This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
File: hcAE7tTPscJ2cTgiL_wJUooqXIY.mft (raw, json)
Hash identifier: zqjsETt5k9AsJksAKdCmJI4KwDjgehW4seVbDMLZ47s=
Subject key identifier: FA:4B:96:96:89:D7:2A:89:09:9D:98:8A:2F:59:D1:50:CD:A7:D0:93
Authority key identifier: 85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
Certificate issuer: /CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Certificate serial: 019C41D8B72A859A2AF74FE62CE132CC8673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
Manifest number: 01CD
Signing time: Mon 09 Feb 2026 10:00:47 +0000
Manifest this update: Mon 09 Feb 2026 10:00:47 +0000
Manifest next update: Tue 10 Feb 2026 10:00:47 +0000
Files and hashes: 1: 5BkAJ7OSXY4SP7j3-fbqz5bpSEY.roa (hash: Nj/dFE0ShVqEkO5zoMZ/0/zZii3em6nlg2XD7KAhuw8=)
2: hcAE7tTPscJ2cTgiL_wJUooqXIY.crl (hash: bDi8y2Z2qcv0BWdEf7tbPiS34lpfjS/HGqUwZZFcJEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b7:2a:85:9a:2a:f7:4f:e6:2c:e1:32:cc:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c004eed4cfb1c2767138222ffc09528a2a5c86
Validity
Not Before: Feb 9 10:00:47 2026 GMT
Not After : Feb 10 10:00:47 2026 GMT
Subject: CN=fa4b969689d72a89099d988a2f59d150cda7d093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:3b:8f:01:cb:4a:ec:8e:e6:0f:ae:5c:e2:
b6:53:2a:dd:10:67:bf:60:b5:41:2b:d6:46:11:31:
95:ac:30:dd:cd:11:63:8a:1c:b2:5d:80:a5:f6:e2:
7f:d6:e2:92:cc:59:db:26:88:7d:71:fe:b2:d5:42:
fb:b1:e6:e8:3a:83:43:ba:a0:f2:81:bc:85:6b:1e:
1c:0e:f4:2a:ee:5f:1f:3f:72:7f:af:cf:ef:8d:bc:
83:e9:f7:24:84:f3:3d:ad:69:1e:4e:9b:3e:3c:25:
7b:40:8d:73:f3:72:1f:63:f1:6f:bb:42:6f:5e:b3:
33:51:39:73:e6:a6:b4:f9:e3:d8:c0:fd:70:18:34:
1a:65:d3:f6:58:c3:d6:4f:3b:03:d4:00:33:13:2e:
37:92:9d:29:07:55:f8:16:e8:35:5c:7f:d5:36:ba:
95:f7:b9:cd:c9:15:ce:e3:0b:1d:b5:ca:a1:aa:0d:
37:97:ac:7c:c9:46:20:2c:9f:ba:fe:fc:c0:79:5a:
4e:bc:9f:65:b4:97:f4:28:2a:d4:6b:94:e4:ef:cb:
03:9e:a4:69:b0:0e:4b:83:57:3c:39:74:cb:b4:33:
45:02:2f:f6:34:7d:94:f9:17:79:6c:63:43:c3:2e:
68:e5:5f:69:74:2f:e1:cd:54:cb:64:25:a5:3d:9a:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:96:96:89:D7:2A:89:09:9D:98:8A:2F:59:D1:50:CD:A7:D0:93
X509v3 Authority Key Identifier:
keyid:85:C0:04:EE:D4:CF:B1:C2:76:71:38:22:2F:FC:09:52:8A:2A:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcAE7tTPscJ2cTgiL_wJUooqXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/05215b-7152-4742-9b38-cbcc090f4a0f/1/hcAE7tTPscJ2cTgiL_wJUooqXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:07:da:7c:b1:22:6d:33:66:3d:de:9c:cb:84:3e:a0:71:
9d:1f:3e:bd:c6:95:2a:55:dc:b2:e8:5e:8e:67:8e:12:17:ca:
d5:2b:15:44:7f:e0:d1:2d:5c:ec:53:c6:f4:6f:99:f9:9e:98:
3c:47:f6:94:f4:30:57:ad:86:cd:96:7a:2d:29:26:f4:75:bc:
f1:8d:d6:27:9d:d0:af:16:7b:a4:46:6a:ef:69:6f:27:16:6b:
5a:7d:c9:bc:16:3b:99:5a:a8:2e:11:3d:f4:60:e3:72:29:ef:
35:86:18:39:31:4f:31:41:ee:14:43:60:f6:ac:d2:71:fc:46:
62:5c:6f:51:8a:35:63:e6:8b:b8:d0:dc:79:7c:4f:2b:90:4b:
de:25:3b:63:c8:50:a3:3f:b2:7c:2e:09:48:0e:3c:eb:5d:34:
18:96:09:7c:45:30:ef:4d:83:f8:33:f8:2c:25:28:61:34:25:
09:1e:14:9d:10:23:1e:4d:bf:42:5b:e8:bf:8b:c6:72:60:14:
68:05:59:63:14:cb:c8:a4:eb:a9:e6:47:e1:c9:7f:73:df:92:
57:7b:dc:df:f2:dd:12:7b:cf:46:e2:b7:01:e8:46:cd:44:dd:
05:71:8a:f5:a7:b9:66:af:b9:2e:f1:52:f8:78:86:d0:9f:b2:
98:a4:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:23 2026 by rpki-client