This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: gGUrvo2XdB6TFMtQgwfgf/ZyYKLqP5NUJxSz/OoYHeo=
Subject key identifier: D9:CD:B1:19:1E:4F:0C:D9:B5:E5:41:CF:13:66:3E:43:4E:37:19:8C
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019BA56C69D21ED43B2084136E215534F861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 12EB
Signing time: Sat 10 Jan 2026 01:01:44 +0000
Manifest this update: Sat 10 Jan 2026 01:01:44 +0000
Manifest next update: Sun 11 Jan 2026 01:01:44 +0000
Files and hashes: 1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: 7czKdyCTs/q5s2vk+7/2MVNu/cGoRwnYGXLMnXzwsvA=)
2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a5:6c:69:d2:1e:d4:3b:20:84:13:6e:21:55:34:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jan 10 01:01:44 2026 GMT
Not After : Jan 11 01:01:44 2026 GMT
Subject: CN=d9cdb1191e4f0cd9b5e541cf13663e434e37198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:ef:f5:a7:5b:9e:ae:fa:2c:fd:44:c9:1c:
a6:f7:5c:f9:d2:87:27:de:8d:86:9b:f2:b6:55:2f:
b2:c4:80:b1:b9:5f:f7:f1:98:5f:32:5c:c0:ce:de:
68:05:94:09:ef:e3:bb:3d:34:5d:01:b9:0d:12:cc:
4f:db:eb:8f:31:bf:f8:8d:e4:b8:bd:92:47:48:5c:
c9:49:ef:05:ef:e5:68:fd:9f:58:8f:f1:bd:6d:73:
50:7f:eb:a4:db:62:b3:22:a8:35:8f:39:75:13:73:
17:b2:85:7b:97:34:eb:e5:a0:11:69:4a:79:2f:c1:
a0:7f:79:35:07:13:b8:e9:67:4f:9e:12:8a:11:97:
b6:c4:af:a2:2b:8c:99:c7:06:f4:1b:9a:38:79:8e:
bf:a5:53:3e:de:35:65:f9:6d:7e:3c:e4:01:3b:0d:
1d:b9:34:86:61:33:34:1c:d0:4f:63:d9:7a:a9:b9:
0a:90:ec:6b:26:56:6b:47:d3:a9:82:a3:15:da:bc:
0d:da:80:ad:c4:3f:4a:27:af:93:d1:6b:90:1c:d0:
bf:94:6d:dc:17:5a:fd:13:11:27:33:78:fe:b3:b1:
1b:63:0e:93:55:32:d8:0c:85:c5:fe:13:5f:e2:cf:
81:7f:18:6c:1e:5e:c2:9e:9e:6a:9e:59:ce:f0:86:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:B1:19:1E:4F:0C:D9:B5:E5:41:CF:13:66:3E:43:4E:37:19:8C
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:3d:12:5e:9b:ed:85:19:44:c7:d2:ff:82:cc:c0:83:ae:
41:83:e8:d4:20:b1:7f:f2:1c:c2:21:c9:9a:27:7c:12:87:aa:
4b:f3:29:64:db:5d:ff:e8:f0:2e:dd:2d:2b:8f:02:6a:27:cd:
0e:82:18:ab:ae:a2:91:95:fb:f8:cd:07:96:71:45:33:6b:e4:
3f:ad:45:ff:0d:77:a1:90:2e:d8:cb:26:47:e7:ca:95:54:04:
b5:ea:45:84:2c:65:44:ba:fa:68:1d:72:a4:97:b4:6e:d2:d4:
87:9c:71:79:98:f6:b7:29:00:41:36:3f:38:fb:d6:dd:fa:d6:
f5:1e:e2:33:ec:94:32:99:8f:ff:30:4e:3b:f0:a9:e6:d4:7d:
c2:2e:fd:56:86:b5:cf:3a:af:3c:3d:26:34:35:5e:48:e1:40:
4e:ec:5a:ad:e6:88:bd:ce:7e:26:fe:d6:80:8c:5e:4f:d9:e9:
3e:67:23:b1:cf:0c:2a:b2:c7:2a:df:ef:91:50:fa:6a:4d:ed:
73:ee:ed:43:0b:7f:65:e1:d9:ac:7b:f0:72:23:59:1e:3f:6c:
e4:df:f1:ca:f9:65:0a:73:3c:19:54:86:ee:ba:d7:56:89:63:
a6:35:29:49:ae:ef:0a:89:e9:98:b1:46:84:33:a7:6a:de:42:
ec:3a:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:56:17 2026 by rpki-client