This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: KZHTiZzOfnKNvTi38bPKGybqJXJQsKjbrmUusJZ6Fmc=
Subject key identifier: 7B:75:52:4E:9A:E3:F0:D6:2E:65:24:43:41:C0:E5:FF:6F:90:52:FB
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019C42B490C90B8A58FAAA81446AA2FF1791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 14FC
Signing time: Mon 09 Feb 2026 14:00:55 +0000
Manifest this update: Mon 09 Feb 2026 14:00:55 +0000
Manifest next update: Tue 10 Feb 2026 14:00:55 +0000
Files and hashes: 1: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: yP0mPgD7nhjQhPj4/QtAHH2KV+kljA5Ah6FRD6/AvWw=)
2: w5yC-7_BeEAUv5kdABElqtcahiw.roa (hash: MnBkOa0BegcXHiC5KD30/CFPwuYklVK8Uh3ekT7IGzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:90:c9:0b:8a:58:fa:aa:81:44:6a:a2:ff:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Feb 9 14:00:55 2026 GMT
Not After : Feb 10 14:00:55 2026 GMT
Subject: CN=7b75524e9ae3f0d62e65244341c0e5ff6f9052fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:e5:dc:c3:e8:cf:d5:96:a4:56:f4:7d:ad:
d1:35:46:b7:b1:29:88:39:07:3e:07:ef:47:ea:fa:
bf:e4:cb:d9:96:fd:19:18:84:e1:7b:d8:e8:84:56:
0d:45:b4:d2:5b:a5:ac:c7:3e:36:fe:24:2d:99:3f:
f5:ff:f5:3f:97:76:2b:e4:93:92:16:e3:a8:34:a3:
b3:43:8d:a7:34:f8:90:88:ff:2e:d0:39:6c:d9:48:
d4:09:24:aa:99:3e:2d:5a:d0:a2:58:e9:7a:81:e7:
f7:4c:67:6c:75:f1:e6:cd:cd:9a:25:f1:52:24:1d:
5a:11:92:25:24:19:cc:ab:0a:b8:76:5c:29:ef:7a:
88:e2:cc:3a:54:51:42:a3:d3:aa:56:af:02:58:89:
4b:7e:3f:d2:64:cc:10:34:7c:53:9e:41:c7:0f:c5:
84:66:3b:c3:b4:cb:ca:67:d9:3b:c4:93:90:7d:1b:
3e:65:71:bd:f5:54:e4:cc:98:e3:2f:59:01:39:db:
e5:bb:5d:c0:52:cb:a7:76:b1:03:f0:27:47:ac:dc:
a8:76:f4:a3:a8:f4:98:7b:5e:9e:0d:07:32:1c:b3:
00:6f:71:d1:c7:9c:7c:82:e6:8b:2c:05:68:37:fa:
72:80:45:36:dd:36:55:67:49:b4:60:73:2a:00:cf:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:52:4E:9A:E3:F0:D6:2E:65:24:43:41:C0:E5:FF:6F:90:52:FB
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:55:c9:cf:1a:21:83:60:c0:6e:d8:63:09:e9:7d:da:9b:
01:fd:89:fc:80:dc:fe:b0:1c:ca:7f:fd:20:51:94:54:a7:a6:
a5:ad:cd:2a:53:f0:d9:e5:21:b5:5f:de:c9:06:80:71:55:f4:
6a:5e:7d:ff:23:e8:b5:31:70:cf:20:c6:32:21:31:39:2f:e4:
77:15:cf:7a:e4:01:fd:8b:67:65:5d:72:a7:49:00:fd:73:c6:
7d:aa:d9:e4:76:88:4a:23:0e:04:17:2c:27:50:0b:7e:47:2d:
b4:09:5b:35:84:c8:92:1f:02:33:67:e1:e8:8b:20:ec:f2:23:
91:5e:21:69:9b:9d:a0:9d:ed:0d:88:84:0f:76:8f:a0:b8:e3:
bd:8c:d8:70:27:cb:35:91:3e:c2:8f:da:71:91:61:fd:6f:e6:
88:4d:eb:dc:05:b8:45:16:84:0e:25:33:55:ac:0c:a3:a3:b8:
ea:06:5c:68:bf:ff:cf:e6:91:16:77:15:7f:b7:cb:3d:05:2d:
d6:0d:77:b4:d0:89:b0:21:14:94:07:34:ca:21:ef:be:10:a4:
9b:8c:45:0a:56:cd:c6:2a:8e:09:25:d9:9d:fb:f5:1a:e8:4d:
66:ec:3d:63:a2:f7:b5:81:55:d1:68:5b:e1:16:47:23:a6:a9:
da:ff:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client