This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: JeUY5bVhkKdhHwMKgPh5+WkQD7bIjo0fAzJyedjmghc=
Subject key identifier: 2C:C4:26:6A:95:C3:13:08:4B:A3:11:EA:55:28:17:69:6F:97:D4:BE
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019BF2E1EFDA77C265F6E86C44BB8500B429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 17EE
Signing time: Sun 25 Jan 2026 02:00:51 +0000
Manifest this update: Sun 25 Jan 2026 02:00:51 +0000
Manifest next update: Mon 26 Jan 2026 02:00:51 +0000
Files and hashes: 1: 4PouleIk6L2i1ReL6WtewlVXsXc.roa (hash: 8NOM6VJ9gfwRBC5YJgM+6KXIMLhBMYpSbqONCg3loVo=)
2: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: vAWs+7+8vJZ5NizMwVryW7+a/kNZbOfwHHmriEsj7No=)
4: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
5: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
6: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
7: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
8: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
9: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:ef:da:77:c2:65:f6:e8:6c:44:bb:85:00:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 25 02:00:51 2026 GMT
Not After : Jan 26 02:00:51 2026 GMT
Subject: CN=2cc4266a95c313084ba311ea552817696f97d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:15:b9:5b:f4:4f:a7:18:ea:8a:21:99:b9:
4f:f9:be:3d:e1:cc:41:79:3f:7a:dd:30:e7:fd:35:
ad:b7:e6:92:73:f0:b0:55:d6:4a:1e:f8:7b:2b:51:
4b:41:3f:2c:3f:11:13:06:1f:05:5b:dd:8c:1e:50:
28:17:b9:a4:2d:7f:fb:21:be:ee:a6:5b:0f:fb:b1:
23:94:74:7b:c9:fe:3d:22:92:d5:63:05:44:6f:2b:
8b:cb:06:14:24:42:20:7c:c7:e0:c6:8d:d2:96:44:
e0:77:ef:e9:ab:d2:9c:39:26:9f:a7:7c:c4:28:a5:
b3:df:fb:cf:55:52:c6:e6:b6:cf:c4:72:03:2b:4e:
d7:79:9b:b2:2e:c6:e4:55:74:72:e2:37:09:97:67:
c1:b2:67:c4:ae:f1:75:00:cf:7d:da:6f:08:a9:34:
b6:95:ba:01:e6:8c:60:1c:11:33:3d:a3:f8:64:50:
f9:71:5e:27:48:37:da:5c:ec:8e:78:99:ed:99:0e:
b2:b0:cf:29:a0:b1:15:d2:b0:b6:84:db:47:cd:87:
0c:04:a4:2a:2d:88:1f:14:a5:9e:8f:c1:0d:b0:b7:
09:0f:46:e7:c5:dc:8a:ce:09:c4:dc:34:92:ba:b6:
97:2d:04:f2:44:40:ce:dd:f1:d9:af:22:27:34:f8:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:26:6A:95:C3:13:08:4B:A3:11:EA:55:28:17:69:6F:97:D4:BE
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:65:8a:5f:8a:a8:4f:eb:0a:c8:3b:ab:a0:84:8f:b3:8f:
1c:01:57:ee:92:84:82:c3:c7:b3:15:12:29:0e:05:5d:d3:72:
08:05:ef:eb:d9:6a:70:ce:51:57:61:ab:83:9d:da:b0:b8:cf:
a0:c3:95:a4:8b:6e:57:6c:e7:27:71:d8:29:43:b8:06:db:1e:
c9:ea:96:ba:c6:b9:f1:0a:ed:2a:14:53:bb:f7:7e:58:10:f4:
14:03:a4:64:c5:1a:4d:cb:88:2c:47:a5:83:b4:f3:e9:95:4b:
22:59:dc:c2:6d:ac:90:7b:91:e2:83:f7:11:f6:53:b2:04:18:
c8:0a:9d:32:07:37:44:fc:05:8f:4f:a2:ff:5d:32:68:fb:9b:
da:6e:f1:18:f5:67:98:cb:96:9a:09:0b:d8:da:7a:48:b2:2c:
8a:5e:bd:f7:03:d5:ca:ff:2b:72:84:1e:f7:29:28:32:99:44:
79:bd:50:eb:26:f6:fc:00:00:34:68:7f:7a:76:61:fd:86:2e:
27:ee:60:83:94:ed:51:6d:0a:c7:d1:98:2c:c9:e1:90:db:20:
f4:44:d3:bf:56:c9:4d:af:43:da:8c:e8:c0:39:35:96:f9:25:
80:1b:34:6b:23:d4:57:65:59:48:ed:9e:31:21:7e:f1:89:07:
32:8e:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:05 2026 by rpki-client