This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: F0rlwORz1gMLd8HkoOpupG8j+n+DOAd2eyS2UYYS4Ic=
Subject key identifier: 89:FE:13:D1:ED:E6:D5:BA:F4:F4:42:D5:4F:58:79:FB:AF:E0:2B:21
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019C416AE32653BAF05030AB0F4ED42D3C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 014A
Signing time: Mon 09 Feb 2026 08:00:49 +0000
Manifest this update: Mon 09 Feb 2026 08:00:49 +0000
Manifest next update: Tue 10 Feb 2026 08:00:49 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: I4wWM+5h1egm/Dq18mp5zG4CReHMs+ory5R2dmRxVBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:e3:26:53:ba:f0:50:30:ab:0f:4e:d4:2d:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Feb 9 08:00:49 2026 GMT
Not After : Feb 10 08:00:49 2026 GMT
Subject: CN=89fe13d1ede6d5baf4f442d54f5879fbafe02b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:b7:79:33:25:ed:89:14:b2:54:d9:9e:62:
7c:b9:be:d6:0b:22:5a:9f:11:56:47:8a:76:ba:84:
da:ce:8f:b8:69:24:24:7a:4c:0f:5a:bb:02:44:26:
fe:ca:fa:45:8c:72:73:fe:5d:a6:c9:1f:83:73:67:
fb:4d:aa:b8:52:50:00:db:ee:58:27:8f:75:77:8a:
56:5a:ce:c7:f9:1a:f3:37:b0:cc:e6:22:c6:f2:25:
db:61:6f:74:7c:92:c0:88:f4:42:1f:45:d8:ae:c7:
97:5b:54:8d:dd:44:34:6b:87:78:6f:95:bd:44:7e:
1a:44:13:3a:52:75:d6:b8:03:d5:ff:3f:f5:cd:19:
2f:d1:80:89:40:ca:67:4f:06:47:81:3f:69:e3:95:
66:bb:f7:49:a7:c1:16:74:f1:37:fb:fc:89:a1:26:
89:b8:ca:04:1d:a8:de:83:0c:84:a8:0c:9d:bb:59:
ca:f6:78:89:d2:a4:d9:f1:4e:a5:1d:14:c6:24:13:
cf:3f:85:9c:05:b3:b3:58:32:67:17:a4:a3:b0:be:
d5:35:85:67:6c:e0:f4:02:7c:96:a5:1b:05:13:5c:
15:74:ff:dc:b7:54:32:90:90:cf:c3:46:84:10:47:
31:79:f2:14:52:db:9a:82:d0:b1:79:55:9a:94:e9:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:13:D1:ED:E6:D5:BA:F4:F4:42:D5:4F:58:79:FB:AF:E0:2B:21
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0d:8c:05:c0:ef:dd:d3:8c:9f:c6:f9:8d:1b:01:a2:0c:c1:
f7:d6:83:5d:5c:a9:0c:b3:cd:31:91:c9:83:46:5c:21:88:39:
c0:5e:ab:5f:38:c3:95:de:ac:e7:cc:c5:e5:64:da:3d:10:34:
2b:51:29:e2:1c:83:44:d8:d4:fd:78:c7:eb:bf:72:3e:c2:6e:
d9:aa:81:3d:fe:66:c0:69:1d:d5:d1:84:1f:c5:05:19:df:ba:
88:1c:97:c2:86:c0:0a:17:31:c2:e5:fd:cb:02:29:51:94:f3:
cf:38:4c:9e:d8:d9:1b:4f:50:61:bc:93:c7:20:31:f7:88:f5:
ce:88:be:8a:8d:67:48:06:b0:d2:5a:c0:04:6f:cc:fa:d5:60:
59:20:f9:36:a5:21:8a:7b:18:09:bf:eb:cd:05:dd:15:84:2f:
91:f7:c5:6f:93:df:40:7a:02:ce:7e:ae:71:f0:04:a8:65:8f:
d4:68:8f:7c:4f:ab:94:57:bf:93:46:18:8c:2b:13:41:c1:69:
b6:7f:75:cb:7c:f8:4e:6d:56:3c:ff:22:9e:6b:fa:79:7b:0e:
e5:e7:cb:d9:7a:fa:b2:13:6d:96:b3:e4:a9:36:64:eb:12:e3:
ab:ef:9d:f6:fc:36:be:8a:e0:6d:66:d0:45:88:7f:4c:3d:bd:
be:cf:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:18 2026 by rpki-client