This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: kQ4Uw3VNDi5h8mHpTf2xjouaJxnam55ZPnsfrY7HSIs=
Subject key identifier: 10:94:49:3F:1D:52:3D:24:AB:D0:1D:BF:F2:B5:16:B3:8A:03:56:E5
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019C427D3DACB052A1503BE45B535A8EB0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0DA9
Signing time: Mon 09 Feb 2026 13:00:29 +0000
Manifest this update: Mon 09 Feb 2026 13:00:29 +0000
Manifest next update: Tue 10 Feb 2026 13:00:29 +0000
Files and hashes: 1: ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (hash: JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: iq0nVvHy/j0nBu5HdRazTCjVzju0/THFURxNN/bMqr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:3d:ac:b0:52:a1:50:3b:e4:5b:53:5a:8e:b0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Feb 9 13:00:29 2026 GMT
Not After : Feb 10 13:00:29 2026 GMT
Subject: CN=1094493f1d523d24abd01dbff2b516b38a0356e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:3e:71:2b:f1:17:97:8a:0c:f9:15:1e:cc:
43:b3:97:91:ff:a2:06:57:a4:42:ee:b0:32:25:ee:
90:d6:b9:97:e1:00:5f:f2:d3:e1:3e:5c:2c:20:68:
87:11:20:18:31:0f:f2:08:a4:e9:99:09:de:3c:8e:
42:c2:37:ff:cb:66:e1:cd:e7:04:cb:01:78:d6:37:
30:b6:2f:05:67:97:7d:68:4c:61:54:9c:dd:53:ae:
a2:63:bc:21:ae:f0:98:2d:b1:06:5c:ab:ec:c0:65:
97:92:bc:83:46:d3:69:a3:42:df:44:4a:74:0c:a7:
bd:2d:bf:14:e8:32:c1:5d:11:a6:c1:57:ec:59:01:
e0:60:cb:e7:fa:d1:fc:a7:49:90:9e:ad:f1:a3:20:
4f:d4:91:53:26:f9:7f:6c:bc:20:78:7d:cd:65:25:
bf:48:b4:b2:22:9b:91:cc:3b:a6:5e:15:f8:42:fe:
94:bd:f3:ff:f7:8d:46:7a:80:e9:8f:e2:06:8b:41:
45:8e:f4:73:18:5a:ca:75:b1:c0:a1:57:12:29:34:
63:34:9c:cc:81:c9:9e:5c:58:b5:ad:54:3e:ea:ca:
e0:24:ba:3c:35:86:d3:85:f9:4a:14:60:98:62:af:
7d:6a:10:98:1d:4b:3b:93:d7:62:f0:db:ef:0b:a5:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:49:3F:1D:52:3D:24:AB:D0:1D:BF:F2:B5:16:B3:8A:03:56:E5
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:75:6d:11:52:89:da:58:e7:54:46:e0:62:fc:3d:c9:31:
a9:cf:c8:25:69:f7:dd:6b:1c:d7:f5:df:1e:b5:7c:3d:4b:e0:
5d:c9:e7:5c:fb:bc:e4:0c:5a:b1:7d:ab:1a:3d:f9:00:d5:41:
fa:b4:24:4c:55:87:43:3b:47:78:11:ab:d1:47:bb:de:ff:6b:
9b:d4:4e:87:29:c6:6b:8f:e4:56:8e:14:23:94:f3:d2:25:4f:
9c:7d:56:98:2a:4d:7d:bc:62:29:b3:8c:ae:4d:65:b6:2e:d2:
aa:37:4e:fb:59:cf:79:f2:46:c5:3e:1a:fb:87:69:d4:72:13:
1d:2f:75:87:7e:62:d1:64:44:6e:31:a5:42:10:93:21:95:4a:
85:ef:62:fc:4a:aa:b0:2f:0f:57:1a:16:55:73:28:27:f9:f6:
be:6c:fe:cd:7a:8a:d6:ee:21:14:d5:1e:6e:cc:3b:e5:b2:c2:
86:9e:c1:22:1f:90:51:86:0e:81:75:98:bb:bb:1c:e0:1c:6e:
33:0b:70:05:ef:79:67:46:a5:a5:83:e1:e9:54:c4:3a:40:c3:
bb:b3:f1:ae:8b:7e:23:a1:26:c7:ae:10:58:51:5a:fd:52:00:
60:c8:b6:00:ea:18:9e:21:eb:a4:76:5c:b2:16:72:91:2b:56:
37:ce:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:08 2026 by rpki-client