This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier: HsH3NH4JF1PizU4sSzZP6p99i5aFeliN/iCuHYAFxdw=
Subject key identifier: B1:73:3D:2D:E0:E0:F4:6B:C3:BD:A4:52:15:52:67:54:F2:C6:28:8C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019BDDA3BC470DE0A4DFC793EF9952809FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number: 116F
Signing time: Tue 20 Jan 2026 23:00:53 +0000
Manifest this update: Tue 20 Jan 2026 23:00:53 +0000
Manifest next update: Wed 21 Jan 2026 23:00:53 +0000
Files and hashes: 1: 1-BjMSdO6iVbOpkDl-BE8qpgDZLg.roa (hash: F+ot0aUOSLbQbycLUgEkSCqZvG9RZcn5sPnsPXjM3Zs=)
2: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
3: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
6: Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa (hash: u+02TSm2IbZTqUuUBwPekY51BpwcVFSZdhS945AWzxs=)
7: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
10: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=)
11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: PdDaTZ4i75huFr8l/yTTiQ5kix2da6c6sHbD12CPWYU=)
12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
13: sCKbGnkLwgEhS7pIIJjS0biYxrc.roa (hash: I2ey4PW/vo4FB5Fjc9jrXP4LPxpKbbEJ9En7gwlq4XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:dd:a3:bc:47:0d:e0:a4:df:c7:93:ef:99:52:80:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 20 23:00:53 2026 GMT
Not After : Jan 21 23:00:53 2026 GMT
Subject: CN=b1733d2de0e0f46bc3bda45215526754f2c6288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:fb:17:29:23:e8:4f:34:29:69:87:cf:af:
cc:1a:39:e8:77:0e:dd:b5:71:d2:7b:71:d1:6e:d2:
d7:44:12:22:49:7b:2f:c1:13:13:80:ad:52:99:b8:
7d:bb:f3:b2:8c:57:1e:12:96:8d:da:ae:12:c8:d8:
4b:31:86:dc:b8:ec:87:c2:2a:c7:7f:1b:e9:4e:d8:
07:df:23:d4:43:6a:b3:bd:2a:1b:b2:b7:52:34:4e:
c2:18:18:da:44:99:ab:19:e1:0d:ac:ee:e4:b1:1e:
48:1c:93:2b:9d:db:62:b1:fb:5b:75:59:29:d4:a4:
d9:c6:b3:3c:27:90:e8:98:7e:b7:7e:63:f5:d7:06:
28:2e:97:3e:a8:94:42:46:8d:16:d4:9b:97:97:ec:
1c:a6:16:78:18:18:6c:b8:07:00:1c:24:2a:ba:d2:
cd:77:12:f3:1d:d6:d5:8e:71:63:9f:1a:d4:2d:b8:
6d:d6:a4:05:85:48:de:a4:f9:87:6a:75:8a:c8:4f:
bf:2d:6e:70:30:55:e1:81:31:cf:2a:a3:5e:99:13:
b5:62:45:00:66:0a:9d:30:25:64:f7:d8:e4:b2:62:
66:a3:7b:90:20:be:e5:be:27:c5:d5:50:71:2f:9b:
13:a0:3c:4d:22:90:76:63:25:6f:61:39:65:61:a2:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:3D:2D:E0:E0:F4:6B:C3:BD:A4:52:15:52:67:54:F2:C6:28:8C
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:ca:ff:ac:51:67:91:7a:7d:0e:ea:6e:e8:de:a5:bc:95:
a2:3e:c1:6f:14:77:80:19:07:b4:48:89:07:60:b2:f8:5f:e4:
76:b2:9a:10:f0:e3:40:8d:f7:a6:a4:c9:97:83:da:22:bf:0e:
f5:75:16:48:fb:8b:4e:68:f4:fe:1e:1b:d4:c4:dc:11:7d:59:
80:76:36:28:b1:eb:08:89:03:a0:49:29:c4:2d:bf:dd:43:be:
ef:7b:aa:c4:9f:42:3f:57:9a:dd:9d:ca:b1:fe:9c:5a:ad:95:
db:94:aa:f3:08:a5:1c:80:d5:d1:48:cf:08:d5:29:ed:80:b9:
08:5a:9c:a6:3a:ce:e7:45:9f:80:9e:ba:88:53:ed:43:9e:7d:
31:b7:8d:25:17:71:60:70:01:0a:83:ef:98:ef:65:9f:eb:77:
1b:24:8e:89:b8:db:2b:f6:96:f8:bd:d5:e6:65:04:ef:98:de:
62:0a:22:8f:33:62:bb:d9:bf:26:cc:02:d1:d0:ee:b6:57:93:
09:39:c9:c3:2e:63:f8:7b:5e:8c:bd:f2:5e:37:11:ec:a5:10:
a3:2a:d9:35:ad:7e:06:8b:42:1b:2d:11:a1:07:ae:8c:44:3c:
28:2c:e5:72:0f:85:a8:ec:c5:cf:89:99:56:78:ac:13:67:ef:
1b:65:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 02:52:39 2026 by rpki-client