This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: hkef+dGl0VXvGCDgfL01IXQut1u+Mn7Nut7feml1rZ0=
Subject key identifier: 8D:51:8C:E2:D8:1C:FA:B9:5E:EB:F3:B8:65:EB:03:3F:5D:2B:98:4A
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 019C4390C781D57B4F60F246BBAE8BE189B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 06D7
Signing time: Mon 09 Feb 2026 18:01:27 +0000
Manifest this update: Mon 09 Feb 2026 18:01:27 +0000
Manifest next update: Tue 10 Feb 2026 18:01:27 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: Hlpvot1YLfdthsCa3Nwj1LpUIH0c5zrXmG3jx7fDmBU=)
2: wdN78pnzuU0g9dObQJkcBY0kBGo.roa (hash: emMWMORNNYbutAaq+e4Y/i7Mave5HQfNfOFkICWZUQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:c7:81:d5:7b:4f:60:f2:46:bb:ae:8b:e1:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Feb 9 18:01:27 2026 GMT
Not After : Feb 10 18:01:27 2026 GMT
Subject: CN=8d518ce2d81cfab95eebf3b865eb033f5d2b984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:d0:2c:66:b9:bb:28:06:0f:c2:0f:83:72:
69:f8:f7:23:0b:eb:db:2a:72:2f:15:7b:b1:de:c3:
de:c5:ff:4f:e7:b0:a1:95:97:2a:7a:42:52:7c:06:
09:1a:08:11:fe:6c:20:4d:b6:ed:a6:8f:8c:8a:f2:
53:23:80:e6:c5:dc:2a:85:18:b5:18:bc:58:92:df:
b7:32:10:fd:72:bd:1c:22:94:df:e0:91:da:ea:ec:
78:f4:97:f4:61:54:14:eb:bb:59:8f:6d:79:f2:c2:
82:1a:d9:e2:16:b2:a9:53:7f:4c:10:5c:a3:e9:44:
ee:24:0c:a9:58:f7:b0:f1:db:63:fa:5b:52:67:15:
c9:57:0b:36:15:3f:25:38:1c:5d:5f:43:5c:d7:ac:
b0:fa:0c:82:7c:49:79:8b:c6:03:9d:8a:ab:8f:e0:
51:08:52:0a:29:97:a8:81:34:cb:3d:a6:e8:70:a8:
2f:e5:02:71:51:e6:f5:0f:5e:24:72:ee:d0:48:05:
24:73:33:6c:84:82:b8:82:84:f1:4a:f6:4a:ff:06:
4c:1b:ad:df:aa:3a:6a:f3:c4:be:dc:3b:1a:c2:3b:
40:38:1b:d3:26:a0:f6:68:99:85:4e:b6:34:0e:bd:
63:d1:4b:cc:49:58:d5:02:d7:71:ae:92:33:cc:01:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:8C:E2:D8:1C:FA:B9:5E:EB:F3:B8:65:EB:03:3F:5D:2B:98:4A
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3c:ee:a9:d8:6c:19:de:02:f5:7a:33:68:fe:06:1c:35:e5:
d9:2d:1d:af:78:d0:83:3d:37:a8:c5:e1:41:58:0a:d3:3f:49:
73:00:98:a8:21:28:ce:92:6e:98:29:5a:71:89:49:b3:ed:b0:
8d:9d:87:83:84:f7:47:bb:9c:35:f2:68:50:24:e2:70:c5:85:
27:24:f2:bf:61:6b:e2:53:07:02:37:97:46:d9:16:f4:df:85:
c2:9d:ec:fe:49:90:a7:5d:a2:2c:0d:86:42:82:41:8c:0c:72:
2f:3c:8f:b4:c2:a9:dd:09:ce:a4:4e:88:22:18:0a:ae:e3:2a:
14:49:5a:b0:8b:72:c4:93:51:9a:88:50:27:6b:19:37:44:9e:
c5:45:c2:7e:fb:20:74:e7:86:ff:72:ab:fe:cf:79:a7:22:14:
bf:34:e0:84:81:eb:3c:71:3f:8c:7e:2e:d6:3c:57:22:10:48:
4b:1c:f6:2c:69:0a:b0:d8:ad:68:21:08:8c:57:d7:69:7a:10:
f1:49:33:b2:15:26:ef:1b:00:e1:f2:5f:97:13:4b:c3:78:59:
b0:33:bc:04:c6:f0:e6:07:74:4d:4b:a0:ec:24:c9:9c:ce:f7:
ce:fa:1c:c0:ad:cd:50:f3:a4:2d:81:9f:b4:36:c4:d5:59:94:
df:8b:23:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkMeB1XtPYPJGu66L4Ym2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDQzOWM3NTdiNmI2NDZkZjE2ODQ0ZjVhNTI5ZWUyNzUy
MDczNmUwHhcNMjYwMjA5MTgwMTI3WhcNMjYwMjEwMTgwMTI3WjAzMTEwLwYDVQQD
Eyg4ZDUxOGNlMmQ4MWNmYWI5NWVlYmYzYjg2NWViMDMzZjVkMmI5ODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmvQLGa5uygGD8IPg3Jp+PcjC+vb
KnIvFXux3sPexf9P57ChlZcqekJSfAYJGggR/mwgTbbtpo+MivJTI4DmxdwqhRi1
GLxYkt+3MhD9cr0cIpTf4JHa6ux49Jf0YVQU67tZj2158sKCGtniFrKpU39MEFyj
6UTuJAypWPew8dtj+ltSZxXJVws2FT8lOBxdX0Nc16yw+gyCfEl5i8YDnYqrj+BR
CFIKKZeogTTLPabocKgv5QJxUeb1D14kcu7QSAUkczNshIK4goTxSvZK/wZMG63f
qjpq88S+3DsawjtAOBvTJqD2aJmFTrY0Dr1j0UvMSVjVAtdxrpIzzAHP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1RjOLYHPq5XuvzuGXrAz9dK5hKMB8GA1UdIwQY
MBaAFB9EOcdXtrZG3xaET1pSnuJ1IHNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQt
NWE1ZDBiZDg3NjBlLzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQtNWE1ZDBiZDg3NjBl
LzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTzuqdhs
Gd4C9XozaP4GHDXl2S0dr3jQgz03qMXhQVgK0z9JcwCYqCEozpJumClacYlJs+2w
jZ2Hg4T3R7ucNfJoUCTicMWFJyTyv2Fr4lMHAjeXRtkW9N+Fwp3s/kmQp12iLA2G
QoJBjAxyLzyPtMKp3QnOpE6IIhgKruMqFElasItyxJNRmohQJ2sZN0SexUXCfvsg
dOeG/3Kr/s95pyIUvzTghIHrPHE/jH4u1jxXIhBISxz2LGkKsNitaCEIjFfXaXoQ
8UkzshUm7xsA4fJflxNLw3hZsDO8BMbw5gd0TUug7CTJnM73zvocwK3NUPOkLYGf
tDbE1VmU34sjSA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:52 2026 by rpki-client