This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: a7AqwU4Mc18j2Nwlm8nJFa099kh4p+qM02JtWLR4Qlo=
Subject key identifier: 1B:AE:92:4F:B4:AA:A4:98:E4:9E:62:67:EB:13:CA:99:4B:39:96:3B
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019C41345FD0F8FECAB9F5A255CE32BD05FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 181C
Signing time: Mon 09 Feb 2026 07:01:17 +0000
Manifest this update: Mon 09 Feb 2026 07:01:17 +0000
Manifest next update: Tue 10 Feb 2026 07:01:17 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: M/OKf/9fN9SRYYYOOTreRaGzIsv3nDKoG41E2emnPBU=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:5f:d0:f8:fe:ca:b9:f5:a2:55:ce:32:bd:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Feb 9 07:01:17 2026 GMT
Not After : Feb 10 07:01:17 2026 GMT
Subject: CN=1bae924fb4aaa498e49e6267eb13ca994b39963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:b5:de:b3:42:ab:a1:82:6e:d7:a4:12:ab:
91:53:e6:1b:ee:ef:57:c9:c9:3e:05:56:55:c1:b4:
37:8d:93:0c:cc:b3:2e:72:36:bc:2d:b0:fa:bd:5a:
6d:e0:b8:67:e4:2c:98:9e:ed:63:ba:ea:05:9f:2d:
b4:3f:e8:3f:f7:33:61:08:8b:af:70:07:7b:06:27:
9b:c5:ef:35:1c:c4:59:0e:a4:00:63:c6:00:3e:4e:
c7:66:b8:80:0e:3b:75:09:b9:af:71:89:fb:6c:25:
4d:56:54:fd:7d:7c:6c:dd:c0:5d:7f:29:b0:46:29:
6c:d9:59:8d:89:3e:26:fc:d4:34:3f:7d:1b:23:59:
8a:38:f8:55:3f:9c:20:06:44:f6:b6:39:7b:bc:0c:
d8:56:44:e1:c1:ef:71:61:a3:35:1e:cd:f1:76:54:
5c:fa:af:e3:9e:89:b7:84:84:ba:ba:41:ac:99:1c:
22:af:51:fe:5c:96:ae:3e:6a:4f:da:16:9d:cb:3b:
28:8d:35:a7:b4:83:b9:cb:2f:b4:95:c4:af:11:71:
a3:20:e4:84:d1:a9:2f:15:52:c3:45:dd:38:88:38:
3e:64:fd:e4:98:b6:88:d9:8d:4e:77:63:7f:ac:1e:
e9:66:9d:06:b1:e0:95:e6:a8:c4:b5:45:e0:30:35:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:92:4F:B4:AA:A4:98:E4:9E:62:67:EB:13:CA:99:4B:39:96:3B
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:77:88:68:d7:e8:b5:10:fb:9b:1c:09:18:20:2d:de:f4:
ea:bb:70:4f:4d:2b:b1:8f:b0:87:ad:9c:ab:21:75:3f:5a:a4:
8c:c9:7d:de:18:14:97:11:d6:88:dc:9f:4c:91:bc:b4:4d:06:
1a:91:7a:e5:34:9e:63:b7:68:76:12:69:5b:dc:8d:01:b3:f7:
46:a2:70:6e:18:2c:96:f6:04:ad:40:ae:c3:a5:96:a8:a5:36:
d2:7c:b4:3f:a4:89:26:af:7f:86:a0:37:a3:45:ae:0a:23:64:
55:3c:32:50:f7:81:4d:ea:f7:1a:1a:e8:1c:61:50:69:44:83:
89:96:3a:39:95:b5:c2:7b:7a:a0:ee:2a:5c:00:13:76:0a:4a:
b9:42:d1:a1:29:06:d3:fe:e2:d9:c8:56:ea:d9:e8:d5:17:f6:
30:ef:50:3d:84:1a:a0:2c:1f:85:1f:46:fc:e7:93:5d:2e:5a:
46:86:f8:96:10:11:84:07:98:9c:b1:29:01:cd:6b:48:58:9a:
e8:87:e6:6d:4f:6d:60:6d:70:67:2c:9e:c4:86:f9:04:d1:2b:
02:19:ea:ae:fe:b9:38:71:77:91:fa:85:e4:2c:07:41:9d:e2:
44:73:97:df:c9:b1:9b:ac:02:92:b1:98:0c:ec:9e:ee:72:e3:
8a:3e:39:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNF/Q+P7KufWiVc4yvQX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0
ZGQwZjAwHhcNMjYwMjA5MDcwMTE3WhcNMjYwMjEwMDcwMTE3WjAzMTEwLwYDVQQD
EygxYmFlOTI0ZmI0YWFhNDk4ZTQ5ZTYyNjdlYjEzY2E5OTRiMzk5NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0G13rNCq6GCbtekEquRU+Yb7u9X
yck+BVZVwbQ3jZMMzLMucja8LbD6vVpt4Lhn5CyYnu1juuoFny20P+g/9zNhCIuv
cAd7Biebxe81HMRZDqQAY8YAPk7HZriADjt1CbmvcYn7bCVNVlT9fXxs3cBdfymw
Rils2VmNiT4m/NQ0P30bI1mKOPhVP5wgBkT2tjl7vAzYVkThwe9xYaM1Hs3xdlRc
+q/jnom3hIS6ukGsmRwir1H+XJauPmpP2hadyzsojTWntIO5yy+0lcSvEXGjIOSE
0akvFVLDRd04iDg+ZP3kmLaI2Y1Od2N/rB7pZp0GseCV5qjEtUXgMDWwDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuukk+0qqSY5J5iZ+sTyplLOZY7MB8GA1UdIwQY
MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et
OWQ1NmUzYWRjYTkwLzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw
LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMN3iGjX
6LUQ+5scCRggLd706rtwT00rsY+wh62cqyF1P1qkjMl93hgUlxHWiNyfTJG8tE0G
GpF65TSeY7dodhJpW9yNAbP3RqJwbhgslvYErUCuw6WWqKU20ny0P6SJJq9/hqA3
o0WuCiNkVTwyUPeBTer3GhroHGFQaUSDiZY6OZW1wnt6oO4qXAATdgpKuULRoSkG
0/7i2chW6tno1Rf2MO9QPYQaoCwfhR9G/OeTXS5aRob4lhARhAeYnLEpAc1rSFia
6IfmbU9tYG1wZyyexIb5BNErAhnqrv65OHF3kfqF5CwHQZ3iRHOX38mxm6wCkrGY
DOye7nLjij45PA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:25 2026 by rpki-client