This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: j8A3XM6yN+YwT9w4hhDYE6c0Zb/wyyUlYV2EYKc1IIQ=
Subject key identifier: 4A:8A:A8:52:7E:31:EF:75:72:2A:EA:47:12:7E:1F:B5:56:96:77:95
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019BF462ECE4B6A74400325D77C6F43C3EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 1243
Signing time: Sun 25 Jan 2026 09:01:22 +0000
Manifest this update: Sun 25 Jan 2026 09:01:22 +0000
Manifest next update: Mon 26 Jan 2026 09:01:22 +0000
Files and hashes: 1: 1-MgSf8s32BvOegxC89sSSrZDiVY.roa (hash: HK+3BwzCEPo64so/XTaGAItaVpJABzYRQHaD3V+1H0Y=)
2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
3: A0WL-QTaYCt0RnzYwBlw6geDuec.roa (hash: eJbUJCQy9MPFVnVp1tldprt4bPEJXS2yCm2kEOXkmxI=)
4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: 0WpSjAVq9t8xTe0y6hev0rc7iBsQXBoB/0wcg3xKFMA=)
6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
10: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
11: nD76qOaHhN5VJ7aXM3PiCRoUMfM.roa (hash: hE0uCKeABKXQrvQ3fZ4O08qwvKYHJvR/t+fOUw/45bk=)
12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
14: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
15: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
16: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
17: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:ec:e4:b6:a7:44:00:32:5d:77:c6:f4:3c:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 25 09:01:22 2026 GMT
Not After : Jan 26 09:01:22 2026 GMT
Subject: CN=4a8aa8527e31ef75722aea47127e1fb556967795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:59:8d:17:f1:84:28:e4:da:42:8e:13:92:
3c:b3:a9:9d:b3:05:51:0d:1b:58:76:3e:b5:a0:d7:
b2:44:26:4c:37:f8:4e:c9:cd:5d:8c:31:bd:e5:73:
ef:b7:c5:d7:91:40:fc:bd:bb:7c:eb:f1:b0:1a:2b:
c2:e9:48:ad:0b:89:a6:d8:bc:d5:8b:3d:c7:4e:36:
b4:7b:33:36:ce:12:bf:27:1a:ae:4c:f3:e8:cb:84:
85:0c:68:48:70:35:bd:4f:8d:66:42:7c:06:b8:91:
fa:04:e6:44:68:17:90:d4:1e:6e:00:71:0d:79:c0:
13:e4:ce:98:76:54:83:e8:8f:f2:28:55:5a:ce:11:
10:07:78:88:e6:a2:0f:79:4b:3e:07:48:bf:c1:9c:
93:2a:98:7d:5d:84:fe:96:e8:82:bf:cc:a0:e0:96:
88:91:78:e2:2b:e1:5d:95:39:19:82:42:0f:87:00:
15:01:78:e4:a5:4a:68:92:4a:5a:e9:68:09:5f:40:
90:10:f6:c5:94:a8:57:1c:52:ad:3d:5d:9f:2d:90:
87:c8:a6:22:08:d0:92:aa:05:b0:90:9c:d7:08:a7:
a7:1b:df:49:d1:9d:10:63:03:a1:26:40:67:dd:5e:
be:3d:c3:40:7a:5c:10:c7:e2:20:c1:86:1d:8e:df:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:A8:52:7E:31:EF:75:72:2A:EA:47:12:7E:1F:B5:56:96:77:95
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:40:a0:9b:30:c3:37:2f:3f:08:30:5f:e9:53:c0:df:24:84:
14:67:44:63:cc:d3:58:06:6c:be:d5:57:83:32:9c:a6:92:7b:
3d:61:c8:a3:db:44:9f:60:ff:95:eb:2f:59:11:e8:ba:2a:c7:
2c:61:3b:c6:32:20:1d:d9:a3:82:73:a1:38:3a:85:98:0d:8c:
99:c3:57:86:f7:ec:c5:21:1c:e9:3a:c7:d0:ec:94:05:59:ea:
71:29:5b:f7:06:ed:d0:0c:eb:11:db:e8:3e:cd:15:1f:18:ff:
dc:65:4c:97:1e:79:69:2c:9b:d1:49:50:ce:cf:42:91:cb:a6:
eb:17:d4:20:3b:74:e8:a0:0c:a8:36:e3:35:c4:96:16:bc:8d:
6a:be:35:8a:b3:93:c5:f4:7d:87:56:af:8a:4a:cc:6e:69:3e:
89:71:68:f9:60:e2:64:a3:bf:86:6d:37:0f:2c:96:99:70:07:
98:28:bb:df:0d:3b:6c:42:89:ad:9f:18:9f:95:ec:23:7b:a7:
4b:4e:c2:e7:f1:90:bb:3d:a0:44:b5:68:eb:a6:18:a3:38:3d:
e5:19:c5:4a:9b:7d:79:18:9f:c5:b4:3a:9b:47:da:c6:dd:5e:
02:42:06:99:9e:6b:5d:f9:0d:b3:f7:2a:21:35:30:67:ad:69:
9e:93:b3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0YuzktqdEADJdd8b0PD6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjYwMTI1MDkwMTIyWhcNMjYwMTI2MDkwMTIyWjAzMTEwLwYDVQQD
Eyg0YThhYTg1MjdlMzFlZjc1NzIyYWVhNDcxMjdlMWZiNTU2OTY3Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvolZjRfxhCjk2kKOE5I8s6mdswVR
DRtYdj61oNeyRCZMN/hOyc1djDG95XPvt8XXkUD8vbt86/GwGivC6UitC4mm2LzV
iz3HTja0ezM2zhK/JxquTPPoy4SFDGhIcDW9T41mQnwGuJH6BOZEaBeQ1B5uAHEN
ecAT5M6YdlSD6I/yKFVazhEQB3iI5qIPeUs+B0i/wZyTKph9XYT+luiCv8yg4JaI
kXjiK+FdlTkZgkIPhwAVAXjkpUpokkpa6WgJX0CQEPbFlKhXHFKtPV2fLZCHyKYi
CNCSqgWwkJzXCKenG99J0Z0QYwOhJkBn3V6+PcNAelwQx+IgwYYdjt+0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqKqFJ+Me91cirqRxJ+H7VWlneVMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkCgmzDD
Ny8/CDBf6VPA3ySEFGdEY8zTWAZsvtVXgzKcppJ7PWHIo9tEn2D/lesvWRHouirH
LGE7xjIgHdmjgnOhODqFmA2MmcNXhvfsxSEc6TrH0OyUBVnqcSlb9wbt0AzrEdvo
Ps0VHxj/3GVMlx55aSyb0UlQzs9Ckcum6xfUIDt06KAMqDbjNcSWFryNar41irOT
xfR9h1avikrMbmk+iXFo+WDiZKO/hm03DyyWmXAHmCi73w07bEKJrZ8Yn5XsI3un
S07C5/GQuz2gRLVo66YYozg95RnFSpt9eRifxbQ6m0faxt1eAkIGmZ5rXfkNs/cq
ITUwZ61pnpOzIw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:16:51 2026 by rpki-client