This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: iiRmXekiVx/3gKObbLg1+CumpruNBtLIE1uw4AF89AI=
Subject key identifier: C2:EB:44:DC:4D:D1:03:13:D5:39:D9:D7:83:DD:EF:DC:52:FB:E8:18
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019C446C5F86435DBCEDCF23216432368A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 111E
Signing time: Mon 09 Feb 2026 22:01:18 +0000
Manifest this update: Mon 09 Feb 2026 22:01:18 +0000
Manifest next update: Tue 10 Feb 2026 22:01:18 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: AOh5hOPacuzqQyNKaHAZjoFzs7sIAQYVYAfrSO0Tr2A=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:5f:86:43:5d:bc:ed:cf:23:21:64:32:36:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Feb 9 22:01:18 2026 GMT
Not After : Feb 10 22:01:18 2026 GMT
Subject: CN=c2eb44dc4dd10313d539d9d783ddefdc52fbe818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:ef:48:8b:79:61:02:b4:bc:84:39:11:ed:
f6:ea:f7:46:0e:96:fd:e9:5c:e5:56:fa:fe:50:24:
c6:15:47:1d:e3:11:b6:1d:b5:f8:d9:14:17:98:cf:
23:cf:67:9c:99:33:46:e5:cf:a0:a4:d1:9d:be:37:
f3:63:fe:b4:b4:c8:c0:2a:ad:50:ee:bf:71:f9:3e:
ba:09:3e:7d:e1:ca:fa:d3:c1:d7:1e:e6:59:3b:b5:
47:af:4e:78:e8:61:3b:a3:58:03:06:83:ba:2f:f8:
d2:e0:19:7f:ec:4c:91:42:be:dd:49:db:fc:92:f5:
ad:31:77:d6:67:f7:40:ea:4a:73:56:d9:62:bd:80:
be:eb:b3:36:fd:ca:83:1a:8b:3e:ff:33:20:c2:1a:
92:ea:eb:d7:77:4b:65:0f:c7:41:12:e3:e1:2d:0c:
2d:10:86:51:8d:88:66:b7:81:47:a4:f0:3e:70:ad:
68:1a:69:eb:58:e9:85:bd:f6:cc:7c:b5:5f:16:1a:
d3:3b:70:d6:26:cf:c2:14:f0:bd:da:ce:8a:18:da:
ff:55:6f:1c:d4:43:60:d4:f1:6a:8d:b1:f4:85:f8:
97:0a:fe:bf:5e:88:00:1e:e2:e8:4c:26:2b:fa:14:
9e:e1:47:01:ec:46:0b:7d:da:c9:df:2a:2e:96:89:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:44:DC:4D:D1:03:13:D5:39:D9:D7:83:DD:EF:DC:52:FB:E8:18
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:9d:90:d0:0d:1b:d2:12:89:78:87:3a:bf:80:e4:8d:a3:
d0:c5:9d:b9:51:6f:8d:d1:21:af:ce:a2:35:bd:29:8b:1a:f9:
32:d9:62:a4:4d:18:2b:c1:3f:6a:b2:b3:a4:a1:0b:fb:54:53:
42:ad:10:99:14:df:6e:33:f3:a4:5c:25:05:98:cf:68:fa:80:
ac:ce:7f:2b:8d:af:dc:80:cf:86:25:6c:59:e0:97:79:8d:64:
74:9b:44:8c:57:e5:d2:4a:ab:f2:e6:49:fc:a8:5a:0d:59:2a:
8a:26:0c:40:d1:2c:37:27:bf:b6:2e:58:53:d2:c4:b9:ba:f1:
b7:bf:0e:0e:d1:27:fd:32:3f:41:5f:62:40:0f:f8:29:a5:fc:
b5:fd:4d:59:93:7a:b3:86:8b:f6:b5:40:91:dc:cc:d5:49:f6:
57:4f:2d:0e:b5:eb:96:06:37:d0:0b:3a:49:59:44:c6:48:ff:
da:ba:f8:45:89:c8:22:37:75:83:fb:d5:8f:fc:55:52:32:ed:
99:48:4b:91:3c:c5:bf:a1:3c:ef:c6:79:d7:17:dc:78:56:81:
39:58:21:3f:82:bb:f2:a6:19:1c:60:77:5a:00:50:96:a2:ff:
28:58:eb:86:2e:0c:a5:00:46:79:2b:ef:23:b5:8b:08:bd:5e:
13:d8:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:51 2026 by rpki-client