This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File: huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier: ABpQOCr/W7etC+MoYpuEakYD3Ox5srZXE8o1AuNxVtA=
Subject key identifier: 41:E3:6E:3C:99:F9:75:AC:09:F1:24:E3:21:4F:02:D9:CD:80:1C:05
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: 019C42B42E3D5D088442EEA9F9EE80667040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number: 1113
Signing time: Mon 09 Feb 2026 14:00:30 +0000
Manifest this update: Mon 09 Feb 2026 14:00:30 +0000
Manifest next update: Tue 10 Feb 2026 14:00:30 +0000
Files and hashes: 1: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: tnjrp0FbN9eC20cjF5y3Y/eINWlARdXMzE/fY1wwZG8=)
2: rU0QXFNtoWCEtxH8VZt7NQjfBkk.roa (hash: DX5PpK5nvqYsY6Lg/VDy96ASHQyrvBhk9m8SNvIdQJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2e:3d:5d:08:84:42:ee:a9:f9:ee:80:66:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Feb 9 14:00:30 2026 GMT
Not After : Feb 10 14:00:30 2026 GMT
Subject: CN=41e36e3c99f975ac09f124e3214f02d9cd801c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:a0:75:3c:c4:a8:a4:2d:0d:78:74:0f:d1:
d9:bc:98:62:36:5f:2f:07:32:41:eb:bb:ed:05:5a:
9e:60:d1:71:c3:6c:75:3e:d7:aa:ef:5d:6a:0d:71:
4b:d5:cf:2d:d2:1e:de:d5:11:eb:a2:57:c7:5e:37:
84:2c:df:4c:96:38:c7:ff:e7:91:c1:dc:08:e9:9e:
44:0e:8b:fb:e1:97:48:5f:84:1b:9a:58:ab:f7:bd:
16:d6:97:0f:4f:10:6d:f0:04:7c:59:8d:0f:e0:92:
68:87:a8:ff:cd:6e:61:44:d7:ac:9e:f3:ec:4d:70:
78:29:31:13:17:82:fb:0e:a5:9b:34:1f:d4:13:97:
a1:69:c0:ed:b1:6b:2b:06:6c:03:2b:05:63:70:7b:
6c:42:3a:a5:07:51:fc:f9:4f:55:69:2a:82:c2:5f:
ab:82:bc:8a:2d:35:07:4f:c9:54:a6:44:74:db:1a:
1b:fe:e7:65:04:42:a8:4d:fc:16:8c:66:d1:c4:ee:
11:f4:d8:6f:ac:80:2f:f2:03:d6:5b:fc:ce:0d:bd:
e5:ca:8a:4d:7b:39:bf:47:97:f8:ab:2a:52:ee:96:
3e:72:11:f5:8f:8d:fc:83:ba:bb:c0:c0:41:e4:96:
f3:33:f6:fa:45:70:2d:ac:4a:07:d7:ec:9c:a1:12:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:6E:3C:99:F9:75:AC:09:F1:24:E3:21:4F:02:D9:CD:80:1C:05
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d4:c6:a8:85:84:04:13:2f:d8:83:db:f7:b8:ab:70:41:3a:
8b:cb:d3:16:fd:81:85:28:8a:4d:42:f9:2b:e8:33:97:d0:5e:
a0:18:66:33:fe:51:48:73:e5:be:83:da:ac:48:04:e7:da:76:
e7:c5:35:a2:51:50:5c:b2:24:4e:d6:5c:95:72:c8:a2:5e:3e:
71:9e:1f:06:30:c4:45:d9:54:a7:d9:78:5a:40:fe:71:9b:88:
d0:fd:00:5b:fd:e7:6e:49:89:58:f5:b7:65:34:56:29:e9:7f:
f6:05:f7:e0:e1:f3:b8:c2:dd:df:01:a9:ed:fb:a1:a6:b7:b3:
27:df:31:35:4b:6a:60:25:c4:ba:2f:7e:9f:fc:58:3a:9c:76:
5f:08:d4:51:17:e2:0d:9f:fe:38:4d:30:28:98:23:f9:c7:70:
52:fb:89:7c:a7:20:4c:78:08:b4:7b:59:ef:0c:bb:a1:00:d4:
4e:03:97:40:1b:ac:0b:f8:ce:a4:db:a0:5b:5e:c5:69:98:bd:
6c:b9:d6:f0:87:b2:ea:94:8b:10:b1:f1:3a:98:07:d4:50:d7:
cf:79:70:bb:f7:b4:55:88:55:50:ab:60:cc:da:8e:d7:af:a2:
b9:7d:2c:b3:ab:32:c6:71:e8:d0:47:6e:8d:9d:d4:75:ed:df:
8e:3f:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client