This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: pIWmcucc6pc3c6u6RZ+88qvyxjoi1CfTUFOO/La/+5Y=
Subject key identifier: 19:76:53:7F:7C:CD:DD:9A:D6:69:88:32:0C:40:D3:AC:C0:2A:6F:FF
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019C43C6CB71266F4DA82173C6079392AD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 19:00:27 +0000
Manifest this update: Mon 09 Feb 2026 19:00:27 +0000
Manifest next update: Tue 10 Feb 2026 19:00:27 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: TkjzF7+gCQ3OcdS7dvjr25L4zSctfbMCCSJTWSxCMJg=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:cb:71:26:6f:4d:a8:21:73:c6:07:93:92:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Feb 9 19:00:27 2026 GMT
Not After : Feb 10 19:00:27 2026 GMT
Subject: CN=1976537f7ccddd9ad66988320c40d3acc02a6fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:99:27:7f:49:11:0d:e0:50:1e:d5:b5:af:
21:7e:9f:4d:12:11:25:5f:2d:ee:2a:f5:38:52:55:
e8:d0:18:c3:a2:83:01:57:ef:50:bd:b6:8f:04:15:
5a:9d:da:fe:1f:50:1f:1b:0b:4c:07:6b:a2:57:4c:
b2:b0:ec:fd:25:72:ed:8c:01:9f:2c:59:2c:f1:bc:
fc:18:67:43:61:ac:32:2b:79:e2:d4:98:14:5c:d9:
40:ad:a7:b1:30:c6:43:6a:76:d1:5f:19:63:d5:cf:
d6:d8:23:02:28:1c:40:3b:21:98:c4:99:c0:ee:f1:
0a:77:f2:41:f6:f3:82:b2:3b:50:da:d6:79:03:17:
f3:5d:ea:55:a7:d1:6e:59:20:ee:fe:8e:35:0f:52:
8a:bc:e4:74:7b:98:c0:53:35:f4:f8:ab:ce:f5:ad:
11:ab:48:31:21:86:99:b2:87:52:40:c5:a8:dd:f7:
d8:c0:5b:b0:2a:60:51:b1:95:da:51:10:97:fb:f4:
52:2d:fa:77:1b:3b:21:c9:e9:25:5e:5d:8d:fb:41:
86:b2:c4:63:ed:63:56:71:cd:7f:2c:aa:25:d2:c0:
97:56:38:26:a9:65:4c:01:2f:42:3a:71:96:c2:20:
d9:c5:d5:80:25:28:39:24:de:80:cd:04:71:fe:30:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:76:53:7F:7C:CD:DD:9A:D6:69:88:32:0C:40:D3:AC:C0:2A:6F:FF
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f6:db:6a:77:78:58:c1:96:42:9f:48:55:9b:7f:6e:14:00:
a5:8c:c6:f1:e3:ca:bd:f9:63:a9:31:d9:8a:6f:40:85:0c:eb:
72:69:c9:10:a5:cf:f7:9a:a6:87:eb:98:1c:ac:c2:b6:34:19:
af:b9:ea:c9:c1:cb:36:8d:28:d7:da:88:13:32:5b:74:ea:09:
02:69:b1:b6:c1:81:dd:3f:b8:16:9f:d2:59:a4:e5:19:ba:11:
ff:23:4d:42:61:83:31:76:3f:26:62:32:28:f0:68:3b:76:13:
46:67:88:5f:3c:a6:45:2d:05:bd:32:bd:14:9e:93:b4:0f:38:
9b:6f:84:30:2d:90:84:d0:17:66:9c:e6:30:4b:0c:fb:c0:4a:
79:81:ed:45:a3:c9:bb:32:70:08:7b:7f:36:c9:87:f7:86:5d:
5e:03:a1:f3:55:6d:32:44:16:39:66:01:c1:4b:b0:46:0d:5b:
28:d1:46:63:d6:25:aa:52:48:22:c6:a3:1c:6a:47:57:c7:eb:
98:83:b0:ca:9d:72:6c:58:12:3f:a5:f8:7f:90:88:df:c4:c4:
67:11:16:0d:b6:36:a3:db:97:cf:04:40:b4:90:c9:17:10:b2:
06:ab:cb:5f:03:5d:91:5d:74:19:7e:e6:39:85:a0:e7:f7:4c:
cb:cf:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:08 2026 by rpki-client