This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: t3tqO7LCHyb7MZg88OEKT23XvgQHYHYPHIj55x43yMs=
Subject key identifier: D7:5D:EE:07:2F:94:A4:1D:EF:B5:77:03:FC:20:58:8A:30:82:96:25
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 019C42465820D45B43D23B711946B1E2D0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0C21
Signing time: Mon 09 Feb 2026 12:00:32 +0000
Manifest this update: Mon 09 Feb 2026 12:00:32 +0000
Manifest next update: Tue 10 Feb 2026 12:00:32 +0000
Files and hashes: 1: EaRvqzzZ4WLrsiOnFG9kIdBFPGo.roa (hash: PN+ow0E5ikp9C/ApCEWcQ9LIaP3NSeY86i0Td9fsxZc=)
2: JuG7AUgythULffPdDYDIoVusgls.roa (hash: TjT7c6XjgFC6qy9Niuuvvzz9Cwlb8UzAUWc3tb4emnE=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: GlhsMim+27l6TKr0kiRWWTmVJHnk98uOSX2AmHW2Tek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:58:20:d4:5b:43:d2:3b:71:19:46:b1:e2:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Feb 9 12:00:32 2026 GMT
Not After : Feb 10 12:00:32 2026 GMT
Subject: CN=d75dee072f94a41defb57703fc20588a30829625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:4c:b4:99:46:35:ca:02:af:3a:f1:06:d4:
c8:bc:96:4b:19:43:52:f0:51:fd:cd:da:a4:1f:22:
13:65:0b:11:64:5e:25:e0:68:66:c4:6c:f1:b3:8b:
1a:e3:e4:b4:0b:33:5b:74:8a:1f:fd:f7:a3:ed:20:
5f:9c:bd:4c:4a:f0:d5:af:1a:6f:ac:fc:1b:2b:05:
cd:10:6e:3e:9a:da:c7:ac:b6:18:63:1c:95:52:7b:
f5:30:8d:3d:1b:48:63:3c:e1:07:95:9f:d0:e8:9c:
b8:fe:c8:3e:21:5b:9d:92:45:45:da:75:7f:b4:9d:
f0:9d:a0:0d:f4:d2:8a:0f:f7:71:35:ae:b0:ed:81:
6e:ad:e1:dc:84:59:b3:0e:97:d1:2c:36:65:f2:ba:
25:b7:65:4e:52:8d:9f:dc:23:78:42:4f:bb:e7:e6:
f4:50:f0:98:64:63:e8:96:1e:c7:7f:ec:68:0f:e9:
8d:86:d6:65:dc:ba:de:47:5f:02:97:48:c9:ea:2a:
8d:dc:44:46:02:21:9e:0a:50:3a:50:60:92:cb:4f:
40:1b:8c:29:6c:2a:04:b9:a1:ee:a5:de:91:da:27:
d1:c4:f1:6b:94:5b:ec:6f:00:91:4d:30:53:62:70:
7b:2d:17:2b:da:a4:cb:c1:18:b9:fe:aa:94:d0:73:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:EE:07:2F:94:A4:1D:EF:B5:77:03:FC:20:58:8A:30:82:96:25
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6e:42:d5:39:b8:05:6a:8b:6b:11:b5:53:ab:7e:f6:23:ad:
f5:8e:30:7a:60:89:82:3d:03:f2:db:4e:cd:0e:24:cc:87:88:
55:20:32:9e:73:30:2e:46:2d:06:72:9a:aa:c8:e1:1a:f1:b8:
f4:c3:98:58:ec:34:52:1e:31:0b:c5:18:40:0f:f5:f5:a6:b1:
f0:d3:78:a5:83:09:a1:49:53:6b:b9:ab:2a:86:68:da:88:5a:
af:c1:57:36:ae:07:2e:3a:2f:2e:04:c5:cb:11:c5:e9:46:2a:
e6:be:c2:4a:84:ca:19:83:47:47:1d:80:61:1f:2f:6e:82:dc:
9c:d6:5f:c3:41:47:96:2b:a0:88:2e:09:7c:6a:55:ee:b6:59:
d2:6e:85:08:fd:9c:c8:33:a4:54:bd:81:bd:15:e5:a9:80:38:
bf:dc:31:0a:be:1e:f1:b0:bf:99:5a:0b:42:6b:8c:e7:eb:25:
8f:96:ba:47:f1:11:fb:6b:54:83:c0:47:b6:9e:b5:ac:ef:e8:
ee:21:bd:6c:7c:89:90:db:81:c3:5b:23:e7:3a:10:52:fd:03:
25:76:4c:b2:40:42:73:c8:9b:7a:03:44:a4:49:5b:42:b1:86:
17:a4:9e:ab:5e:9f:b8:fa:ef:9e:eb:21:06:cc:d3:87:50:22:
95:41:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:28 2026 by rpki-client