This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: hp2CmK07RNczZo4MC8eksiy9TJkPYKHMFzTC2zMXBiM=
Subject key identifier: 13:BD:5C:86:49:25:8B:CD:8D:0B:E9:6E:95:5D:71:5E:3C:78:74:21
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 019C43C6ED2FAEAC5FF297DAD51701CDD9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 111E
Signing time: Mon 09 Feb 2026 19:00:36 +0000
Manifest this update: Mon 09 Feb 2026 19:00:36 +0000
Manifest next update: Tue 10 Feb 2026 19:00:36 +0000
Files and hashes: 1: Tv6SVFm1dqSZBNkOQRefsTpNMZY.roa (hash: +Lydi0u3DmQC51EDG4oe1+EHym7x1Ea0qYfFm6X8wzQ=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: A89D+8wD6rKldeuRl+dFOG49Sff0nYnKiYCAage6lgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:ed:2f:ae:ac:5f:f2:97:da:d5:17:01:cd:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Feb 9 19:00:36 2026 GMT
Not After : Feb 10 19:00:36 2026 GMT
Subject: CN=13bd5c8649258bcd8d0be96e955d715e3c787421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:6e:5b:56:bd:b0:27:6f:70:f4:b4:fc:f0:
52:99:ed:90:18:69:7b:92:79:3e:01:f9:c4:62:12:
c7:6a:f2:46:69:18:ed:76:3c:22:3b:e6:71:36:10:
d3:49:51:26:e3:d7:1d:0d:d0:40:7c:7a:5c:60:71:
6e:1d:48:71:80:aa:3e:77:06:d2:f7:15:40:66:de:
fd:e6:09:a8:32:60:28:0c:c6:db:2e:55:db:cc:7e:
e8:cf:17:cf:cd:33:2f:79:3b:db:c7:57:47:4f:24:
fe:d0:67:59:98:3c:1a:89:4d:f5:c8:46:c1:20:cf:
3d:bb:86:bd:cf:e4:c1:83:73:93:fe:fc:fb:f6:69:
4e:5e:f6:c6:c5:53:52:2b:a7:53:4a:b2:d6:55:cb:
60:19:8f:30:f7:51:3a:26:0b:62:89:81:6d:e1:48:
aa:17:6d:06:7e:ac:ee:d5:62:9d:1d:fa:fb:31:95:
4d:41:df:ac:2a:42:6d:68:4b:75:7c:1f:db:c2:af:
bf:f0:43:27:2a:e0:6c:04:b2:39:43:00:e5:24:98:
11:5b:d8:bc:ae:c0:8c:bc:13:04:8b:58:44:95:3c:
30:d2:4a:96:3d:a5:12:c4:fa:3e:55:a2:37:2e:5b:
87:7d:3c:ac:8e:41:cd:ab:3b:c3:95:4a:27:12:c4:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:5C:86:49:25:8B:CD:8D:0B:E9:6E:95:5D:71:5E:3C:78:74:21
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:e4:71:78:b6:1e:84:74:d5:8a:04:e7:81:62:4c:8d:4d:
35:e4:a0:60:8b:94:ff:89:ae:4f:d3:49:1e:08:da:14:3c:2b:
36:8c:c6:38:1c:36:20:78:bb:b2:17:19:1e:ad:ca:bf:c6:d7:
00:f5:6b:9d:3a:da:63:d9:11:4d:c9:c4:fe:19:03:2b:b3:a7:
2a:ff:b4:81:de:2a:01:1c:ac:54:1e:f6:3e:16:7c:fb:68:40:
ec:6a:d2:a7:b7:9c:e6:2d:35:5f:9f:ee:af:5a:78:5f:0f:e9:
eb:05:16:09:62:ad:7d:01:75:28:d1:44:b7:45:63:c9:1b:47:
e6:ca:f7:61:c3:08:1e:0d:90:c8:36:3c:a4:ab:8e:87:c6:3a:
01:0f:37:ef:7b:eb:c2:7b:d9:81:b1:d0:b4:81:b9:a6:29:56:
c3:f4:75:57:cf:b0:91:ec:7d:52:c0:ff:c2:de:f6:86:6d:c8:
50:9c:93:a3:43:32:a0:bb:39:77:b4:ec:3c:53:90:a9:e7:3c:
43:61:22:8a:19:f0:cb:ce:71:a0:46:8a:fd:bb:1d:81:0e:18:
3a:31:12:64:94:90:bf:6c:46:13:e9:d7:19:90:52:9e:8e:e9:
b6:24:00:c0:6f:8e:d2:e6:25:ab:a2:55:ab:2b:fb:4b:af:c2:
ec:09:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:56 2026 by rpki-client