This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: L3eX8K5ejc1f7X41n0RwuXl/sLmQpsOx/zcrzrsNROk=
Subject key identifier: BD:7F:97:B2:BF:8C:EF:EE:FD:6F:4A:11:34:00:E4:72:02:4B:95:0B
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 019C446C0588054FB5F5CA67D6800E7E6241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 1701
Signing time: Mon 09 Feb 2026 22:00:55 +0000
Manifest this update: Mon 09 Feb 2026 22:00:55 +0000
Manifest next update: Tue 10 Feb 2026 22:00:55 +0000
Files and hashes: 1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: q0OPxOgSHYM6EobCRinX1brDaMnL6/1tcSkcsE8Z2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:05:88:05:4f:b5:f5:ca:67:d6:80:0e:7e:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Feb 9 22:00:55 2026 GMT
Not After : Feb 10 22:00:55 2026 GMT
Subject: CN=bd7f97b2bf8cefeefd6f4a113400e472024b950b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:82:73:35:de:d4:85:48:e2:7d:01:7a:94:
7a:1c:49:f7:b9:a7:38:f0:6a:10:78:b4:97:1c:94:
5b:72:ca:8a:13:03:93:3c:c6:14:6e:4a:60:ef:a9:
2f:8d:d8:9c:0a:b0:f4:d6:b9:83:48:6f:57:fc:d4:
50:12:ec:9e:f1:cb:af:fd:e9:2e:8c:09:78:ab:87:
15:82:9e:e0:81:d0:c3:65:d2:04:49:cc:fc:08:07:
63:63:e5:f4:35:68:43:77:34:85:1c:5c:70:0a:90:
86:58:78:cb:89:18:50:a9:02:38:37:64:39:65:12:
54:8c:2a:d2:87:d1:3c:f2:7e:89:1e:14:17:da:88:
78:bf:19:18:f5:5f:c8:cb:30:fa:82:77:c0:c3:3e:
e6:ef:be:d4:ff:9e:ee:8a:2b:7e:0a:19:b6:3b:7c:
20:9d:17:bc:17:5f:ca:ca:e0:f7:d9:1a:2b:35:c8:
43:e8:20:ea:e1:3a:81:d7:cb:26:c2:42:2b:f2:68:
9c:8d:39:df:97:e4:57:15:a1:21:46:3d:4a:81:45:
6f:3c:f4:c9:ce:04:c6:88:d1:e7:8e:77:d2:4b:89:
cc:ee:ce:27:29:11:34:cb:84:19:98:1a:6e:45:2b:
52:e1:96:87:4d:23:5b:de:d2:79:e6:52:fa:ff:74:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:97:B2:BF:8C:EF:EE:FD:6F:4A:11:34:00:E4:72:02:4B:95:0B
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d0:4a:21:86:5c:7b:c5:10:0b:51:b1:70:19:85:9a:b3:cc:
00:a5:69:14:1d:f6:49:c4:6b:67:58:f1:31:0e:90:dd:a4:22:
b7:39:fe:cf:db:1c:4c:3a:80:2b:ed:fa:81:dd:48:c7:14:d8:
60:69:cb:c4:2b:cd:d6:d4:ca:11:ce:4a:14:64:4e:d3:47:18:
ac:b9:6f:fb:ff:5d:ea:af:91:e9:5c:ba:34:06:c1:c4:f8:b3:
90:be:f6:0f:35:13:d9:0e:20:67:db:6d:86:26:6b:79:0e:b8:
1f:48:84:04:63:f4:e7:9d:b0:f9:ef:8b:d2:03:e0:06:7e:5b:
1a:0e:c4:c6:50:ab:b2:d3:4a:c1:86:ee:42:ac:5d:1b:d6:ba:
d0:a1:dc:c5:28:b0:f2:9e:93:3d:78:18:29:dc:80:60:bf:76:
f0:bf:43:f9:40:c5:79:33:5a:9c:9e:f6:8a:8d:51:75:57:e2:
ea:84:31:bf:63:af:20:7d:62:5c:94:75:aa:f4:1c:bb:57:56:
a6:5b:a0:e9:31:0f:73:12:92:2c:d3:47:9c:03:fb:18:42:1b:
a4:ba:be:49:fe:b7:b8:10:23:02:ac:4a:34:a3:b5:a0:66:11:
33:7e:cb:a3:9d:e8:d5:b9:a9:19:b1:4c:c4:b1:60:89:b9:54:
33:47:7e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbAWIBU+19cpn1oAOfmJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjQ2NGJhMDM4YmMwYmJiZWU0MDBmM2U5MDhkZjUxNDgy
YzUxYmIwHhcNMjYwMjA5MjIwMDU1WhcNMjYwMjEwMjIwMDU1WjAzMTEwLwYDVQQD
EyhiZDdmOTdiMmJmOGNlZmVlZmQ2ZjRhMTEzNDAwZTQ3MjAyNGI5NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxaCczXe1IVI4n0BepR6HEn3uac4
8GoQeLSXHJRbcsqKEwOTPMYUbkpg76kvjdicCrD01rmDSG9X/NRQEuye8cuv/eku
jAl4q4cVgp7ggdDDZdIEScz8CAdjY+X0NWhDdzSFHFxwCpCGWHjLiRhQqQI4N2Q5
ZRJUjCrSh9E88n6JHhQX2oh4vxkY9V/IyzD6gnfAwz7m777U/57uiit+Chm2O3wg
nRe8F1/KyuD32RorNchD6CDq4TqB18smwkIr8micjTnfl+RXFaEhRj1KgUVvPPTJ
zgTGiNHnjnfSS4nM7s4nKRE0y4QZmBpuRStS4ZaHTSNb3tJ55lL6/3RXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1/l7K/jO/u/W9KETQA5HICS5ULMB8GA1UdIwQY
MBaAFBy0ZLoDi8C7vuQA8+kI31FILFG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEt
YmIyNjE0M2M1ZWRjLzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEtYmIyNjE0M2M1ZWRj
LzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9BKIYZc
e8UQC1GxcBmFmrPMAKVpFB32ScRrZ1jxMQ6Q3aQitzn+z9scTDqAK+36gd1IxxTY
YGnLxCvN1tTKEc5KFGRO00cYrLlv+/9d6q+R6Vy6NAbBxPizkL72DzUT2Q4gZ9tt
hiZreQ64H0iEBGP0552w+e+L0gPgBn5bGg7ExlCrstNKwYbuQqxdG9a60KHcxSiw
8p6TPXgYKdyAYL928L9D+UDFeTNanJ72io1RdVfi6oQxv2OvIH1iXJR1qvQcu1dW
plug6TEPcxKSLNNHnAP7GEIbpLq+Sf63uBAjAqxKNKO1oGYRM37Lo53o1bmpGbFM
xLFgiblUM0d+dA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:43 2026 by rpki-client