This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: klioD+LxFfPdxKBCw1lJ+yNMZ54P4fvpA78YknDiGOg=
Subject key identifier: EE:3B:7E:61:7B:90:AF:7D:80:7C:05:B2:3B:7C:D3:6D:A4:BE:03:49
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 019C42EB308717F0F5FF1D54E56DA7094B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 1072
Signing time: Mon 09 Feb 2026 15:00:35 +0000
Manifest this update: Mon 09 Feb 2026 15:00:35 +0000
Manifest next update: Tue 10 Feb 2026 15:00:35 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: t7MxjWcWDEVQr9JZpbVfmj5ZQBf9zu9SQWugpp47pWc=)
2: NHDyAvAowEpZkYNotB2_FKVnj-U.roa (hash: jzWXVyP83SPdCwETB0N35NVU/yFw45PVeKqRU1Bxi/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:30:87:17:f0:f5:ff:1d:54:e5:6d:a7:09:4b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Feb 9 15:00:35 2026 GMT
Not After : Feb 10 15:00:35 2026 GMT
Subject: CN=ee3b7e617b90af7d807c05b23b7cd36da4be0349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:79:d4:a3:28:a2:0c:2d:21:cc:e0:71:09:
31:33:19:9d:41:16:15:5c:81:ed:35:02:06:42:9e:
60:bc:c4:c0:b1:54:53:94:d4:dc:5b:ad:d0:f7:d7:
64:0e:35:92:c8:a8:2e:3c:a9:b9:06:8e:be:71:1e:
27:39:94:3b:c4:8f:3d:1a:4b:5e:b1:19:75:3b:0c:
d7:e5:1f:fb:34:6d:1e:bf:49:7b:f6:fa:41:fd:83:
c5:ab:a4:30:01:50:3f:1f:45:e2:61:d4:8a:8b:37:
76:eb:c0:2f:35:e8:12:58:24:09:89:bf:c5:13:6b:
c3:49:a2:df:3c:64:c8:39:ba:d8:cc:ad:7a:b7:57:
a1:3e:19:40:89:cf:b6:b9:91:bf:7b:e5:00:b8:3f:
d0:95:94:b0:fa:dd:8e:12:40:39:bc:da:7c:41:30:
39:77:e4:97:a9:36:d0:ea:47:91:c7:6e:24:17:6e:
a1:4c:b9:e4:37:16:84:63:4a:99:4a:bf:b3:0a:7c:
33:d9:ca:61:50:fd:a7:fa:f4:dc:6c:99:ef:34:e3:
a0:02:da:6b:3c:c0:f5:6d:90:cd:05:d2:9f:68:be:
5c:5d:95:f1:69:6e:b8:cf:0b:5b:5e:e7:ee:3f:91:
6d:ee:52:77:60:84:64:be:75:3c:ff:97:48:82:aa:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:7E:61:7B:90:AF:7D:80:7C:05:B2:3B:7C:D3:6D:A4:BE:03:49
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:44:9f:ae:af:df:48:76:89:ff:49:a1:a6:05:e1:52:f1:30:
46:ed:4c:31:e2:d8:77:3c:8f:78:9b:5b:8a:49:60:8d:26:9c:
1e:f9:66:f7:45:97:27:d8:b9:d4:55:e7:d0:6b:f0:dc:8e:5b:
20:46:6c:ec:3c:c0:dc:bf:c8:45:28:a0:66:e2:2d:fd:df:09:
26:10:00:be:76:86:6c:68:b4:07:80:6c:5a:45:70:0a:f1:6b:
42:52:e4:2b:14:d9:26:80:ad:c5:46:55:fa:ae:22:1c:44:7e:
65:08:56:41:ca:1b:98:b4:6f:fc:b3:57:15:bf:ba:27:21:a7:
c9:0b:4c:8b:ee:af:29:32:cd:d9:11:d9:6d:8e:db:c2:f7:d3:
62:93:45:43:9c:0d:65:7f:7b:bb:2b:ca:e8:32:ef:77:c7:e4:
05:d3:cb:e9:04:56:1e:ae:e9:b2:33:46:d2:5b:65:55:70:e1:
63:75:f8:1f:09:9c:32:36:a7:53:e0:35:96:a3:48:b0:24:61:
41:2d:1b:63:23:7f:00:c6:f7:3b:78:c1:10:d6:b2:2a:2c:27:
9c:f2:9d:fd:b1:28:c3:97:b8:33:ea:ed:16:44:9e:72:95:86:
c4:f3:90:ed:18:9b:98:0a:fa:de:4c:e1:6d:9f:1b:bf:58:ba:
3d:3a:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:04 2026 by rpki-client