This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: CBBB/rS6avzvRE657pnhnbwL5qNuYALNIxs3r8mo10U=
Subject key identifier: CD:3B:71:FE:D0:78:EA:E3:77:54:C9:5B:78:81:1C:28:51:28:B0:7E
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019C43C6CCFC9BC0D360C076A8B25C1F2CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 08F7
Signing time: Mon 09 Feb 2026 19:00:27 +0000
Manifest this update: Mon 09 Feb 2026 19:00:27 +0000
Manifest next update: Tue 10 Feb 2026 19:00:27 +0000
Files and hashes: 1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: dW45RWLJ0eSqcK74u72P+Ew5+kYPcd3ItMt6EYnFiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:cc:fc:9b:c0:d3:60:c0:76:a8:b2:5c:1f:2c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Feb 9 19:00:27 2026 GMT
Not After : Feb 10 19:00:27 2026 GMT
Subject: CN=cd3b71fed078eae37754c95b78811c285128b07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:a0:4f:04:f4:3b:73:ae:f5:40:22:e0:a4:
4f:8a:d8:44:b7:5b:b5:9c:6a:a0:60:b3:e1:4a:88:
d0:10:38:0b:2f:31:20:70:88:03:5c:ef:da:b8:ed:
bb:8d:0e:cb:61:2a:b2:f9:b9:02:0b:82:0f:67:9c:
e3:30:73:18:1e:84:15:5b:68:78:65:f5:cd:73:87:
de:a6:3e:30:6b:23:22:0c:2f:52:6f:1a:55:a3:95:
7c:c6:e8:76:68:f0:b1:57:a3:61:f9:e4:ba:a6:fe:
b2:15:8f:4f:86:b0:98:76:9c:db:1d:79:6e:0c:21:
2b:5c:00:3a:b0:80:35:ac:60:3b:5c:c4:b4:aa:4c:
c0:12:99:2f:4c:0e:70:6b:77:c3:bd:3d:44:5c:60:
51:fe:82:55:57:7e:6b:5d:88:a9:d8:78:f6:51:cb:
18:1b:65:16:91:40:35:3f:0d:b0:b4:ac:c7:0d:37:
38:19:a1:d2:a0:ec:f8:c3:b6:fa:4a:36:ea:be:f2:
91:2c:fe:74:6a:b4:03:af:85:83:94:f8:a4:e0:5a:
f6:6e:55:eb:b9:18:54:a6:ea:c8:16:42:16:61:6c:
a4:50:95:d3:cb:27:36:75:3d:eb:85:fd:ed:2c:1e:
47:f5:ef:95:3d:24:97:6b:fc:51:63:51:4c:87:79:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:71:FE:D0:78:EA:E3:77:54:C9:5B:78:81:1C:28:51:28:B0:7E
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:95:62:e2:f4:45:c1:59:f1:9c:4c:75:73:b9:bd:57:51:
b0:32:e3:5e:4c:ce:6a:05:aa:26:26:03:14:8e:6f:69:66:7f:
35:9d:22:88:27:3d:9d:2f:0e:3b:f8:2a:4f:0d:49:16:e8:09:
f4:10:e4:98:80:40:15:43:48:70:ee:39:44:7e:97:ae:6f:08:
83:ad:8f:73:4a:6d:16:0b:28:e8:43:de:e7:48:4b:26:82:00:
ec:29:74:8d:4c:39:2e:c0:dc:cd:df:05:e6:5f:02:3c:7f:17:
11:07:37:35:9f:2c:2b:07:a8:e5:0b:d6:82:8a:48:bc:c6:db:
29:ee:f2:49:3c:03:8e:bf:8e:a7:fb:86:61:99:a3:70:51:6c:
91:76:ec:a7:47:d8:9f:a7:18:7f:43:1c:a4:d6:96:12:c0:2f:
9d:45:90:fa:16:55:c2:96:02:84:08:13:c3:34:c6:3b:7e:5b:
8f:b4:44:60:ba:71:92:48:92:bb:61:a4:e0:51:ad:fe:71:ab:
28:37:82:64:82:50:24:73:5e:65:42:fb:be:9b:4b:9a:a9:8b:
51:4f:e4:44:1d:67:85:5d:3a:c6:42:01:4f:f6:41:55:55:9f:
c1:dc:bb:36:e5:4d:8b:ec:74:84:1a:f4:d8:52:2e:45:fa:bc:
25:e9:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:45 2026 by rpki-client