This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: KzSXmc8uan0QPvsw7f+SdEL00RV9yHQOW1BqsrfIimU=
Subject key identifier: 8B:75:68:FF:00:C3:B6:C2:14:10:9A:C9:CB:97:C3:52:92:56:C6:1A
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 019C41D8662057A7257FDD07D838BEC3C505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 10:00:26 +0000
Manifest this update: Mon 09 Feb 2026 10:00:26 +0000
Manifest next update: Tue 10 Feb 2026 10:00:26 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: /00BHOFFluvWNYp/qk9CIA49K+3BqikYKgLf43IMYPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:66:20:57:a7:25:7f:dd:07:d8:38:be:c3:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Feb 9 10:00:26 2026 GMT
Not After : Feb 10 10:00:26 2026 GMT
Subject: CN=8b7568ff00c3b6c214109ac9cb97c3529256c61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:cd:74:7d:68:ef:29:2c:48:a7:34:b4:ad:
df:c5:63:6d:77:52:ef:da:7d:c5:d0:e9:7d:02:5a:
aa:cd:00:b3:d1:06:a4:6c:8c:f1:f0:08:37:5d:79:
a5:8d:40:b8:ed:5a:4b:c9:88:16:dd:92:d4:a0:32:
65:64:4c:b9:f5:e2:43:5a:26:81:02:8e:35:e7:4e:
34:09:64:1c:cb:29:48:14:20:9a:3a:af:d2:0f:ea:
22:fb:19:75:a3:dc:92:92:0d:1a:cf:ed:a6:07:87:
0e:88:e3:b1:65:5e:e6:96:db:1e:32:9f:9e:fa:12:
d2:77:09:67:49:98:cf:fd:d2:d8:02:60:ec:9d:3f:
db:cc:98:b9:4d:fb:90:f1:40:99:00:6a:bc:4a:16:
52:c4:07:91:86:20:7e:be:90:ce:ae:b2:3a:c1:e3:
04:d3:44:e5:8f:2d:4b:24:ed:5e:42:5b:b1:c5:22:
89:51:49:90:f9:58:8d:d5:ea:85:0a:c7:57:18:7e:
b9:a4:c0:9c:c6:c5:98:69:41:73:65:c4:fa:5c:52:
e1:b5:42:55:88:c8:ae:4b:42:db:64:80:7a:0a:a5:
56:0b:04:19:af:a7:fb:b6:12:a0:99:67:bb:c6:d6:
b2:20:20:8d:0e:8d:03:aa:6f:23:a8:64:ea:2b:e8:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:68:FF:00:C3:B6:C2:14:10:9A:C9:CB:97:C3:52:92:56:C6:1A
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d0:7b:8d:13:72:fc:2a:e5:fd:fa:33:d1:c9:f1:f0:0c:2e:
72:01:f1:da:5f:9d:df:5a:2e:f0:2a:bf:d7:8e:db:24:ea:2c:
5d:cb:f4:88:3d:49:62:80:b9:9b:55:88:c7:9e:6d:e2:84:96:
10:3a:ff:f7:b1:b3:9e:16:c8:f6:64:f5:fe:2f:47:8d:f6:40:
25:a0:63:b2:4a:68:1e:46:17:77:3a:f0:24:01:4d:bb:9d:eb:
36:9c:62:b0:e9:b8:e8:2b:6e:8b:b3:06:ad:ca:95:81:d6:a1:
cb:75:c8:61:e0:d3:90:46:e9:58:f5:8f:eb:3a:99:9c:97:9b:
53:33:a9:e1:32:a7:8f:d0:55:37:8d:33:f8:04:0f:8c:79:11:
2d:47:ce:75:d5:be:b0:dd:9c:ce:7b:9a:2e:76:63:fa:f6:37:
9c:38:de:27:da:47:28:28:95:f5:2c:ec:9b:9f:2c:03:11:f0:
60:c3:9c:5e:b0:75:b4:5b:cd:43:ed:14:32:d4:a0:cb:82:92:
64:df:0c:1f:bf:b2:e2:60:dc:87:34:04:ca:0b:52:8c:20:61:
51:0f:e9:05:37:cb:9b:45:02:b6:c1:af:e1:37:bc:02:f2:02:
27:66:0d:25:23:5e:0c:ac:7c:b6:88:8b:ce:4d:a5:b3:27:99:
25:95:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:20 2026 by rpki-client