This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: iNv6pTJgE19gQzeQ8idKiXj5AqbvypDEEiH67o8a2lA=
Subject key identifier: 8F:8F:32:0A:1E:98:FA:57:B1:EF:2F:35:20:F7:F6:41:BB:A7:9E:CE
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019C427E2DE6F580820CE6B63439B975AC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 13:01:31 +0000
Manifest this update: Mon 09 Feb 2026 13:01:31 +0000
Manifest next update: Tue 10 Feb 2026 13:01:31 +0000
Files and hashes: 1: F2tzVDQBbkmIrf7Rzc0Z1mCkiic.roa (hash: 9oOlsoWuljVApYdk+dHkE0uI0xd3Y1H6oZJ44vPob6Y=)
2: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: dv70cZLak1dK36Z04P6yoOuN+mDL7wFMSIkoO4ad6ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:2d:e6:f5:80:82:0c:e6:b6:34:39:b9:75:ac:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Feb 9 13:01:31 2026 GMT
Not After : Feb 10 13:01:31 2026 GMT
Subject: CN=8f8f320a1e98fa57b1ef2f3520f7f641bba79ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:ff:6c:29:31:47:6e:54:ad:e1:c0:8f:9f:
80:b6:45:e9:3e:4d:0c:4b:4d:38:bb:ba:53:72:d3:
7b:29:17:cc:14:5a:f0:ef:80:eb:6f:b6:1f:8a:e1:
0f:9e:ee:57:69:8c:4f:80:9d:4e:fb:75:36:69:57:
4b:cd:30:b2:b5:ac:77:c4:94:73:51:db:43:a1:2e:
e8:65:d1:a9:fe:bc:2b:02:9d:c3:8d:5e:86:28:7f:
40:a5:cd:9f:b8:65:ff:18:59:e1:6e:a8:23:58:90:
b3:be:9d:5b:06:e0:b3:82:d2:80:c6:ea:d2:cd:f1:
96:c2:ed:62:26:0b:b6:a4:28:ab:e8:c6:b2:73:a7:
af:2f:ef:60:34:88:0b:8f:02:bd:19:d6:49:60:0b:
4b:89:a3:cc:a5:ca:ae:0f:48:eb:65:70:5a:4c:c8:
4b:62:b4:a8:bf:d1:73:4c:5b:2e:e6:4b:34:97:04:
2a:a5:15:e5:66:40:df:89:6c:6a:18:83:ff:f0:60:
79:f7:70:4f:bd:9b:27:ae:54:08:37:44:e3:34:5d:
79:6f:c8:b1:68:35:58:65:00:2a:e9:ea:30:15:1b:
4a:b4:cc:2c:1f:ea:3f:75:f0:ca:44:09:2a:07:dd:
ad:75:98:ae:87:ef:fd:53:64:a8:1b:d6:d2:62:28:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:32:0A:1E:98:FA:57:B1:EF:2F:35:20:F7:F6:41:BB:A7:9E:CE
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:48:af:a1:5a:79:d5:90:fb:59:6a:23:fd:fc:79:c2:e2:
57:1a:92:d8:a8:65:d4:fd:fd:c1:5a:e5:31:35:4a:86:44:d6:
59:8a:3e:5d:0a:b6:6d:9e:08:09:a7:c1:bc:af:b1:91:48:71:
89:a3:f4:b2:95:8c:a9:77:dd:3c:2e:d8:6d:bd:6d:f7:c6:6c:
98:47:e5:f7:ef:8a:88:35:1f:bb:d3:dd:08:c1:3c:ec:58:92:
a1:10:56:ce:e5:7e:bb:34:f9:d2:4b:93:ad:94:62:14:41:43:
56:bc:33:36:5c:2d:1c:19:9d:2f:9d:80:45:cd:54:a1:b2:28:
e0:d9:1f:cb:17:fa:49:5f:6b:78:22:24:66:f7:ba:f9:23:83:
87:70:67:7b:e6:f6:bc:2e:87:03:84:8f:b2:4e:a1:ae:59:27:
fb:82:8a:6f:bc:f4:95:31:2d:01:f7:2c:d8:d3:01:a0:19:14:
34:67:ca:b5:ee:18:96:2d:cd:26:37:8a:2a:73:85:fc:3f:9d:
d8:b6:46:34:bc:d9:d2:74:e7:3e:8b:d2:d5:1e:a9:37:78:fa:
4f:98:1a:83:a0:d6:5c:81:5d:5b:a2:fa:49:d7:4c:26:4b:59:
02:8f:fc:78:7e:e7:02:3c:30:ae:d0:cf:cc:82:82:85:18:d5:
6e:d6:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:29 2026 by rpki-client