This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 2XZUWKt6Ud/jXPb6KhOeEOb1HOJYmssRXnKxFEOwauc=
Subject key identifier: C5:50:38:B4:6C:CC:19:B4:DF:DC:69:85:F7:84:B2:81:27:84:13:09
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019C07B2CDC552DF1ABB8FB807FD69F11A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 14C9
Signing time: Thu 29 Jan 2026 03:01:24 +0000
Manifest this update: Thu 29 Jan 2026 03:01:24 +0000
Manifest next update: Fri 30 Jan 2026 03:01:24 +0000
Files and hashes: 1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: xRppFZ6h+XUAnNTGL/8UGPUsY7vSWX68CSJ5CUYN/So=)
5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:07:b2:cd:c5:52:df:1a:bb:8f:b8:07:fd:69:f1:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 29 03:01:24 2026 GMT
Not After : Jan 30 03:01:24 2026 GMT
Subject: CN=c55038b46ccc19b4dfdc6985f784b28127841309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:01:20:8d:ba:74:78:78:78:fc:21:2b:86:
a7:f0:64:bb:0e:e4:66:76:c3:db:49:3e:5f:b1:a3:
71:16:01:ac:4a:a4:5c:00:63:3a:59:cd:0a:24:6d:
2e:42:41:d0:dc:34:35:e9:f4:38:63:d4:fe:00:5e:
6a:33:e8:15:7d:63:be:21:50:c4:cd:84:a1:c6:df:
98:5f:30:d6:c3:bb:01:d7:72:9e:6c:2a:88:00:a6:
68:13:05:48:8a:61:49:ce:44:8e:ab:93:99:95:05:
f3:88:01:c3:2b:74:ed:94:b3:df:74:61:79:0c:d8:
a6:1b:db:0c:bb:d4:04:b8:c9:08:0d:7e:e3:35:04:
0e:1c:0f:4b:9f:17:c5:11:c3:86:b0:e8:e4:57:87:
03:a8:1c:84:13:d0:5f:a4:fc:35:bd:0c:89:89:52:
dc:2c:cc:f0:e0:5c:5f:50:1d:08:be:b1:fc:27:57:
37:a3:eb:28:f4:03:6f:47:11:55:b9:60:fc:88:55:
c6:79:bf:b1:40:9c:19:bd:8d:f8:2a:d5:5e:bd:ca:
34:5e:a2:7e:55:18:f5:fb:aa:f5:19:12:a8:a8:c4:
f7:a3:1b:17:0f:e5:f7:83:0c:10:84:9c:74:b3:b2:
94:ea:b0:da:14:c3:11:86:77:19:7d:27:92:e4:ef:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:38:B4:6C:CC:19:B4:DF:DC:69:85:F7:84:B2:81:27:84:13:09
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:1b:64:08:6e:ae:49:a1:a2:79:e7:00:08:2c:64:10:db:
95:4e:fc:0e:f6:0c:aa:4d:57:e8:94:e7:d1:ed:ed:93:6c:01:
56:33:f8:83:a9:7f:62:bb:fd:49:d1:24:db:a3:8e:92:a4:a5:
78:ce:b8:a3:69:c2:f4:90:68:d7:cf:83:8c:5b:4a:ff:72:77:
c8:62:91:79:48:27:74:f9:4a:87:3b:ce:ac:49:44:85:c6:de:
02:a7:77:30:d6:88:ee:2c:e1:07:a8:4f:98:1f:54:80:9c:70:
5d:a4:c5:7e:83:bb:7c:9e:5b:bb:e6:41:27:20:4a:cc:8d:c5:
7b:0e:d9:61:5d:8d:d6:55:35:e7:9f:d5:85:ff:53:f6:75:03:
0d:f2:34:ec:85:09:65:96:33:bd:99:2d:77:7b:3e:5d:aa:30:
a2:b0:fe:8a:12:03:c7:46:c4:5c:00:c2:f3:72:57:7f:58:21:
e3:3f:2d:62:7c:30:d5:72:da:f0:96:dc:c2:c1:b9:66:28:c1:
5d:5b:9f:c7:1f:d3:c9:e0:16:fc:fd:08:7d:5d:02:07:cf:30:
5b:48:53:dc:35:ff:de:86:e3:79:53:60:cc:a3:37:84:2d:23:
39:67:73:01:77:2b:97:64:84:e3:7b:19:2b:2c:59:58:c5:2f:
d4:3d:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 06:17:48 2026 by rpki-client