This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: IlKCtYHwB/DIa1osGnXY1CYCSnIxlK01k+ueNhBHhY4=
Subject key identifier: DD:76:6A:7D:AC:19:7E:DE:0D:34:B6:ED:1E:5C:63:65:AD:2D:A3:A4
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019C4435069CAD7014B2292E574CBBF1CA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1818
Signing time: Mon 09 Feb 2026 21:00:51 +0000
Manifest this update: Mon 09 Feb 2026 21:00:51 +0000
Manifest next update: Tue 10 Feb 2026 21:00:51 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: /GyNCyE6Dw+/CKanukiQOzH55/utfMUM8omvqCaIsU8=)
2: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (hash: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:06:9c:ad:70:14:b2:29:2e:57:4c:bb:f1:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Feb 9 21:00:51 2026 GMT
Not After : Feb 10 21:00:51 2026 GMT
Subject: CN=dd766a7dac197ede0d34b6ed1e5c6365ad2da3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:59:b0:20:0b:13:70:35:7b:40:77:da:02:
4d:0f:a8:e5:e1:47:6e:27:a1:e9:ea:33:f8:17:b1:
d7:cb:8f:0f:55:8e:fa:0d:c2:59:70:b1:8b:b2:34:
3d:cf:76:7a:7b:8c:10:2a:20:56:e7:07:14:e3:2f:
a7:90:cc:a9:a9:f5:a9:34:a7:7e:d6:37:1c:41:9b:
ec:3e:e9:2c:2c:c8:28:8b:7b:09:79:85:56:c5:2b:
82:8e:ef:b9:ac:0f:ec:22:00:f0:5b:ce:38:bc:91:
91:ad:77:49:6b:08:c4:55:13:6e:10:af:4c:5e:f4:
24:36:1d:69:73:89:f0:5f:f8:9d:e1:2c:0b:cc:d5:
a0:68:96:e2:0b:4f:5c:76:b1:dd:da:60:06:b7:17:
d6:25:d6:7b:d1:dc:0c:1b:7a:a8:f1:d7:41:1b:a4:
8f:f9:59:da:69:b5:8d:f1:58:de:45:0a:99:f2:fb:
c3:0f:53:7d:a3:a6:c0:a7:ba:bd:ff:4b:46:c6:8c:
04:56:29:5f:7b:c6:89:b5:e2:a0:79:a5:fe:ae:17:
07:90:22:e1:c6:aa:30:c1:9e:6f:5f:67:71:0b:80:
bc:34:6f:6b:26:8f:f2:a3:92:ee:51:00:63:7b:9c:
34:21:2c:3d:bd:0d:80:3a:68:e0:62:18:73:54:4d:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:6A:7D:AC:19:7E:DE:0D:34:B6:ED:1E:5C:63:65:AD:2D:A3:A4
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:df:d4:ec:5a:a4:30:d4:a1:67:f7:43:d8:cd:a8:07:b6:e9:
49:5a:ef:29:b4:5d:ce:88:f4:cb:a1:6a:7c:8d:1f:33:71:76:
12:1c:f9:bb:84:17:32:cb:68:83:ff:0a:62:7c:cf:c6:40:df:
b4:30:44:09:45:8f:6d:eb:98:96:39:d8:e8:d3:34:ca:3a:f2:
aa:ae:5b:13:ac:e4:28:64:4e:81:3f:5f:b3:ff:cb:e2:bb:d1:
64:e2:64:f6:82:e8:ea:fd:f8:93:a9:11:b2:b6:9d:72:80:1e:
33:70:1c:c9:a4:6d:b8:1e:aa:94:85:19:87:e4:8b:52:67:e7:
2a:46:38:cb:dc:f6:60:40:cf:fc:5e:20:58:6c:7f:60:8e:3c:
50:0d:ce:f0:4b:49:9e:ca:fa:92:7f:a9:a1:d6:11:9d:a6:4d:
76:ec:84:2b:93:26:a1:a5:ce:9b:92:72:ef:72:01:23:d3:47:
5e:9c:5f:48:4e:d6:3c:cf:21:b9:13:08:ae:e6:7e:30:4e:bb:
01:28:d8:45:97:30:9b:63:fa:7c:3d:c4:77:6a:01:0a:85:0e:
34:32:b5:78:5f:87:f8:dd:e0:02:e3:96:3d:83:27:58:27:89:
e3:98:22:77:fe:73:c1:59:d2:ec:97:c5:09:b8:b3:c1:e5:69:
9b:72:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:16 2026 by rpki-client