This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: xssOaA1mJ7PMtq3ttZXlr6SckOO24JsqKQLKtmnTFJs=
Subject key identifier: C1:04:FE:01:F9:9A:A4:D3:57:79:71:64:9F:17:C4:48:BB:B9:EF:AE
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019BFC8A26D2123790F38A4826D3094AB73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 13A3
Signing time: Mon 26 Jan 2026 23:01:10 +0000
Manifest this update: Mon 26 Jan 2026 23:01:10 +0000
Manifest next update: Tue 27 Jan 2026 23:01:10 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: m/Wj2p+j2LGCy0vXWEz/2cXS0JeS8hCMvsULZVB5uiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:8a:26:d2:12:37:90:f3:8a:48:26:d3:09:4a:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 26 23:01:10 2026 GMT
Not After : Jan 27 23:01:10 2026 GMT
Subject: CN=c104fe01f99aa4d3577971649f17c448bbb9efae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:d7:ff:a2:6f:a4:5f:c7:72:89:d4:11:ca:
5f:20:12:b1:5b:a9:da:4c:9f:81:a9:46:4a:a5:46:
7b:c5:2a:36:47:bf:5a:6f:4c:37:e3:f4:2f:40:20:
1a:73:ff:51:15:65:4f:1d:25:29:99:f3:29:4c:3b:
2d:0c:a3:33:33:61:5c:86:0d:a7:2a:d1:9e:a8:eb:
f0:9b:ce:7c:89:c4:c9:d4:9b:4e:f6:05:de:96:f7:
6f:5e:51:0b:6c:ba:3c:1d:95:53:6f:91:a4:3f:f6:
48:0f:fe:6d:16:44:dc:4a:e6:76:14:1e:f7:c8:7b:
54:11:af:80:af:2f:33:19:a0:aa:14:d7:17:cc:d1:
c0:1c:e9:ae:6f:44:de:a7:b2:a2:d4:6b:19:02:52:
cd:c4:38:cc:02:03:bb:ab:7d:a0:cc:9a:96:d8:c5:
93:53:9a:29:12:b4:63:c5:43:ea:91:d4:1b:40:ed:
12:cf:30:40:7d:ad:48:cf:ad:c6:5a:f1:79:00:88:
5b:11:03:76:44:3d:bf:f1:bd:93:cc:26:c1:e8:b2:
3a:7c:99:2f:73:89:1e:33:e3:33:fa:40:de:74:eb:
53:09:dc:3c:3e:85:5e:b8:a4:e1:53:d5:ad:17:7f:
4c:d8:d6:af:0b:f4:5e:4d:e8:17:f4:e4:e0:22:9a:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:FE:01:F9:9A:A4:D3:57:79:71:64:9F:17:C4:48:BB:B9:EF:AE
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e8:e6:87:9e:6e:30:45:f1:0a:8b:39:99:30:6a:4b:59:2e:
5c:f9:64:7d:90:b2:46:2a:90:6f:77:9a:02:f4:76:64:d9:d2:
85:2e:6d:d9:d7:fd:8e:0f:5b:3f:f3:0a:8b:64:4a:a3:06:e3:
03:8a:7d:d2:37:5d:a9:9b:39:b6:2b:12:e7:b3:ea:0d:f5:d5:
2a:46:cf:fe:f8:66:e2:f1:38:a0:60:a8:e5:2b:fd:09:08:dd:
aa:68:3e:7f:aa:17:f4:58:c0:ff:77:c9:2b:0a:ff:9f:b3:25:
d8:69:f5:5f:1e:64:4b:65:2b:d8:4f:b9:16:99:d2:04:03:af:
3b:5c:6d:71:56:dc:2d:e7:58:64:4c:99:4b:c0:41:1f:e3:d8:
a8:0f:7e:dc:f8:11:50:fb:f2:55:5f:b0:69:62:1e:ed:a8:7e:
ad:0f:e3:90:03:2e:a6:f8:c9:79:56:f5:a2:5a:db:d2:a4:e1:
5f:30:f9:2d:3f:42:ab:29:18:d1:d2:b7:73:01:20:84:c7:a2:
66:e3:c8:4f:d5:29:13:85:a3:d3:1d:ee:10:b8:d4:01:64:8e:
11:e5:63:73:dd:82:ec:b3:6c:ee:67:84:ed:e3:a3:5c:3a:19:
7c:38:09:02:c8:81:9b:ec:b5:8e:26:76:89:e4:61:37:3f:2e:
e1:66:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:30 2026 by rpki-client