This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: +hQmEUxDtDavCmRZxO7jYAdZV/gPWrsrd5TCIAI+Tv0=
Subject key identifier: 7F:72:68:55:A5:4D:EC:83:81:D7:AC:F6:A4:31:46:15:9C:5E:9A:F7
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 019BF6BF7E359D2D4F414CEE20FBED9E8F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 13A0
Signing time: Sun 25 Jan 2026 20:01:43 +0000
Manifest this update: Sun 25 Jan 2026 20:01:43 +0000
Manifest next update: Mon 26 Jan 2026 20:01:43 +0000
Files and hashes: 1: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (hash: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y=)
2: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (hash: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: CXZC6usoUjnXerbjGLCS3G5iCytLAZRXcAb794R1L3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:7e:35:9d:2d:4f:41:4c:ee:20:fb:ed:9e:8f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 25 20:01:43 2026 GMT
Not After : Jan 26 20:01:43 2026 GMT
Subject: CN=7f726855a54dec8381d7acf6a43146159c5e9af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:c6:ab:91:14:81:78:45:aa:30:15:ea:ed:
1c:2d:74:2c:94:1c:e9:d9:09:7c:3c:72:65:b2:0e:
e7:e3:d5:f5:3e:56:d4:d2:49:e4:b4:d4:ae:4f:73:
71:7e:b5:e4:d6:36:3b:07:5b:a3:a5:bd:21:09:0a:
c0:93:05:2e:6e:32:ac:9d:98:d2:a8:97:a0:59:59:
e5:1a:33:3c:92:84:22:81:9f:83:5c:c5:05:fb:11:
9c:1a:1e:22:17:e1:ec:c1:24:f5:b6:b1:fd:78:52:
97:0d:f0:a5:a3:7d:95:55:00:59:86:02:83:79:eb:
7d:a2:12:31:99:9c:ec:a3:47:70:04:02:a6:45:a5:
d6:f0:a5:ab:0c:79:4b:b3:90:da:7d:40:8e:1d:0e:
fb:e9:6b:6b:26:ab:4e:a9:0e:0f:2e:5a:0b:85:18:
a5:ef:bb:1f:ab:59:d1:77:cf:9a:38:4f:22:b8:45:
ac:b5:6f:f8:5e:48:b4:f6:44:1b:54:12:3d:7a:2e:
9a:5f:f5:6d:3a:e6:fe:6b:f7:b5:aa:65:33:c5:ea:
52:20:c0:24:8f:a2:25:9d:bd:a6:6a:7d:28:f3:29:
16:b1:b0:32:28:54:19:8f:e1:b9:c4:b4:e9:82:78:
b5:77:aa:18:48:cc:b8:13:18:0b:39:98:e3:c3:70:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:68:55:A5:4D:EC:83:81:D7:AC:F6:A4:31:46:15:9C:5E:9A:F7
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dd:03:00:fd:42:9b:35:2e:3e:ce:f8:3b:ce:f0:e8:50:96:
fe:4a:71:fd:a7:6c:c3:f4:8d:a6:aa:95:e4:1e:3f:0b:a5:a0:
dc:95:a0:dc:de:c1:6f:d6:7d:38:b5:16:33:ec:7c:02:b7:f2:
4f:58:95:f4:86:84:94:a7:7e:8a:3d:7a:e9:94:9d:42:86:7d:
41:44:7a:23:fd:08:a6:c8:83:9d:f4:67:97:1b:c8:e5:57:d4:
b6:0d:d9:11:6b:f9:4d:28:21:e9:33:59:fc:e0:26:6a:e5:64:
f1:6b:38:b6:dd:93:df:30:85:60:6f:15:72:9f:2d:43:ee:0b:
0e:40:80:f1:f9:28:1a:6a:c5:c7:0e:90:0b:d7:65:5a:79:b6:
7d:bb:2b:74:b3:a2:7e:10:d6:36:4a:1c:0b:49:41:a8:cf:59:
a8:ca:8d:3d:15:7c:be:b5:d2:bf:81:d5:06:32:6b:91:bb:df:
3f:5c:98:e5:76:24:0f:08:c8:6c:e3:05:0e:6d:9a:76:95:d7:
cc:bc:f2:91:e5:da:ca:e3:8c:2b:cf:3e:91:00:64:7a:f6:34:
9e:b5:e7:64:44:34:e6:28:93:22:49:6c:1e:8e:ad:66:4e:b3:
e3:0d:f2:87:3e:c6:40:e7:43:67:ad:a8:7f:a0:3b:d1:47:f1:
6a:36:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:30 2026 by rpki-client