This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: hGl9eIywqvS1XiYPT7S3a1HBfj+PO8ozYYV5fh9F4qk=
Subject key identifier: B3:41:AA:6C:91:43:6C:34:B4:F0:C7:7F:21:71:28:E9:2F:F4:C6:D2
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 019C43C6A279ADC2B0A2A5D39796995480E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 0C24
Signing time: Mon 09 Feb 2026 19:00:17 +0000
Manifest this update: Mon 09 Feb 2026 19:00:17 +0000
Manifest next update: Tue 10 Feb 2026 19:00:17 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: qHxnIYvv+RZy6owvLKdv/uCDHwu4hw0UjMWWPA07hck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:a2:79:ad:c2:b0:a2:a5:d3:97:96:99:54:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Feb 9 19:00:17 2026 GMT
Not After : Feb 10 19:00:17 2026 GMT
Subject: CN=b341aa6c91436c34b4f0c77f217128e92ff4c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:d6:b0:d7:a2:00:d8:ca:5e:b6:ca:4c:1e:
b8:2f:a5:98:69:1b:a5:4f:ad:5d:5a:db:95:5b:c0:
54:96:a3:c3:67:5a:87:50:eb:12:7e:64:51:43:33:
fd:cb:d8:0b:57:5e:6d:43:83:f5:a8:d0:b4:04:d1:
08:4b:73:81:5a:1a:6f:7c:c0:8d:ca:89:f8:c5:8c:
4b:e6:14:b5:3a:fc:0e:98:b2:a9:3d:a6:dd:65:96:
dc:d2:7e:f5:91:1e:9e:7b:98:6f:73:8d:8a:3e:b3:
a8:b1:26:ee:3a:c0:22:ac:5f:49:7e:5e:16:88:14:
97:65:60:bc:16:47:24:38:b1:6a:b5:a4:ec:f1:e5:
1f:ab:be:26:8a:8d:83:25:32:6b:0f:40:5d:ec:e5:
81:8f:6b:6b:bf:df:d8:c6:26:5e:78:23:f7:00:be:
b0:9d:4f:29:28:06:c5:30:64:14:c1:3b:0f:c0:6e:
dd:ea:af:45:5d:68:22:7b:68:22:e3:fd:80:fa:7b:
dc:9a:dc:79:51:65:f6:1b:33:0f:ae:ad:20:97:8e:
d6:8a:df:52:a1:dd:88:14:f2:cf:57:23:39:d9:25:
b1:5d:24:57:1f:8d:68:aa:e9:5e:94:9d:8d:fc:fc:
71:c8:04:04:7d:07:79:11:a1:8a:e0:9a:bf:58:97:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:AA:6C:91:43:6C:34:B4:F0:C7:7F:21:71:28:E9:2F:F4:C6:D2
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:f0:db:0b:9a:10:2c:e6:23:c6:e9:9c:b6:d8:6d:a7:e3:
7f:8b:53:db:14:09:4e:2d:e3:03:9d:67:b2:66:13:7d:dc:8c:
05:9b:75:67:f9:8c:2d:05:a7:4d:30:bf:03:a9:9d:8f:87:f6:
65:88:5b:c1:fa:58:59:d1:8c:dc:3a:69:85:94:46:a9:ea:c3:
98:08:d1:a6:dc:3a:f3:1a:ef:b1:61:18:64:5d:10:01:f5:d9:
2b:e8:0e:3f:92:e3:96:d0:f6:19:1c:21:63:f9:d3:57:b2:79:
ce:2e:5f:c3:59:68:9e:78:5c:04:0e:dd:1e:af:57:92:fd:70:
01:0d:a5:5e:7d:95:16:cf:f6:a7:68:d1:7e:dc:f4:31:a5:34:
c8:fc:df:e2:56:77:1e:3d:02:17:d4:d2:8d:ae:bd:70:81:f9:
f3:cc:31:1f:50:ea:bc:d4:7e:99:20:74:e5:8a:4c:6e:9e:4d:
87:4d:fb:f7:03:45:b0:e6:93:7f:4f:d6:d0:22:00:44:b1:fb:
c4:ae:8d:f3:9d:16:e2:a0:61:2d:25:6c:48:17:00:b6:f6:fe:
94:6d:63:8a:01:7a:55:a6:e7:75:56:18:41:b7:79:22:2d:5d:
6c:b8:99:24:4f:88:52:f8:c4:fb:fa:ba:40:7a:9b:93:4e:dd:
6d:b0:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:38 2026 by rpki-client