This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier: 3DoxpqtZZjpdt9Lo0mYPUT+hyGK1HMU8Rn2PnryYgJs=
Subject key identifier: 99:5F:34:A1:35:50:52:1A:6C:C8:AF:CA:C6:FD:68:8B:39:B4:8C:38
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019BF8E4467810680DE5AB30A2BCBDB58BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number: 0D96
Signing time: Mon 26 Jan 2026 06:01:08 +0000
Manifest this update: Mon 26 Jan 2026 06:01:08 +0000
Manifest next update: Tue 27 Jan 2026 06:01:08 +0000
Files and hashes: 1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: 9b3X4Fhzt1B5wX0smEYcXtO63KxKUFT3fEF9eZFCjpw=)
3: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
4: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
5: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
6: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
7: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e4:46:78:10:68:0d:e5:ab:30:a2:bc:bd:b5:8b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 26 06:01:08 2026 GMT
Not After : Jan 27 06:01:08 2026 GMT
Subject: CN=995f34a13550521a6cc8afcac6fd688b39b48c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:eb:c0:a6:ea:2d:4e:94:d4:2c:a7:97:75:
62:94:b3:06:44:24:2d:b6:6a:c5:c6:02:cf:f6:d8:
95:dc:44:7c:fa:ed:c6:cf:65:f2:5b:29:4b:d0:45:
0b:89:55:97:f5:89:4e:53:13:aa:4a:63:49:d4:09:
14:71:89:75:e4:d9:5e:6a:2a:c2:44:c6:fa:38:b9:
4b:27:38:f6:ba:ce:6b:63:12:0c:fc:02:ba:96:a4:
f0:7a:94:2f:31:bd:e9:5d:da:b1:88:02:2c:00:07:
92:3b:22:c0:0e:42:7e:e8:05:52:e0:d8:4d:aa:81:
42:81:4f:69:89:7f:f0:88:a1:e0:37:ab:a3:99:88:
52:5f:69:7d:0e:0c:48:42:75:db:c1:08:ce:32:63:
0a:4a:67:43:0f:ef:c7:78:39:0f:9f:62:c1:98:68:
d3:d2:fb:60:f9:87:98:4e:fc:5a:0a:5b:63:02:d5:
6a:8b:43:70:c1:e2:52:9b:0a:ac:8a:54:fb:89:a5:
a4:cb:a1:d3:c4:ea:a3:92:e7:4a:2b:a6:b0:ad:6f:
1a:59:d3:50:11:2f:84:57:b2:e3:d9:28:2d:67:8b:
f0:97:fd:2c:36:e6:c1:3f:87:72:72:ba:a3:7e:af:
24:f0:24:8e:e4:ee:9c:1d:90:95:ea:cf:f4:ab:71:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:34:A1:35:50:52:1A:6C:C8:AF:CA:C6:FD:68:8B:39:B4:8C:38
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:db:cb:ac:49:d7:5b:31:1a:dc:0c:93:41:97:0b:06:26:
a8:31:85:92:39:78:7e:e0:01:a7:ab:c1:a4:1b:9f:1f:3a:68:
f7:3e:75:77:08:a9:52:aa:7e:36:0b:ce:0a:38:a6:24:13:ba:
3c:70:a4:28:5c:a0:ec:d8:a9:d3:ea:a6:8c:b0:1b:59:5b:d3:
a7:10:b8:e4:a4:9b:3f:03:48:f7:c6:27:95:c9:a2:d3:9c:23:
d9:c8:18:a5:09:57:97:c6:70:64:3e:e5:40:65:44:b1:28:26:
c3:2d:05:e0:9f:4c:2e:e0:d1:b8:53:2f:17:a6:67:4b:3f:27:
e0:9b:22:0b:6c:ad:2c:d1:46:3f:ea:93:62:90:4d:c4:67:41:
d7:09:42:28:59:35:36:ad:33:3a:44:bb:8e:39:3b:8c:83:ba:
03:84:bd:fd:6b:95:c6:06:f3:d8:1e:b1:25:77:51:5e:b0:ba:
b2:d5:22:8e:41:91:08:c7:2b:55:10:67:39:57:6d:91:12:82:
af:db:b3:61:bd:d7:be:cc:12:c2:fc:5c:f1:00:ba:5a:c6:bd:
c6:2d:66:5f:e5:14:31:67:97:9e:94:01:4c:43:37:83:73:4b:
ac:73:f0:29:dc:f8:68:a3:98:d9:0e:54:ae:26:77:96:84:68:
7e:22:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:10:01 2026 by rpki-client