This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: 6tmSiPo+LCEic7cdRRo/YBd/80G1yURVWoIpxa0CUZY=
Subject key identifier: 1F:A8:01:EA:35:6C:D4:17:F3:A8:A9:22:C0:20:BA:C5:01:32:CF:5F
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 019C42B438FEC8C3BB17156738713F11F1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0D69
Signing time: Mon 09 Feb 2026 14:00:33 +0000
Manifest this update: Mon 09 Feb 2026 14:00:33 +0000
Manifest next update: Tue 10 Feb 2026 14:00:33 +0000
Files and hashes: 1: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: friXdfjmQd4LNKojvpuy+SOGU0Z2ly/i+rluoMKy2eg=)
2: LmAKZqBdTFF5oLsEoluyDIA0344.roa (hash: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:38:fe:c8:c3:bb:17:15:67:38:71:3f:11:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Feb 9 14:00:33 2026 GMT
Not After : Feb 10 14:00:33 2026 GMT
Subject: CN=1fa801ea356cd417f3a8a922c020bac50132cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:d2:bb:aa:13:71:99:92:9a:01:eb:80:98:
7a:e0:31:b4:82:75:7f:a9:b9:23:c0:28:61:8d:1e:
ee:b2:b8:16:28:3c:b1:0e:72:85:7d:c2:6b:3b:4f:
34:ba:ab:6f:6f:de:e7:5a:18:06:7c:14:33:56:95:
b6:00:89:7f:09:03:47:7b:96:92:be:3f:a0:ac:61:
92:2a:c6:6d:92:82:36:aa:e4:0d:be:ec:90:13:97:
fe:ff:92:34:08:e2:1f:b9:19:d1:59:2d:37:e9:0e:
ec:03:18:3e:9a:d6:42:9d:db:29:0a:d4:c0:cc:b8:
76:e5:18:3a:52:e7:04:9f:ba:9d:18:63:1c:f8:8a:
6c:5e:3f:5c:a6:c9:da:92:88:c9:73:2a:5b:2c:8d:
09:33:cd:81:b3:6b:f4:58:de:6e:e8:92:0c:97:c2:
64:18:de:be:88:da:6d:41:80:40:da:6d:ba:df:76:
40:fc:1c:33:8e:80:52:19:87:47:e0:a0:4a:ca:5b:
82:2d:e4:3b:c4:c1:43:00:f7:22:08:b4:05:3b:55:
3c:48:11:bc:40:44:95:f1:ea:7f:f1:f7:a9:ae:1b:
54:53:a3:5a:3a:3c:6e:2d:1e:06:ff:0b:38:f1:ed:
77:81:da:55:29:87:a8:a8:9f:cc:e6:1b:f2:58:e7:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:01:EA:35:6C:D4:17:F3:A8:A9:22:C0:20:BA:C5:01:32:CF:5F
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0c:5c:9f:5e:25:1c:cc:f5:f9:15:ab:b5:25:39:45:5f:d3:
11:18:da:9a:65:7e:22:ec:2c:d1:24:02:e5:37:a2:04:39:3a:
75:21:c9:de:66:a3:f3:e4:01:3d:a5:c6:27:0f:dd:42:69:64:
d9:1c:c2:88:40:36:9a:bc:38:16:4f:06:37:f0:2c:99:f5:fa:
2c:54:86:fa:df:b8:a5:2a:bd:a8:fd:3a:f6:3a:db:77:4e:a4:
3a:00:c0:a8:92:dc:7d:d8:74:13:d4:0a:35:cb:14:3b:d4:26:
4a:6d:4d:1e:d3:3c:82:c8:2b:d5:20:8c:07:78:b6:bc:72:2e:
8e:6a:04:bb:ac:75:20:c3:7f:f8:bd:44:6b:f0:6c:db:5c:e2:
84:b6:41:93:11:7b:d5:71:1f:a2:27:a2:de:1f:ca:eb:e6:4c:
3f:1f:2f:af:fa:49:73:00:0c:f5:f9:92:8b:b5:60:9f:b0:22:
da:82:04:e2:83:f0:cf:e8:80:20:f5:e2:43:34:3f:da:cd:e7:
6c:02:81:b5:e1:af:5a:71:a0:d9:7a:6a:2b:e1:ad:c7:fb:6a:
f9:96:ed:1a:1c:49:de:61:15:54:d7:d9:d2:ce:96:fe:af:8d:
84:1e:c1:2e:9a:b3:5b:72:95:18:5e:0d:24:18:aa:37:e3:59:
c7:fa:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:08 2026 by rpki-client