This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
File: hDvoY59AOZk8H254efRynkfcN64.mft (raw, json)
Hash identifier: 8LBRDa3errEHWjwFskYp+tdNoUfYPg/Qm3+IqfhuCho=
Subject key identifier: A4:90:8E:A8:AB:5F:B0:92:AB:65:0B:62:C7:6E:47:FB:DF:2D:24:42
Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Certificate serial: 019C4358C37F49583A46ACBC14ECF8780D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
Manifest number: 0A25
Signing time: Mon 09 Feb 2026 17:00:16 +0000
Manifest this update: Mon 09 Feb 2026 17:00:16 +0000
Manifest next update: Tue 10 Feb 2026 17:00:16 +0000
Files and hashes: 1: 08llQ74BuBaNWqT4Y7FAkII-DJw.roa (hash: pxdI4iXE9K/M2+2A8OZhCl+4882oOXHYqUhqvnxntUE=)
2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: 8uCpResiC61KLYpNtTVTfWIbpnBVqF4StMfSqRwLmJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:c3:7f:49:58:3a:46:ac:bc:14:ec:f8:78:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Validity
Not Before: Feb 9 17:00:16 2026 GMT
Not After : Feb 10 17:00:16 2026 GMT
Subject: CN=a4908ea8ab5fb092ab650b62c76e47fbdf2d2442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:b5:b4:8f:e5:25:fb:d2:f7:7f:0f:c5:b1:
c2:a3:0f:e1:5f:83:d4:a0:9b:05:25:24:4f:f1:4e:
e5:bf:40:e3:e9:81:e7:3b:d9:b1:bf:7f:59:37:4c:
d9:b1:ac:5c:7f:b8:3e:04:70:3e:79:62:ab:26:6a:
d6:f7:dc:0e:f8:65:5f:9d:88:6a:4f:4f:45:15:59:
7d:d8:83:43:34:7a:35:4a:bc:04:94:20:07:48:8c:
f8:8b:2b:f9:0b:48:f8:0f:e9:6e:bf:2b:15:b9:bb:
cb:64:03:7f:ff:c3:58:c9:fa:9c:80:67:d3:c2:c1:
19:c4:78:49:dd:f9:20:db:3a:df:94:ed:36:fd:b3:
b3:eb:4a:b8:a8:18:46:ba:1b:e8:4a:7f:81:ff:af:
41:01:de:86:74:53:45:1c:a5:02:72:5a:ab:b2:ef:
12:cb:a9:d7:6f:94:4d:9a:a0:3b:b5:42:f4:ef:a9:
8f:41:57:f9:dd:26:0a:e1:04:3a:49:95:08:ca:72:
48:4e:17:6a:d2:54:46:0e:97:df:21:be:cc:1f:96:
db:fa:98:73:42:70:89:cb:1a:8d:27:29:a9:df:60:
b4:1d:31:d6:f7:f9:b1:15:b9:fa:85:7a:4d:52:af:
19:54:37:c5:91:2f:e9:0a:a0:f7:00:54:dc:9c:50:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:8E:A8:AB:5F:B0:92:AB:65:0B:62:C7:6E:47:FB:DF:2D:24:42
X509v3 Authority Key Identifier:
keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0b:42:2e:42:21:31:cc:8b:04:44:5a:6a:e2:2d:18:fc:1e:
04:e4:58:43:3f:50:11:b4:ac:7b:12:8b:9b:81:0a:42:ba:52:
c5:17:3c:56:d3:68:3a:eb:ca:b1:41:6f:65:9e:e8:52:5f:eb:
6f:28:11:73:fe:05:3d:15:60:5a:68:4a:5b:1f:1f:1f:db:98:
62:05:bd:54:25:b7:82:eb:d4:1c:0b:33:46:a3:40:a3:81:eb:
09:99:c2:1d:e8:47:cd:cf:ce:fa:1c:d0:66:85:cb:f9:9b:27:
be:26:e1:a1:82:f7:ea:1b:c3:2c:a7:30:d4:94:9e:e4:43:13:
a5:1c:cd:9f:65:4e:6e:15:23:61:5c:42:8c:8b:a1:2e:2b:2b:
9a:b3:e2:9e:c8:9f:bb:65:52:f9:f9:6c:0c:fd:6f:e0:43:25:
ad:12:9f:53:f0:77:6a:c7:46:77:92:40:52:cf:99:dc:e1:73:
62:45:92:fc:45:17:01:40:48:2c:32:08:0b:a1:08:5a:b3:c1:
2d:77:89:38:c5:29:2d:52:e7:eb:38:e4:0d:ef:60:a5:d7:d1:
d8:46:f0:ca:65:a0:de:8a:5b:1e:d9:6d:6a:da:54:ff:ef:72:
01:ae:cd:0e:be:10:a4:54:7d:4d:98:ea:a6:64:6a:b1:01:fb:
e6:6b:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:07 2026 by rpki-client