This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier: z661L+1yz2aS36FCs/pMJjXgHN738AEe5Zf6pgX2GHk=
Subject key identifier: 79:10:F0:C4:C0:2B:E1:BA:17:E1:EC:BF:54:81:A5:B9:BD:12:20:CF
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019BF1CF9CA7A2E43BDE1A2ADEE198DFC87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number: 140A
Signing time: Sat 24 Jan 2026 21:01:13 +0000
Manifest this update: Sat 24 Jan 2026 21:01:13 +0000
Manifest next update: Sun 25 Jan 2026 21:01:13 +0000
Files and hashes: 1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: IHMQ7YYpyylKVJxN8+dk7XltB0xLANBwFew7s2BD7Ow=)
5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f1:cf:9c:a7:a2:e4:3b:de:1a:2a:de:e1:98:df:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 24 21:01:13 2026 GMT
Not After : Jan 25 21:01:13 2026 GMT
Subject: CN=7910f0c4c02be1ba17e1ecbf5481a5b9bd1220cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:91:ed:23:62:dd:25:94:7e:72:b1:e4:24:
ab:de:a6:d0:b7:ce:36:02:76:75:6a:af:d0:9d:99:
29:f1:ad:4e:a2:ab:3f:66:7b:6a:e2:43:76:97:2a:
27:33:bb:18:30:94:6c:0c:d6:10:68:8c:83:8c:b8:
aa:0c:cd:36:5d:54:92:71:76:00:d1:b8:b8:5f:3a:
84:16:0c:65:a5:07:ae:39:71:9f:20:92:50:75:2a:
03:39:87:48:5f:e4:5a:2d:9f:08:a6:5d:b4:08:60:
95:62:fb:82:62:d9:60:81:47:04:3f:fb:1c:58:54:
b5:c1:75:18:7f:01:41:d6:22:bc:09:5c:36:b6:7c:
6f:cb:3b:bd:ab:4a:c7:8b:79:37:cc:73:5b:e7:1f:
9c:68:f3:18:ed:05:f7:9b:f1:4b:9a:6d:a0:04:00:
28:ed:71:ce:42:7d:29:f9:09:33:1a:23:8c:b7:7c:
95:6e:18:82:c1:48:77:81:bd:3d:59:e8:15:cd:df:
76:c2:a9:15:fa:d8:1e:76:52:2d:2d:fc:53:9d:2d:
3e:76:c1:9f:90:ee:a1:f3:0d:8d:9a:a5:ea:03:32:
4d:62:1c:c4:14:ee:ce:25:7d:2e:4b:07:a7:b3:8d:
ca:57:57:e5:07:f2:f2:c1:e8:b6:8e:9b:b0:08:e8:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:F0:C4:C0:2B:E1:BA:17:E1:EC:BF:54:81:A5:B9:BD:12:20:CF
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8d:21:22:17:88:b4:18:5c:1b:e5:7c:9c:d1:f7:f9:7a:f4:
c2:31:2c:ad:59:60:14:0c:ea:75:44:1b:9a:f2:3b:bf:6d:84:
bd:50:59:1d:14:9e:0a:bd:7c:98:48:c9:d0:e2:64:d4:01:01:
6e:72:39:61:41:ac:3a:42:b9:9c:02:c3:0e:22:97:22:ef:26:
fc:7e:1c:8a:0e:4e:1f:98:b0:09:f7:84:cf:45:05:64:41:d7:
a0:a1:ab:04:90:31:f0:bf:ed:d6:11:4a:2d:54:fb:0a:5e:62:
b7:79:97:e8:fb:d2:6c:c3:8f:00:2c:21:39:ef:e3:1d:08:e9:
f4:86:51:fa:b8:c4:dd:a5:2f:8b:11:a0:29:20:1b:15:fa:1a:
51:72:e6:4f:b7:fc:d8:9d:38:05:c0:66:5a:8b:23:8e:95:3a:
7d:63:dd:c8:bb:0f:ea:20:63:71:95:d8:2c:9a:3d:24:b3:46:
06:f5:42:d6:a8:dc:5b:9e:4e:fb:23:7f:54:16:5b:46:0d:f1:
d7:18:5c:fe:d6:e1:3e:58:d8:b4:68:1a:a6:43:09:15:41:b7:
7d:e5:c0:ce:af:57:88:80:77:d3:24:72:2b:bb:0d:80:f2:67:
9b:2d:0e:e4:5b:64:28:9f:67:d1:68:3e:bb:9c:8b:07:f9:f6:
ee:b5:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:50 2026 by rpki-client