77:88:56:14:48:3b:c7:73:67:8b:ac:ae:1b:f0: 60:e2:c0:70:d8:39:be:0c:45:7e:d9:9e:63:c4:0c: b9:3b:9c:01:39:10:a0:34:ac:f6:7e:22:62:8d:31: 2e:24:73:8b:99:89:73:61:50:9f:b2:fa:b4:0e:55: bd:60:09:a1:8e:a8:bc:7a:bd:69:28:cd:5d:e0:94: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BE:05:1A:D2:5C:F9:41:D8:D7:A3:70:70:BA:80:F3:BD:3C:0B:AA X509v3 Authority Key Identifier: keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:21:08:f3:8f:9a:60:ab:80:68:61:cc:08:7e:70:7c:6c:0d: aa:cf:d9:53:1a:8b:a3:54:a6:4b:85:89:4b:b3:bf:d4:d8:70: ca:ee:ec:4f:82:28:6d:21:f3:7e:85:12:ca:7b:92:b0:c5:7b: 84:ea:6e:6d:47:31:68:49:7d:40:a5:41:84:c4:36:87:a1:73: e8:a7:95:32:38:b3:f1:0e:e8:2b:07:ef:74:11:c5:79:79:e4: d9:9c:4c:a0:9a:fb:8b:d3:02:a2:93:b1:b2:40:48:cb:ee:22: 43:62:8f:12:c6:b0:f5:86:e4:d2:b3:89:e7:2b:26:f3:fc:08: 85:49:51:6e:8a:e5:e2:a3:25:c6:42:b2:f6:ca:13:0e:73:6e: 4e:b5:50:a8:f7:07:3c:45:34:99:c3:6a:91:83:a5:fa:b0:d9: 9c:5e:a5:57:93:80:a9:57:fa:4d:78:18:3e:12:72:c5:13:9c: 55:c3:0a:da:f9:6a:68:8a:84:b3:40:83:56:3d:8a:fa:5e:09: bb:47:a4:35:65:57:b0:59:ce:8c:53:17:6b:22:36:03:38:6e: 52:30:f6:6d:11:26:42:71:98:d4:24:66:58:84:15:ae:92:3d: 2a:b6:62:5a:bd:70:5d:71:de:9c:ed:e4:b0:e5:93:fb:3b:33: 24:a4:ff:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRi21XoHSi+Mg/bq9kAueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTNjZDNkZGU3ODlkMjk0NzkzYWZjZTkzOGE1MzNjMDJi Yjg0ZDEwHhcNMjYwMjA5MTIwMDIxWhcNMjYwMjEwMTIwMDIxWjAzMTEwLwYDVQQD Eyg3M2JlMDUxYWQyNWNmOTQxZDhkN2EzNzA3MGJhODBmM2JkM2MwYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DnHbKaTeUXRPuBpEUApj9Mc3Dpe KFfi/WqV7Y+MOKccxCA6umz0UqfinhIQE3b9/VVv70Waleep/WK+nEtnPSoKoYPP 3a+Qe8ftuGZ6ojYNucjl78WeGZNtZmhPZKp4rC3zF5qH/yefn0/pluyObX/Fs2O7 WkL/9TTzo2nkhzG/Oe5g+lJ3bONcKTtfHBEbsSi7uVCJ1L3+/nyYxIWZObeLUdAu 2fBDW6kJVpk4511FKq9pd4hWFEg7x3Nni6yuG/Bg4sBw2Dm+DEV+2Z5jxAy5O5wB ORCgNKz2fiJijTEuJHOLmYlzYVCfsvq0DlW9YAmhjqi8er1pKM1d4JQUowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO+BRrSXPlB2NejcHC6gPO9PAuqMB8GA1UdIwQY MBaAFB0TzT3eeJ0pR5OvzpOKUzwCu4TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMt YTc3Y2FhYzQ2MjVjLzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMtYTc3Y2FhYzQ2MjVj LzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCEI84+a YKuAaGHMCH5wfGwNqs/ZUxqLo1SmS4WJS7O/1Nhwyu7sT4IobSHzfoUSynuSsMV7 hOpubUcxaEl9QKVBhMQ2h6Fz6KeVMjiz8Q7oKwfvdBHFeXnk2ZxMoJr7i9MCopOx skBIy+4iQ2KPEsaw9Ybk0rOJ5ysm8/wIhUlRborl4qMlxkKy9soTDnNuTrVQqPcH PEU0mcNqkYOl+rDZnF6lV5OAqVf6TXgYPhJyxROcVcMK2vlqaIqEs0CDVj2K+l4J u0ekNWVXsFnOjFMXayI2AzhuUjD2bREmQnGY1CRmWIQVrpI9KrZiWr1wXXHenO3k sOWT+zszJKT/Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:58 2026 by rpki-client