This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json) Hash identifier: dSEHtW43XdP4ZyAYTfbvcjojOKitVyozgwW+1L/3PRk= Subject key identifier: 02:48:4F:5F:09:EC:19:74:5D:43:99:66:B9:96:5C:19:EB:88:AB:04 Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Certificate serial: 019BA00EA07D551AF042CCE2C6882495ED7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft Manifest number: 11FE Signing time: Fri 09 Jan 2026 00:01:11 +0000 Manifest this update: Fri 09 Jan 2026 00:01:11 +0000 Manifest next update: Sat 10 Jan 2026 00:01:11 +0000 Files and hashes: 1: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=) 2: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=) 3: X0C-jW-JvrYRehOUZc1q8qR_Alg.roa (hash: kkuwe92elfxQBb6MWA1wN1ame7fs+u6hfUmN0ZMLiZQ=) 4: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=) 5: bR0NHkHbblmEtwb2_nY_6Q1NAmE.roa (hash: KrJc5AmVNKuLrZUthurXLuq1KgVncKQfKVwT8ndsj4c=) 6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: O7uKRD/qa31nYyv/Xvrv1IYyehn/bDM5nVgA9sJu26s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a0:0e:a0:7d:55:1a:f0:42:cc:e2:c6:88:24:95:ed:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Validity Not Before: Jan 9 00:01:11 2026 GMT Not After : Jan 10 00:01:11 2026 GMT Subject: CN=02484f5f09ec19745d439966b9965c19eb88ab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:1d:12:58:24:44:6a:f1:54:27:de:97:58: 80:47:61:68:b0:ec:1f:40:4a:e2:07:c0:e0:40:b2: 0c:1f:b7:f9:a9:a3:8a:12:59:3d:9d:68:45:10:63: a1:d2:64:12:8a:1b:db:55:ee:b2:e1:a6:f4:61:36: 67:e7:47:fe:f6:1d:9b:4d:3f:54:e4:27:1d:79:c2: c6:3c:46:db:f8:ec:da:bf:b0:df:ce:d7:e3:ca:bc: e0:83:09:47:97:72:aa:12:df:7d:66:03:f9:33:41: 6a:7d:75:b1:9a:19:fe:be:fa:85:0f:7d:b3:b1:0c: 51:34:a2:1b:5a:72:56:1f:50:eb:26:98:20:28:a3: 0f:14:26:3e:65:fa:fa:41:1c:c5:3d:d3:f6:5b:64: 2f:96:0a:72:df:54:e1:21:7e:cc:a4:d6:f0:e2:dc: 56:50:30:53:e3:8d:86:32:f4:79:68:49:06:ba:b2: 4f:f4:40:f0:76:b5:17:8b:07:e4:b8:fa:47:04:b3: 62:2f:e0:cb:1a:ce:1a:f5:c8:45:7d:dd:2d:d6:8d: e2:01:fa:c8:bc:85:a7:85:13:44:52:37:e4:30:cd: 29:03:b8:fd:92:78:dc:88:7b:06:c7:81:98:5a:f8: c7:57:b5:ef:60:3c:66:39:e8:92:af:a1:43:af:a2: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:48:4F:5F:09:EC:19:74:5D:43:99:66:B9:96:5C:19:EB:88:AB:04 X509v3 Authority Key Identifier: keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:79:d9:13:79:e2:f3:f2:0d:26:18:56:dd:aa:3f:06:17: d0:31:46:48:b5:1f:63:cc:00:84:17:a9:cc:09:15:5e:a2:8d: da:2f:e8:d8:14:fa:39:10:38:40:00:f6:18:e1:84:5b:cb:fe: 8f:2c:8f:7a:cd:f1:56:80:3f:c3:9e:14:0d:5a:a3:db:e8:eb: 4f:5a:91:f1:6d:bd:9f:c9:39:b5:18:07:05:66:12:82:5c:4d: 5a:ad:de:23:19:7c:32:15:d9:df:b4:bc:f6:23:0d:77:f4:1a: c6:27:59:61:9f:a9:46:e8:3b:18:b0:23:bf:77:3c:6b:62:b9: 57:c0:05:62:aa:cc:f6:51:94:71:75:e0:af:66:17:87:97:c8: 07:f2:3c:dc:74:4c:22:7f:48:9d:d1:b6:fc:00:32:49:bb:17: 16:20:1f:49:43:8b:32:8a:35:07:7d:63:d8:7b:bc:f1:ca:dd: 23:75:3a:56:fa:95:ed:e9:d1:90:87:77:71:39:bd:0b:9e:f1: db:c6:00:5a:de:39:7e:a7:a3:0c:4c:ab:46:c4:cf:8e:67:a0: d3:d8:d4:42:1e:12:6f:c4:fc:80:27:66:20:58:c9:cb:da:35: 81:44:37:c4:58:df:1b:7d:07:f9:c8:a3:2a:3b:45:5a:d8:8d: 49:27:d4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZugDqB9VRrwQszixogkle17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4 YzdiODUwHhcNMjYwMTA5MDAwMTExWhcNMjYwMTEwMDAwMTExWjAzMTEwLwYDVQQD EygwMjQ4NGY1ZjA5ZWMxOTc0NWQ0Mzk5NjZiOTk2NWMxOWViODhhYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm8dElgkRGrxVCfel1iAR2FosOwf QEriB8DgQLIMH7f5qaOKElk9nWhFEGOh0mQSihvbVe6y4ab0YTZn50f+9h2bTT9U 5CcdecLGPEbb+Ozav7DfztfjyrzggwlHl3KqEt99ZgP5M0FqfXWxmhn+vvqFD32z sQxRNKIbWnJWH1DrJpggKKMPFCY+Zfr6QRzFPdP2W2Qvlgpy31ThIX7MpNbw4txW UDBT442GMvR5aEkGurJP9EDwdrUXiwfkuPpHBLNiL+DLGs4a9chFfd0t1o3iAfrI vIWnhRNEUjfkMM0pA7j9knjciHsGx4GYWvjHV7XvYDxmOeiSr6FDr6L3UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJIT18J7Bl0XUOZZrmWXBnriKsEMB8GA1UdIwQY MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt ODZlYTE5ZDI5MTYzLzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUl52RN5 4vPyDSYYVt2qPwYX0DFGSLUfY8wAhBepzAkVXqKN2i/o2BT6ORA4QAD2GOGEW8v+ jyyPes3xVoA/w54UDVqj2+jrT1qR8W29n8k5tRgHBWYSglxNWq3eIxl8MhXZ37S8 9iMNd/QaxidZYZ+pRug7GLAjv3c8a2K5V8AFYqrM9lGUcXXgr2YXh5fIB/I83HRM In9IndG2/AAySbsXFiAfSUOLMoo1B31j2Hu88crdI3U6VvqV7enRkId3cTm9C57x 28YAWt45fqejDEyrRsTPjmeg09jUQh4Sb8T8gCdmIFjJy9o1gUQ3xFjfG30H+cij KjtFWtiNSSfU6w== -----END CERTIFICATE-----Generated at Fri Jan 9 07:50:46 2026 by rpki-client