This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: I2fBry88IrOJ4Co9fTZqMShWNITzQwnRW4rMrfLYn60=
Subject key identifier: E9:00:85:30:0D:D8:20:CE:60:65:78:DB:6D:68:6F:5F:32:37:3A:E8
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019BFE0A0FD64D22591845D9D01E07217155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1276
Signing time: Tue 27 Jan 2026 06:00:30 +0000
Manifest this update: Tue 27 Jan 2026 06:00:30 +0000
Manifest next update: Wed 28 Jan 2026 06:00:30 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: hQnCFVjY5L5WFN2/K/7ptYm4PylkPyreF4n2SY8dIjE=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:0f:d6:4d:22:59:18:45:d9:d0:1e:07:21:71:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 27 06:00:30 2026 GMT
Not After : Jan 28 06:00:30 2026 GMT
Subject: CN=e90085300dd820ce606578db6d686f5f32373ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:fa:41:ac:18:db:49:75:c0:46:e9:42:2c:
b9:3a:e8:cc:e0:77:15:96:67:bd:65:41:b6:06:f5:
89:7f:4d:94:e8:e8:be:a8:99:24:46:47:22:97:e9:
67:41:06:5c:b7:ae:e4:3d:7a:e8:48:19:27:ad:ab:
b0:a7:53:67:f6:85:d8:45:22:c8:a6:95:1c:e4:fb:
fc:58:f8:5d:af:90:52:ee:a1:86:6a:ee:fa:c8:42:
1e:3c:87:31:e3:57:39:f0:92:a4:d3:b8:42:1f:8f:
46:82:ab:f0:05:6c:40:d8:0b:76:eb:94:7b:bc:76:
b4:81:97:e7:1e:8c:2a:2a:11:79:74:99:54:90:32:
5b:2b:3e:c7:68:fa:1d:51:b3:73:e6:ee:15:76:98:
f4:7b:03:aa:15:ea:8a:37:cd:43:e5:d2:8f:67:92:
b5:1c:75:9b:e4:7e:51:e4:42:5a:0d:92:73:37:74:
27:40:bf:b0:c7:50:c2:f0:48:06:70:c0:e3:45:be:
d3:17:fa:7c:d6:1c:79:5b:8e:0b:13:b0:5e:45:a6:
ef:84:6b:73:dd:a2:70:8d:a9:f9:4e:bc:40:a3:c7:
de:29:99:69:1b:1e:7f:cd:97:53:1c:30:80:8d:93:
55:0a:1b:29:dc:8f:e1:bb:d0:3d:be:11:91:25:23:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:85:30:0D:D8:20:CE:60:65:78:DB:6D:68:6F:5F:32:37:3A:E8
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:29:86:a2:bb:7c:c6:60:e0:5b:b6:5f:00:a6:42:a0:8e:37:
10:66:30:6f:20:61:22:c2:bb:cd:01:7f:2c:93:7b:cf:19:88:
58:ad:c5:9d:c4:c0:5a:34:b2:48:53:5b:d3:e3:20:9b:97:f9:
8d:63:b4:92:c9:b1:bc:9b:bf:2d:b3:cc:08:93:c0:66:33:be:
e8:dc:58:2e:f4:08:32:8e:e3:b3:e4:f1:6f:37:c8:0a:9e:1b:
d0:90:4b:a3:f9:f0:8d:dc:af:6f:5f:3e:99:ba:f5:c6:dd:d1:
8e:cd:3a:5c:76:64:e8:80:e3:d9:fb:14:35:61:eb:9b:a4:b1:
ff:78:3c:c1:e3:e5:8d:fd:2c:2c:1d:45:62:6e:80:b1:8f:d9:
40:62:52:54:30:2e:86:65:f6:96:6b:c7:05:3e:f8:d4:38:e5:
41:3e:56:5b:e3:11:32:bb:7a:b0:c5:4f:13:17:dd:1c:b2:26:
3d:b7:f0:73:bd:9c:5a:e6:fb:55:66:55:b7:f3:92:18:6f:f7:
e6:0f:b8:a1:69:c1:5e:06:8a:0c:26:05:f4:ed:50:dd:5b:0f:
28:9d:96:e0:43:08:21:49:be:98:97:16:46:8f:06:12:5a:f4:
ad:fc:68:68:d0:f2:75:63:da:7f:44:8a:85:a5:77:d3:4a:bd:
09:f0:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:16:13 2026 by rpki-client