This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: 9Hl+i7SIurXn0Twm/RZp4nAbl9B66vYgXdsh9vGSO9k=
Subject key identifier: 10:B3:F3:B3:4D:6B:B3:46:C9:92:B6:A3:87:12:14:A3:5F:BF:57:58
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019C427DF83B4261CAF9005B86670D1D4417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:01:17 +0000
Manifest this update: Mon 09 Feb 2026 13:01:17 +0000
Manifest next update: Tue 10 Feb 2026 13:01:17 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: mG0u/cGOoImLMKxlfPAtwv1KKPvDku/huoD1nf+q2Ls=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:f8:3b:42:61:ca:f9:00:5b:86:67:0d:1d:44:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Feb 9 13:01:17 2026 GMT
Not After : Feb 10 13:01:17 2026 GMT
Subject: CN=10b3f3b34d6bb346c992b6a3871214a35fbf5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:3a:5f:b4:22:a5:63:18:50:32:26:49:ed:
b9:7e:c7:a3:e7:7e:a7:48:ee:49:94:14:95:28:bf:
c2:c9:36:c1:f0:7a:69:48:de:02:d5:b3:c0:9d:89:
e3:4b:56:f0:07:9b:3a:1e:96:50:1f:5a:c0:df:df:
3a:0e:2b:02:ae:59:e3:e8:8c:ef:09:e9:4c:b1:6f:
af:1d:8d:f3:4a:96:b4:52:c6:84:8c:f2:ac:aa:e6:
55:dd:6d:45:83:5c:ec:7d:30:a7:f5:d3:49:f3:d9:
9a:54:74:b4:5f:17:21:7e:c6:ab:ed:74:92:89:2b:
ae:9b:c3:cd:3b:49:b3:40:27:05:4a:fd:83:4c:f1:
1c:00:ae:2f:14:b8:e9:df:04:f2:dc:b2:a0:c4:ed:
84:b7:a6:09:7c:28:96:82:5e:82:eb:7d:57:43:5e:
7f:97:e5:e3:fc:8e:7f:37:45:1d:fc:3b:10:6f:95:
f7:db:f4:5d:1c:fe:c3:bc:90:4a:af:07:bd:59:14:
a5:4b:d9:a8:6f:49:cc:64:be:12:36:43:54:ff:e7:
cb:e4:d6:bb:8e:e9:9b:f6:ae:af:c6:3d:e4:cf:fa:
55:ef:08:68:ee:b3:92:42:e8:03:d1:7f:cf:e7:f1:
47:7f:03:38:7e:e8:da:18:73:b0:fc:7a:0b:8a:a8:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:F3:B3:4D:6B:B3:46:C9:92:B6:A3:87:12:14:A3:5F:BF:57:58
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:06:83:23:dd:37:81:7c:e7:14:23:2d:3a:f2:7b:ee:e9:fa:
49:38:60:75:ad:95:d3:73:79:79:ed:1e:b8:3e:f6:18:d7:b8:
1c:e8:b7:1a:41:48:e1:22:6c:48:17:58:1a:87:c3:c9:65:68:
3d:2e:f7:48:33:0e:d0:61:17:b5:0d:0c:12:01:7a:9d:c2:7e:
ed:eb:64:49:8e:e0:8d:66:92:c5:ae:79:e1:52:67:c3:87:6f:
33:d7:d9:86:a5:4f:e7:77:96:14:bb:af:14:97:4b:8e:26:91:
b7:9e:7c:15:e1:f3:89:2f:4b:fb:37:bf:75:ca:fd:9a:79:ef:
3c:91:6b:ec:e4:aa:11:c4:30:09:4d:15:ab:4c:c3:b1:c9:81:
2f:2e:fe:40:ff:74:1d:75:d2:04:ed:2d:07:b0:f5:b1:6c:50:
ce:53:67:82:0c:b6:80:50:6d:8f:da:50:e0:41:6b:68:8f:a5:
e5:dd:97:1f:cc:07:55:0d:16:0e:8c:9a:64:ef:ec:43:42:a5:
b0:1f:ae:13:b6:ff:e6:ab:03:bd:8b:12:fb:9c:1f:f6:38:dc:
bf:62:b8:cb:05:25:23:b3:ea:d6:1f:20:38:36:01:a7:82:c4:
99:a0:5f:8e:43:64:81:8f:ca:0b:61:a3:08:df:16:17:ce:a7:
6a:d3:3d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCffg7QmHK+QBbhmcNHUQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi
YjBjN2IwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD
EygxMGIzZjNiMzRkNmJiMzQ2Yzk5MmI2YTM4NzEyMTRhMzVmYmY1NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPI6X7QipWMYUDImSe25fsej536n
SO5JlBSVKL/CyTbB8HppSN4C1bPAnYnjS1bwB5s6HpZQH1rA3986DisCrlnj6Izv
CelMsW+vHY3zSpa0UsaEjPKsquZV3W1Fg1zsfTCn9dNJ89maVHS0Xxchfsar7XSS
iSuum8PNO0mzQCcFSv2DTPEcAK4vFLjp3wTy3LKgxO2Et6YJfCiWgl6C631XQ15/
l+Xj/I5/N0Ud/DsQb5X32/RdHP7DvJBKrwe9WRSlS9mob0nMZL4SNkNU/+fL5Na7
jumb9q6vxj3kz/pV7who7rOSQugD0X/P5/FHfwM4fujaGHOw/HoLiqj8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCz87NNa7NGyZK2o4cSFKNfv1dYMB8GA1UdIwQY
MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct
YTcyMGFmODYxZmVlLzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl
LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQaDI903
gXznFCMtOvJ77un6SThgda2V03N5ee0euD72GNe4HOi3GkFI4SJsSBdYGofDyWVo
PS73SDMO0GEXtQ0MEgF6ncJ+7etkSY7gjWaSxa554VJnw4dvM9fZhqVP53eWFLuv
FJdLjiaRt558FeHziS9L+ze/dcr9mnnvPJFr7OSqEcQwCU0Vq0zDscmBLy7+QP90
HXXSBO0tB7D1sWxQzlNnggy2gFBtj9pQ4EFraI+l5d2XH8wHVQ0WDoyaZO/sQ0Kl
sB+uE7b/5qsDvYsS+5wf9jjcv2K4ywUlI7Pq1h8gODYBp4LEmaBfjkNkgY/KC2Gj
CN8WF86natM9dA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:21 2026 by rpki-client