This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: j9Dak0lc31NvInlFtwz/oxZRgEGY/bTIANdez5w4oVg=
Subject key identifier: 32:3A:97:0B:6E:25:0A:37:9C:EB:03:73:D5:A4:EA:E2:94:B2:D8:40
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019C43C774EC8EDE05117B3F4D30CD7B7245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: 01F6
Signing time: Mon 09 Feb 2026 19:01:10 +0000
Manifest this update: Mon 09 Feb 2026 19:01:10 +0000
Manifest next update: Tue 10 Feb 2026 19:01:10 +0000
Files and hashes: 1: 6BB7YKs_TSVSHzzDi7ISS9QH3JI.roa (hash: SwW2p7kJ+ORVGz5Fk9N9ww/FGh4ApYXs5+iLpFH3B0g=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: aI65zJ5km/HAiAuxXRMgJb1cpb7GwhXwTnkorH96mo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:74:ec:8e:de:05:11:7b:3f:4d:30:cd:7b:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Feb 9 19:01:10 2026 GMT
Not After : Feb 10 19:01:10 2026 GMT
Subject: CN=323a970b6e250a379ceb0373d5a4eae294b2d840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8f:ea:b8:f9:b1:4f:b5:eb:a7:9c:9a:60:99:
aa:10:6f:32:92:25:a6:6d:e0:3a:ef:4b:5a:71:69:
13:aa:e8:8c:95:3b:d0:02:f6:9d:4a:e4:ed:48:a5:
94:25:92:b4:88:15:8a:30:46:69:30:6e:fb:d0:92:
73:18:88:06:4f:d4:e5:99:b0:60:4d:70:27:ff:8d:
8b:2c:e3:c5:df:6b:98:76:40:74:c4:9e:83:20:f8:
cf:7d:86:ce:f0:b4:c1:7e:25:69:3a:97:4f:d7:e4:
05:e4:96:c0:36:d3:22:cf:59:b1:2e:62:30:1a:75:
4c:a0:52:5c:3d:26:ca:d3:73:a2:4e:37:37:02:58:
ae:3e:97:c4:dd:97:be:0a:3b:ac:70:ae:6b:a4:e0:
7f:a8:06:03:7c:3a:a2:2e:cc:85:6e:09:5e:39:7a:
1d:af:c9:7f:55:9e:e3:e0:10:95:1d:13:6a:c8:1f:
61:d7:5d:78:d4:8e:58:6f:f8:1b:62:4c:00:ce:ab:
ef:00:4e:4f:49:d2:9a:44:07:19:d6:7e:79:b8:e0:
38:0a:e5:5f:7d:f5:42:b5:c3:05:69:b6:12:ec:8f:
17:ac:7a:ce:8d:20:83:ba:85:7a:d8:5b:e9:de:c6:
87:8e:40:f1:f5:30:99:25:55:b4:0c:6d:07:6f:a8:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:97:0B:6E:25:0A:37:9C:EB:03:73:D5:A4:EA:E2:94:B2:D8:40
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:36:8c:2f:ea:9b:7c:4e:ef:5f:2b:ee:49:b5:a6:4f:ef:
3e:ac:f6:ee:f0:a5:fe:9f:97:fb:a3:e5:fe:62:d4:36:b7:76:
c6:b8:5d:92:d4:89:7c:ca:f0:cd:e7:70:01:32:75:e6:d7:5b:
a5:09:a9:dd:d1:c5:63:93:20:8d:ff:d6:60:6d:d1:63:1a:c6:
f2:2d:dd:f6:29:7b:04:1f:d2:b7:82:1e:08:b5:d4:1e:91:a0:
1c:85:ed:54:42:2b:e4:19:99:f2:e2:66:ce:83:a6:64:1c:9f:
8d:fd:82:b7:34:83:1c:7a:56:64:70:3a:8b:bd:05:7f:37:cb:
0d:dd:93:82:1a:62:0e:97:28:a9:70:0c:31:29:f1:c0:4d:cf:
11:40:99:13:55:ed:19:c0:b6:12:d1:66:7f:ee:04:70:66:68:
49:86:f4:73:2e:f5:bd:66:57:6a:15:05:10:0d:4b:aa:3c:be:
9a:e6:88:73:b3:58:06:c9:6c:be:29:c9:87:ae:5c:01:10:4f:
d6:13:15:1a:38:53:f2:4c:70:9d:d9:b2:09:2a:b6:c2:1c:98:
dc:db:3c:78:64:5e:8b:3c:21:b5:3a:e8:d5:a9:5e:cd:dd:e9:
60:ed:04:9e:cc:23:3a:40:97:54:de:d7:15:fa:4b:09:ed:96:
c9:c4:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:52 2026 by rpki-client