This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: cGXQqHeW4CPPDJh4BjBGnBbR1BGWiWNLIxYDGwIa49c=
Subject key identifier: EF:55:03:BF:9A:87:7F:36:D9:13:00:52:09:D3:68:E4:BA:65:32:FC
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019C4246777DCC0C59B295BC18D242A7A6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0ED1
Signing time: Mon 09 Feb 2026 12:00:40 +0000
Manifest this update: Mon 09 Feb 2026 12:00:40 +0000
Manifest next update: Tue 10 Feb 2026 12:00:40 +0000
Files and hashes: 1: 8ve1ZwkPQyjGHgzFJYDwI3qTkDY.roa (hash: 9D4g3MP76lApBe8OVcxLGqylBt64iPMUOF/fmcYsTdU=)
2: CIwlYwnQgY17UeavMkm13EVL2n8.roa (hash: r4bZKQmC1Ctifqf/+GSiUbszN3swZZeF7mrqnTsUuQ8=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 9qzwOubURjuaBtCOWS4baFBdt6Ce/1TQVhNwsPz+6S4=)
4: IzAZsf_Qc2A8pMxdGG-nBxB2gRw.roa (hash: 4TJbYmdeXG/rQN3FAOOPwKLfkTdziJof+SKAImG/iP0=)
5: liurjQr2aFUZ4RN7sB5e2xaGm1M.roa (hash: YNt6MjSDV5Wvd3Oc5pFyN0vEC7cDDHJYrDTH0YBIpGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:77:7d:cc:0c:59:b2:95:bc:18:d2:42:a7:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Feb 9 12:00:40 2026 GMT
Not After : Feb 10 12:00:40 2026 GMT
Subject: CN=ef5503bf9a877f36d913005209d368e4ba6532fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:45:0f:4b:0f:59:cb:0e:80:ed:a7:56:07:
73:69:cf:8f:be:f4:c5:65:c0:40:39:0f:26:62:dc:
db:74:56:6c:d3:aa:82:ca:35:53:b5:6e:27:18:01:
01:10:2a:8d:24:ee:85:d2:b3:35:f8:f1:42:16:29:
f2:fd:47:22:22:ed:0c:2c:b5:ea:bc:18:77:70:88:
1b:44:e1:0b:8c:92:56:c8:12:72:3d:b5:c4:1b:47:
a3:f2:36:9a:d7:d7:e0:6c:94:10:35:b4:48:cc:e9:
d3:e4:4a:fd:46:c3:63:16:e0:37:8e:ca:b4:8b:b2:
87:e1:e7:62:b0:89:c9:35:63:cb:4b:e4:58:cd:6b:
19:1d:85:b6:79:52:95:fe:ed:d3:66:30:0f:22:20:
b5:dc:fd:a8:ad:68:14:24:d3:76:ac:e3:fb:2f:0a:
02:ac:ff:3a:68:c4:ba:83:33:30:67:d1:e9:de:b7:
ea:05:d2:f8:ad:79:96:6d:02:77:aa:d3:7a:39:33:
6f:5b:9f:f7:da:7b:27:62:37:1d:0d:b1:17:57:a3:
9b:7d:f7:84:60:da:28:05:56:c0:01:03:10:3d:8d:
01:de:9d:94:be:a9:ae:1f:5f:23:97:e7:d6:11:3c:
26:f1:bf:3e:c1:55:ec:25:cd:42:dc:4d:cc:90:62:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:03:BF:9A:87:7F:36:D9:13:00:52:09:D3:68:E4:BA:65:32:FC
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:3c:1f:37:43:c0:81:3a:31:bf:49:57:05:1e:18:86:67:
6b:c5:2a:db:0c:2b:80:1a:40:15:6c:9a:02:c6:24:36:d0:63:
7f:5a:a8:48:a5:90:8e:cc:e6:f0:d8:86:02:ef:9e:00:a7:b4:
03:84:a6:a8:87:84:fd:22:6f:bf:25:cb:20:74:d8:4a:e9:c0:
06:ae:81:55:8b:02:d0:3b:1d:8d:d0:88:4c:3f:73:5a:5b:ac:
cb:88:18:19:b8:d5:ea:6c:c9:a2:6d:af:76:43:ca:cd:87:fb:
49:95:b3:63:30:94:f9:63:93:70:99:ee:0f:ba:5a:ab:21:fa:
50:b4:3d:d8:97:31:a3:97:2e:64:38:bb:8e:3a:3e:8e:69:f0:
d1:33:e8:ee:d0:3a:6c:8e:18:04:ca:7e:d0:76:a0:ef:16:81:
d3:6c:e4:34:c6:cf:c8:b8:dc:9a:97:c3:78:bf:f9:94:5d:a3:
fa:d7:29:fe:89:5f:3d:3b:3e:d0:2d:d8:39:e1:b3:aa:97:c6:
91:2d:d1:1e:19:99:b2:e5:d7:4d:56:c7:e9:2e:e4:71:53:03:
56:db:81:42:be:e3:ec:a4:8c:90:a3:50:60:5d:9d:77:e0:45:
dc:ef:a2:b0:e4:56:b7:db:6a:40:db:c3:52:9c:ae:39:a1:a7:
e8:9c:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:24 2026 by rpki-client