This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: tIXU2BCxPKFJ9R4M4ROg3NTMFhmETxzV56YlzdpPacc=
Subject key identifier: 6D:65:09:91:B7:C8:21:1E:EE:00:93:A7:81:9B:EC:A2:4F:DB:F6:71
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019C435970DE15F5827463DE82C65C03E037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 176B
Signing time: Mon 09 Feb 2026 17:01:00 +0000
Manifest this update: Mon 09 Feb 2026 17:01:00 +0000
Manifest next update: Tue 10 Feb 2026 17:01:00 +0000
Files and hashes: 1: 0UjAR0lwkfGnKW_I34st30o5zcY.roa (hash: SaYOr18FPTLyjkppn6MTCghoM1FqQpX991KVnAvsKI4=)
2: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: ddYWCRdqOlpmD+fwC4rRLxBBYNOyGzZBaX2r+rMmmPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:70:de:15:f5:82:74:63:de:82:c6:5c:03:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Feb 9 17:01:00 2026 GMT
Not After : Feb 10 17:01:00 2026 GMT
Subject: CN=6d650991b7c8211eee0093a7819beca24fdbf671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:f2:6e:9b:06:6b:68:15:61:cb:0a:e6:2f:
69:31:04:5f:c6:2e:c3:a0:b4:9d:c2:a4:55:39:88:
1a:38:d2:24:62:0b:cc:2c:a5:b5:6d:99:e6:4f:f0:
c9:dd:30:57:f9:9e:b5:60:98:4d:4e:de:a0:f6:85:
80:ec:b7:de:14:29:1d:47:74:55:13:36:58:e4:6a:
61:df:50:7e:0d:20:08:a2:b5:01:df:f7:35:81:23:
3a:c6:42:f1:1d:d0:76:9a:67:4e:01:7a:96:8a:2a:
67:88:ca:ec:76:f2:2a:6a:0f:21:94:68:ff:d1:fe:
ca:26:be:33:a1:93:b8:1f:78:e7:f6:63:95:1c:f9:
7f:41:ca:b3:6e:9a:93:3c:68:e0:2e:f9:b7:64:24:
c6:06:32:56:13:57:0d:ef:c0:35:9c:c5:7f:2c:3e:
d2:88:7d:74:b3:28:95:90:a1:bb:07:45:9d:64:e9:
5a:f1:e0:de:3b:36:04:e3:42:27:df:39:f7:db:e5:
ef:a4:17:9f:3d:6b:c7:21:32:89:be:1b:f8:5d:1d:
9e:94:33:54:3f:b7:82:86:ca:e2:bb:22:46:58:f9:
e0:86:8b:b2:24:76:87:96:f1:ae:a6:a1:ad:f9:9f:
8d:34:48:6e:35:65:33:00:fa:2e:70:94:c3:32:da:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:09:91:B7:C8:21:1E:EE:00:93:A7:81:9B:EC:A2:4F:DB:F6:71
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:df:75:30:79:53:83:0c:b1:10:e2:7c:59:74:ee:93:3b:
ad:52:d2:38:9c:76:1c:11:0a:10:a1:35:3c:eb:d8:c2:7f:0c:
bf:f3:e3:ac:e6:6a:ed:10:ff:76:d0:f5:0b:6a:bd:93:72:7d:
01:71:66:68:a6:b9:63:ee:c8:47:42:9b:e7:66:32:84:94:d8:
00:1e:bb:45:ea:ac:a3:9e:a0:10:c6:bc:1e:ba:9c:61:19:34:
57:65:c0:11:2b:1b:00:42:3b:b1:7e:ea:03:75:53:4d:7b:07:
79:bc:92:a9:d5:20:71:9a:3f:34:58:f7:0d:fe:3e:27:aa:9c:
b0:b2:f4:e3:be:97:df:64:07:fb:1e:5f:f9:ee:73:1b:62:01:
7e:5a:be:71:e6:b2:79:57:23:e9:88:15:a6:e4:11:87:cf:d2:
52:10:11:f4:16:fe:80:86:cd:07:c9:de:0d:8a:07:9e:14:94:
e7:80:42:63:d9:68:a1:9c:73:65:89:f1:1f:5b:ad:8b:f3:ae:
69:a7:54:91:67:23:8a:cc:0a:10:6d:4c:96:eb:a6:50:e9:f7:
8e:db:d5:c8:5e:6a:ca:c5:0e:97:55:cf:c1:e6:46:5c:b3:c8:
ef:be:4e:88:da:a6:5b:4a:87:3c:6d:78:90:27:2e:05:d1:4a:
eb:5b:28:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWXDeFfWCdGPegsZcA+A3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk
MGVkMmMwHhcNMjYwMjA5MTcwMTAwWhcNMjYwMjEwMTcwMTAwWjAzMTEwLwYDVQQD
Eyg2ZDY1MDk5MWI3YzgyMTFlZWUwMDkzYTc4MTliZWNhMjRmZGJmNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAPybpsGa2gVYcsK5i9pMQRfxi7D
oLSdwqRVOYgaONIkYgvMLKW1bZnmT/DJ3TBX+Z61YJhNTt6g9oWA7LfeFCkdR3RV
EzZY5Gph31B+DSAIorUB3/c1gSM6xkLxHdB2mmdOAXqWiipniMrsdvIqag8hlGj/
0f7KJr4zoZO4H3jn9mOVHPl/QcqzbpqTPGjgLvm3ZCTGBjJWE1cN78A1nMV/LD7S
iH10syiVkKG7B0WdZOla8eDeOzYE40In3zn32+XvpBefPWvHITKJvhv4XR2elDNU
P7eChsriuyJGWPnghouyJHaHlvGupqGt+Z+NNEhuNWUzAPoucJTDMtrwhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1lCZG3yCEe7gCTp4Gb7KJP2/ZxMB8GA1UdIwQY
MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt
OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz
LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdLfdTB5
U4MMsRDifFl07pM7rVLSOJx2HBEKEKE1POvYwn8Mv/PjrOZq7RD/dtD1C2q9k3J9
AXFmaKa5Y+7IR0Kb52YyhJTYAB67Reqso56gEMa8HrqcYRk0V2XAESsbAEI7sX7q
A3VTTXsHebySqdUgcZo/NFj3Df4+J6qcsLL0476X32QH+x5f+e5zG2IBflq+ceay
eVcj6YgVpuQRh8/SUhAR9Bb+gIbNB8neDYoHnhSU54BCY9looZxzZYnxH1uti/Ou
aadUkWcjiswKEG1MluumUOn3jtvVyF5qysUOl1XPweZGXLPI775OiNqmW0qHPG14
kCcuBdFK61soMw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:19 2026 by rpki-client