This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: 35HidldEOahdKNovWSDTE4ITjMjSgVNwI3NH9pLxWgo=
Subject key identifier: 83:D6:BE:B5:12:96:77:D6:9B:9C:BD:D3:3D:5E:D2:24:2A:5F:28:63
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019C4246A9E4A632EA8329A783F92016C40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 090A
Signing time: Mon 09 Feb 2026 12:00:53 +0000
Manifest this update: Mon 09 Feb 2026 12:00:53 +0000
Manifest next update: Tue 10 Feb 2026 12:00:53 +0000
Files and hashes: 1: Ac2g8HVyNDYwzqmo6Q0KVIwOBDo.roa (hash: Um65HfZZDJKesTmcrahWX7j2iQcfK801xXJSJGbgafE=)
2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: g2G+nIvdHPXJxQskTcuafiIpcwMLCokCiVlXctpp+kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:a9:e4:a6:32:ea:83:29:a7:83:f9:20:16:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Feb 9 12:00:53 2026 GMT
Not After : Feb 10 12:00:53 2026 GMT
Subject: CN=83d6beb5129677d69b9cbdd33d5ed2242a5f2863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:67:01:87:db:9e:19:1b:3a:1b:c0:ff:d1:
f6:77:2d:fc:7a:a6:09:e0:ab:35:2e:e8:50:49:c4:
33:16:17:7b:61:b2:31:df:a5:6e:90:4c:9e:02:56:
fd:57:60:04:e4:89:d1:2f:2f:98:d9:f4:5e:44:3a:
a8:84:8c:cc:f3:85:30:fa:5e:c0:d6:79:00:d0:bd:
36:99:b9:1b:fc:ba:e2:ee:cc:b5:57:bc:dd:d5:1f:
b4:43:87:60:bb:a1:d5:c2:ef:d0:5a:5f:bc:f2:0f:
0f:d2:87:72:ab:a7:ac:20:63:fe:07:31:f5:18:a7:
ae:c5:88:32:1c:d5:96:96:f0:85:83:3c:d8:c2:52:
89:3a:f3:26:64:5c:d2:e2:db:f0:65:58:6f:af:ef:
82:33:60:d8:4b:ed:a1:d3:bd:ae:fd:b2:49:ac:54:
04:33:30:d0:51:34:9a:a7:77:50:57:a6:9f:21:3b:
1b:d6:e8:c1:3c:b4:35:a0:c2:a7:2c:f0:56:09:23:
47:26:df:29:38:fe:47:3e:db:53:dc:62:84:a2:b5:
c2:f5:95:04:5b:e8:db:6d:b2:69:1c:80:84:8a:29:
e6:3d:07:c5:b6:77:9b:78:48:cb:3a:7e:e7:7b:4a:
7f:9c:1a:53:3f:29:40:c3:82:e5:b2:b3:41:54:dd:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D6:BE:B5:12:96:77:D6:9B:9C:BD:D3:3D:5E:D2:24:2A:5F:28:63
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:4e:5b:b8:c9:8d:07:ce:a2:7e:d5:15:1c:bf:38:b2:55:
9b:a0:40:67:01:b8:ab:db:f8:62:db:e0:06:a7:33:3b:e1:ea:
c6:06:4c:27:ea:97:a1:db:62:03:60:19:f2:32:e5:e3:d8:bb:
2b:25:95:69:7a:6b:41:6c:3c:b0:5f:48:5d:77:58:12:70:7e:
e5:97:d7:2b:6c:89:3e:5f:87:19:fb:be:c2:bd:d3:46:2f:8d:
cd:05:0b:00:b8:64:ec:41:59:40:5a:e3:6c:c8:bb:ba:db:60:
bf:6c:f0:9c:28:b5:d0:1a:19:78:e3:51:78:28:18:35:0a:bf:
4d:1f:25:70:36:9b:af:f3:1b:b5:12:46:53:df:c5:a2:17:55:
4d:66:cb:6c:27:f9:6c:d7:1f:31:c0:88:31:04:5c:9f:9f:78:
2e:dc:2b:e8:0d:6f:73:09:00:3c:4a:b6:42:8d:31:29:be:e5:
44:b6:71:a0:88:be:77:01:d5:62:40:9c:9b:de:f0:32:43:1e:
ce:c3:d6:1a:76:31:c2:d0:52:1e:ba:ea:b0:71:b4:f0:4e:84:
36:db:52:c3:b7:e3:24:a6:02:c6:05:e1:84:7b:4e:39:2b:2c:
9a:f0:c4:ac:67:01:88:ae:92:db:81:58:b9:27:a0:b5:8e:df:
65:89:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client