This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: kbUXkNUpXn5EFTZfu0q3r4eEFlq7SjePYWVW1Zm4xW8=
Subject key identifier: 5E:74:73:14:1B:D7:8E:25:F1:75:DA:F8:57:55:D9:AC:CC:BA:38:CE
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 019C4359508B34285282CF2723E00406B5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: 5cWjWy1YrCFELS83xyn8kmx76uOcJOFjdfznIHY1pro=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:50:8b:34:28:52:82:cf:27:23:e0:04:06:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=5e7473141bd78e25f175daf85755d9acccba38ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:0b:37:35:7a:16:6d:95:b9:c4:80:6e:b4:
db:56:1a:af:5e:c7:cb:4c:81:bb:94:fc:32:2d:ad:
23:0a:0d:5a:92:9b:63:0f:19:bc:a3:ba:be:4d:c4:
d5:de:73:15:26:4d:50:d7:9b:33:fb:71:29:66:99:
5e:bd:3a:96:20:2c:86:1e:17:48:c9:38:f8:de:ea:
fb:10:97:28:f8:f6:9d:46:d5:e0:a9:27:9c:11:89:
9b:0e:64:c6:a0:0d:f6:54:a3:68:e2:78:70:14:44:
81:05:9b:45:54:75:3f:57:21:27:00:e4:1d:61:71:
a0:60:e3:4f:4f:d6:98:26:06:fc:ee:b5:56:22:58:
fd:45:5d:0e:a0:cd:4f:9d:01:78:3a:b0:cb:50:43:
2c:55:e0:0b:3e:cd:31:c7:c4:4f:88:7c:cd:1d:da:
9f:9f:80:8b:0b:ec:9f:b5:aa:d3:e2:f3:6a:cb:d3:
f5:eb:32:a1:ec:39:5f:7a:22:8c:58:05:3e:18:a7:
9c:05:52:80:f8:0a:30:8f:81:47:e0:de:51:08:48:
52:b2:3e:6d:2a:47:4a:63:22:e7:41:1d:d0:30:76:
16:81:b6:3c:13:02:21:5c:cb:6b:1f:45:9d:9d:ae:
d6:ae:9b:e5:c0:90:b1:9c:e0:33:f1:dc:61:eb:64:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:73:14:1B:D7:8E:25:F1:75:DA:F8:57:55:D9:AC:CC:BA:38:CE
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:37:69:21:30:40:a4:e3:12:48:2f:ad:62:20:5a:42:b5:
92:c7:22:2c:08:a0:18:e0:d7:b5:13:ae:af:72:da:bd:9d:f4:
36:05:93:f7:63:4f:fc:3e:11:eb:11:6f:0e:ed:2d:5f:92:9b:
64:78:49:23:5b:78:72:e6:78:8f:d9:98:5c:d1:d4:a4:c9:94:
4b:0a:e4:a8:02:e0:4f:78:80:e8:ee:90:fc:9c:a4:5d:16:88:
77:53:28:20:c5:51:14:22:1b:48:99:9f:29:58:c7:20:b2:68:
7f:6d:4f:90:55:75:65:48:c4:97:31:12:8d:04:16:da:a3:4f:
4c:63:ec:66:a2:41:a6:af:aa:bb:f1:e6:f8:3c:fc:7d:b6:c4:
10:38:fb:28:63:bc:66:c7:6b:60:b8:dd:37:ef:e9:96:76:02:
b8:08:f1:c7:de:42:00:15:ff:d1:28:a9:ac:65:bf:e8:3b:97:
a3:61:03:62:7d:94:28:63:39:25:4d:e9:93:4d:30:16:df:f3:
45:03:d5:9f:a2:78:6f:3e:45:e3:84:6b:de:c2:e1:33:c7:f0:
ea:27:14:ad:ce:b3:25:60:6b:08:5e:e3:cc:f4:d4:80:58:52:
45:14:5a:cb:f2:4b:3d:5a:4a:a1:be:db:e3:40:0b:bb:af:80:
3a:5c:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:38 2026 by rpki-client