This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: ZovXJTZDkaLMeMty4I7FGLZIBuu/UAPKsNwCsW8QKVg=
Subject key identifier: 7B:DF:51:DC:A6:F2:EA:38:16:FC:98:51:E6:A5:0A:EB:D5:B7:2D:F2
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019C4390AC7A6B1441857A4E5C86DECB2C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:01:20 +0000
Manifest this update: Mon 09 Feb 2026 18:01:20 +0000
Manifest next update: Tue 10 Feb 2026 18:01:20 +0000
Files and hashes: 1: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: rOp1tqmU9gT5qHT7QnmUhbY2nkrgaNi6yE+l/Vnuqqs=)
2: mNaUQzwFX0BqVlBJLpzVszIOnM4.roa (hash: SiNsZYiIVTVZpo2V87H2BrP189PsIRUH34sgwW+FJSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:ac:7a:6b:14:41:85:7a:4e:5c:86:de:cb:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Feb 9 18:01:20 2026 GMT
Not After : Feb 10 18:01:20 2026 GMT
Subject: CN=7bdf51dca6f2ea3816fc9851e6a50aebd5b72df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:7b:b0:85:8b:f4:e6:7b:eb:30:2f:e3:e8:
a8:de:c6:02:7b:b0:9c:d6:37:c5:1c:56:1a:01:e6:
12:65:82:16:a5:41:3a:bd:e6:a2:aa:01:dc:a5:f6:
8b:7f:10:9b:7a:64:cc:72:69:20:40:d9:76:e5:0c:
51:29:9d:ee:85:57:29:ec:24:04:4f:30:f8:9e:f9:
00:42:1a:90:ea:e7:d9:86:79:3a:b6:76:25:68:c1:
4f:e1:65:17:b0:97:97:f8:2c:f3:5e:44:9b:c8:fe:
7e:57:87:7a:31:92:a9:3b:60:d8:5f:5f:2e:7a:07:
30:9d:a1:5f:51:72:66:29:06:61:c7:19:f1:bb:c9:
23:bf:0e:db:2e:68:0f:ad:80:97:ef:65:b9:73:cc:
da:be:8a:a9:4d:5f:a8:c4:df:46:8a:8e:72:2d:ea:
70:37:2e:ae:f3:22:3f:f4:47:7a:35:46:a9:30:49:
5d:3a:07:ff:6f:27:05:1c:56:f0:43:d8:9d:40:35:
59:07:bc:fe:8b:39:31:94:1e:a1:3f:98:a5:31:47:
44:7f:eb:19:29:13:8f:1d:c6:67:8c:a0:10:a7:9e:
35:04:e2:5a:c0:90:d2:db:ee:40:2f:44:9a:34:35:
4c:76:2b:11:7d:fe:a3:bc:e7:0a:d8:eb:9d:34:4a:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:51:DC:A6:F2:EA:38:16:FC:98:51:E6:A5:0A:EB:D5:B7:2D:F2
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8c:59:da:0a:9b:e7:a0:d8:ef:58:a3:f5:e4:4e:27:64:7e:
34:dc:a9:90:5a:cd:b4:e3:92:39:d3:ad:76:5a:95:42:c4:10:
35:18:f4:2e:b7:a0:b8:23:45:70:d5:b7:05:52:52:e5:62:e8:
4c:80:7a:5f:54:ae:26:5c:3e:7d:d4:e5:45:85:30:34:a3:da:
61:78:c1:22:ee:04:77:2e:ae:ae:49:43:aa:f8:03:c8:12:6a:
8d:7d:18:48:42:d4:2a:f1:1e:57:26:d3:fe:ee:1c:4d:d9:2e:
c4:6b:f6:d0:ce:9e:55:85:75:05:4b:ac:32:a6:51:fa:e5:c9:
67:c3:af:c7:cd:40:77:cc:30:63:f4:58:6c:97:c8:28:37:5a:
7e:bc:cb:0e:84:ef:e7:8e:f8:7f:89:89:f3:35:bb:39:94:d9:
ab:74:e3:78:2f:52:0e:68:2f:51:82:b5:92:69:e3:a5:9d:19:
5e:22:ad:20:ce:f5:be:29:de:8f:26:12:27:9b:82:4b:8a:81:
1e:96:d3:80:05:46:59:3c:31:b2:b2:13:a2:44:1b:4f:6c:f4:
8e:37:5c:f9:04:d7:8f:3c:91:f1:2b:e5:e8:76:a6:d6:05:eb:
fa:17:64:e5:e8:0a:32:62:46:e3:08:c3:32:44:4d:23:5d:c8:
6b:eb:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:27 2026 by rpki-client