This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: bw54tbMQ5mS7/JuUVz4BJUM2XRhOGyewbDlIZPi5fKk=
Subject key identifier: AC:65:CD:7C:EA:06:07:4C:55:B3:A0:29:29:52:BC:70:FB:D4:90:8C
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019C42463676D7966F432FFAE872B06509FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0E3F
Signing time: Mon 09 Feb 2026 12:00:23 +0000
Manifest this update: Mon 09 Feb 2026 12:00:23 +0000
Manifest next update: Tue 10 Feb 2026 12:00:23 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: fcsawrnzRfzCdJP6tn77aaq3WSyeev7gIx5SQONOchQ=)
2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:36:76:d7:96:6f:43:2f:fa:e8:72:b0:65:09:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Feb 9 12:00:23 2026 GMT
Not After : Feb 10 12:00:23 2026 GMT
Subject: CN=ac65cd7cea06074c55b3a0292952bc70fbd4908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:f0:66:4c:91:6c:51:e0:1f:46:6e:c1:cb:
d8:e4:5f:2c:33:5b:ee:e3:e9:23:e4:2b:b6:02:fe:
42:a5:fa:f8:04:99:5c:4e:c8:bb:de:64:28:48:6d:
46:22:a2:b6:22:fd:1e:75:ad:d7:c1:85:9b:9b:d6:
74:a6:0f:14:f4:a8:a5:56:4b:b4:df:1f:40:dc:fa:
c1:c1:b5:3c:13:5a:23:ba:26:d6:dc:3b:cc:9a:12:
9c:4a:6e:c8:ce:92:14:5e:3e:3b:67:12:f3:00:90:
91:b2:75:d0:07:13:f5:ee:1f:a6:f6:c5:6d:51:b1:
e7:4a:cb:30:e9:e4:7d:d2:72:22:29:61:9d:1a:d2:
ad:ed:5e:3e:97:1b:28:d5:1e:c9:05:80:d2:be:c6:
95:32:84:43:c4:1b:be:19:ea:d6:e6:5b:79:8e:e4:
e8:e5:fe:66:db:02:c3:25:5f:b9:d1:89:3e:58:ae:
06:e5:b1:6e:3f:5e:7b:5e:c7:30:cd:48:17:6c:6a:
56:43:ab:2c:78:b5:84:39:af:f5:4a:be:3b:7b:3c:
a1:22:53:6a:a8:2e:95:f6:0c:a2:57:d0:c8:76:5f:
73:8b:a0:2f:05:27:8c:fb:3d:0c:c0:5f:6c:fa:38:
9b:9f:0c:62:01:6c:3a:b7:bc:2f:f6:e4:cb:74:c0:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:CD:7C:EA:06:07:4C:55:B3:A0:29:29:52:BC:70:FB:D4:90:8C
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3c:e9:e9:66:29:d0:b7:5d:9e:f9:4a:36:c3:0e:b9:f0:09:
1a:a5:ad:a8:3a:50:ac:b3:59:a0:c3:45:b4:62:6f:81:f7:c8:
3e:b7:c1:a0:44:a8:d8:15:fb:2f:d7:7f:77:18:2b:6e:98:37:
2d:56:46:76:c3:8d:54:2d:25:63:79:00:37:c9:d4:62:cc:b4:
94:71:40:7f:bc:7a:b3:18:44:ab:49:e4:92:59:e3:8c:71:c3:
42:5d:c3:6f:c8:d3:83:d4:6f:d9:84:49:a0:d8:c5:d3:8e:9e:
9a:58:d8:be:d4:fc:6d:ab:b3:b3:f2:75:c3:76:ac:a4:cf:66:
cd:11:72:4c:81:ce:32:46:01:21:bd:55:b0:86:18:87:57:f5:
15:8f:23:bf:67:29:ef:b4:77:40:18:1b:97:a9:c0:9a:46:c6:
d9:0e:b5:82:a0:2b:00:79:d6:8d:52:43:a9:59:d4:34:81:00:
8a:6e:d0:c5:c5:98:26:e6:99:0c:90:20:56:f7:69:56:42:7d:
b3:7f:f3:3e:29:f4:08:07:fe:aa:e7:de:ac:b9:8f:95:fd:c0:
dd:6a:4c:0c:b3:69:b3:fa:5e:8e:1b:20:8a:dd:e4:fa:13:27:
64:51:38:51:6f:d8:da:55:3c:21:65:f1:89:72:5c:99:c9:a9:
92:39:0f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjZ215ZvQy/66HKwZQn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD
EyhhYzY1Y2Q3Y2VhMDYwNzRjNTViM2EwMjkyOTUyYmM3MGZiZDQ5MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBHwZkyRbFHgH0ZuwcvY5F8sM1vu
4+kj5Cu2Av5Cpfr4BJlcTsi73mQoSG1GIqK2Iv0eda3XwYWbm9Z0pg8U9KilVku0
3x9A3PrBwbU8E1ojuibW3DvMmhKcSm7IzpIUXj47ZxLzAJCRsnXQBxP17h+m9sVt
UbHnSssw6eR90nIiKWGdGtKt7V4+lxso1R7JBYDSvsaVMoRDxBu+GerW5lt5juTo
5f5m2wLDJV+50Yk+WK4G5bFuP157XscwzUgXbGpWQ6sseLWEOa/1Sr47ezyhIlNq
qC6V9gyiV9DIdl9zi6AvBSeM+z0MwF9s+jibnwxiAWw6t7wv9uTLdMDklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxlzXzqBgdMVbOgKSlSvHD71JCMMB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjzp6WYp
0LddnvlKNsMOufAJGqWtqDpQrLNZoMNFtGJvgffIPrfBoESo2BX7L9d/dxgrbpg3
LVZGdsONVC0lY3kAN8nUYsy0lHFAf7x6sxhEq0nkklnjjHHDQl3Db8jTg9Rv2YRJ
oNjF046emljYvtT8bauzs/J1w3aspM9mzRFyTIHOMkYBIb1VsIYYh1f1FY8jv2cp
77R3QBgbl6nAmkbG2Q61gqArAHnWjVJDqVnUNIEAim7QxcWYJuaZDJAgVvdpVkJ9
s3/zPin0CAf+quferLmPlf3A3WpMDLNps/pejhsgit3k+hMnZFE4UW/Y2lU8IWXx
iXJcmcmpkjkPZg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:15 2026 by rpki-client