This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: HKCjMW5yd5N04BOWoK2R3gQx6u2hNYPysF72wrM7p1c=
Subject key identifier: 3E:9C:4A:7E:36:6D:7C:76:A3:41:F9:8D:62:BB:B8:22:35:87:6F:9B
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019C41A1E325C2145CE3372F93BCCBFC9AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0738
Signing time: Mon 09 Feb 2026 09:00:54 +0000
Manifest this update: Mon 09 Feb 2026 09:00:54 +0000
Manifest next update: Tue 10 Feb 2026 09:00:54 +0000
Files and hashes: 1: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (hash: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: ddS3nZ6G+DAjQfmtohCMiELk21AN3epMTTt/VuwA3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:e3:25:c2:14:5c:e3:37:2f:93:bc:cb:fc:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Feb 9 09:00:54 2026 GMT
Not After : Feb 10 09:00:54 2026 GMT
Subject: CN=3e9c4a7e366d7c76a341f98d62bbb82235876f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:a3:3f:24:31:c6:ab:e8:59:7c:06:7f:3d:
1c:7b:b1:c0:ea:60:fb:d0:0b:a2:77:f6:eb:68:94:
e9:e5:88:d3:20:08:45:35:89:25:4e:6c:a6:6a:bc:
cb:cb:0d:d5:c9:11:a5:b6:9c:cd:2b:9e:ec:54:11:
db:88:4d:0c:6e:2d:f7:ad:40:98:c6:07:9f:27:60:
b2:48:15:c3:61:60:b7:88:0a:78:62:e0:8e:ff:1d:
1e:41:99:08:57:43:74:db:be:94:ad:e4:3b:2d:fe:
b0:b8:7d:b4:ba:43:76:51:de:0a:40:fd:e6:52:63:
87:e0:d7:61:42:24:7c:ae:2a:50:a3:f3:05:e5:5e:
35:54:42:df:63:c2:8c:45:bb:94:ab:b6:0f:71:f3:
3c:a9:ea:9e:f9:ab:17:4b:a0:fa:7f:c1:4e:6a:3e:
60:aa:68:93:9e:11:3a:77:46:e4:05:10:c9:ec:44:
ce:87:31:a2:56:d3:dd:74:72:2f:df:d1:98:65:66:
0d:d3:03:2c:94:3e:0f:7d:bf:93:f7:bf:4f:c5:76:
96:2f:44:3f:c8:50:03:07:34:79:c8:f8:85:5a:03:
bc:28:08:25:bd:de:df:32:a5:f3:0c:02:f8:aa:bc:
21:6b:4f:3c:a0:fb:72:f4:f1:b1:33:e7:a3:81:b3:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:4A:7E:36:6D:7C:76:A3:41:F9:8D:62:BB:B8:22:35:87:6F:9B
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:d7:ff:a9:89:fc:8d:ed:4b:c0:b1:fb:3b:91:fb:54:d7:
12:5e:0c:bb:a0:96:a6:d6:b2:7f:9d:02:00:7c:f6:9f:ae:e0:
2c:01:85:61:7b:f2:7d:ed:0a:45:89:87:0e:30:8e:f8:1f:82:
97:7e:17:a3:75:2c:d9:62:e4:4b:89:96:08:d3:e2:f6:3e:18:
b8:c9:68:43:95:83:ca:a4:b2:f2:d8:6d:e5:36:af:29:85:29:
de:22:03:40:0a:ab:29:d6:4a:c6:fb:50:60:ed:4e:63:4e:4d:
4b:95:08:95:41:55:b2:e6:22:be:27:a7:67:5c:70:b9:53:30:
ab:5a:20:bc:b0:78:b7:06:61:71:65:85:9a:23:e4:62:fe:5d:
a6:2d:fe:54:a7:95:50:62:95:f5:a1:f4:1f:9a:2a:2f:fa:b9:
d2:fc:2e:a4:5d:48:33:06:e2:e0:00:d2:cd:ff:e9:e8:57:64:
64:20:f6:69:04:e2:7b:a3:cf:da:3f:14:42:61:1a:8c:31:d3:
eb:5f:6c:e3:fd:8a:6a:43:eb:4a:52:83:e2:c9:e3:da:33:8e:
bd:54:84:f2:3c:c6:8a:18:63:ae:af:08:c7:de:b4:fd:22:0b:
47:ba:f5:83:f6:8b:bd:d0:30:6b:75:de:c3:41:e6:ca:bf:74:
db:e6:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:57 2026 by rpki-client