This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File: HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier: Yq9GbGVTU8VG3UjFud9xrExEOjnfVj65qV8FIT4HeJ8=
Subject key identifier: E6:14:5F:4C:C8:04:0B:2F:65:40:C8:E2:86:CB:4D:08:67:AB:62:D5
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer: /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial: 019C435919A07A1AF931CD5C118655EBF6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number: 0927
Signing time: Mon 09 Feb 2026 17:00:38 +0000
Manifest this update: Mon 09 Feb 2026 17:00:38 +0000
Manifest next update: Tue 10 Feb 2026 17:00:38 +0000
Files and hashes: 1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: gZZhZ6vHfVUDh793A4oZEphCBsNxNmeXHxZHfYfXBj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:19:a0:7a:1a:f9:31:cd:5c:11:86:55:eb:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Validity
Not Before: Feb 9 17:00:38 2026 GMT
Not After : Feb 10 17:00:38 2026 GMT
Subject: CN=e6145f4cc8040b2f6540c8e286cb4d0867ab62d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:e3:4f:c9:fd:3f:38:4b:15:56:79:6d:4d:
93:3f:5b:24:64:11:ad:da:54:c5:9e:42:1f:37:1b:
7f:4a:ba:72:a1:a6:b1:03:a2:62:b1:24:d9:49:42:
16:65:0d:f0:bc:c4:0b:93:54:f1:e0:33:00:26:87:
0e:c4:23:a4:e2:0b:93:51:20:11:48:c6:7d:ae:e5:
68:eb:c5:06:5d:f3:8a:3f:b7:d2:4c:1d:d6:b5:cb:
57:7e:8b:bd:ff:3b:d2:de:71:f8:7d:2e:d6:be:d3:
10:90:20:4e:80:e3:29:77:91:ae:b1:c0:9d:36:05:
17:3b:3a:47:40:8a:5a:11:de:01:99:5f:fa:28:b2:
67:ed:98:ce:de:8f:af:23:3f:07:a7:7d:7a:f7:12:
03:f0:b2:54:dd:ee:3d:67:94:a2:11:3b:7e:e8:14:
32:84:6a:bf:8f:99:fc:43:17:9a:63:bb:59:ec:43:
71:42:55:43:b9:5d:9c:72:85:6d:ef:ce:bf:3d:24:
bc:54:bd:ef:f3:46:81:8f:a3:c3:a8:a3:7f:90:56:
07:ae:55:43:bf:12:c4:76:df:ae:d5:04:9e:98:1c:
15:23:b2:1c:a0:1c:d4:28:1d:14:ff:5d:16:18:9b:
f3:8f:d8:d5:fc:81:85:61:b9:3f:d3:07:e9:ef:e1:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:5F:4C:C8:04:0B:2F:65:40:C8:E2:86:CB:4D:08:67:AB:62:D5
X509v3 Authority Key Identifier:
keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:f5:b5:03:0c:db:f9:64:5d:d6:9d:7a:d0:54:0c:37:a8:
68:ae:19:7d:59:d6:36:cc:3e:1b:ac:bf:8e:c6:fd:f0:c0:48:
7c:af:82:67:58:bc:a2:7b:df:ea:5d:58:ce:64:eb:76:4b:0c:
21:b3:3e:94:1f:39:63:32:c1:7e:9b:3a:10:fc:86:94:dd:e6:
92:1f:0e:04:a1:c3:87:2f:b9:03:c8:2a:4f:87:37:a2:2f:f3:
17:41:63:b0:d6:96:9e:17:e3:06:28:f9:7a:d0:87:c2:7b:35:
55:0e:6e:ef:c3:1c:ae:49:12:34:d3:3c:50:fc:1d:e2:7b:70:
17:77:67:27:13:18:33:98:ad:e6:00:c8:22:0b:ff:fe:72:6a:
ac:fe:28:3b:c8:e6:77:4e:04:f9:ee:1b:05:11:53:98:80:1e:
77:b1:24:e7:a6:db:9f:35:65:f9:db:1b:d5:49:c7:74:c0:c1:
d2:04:bd:b6:23:39:cf:1f:ca:64:b5:b0:13:0d:6a:b1:0d:16:
f0:5c:91:e2:bf:ed:06:e7:3c:40:15:c3:dc:47:90:87:db:39:
91:c2:3f:ae:a3:6d:03:b4:a3:1b:9f:2a:9b:ed:2b:f4:be:bb:
a8:97:60:bf:78:8c:b1:a7:86:9c:c3:c8:3b:7a:15:dd:15:a1:
b1:90:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:36 2026 by rpki-client