This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: Z7Xh9ZmnhZ6NhKeU/i+StjJwz2yYmctRV9fyA1qcWPI=
Subject key identifier: 9F:ED:30:2A:9B:7E:6A:97:2A:2B:16:35:AB:84:3C:DE:5F:83:BD:A5
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019BF619DB75F7DF9235D84B14336A31A209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 08A0
Signing time: Sun 25 Jan 2026 17:00:48 +0000
Manifest this update: Sun 25 Jan 2026 17:00:48 +0000
Manifest next update: Mon 26 Jan 2026 17:00:48 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: Aa0GysfD8EcD4bEiqtmoUK-eVV8.roa (hash: AU77JYnyOQKBlP6fA/DR9mZ9IUbLLdZ9vaWCDV4tmXs=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: tpF1A6TyuGQEnt+6M2hiy6JXn4ImrUfStuGcKZV5Pec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:db:75:f7:df:92:35:d8:4b:14:33:6a:31:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jan 25 17:00:48 2026 GMT
Not After : Jan 26 17:00:48 2026 GMT
Subject: CN=9fed302a9b7e6a972a2b1635ab843cde5f83bda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:e7:c5:bc:d6:71:a8:45:62:d4:32:3d:2b:
15:32:62:8d:ca:74:5e:7f:64:e4:97:13:d9:a1:9d:
17:a3:13:cd:35:a6:ee:ba:04:ce:dc:dc:4b:12:af:
98:92:0e:57:43:a8:7c:b8:4d:13:4f:bd:4a:1c:6e:
2b:20:fb:b9:e1:39:97:23:7e:42:b6:73:c8:81:9f:
b0:db:78:91:fd:fe:47:7b:5a:9e:f1:68:a5:02:38:
5b:63:84:8b:bb:1c:52:f5:20:f9:88:2b:ec:1c:8f:
35:48:86:e6:cb:d7:89:2e:28:ce:a1:d5:0b:82:8b:
0e:d9:d9:b9:f5:d3:70:1a:58:0a:10:b7:1a:a1:3b:
d8:53:31:4e:6f:5a:0f:90:25:e4:f9:11:c1:dd:08:
ea:85:ce:a8:b7:b5:53:a4:9f:fa:78:ec:f7:e8:97:
57:e2:9d:a1:2e:bb:ff:65:3a:56:12:39:cd:89:71:
ec:24:c8:9e:2a:92:47:31:21:34:fc:3a:40:64:e5:
a4:21:56:d5:12:c3:ea:6d:94:bb:2b:32:fd:d0:63:
29:62:fb:2f:7a:ce:f8:f0:f8:6a:dd:d7:56:10:4c:
a3:27:5a:c9:29:78:7f:da:50:f2:5a:98:9c:4d:7d:
18:fb:6b:61:5f:33:a7:57:ca:ed:b5:47:0d:ca:0b:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:30:2A:9B:7E:6A:97:2A:2B:16:35:AB:84:3C:DE:5F:83:BD:A5
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f3:0d:0f:c4:d3:1d:19:37:5e:fd:a2:b1:69:5f:50:81:d5:
b2:1e:64:f9:06:cb:00:b8:d7:51:23:ab:a8:9e:c8:30:2e:d9:
73:81:b1:75:d9:9d:5b:1a:1b:47:90:29:92:a1:03:30:37:c8:
6b:a4:73:7e:a8:c8:74:25:b2:33:72:4d:a3:52:ef:90:40:c4:
d1:5f:7a:5a:44:78:41:f5:c8:f7:2a:78:25:58:42:e4:ed:72:
2b:5c:a8:cd:41:65:b7:71:92:65:57:c8:ca:49:ce:60:37:8f:
a3:09:72:9d:ac:ff:50:e0:b3:0e:ba:dd:fc:26:9a:e9:1c:87:
0c:3a:d4:69:67:05:63:bf:5e:d6:eb:03:cb:80:f8:fc:58:c3:
94:cf:df:56:62:92:c7:81:22:2f:bb:40:6f:16:2f:b9:c0:b4:
f4:a2:02:85:cb:60:5b:dd:a0:70:f9:48:1b:7a:c1:25:af:19:
f4:1d:a4:8c:9a:38:1d:63:6e:df:cb:82:05:72:2a:6e:25:f1:
5a:97:4f:85:53:ad:6f:77:88:80:74:67:4e:83:73:e9:c2:42:
aa:43:68:0b:76:80:6c:59:d5:38:f8:27:44:93:9e:10:2c:d1:
88:14:12:5c:fb:ea:8b:45:5d:ec:cc:e3:b9:92:66:ae:e4:e0:
8d:5b:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:17 2026 by rpki-client