This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: RlfoXce/GpSxVX723wOD2MFNcSZZmIKgURcbpcEayME=
Subject key identifier: D4:9C:4F:E4:47:21:1D:AC:89:DC:48:B0:03:2D:9A:4D:2F:54:B5:05
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019C438FDE88D273EB6AAD04347D292BC8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 08A6
Signing time: Mon 09 Feb 2026 18:00:27 +0000
Manifest this update: Mon 09 Feb 2026 18:00:27 +0000
Manifest next update: Tue 10 Feb 2026 18:00:27 +0000
Files and hashes: 1: CVRiR4PWA5mkMUyfsZHNmuQrLLc.roa (hash: 5ktDsOfkaJ/bYAV74Q0Rw6jgw2aMIQHNLymwbsIWQIk=)
2: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: aEKxQaQyXmmiG7qWzvtXXQRPsOgMUYlrmVF26CRUaiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:de:88:d2:73:eb:6a:ad:04:34:7d:29:2b:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Feb 9 18:00:27 2026 GMT
Not After : Feb 10 18:00:27 2026 GMT
Subject: CN=d49c4fe447211dac89dc48b0032d9a4d2f54b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:10:b7:f2:e8:1b:5f:3c:d7:58:84:c5:1f:
84:0d:23:28:0e:63:e6:fc:df:5a:8c:73:ed:38:3f:
03:70:45:6d:97:1a:2f:52:f4:69:36:c3:26:bf:17:
8f:3f:32:3b:10:cb:2a:7a:04:10:c8:43:ab:e3:c9:
22:f0:ec:0e:c8:76:f6:6f:0f:89:f9:b8:bc:2a:cb:
a8:21:22:b3:56:c4:1a:8d:73:59:7c:0b:b0:47:0c:
a7:b0:1c:11:f0:4e:6c:78:b5:5c:85:bd:b6:a3:65:
cf:4b:fd:e2:69:10:28:ea:c5:b6:3b:82:b6:40:16:
09:e3:76:2b:d4:1b:b2:46:f0:f3:58:23:0b:ce:7d:
99:8e:b1:f6:21:33:00:8d:cc:6b:54:33:d7:24:0e:
d8:ef:96:45:6c:fb:35:aa:10:74:49:bf:34:fd:c2:
48:bc:60:e3:fb:c4:a7:93:7a:d5:cb:fb:c4:44:48:
68:e9:79:61:0c:c2:ed:7f:7c:bb:40:94:17:12:67:
17:3f:fb:56:6f:0a:8e:ab:86:1f:b8:b0:4f:77:64:
5d:1d:d0:63:e0:17:1b:c9:75:9f:0c:a8:98:52:7e:
e2:6c:e1:ce:e9:b3:5d:cd:77:3a:bd:25:1f:cc:a9:
b3:bc:b0:1f:fa:11:b9:3c:2b:71:80:b6:db:d5:b8:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:4F:E4:47:21:1D:AC:89:DC:48:B0:03:2D:9A:4D:2F:54:B5:05
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:bc:62:82:7b:79:d9:69:90:63:56:52:e2:da:5a:3a:33:
5d:83:67:08:e8:d1:28:39:cb:21:df:98:5f:02:8d:9d:1a:09:
de:c2:6c:27:90:9c:c4:7c:b7:1b:6e:ed:1e:c7:c4:eb:a6:54:
e9:14:8f:db:c2:89:d1:ed:b3:16:c7:b7:cc:8c:81:0e:c7:34:
11:2e:a8:7a:aa:60:86:3e:92:82:68:be:66:c3:cc:c1:61:e8:
eb:f5:89:35:65:2c:ec:78:c6:5d:22:a8:36:c1:1a:ba:80:4a:
5f:6a:39:97:6f:e5:95:53:01:17:31:bb:0c:dd:8a:36:eb:b7:
30:42:fb:93:b6:fa:89:74:89:1c:3c:10:fa:03:ea:bd:52:0f:
d4:5d:01:04:6d:30:5f:3d:a1:a0:a2:13:82:f0:e4:cb:e7:b6:
ed:2e:ff:9f:43:29:46:dc:80:66:1b:bc:96:4b:16:18:de:27:
b6:fc:21:ff:cf:d4:1b:9b:42:b4:28:77:ef:f2:2c:5f:f8:db:
44:9f:cf:6a:f8:8a:b2:a7:ae:f4:83:89:32:21:d1:24:2c:05:
d6:e3:6e:ac:d3:57:23:9e:2f:c1:ba:9b:30:f4:aa:7d:35:13:
73:f3:dd:29:f5:6d:79:a4:bd:87:94:2a:95:e2:27:7c:e7:7c:
fd:ce:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:48 2026 by rpki-client