This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
File: Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json)
Hash identifier: 038XFTv+I+05Q1lUAvwuwwOmGl3OjFYf/8VZG2T1y/E=
Subject key identifier: 83:9C:AF:07:D9:DC:A8:C4:EA:29:8E:5E:78:DE:DC:1B:3E:97:AA:E8
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Certificate issuer: /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial: 019BF763676606DFCCC60278D9DCE02CA688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
Manifest number: 0621
Signing time: Sun 25 Jan 2026 23:00:45 +0000
Manifest this update: Sun 25 Jan 2026 23:00:45 +0000
Manifest next update: Mon 26 Jan 2026 23:00:45 +0000
Files and hashes: 1: 0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa (hash: dZ4FeCTfblqtXelif+IwyAlXmzJNDihc4byltNkJAjA=)
2: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: Lq0MYnaoDHuMGvu3ST3NDjsY9ZgGE90I3fh0pNJ5ejs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:67:66:06:df:cc:c6:02:78:d9:dc:e0:2c:a6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Validity
Not Before: Jan 25 23:00:45 2026 GMT
Not After : Jan 26 23:00:45 2026 GMT
Subject: CN=839caf07d9dca8c4ea298e5e78dedc1b3e97aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:f6:2d:37:8f:1b:31:24:e9:85:53:71:33:
84:24:ac:78:2a:a8:58:f2:9a:49:8d:04:3a:dc:0b:
c9:99:4f:5c:ca:30:d4:8a:0c:b2:95:4b:c2:16:42:
61:91:89:24:06:83:ac:a6:71:d4:2a:82:ad:8a:c9:
40:83:9d:95:52:bc:9b:e0:ca:9d:65:f4:bf:0b:85:
63:ea:b6:fd:3a:87:d0:4f:f4:31:ad:41:03:03:e4:
43:5c:8a:42:b6:f3:ce:06:31:88:b3:e9:44:41:5e:
fa:52:a0:ea:0b:14:c4:b6:1e:24:81:4b:99:98:64:
dd:d4:c0:1b:b1:6b:0e:9f:95:40:eb:62:c0:f2:40:
30:51:a9:36:81:d6:8c:b4:59:34:9b:9a:9c:b9:0a:
67:21:5e:e5:0c:1f:dc:83:29:06:55:bb:22:a1:24:
25:ef:7a:a9:35:aa:c1:a1:93:70:fc:bf:09:75:39:
c8:b8:91:04:ca:cf:69:ba:f0:e9:30:c4:b3:b7:55:
ab:40:e9:c8:e8:83:08:44:33:24:d9:4e:84:3f:14:
8b:e9:a5:cc:00:28:90:23:c2:4a:f5:c4:e7:3a:25:
fc:14:6c:2c:b4:1b:2c:00:85:e6:d4:23:40:82:7e:
d0:5c:d0:01:af:3e:33:7d:06:ff:94:b5:b4:cf:bc:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:AF:07:D9:DC:A8:C4:EA:29:8E:5E:78:DE:DC:1B:3E:97:AA:E8
X509v3 Authority Key Identifier:
keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:57:80:4f:d2:cf:67:cc:d3:57:dc:4c:16:3c:4b:fb:e3:10:
db:a9:b4:7e:f6:16:ed:0f:4c:18:ef:83:51:95:c6:c0:4e:94:
a6:53:c7:e5:8c:1e:2b:bb:9b:7f:3b:41:4c:77:0b:17:6a:c9:
3e:a5:48:13:30:70:dc:fa:d9:19:2b:f0:42:81:9f:c8:6e:a9:
86:06:59:89:5c:a5:34:ce:15:21:52:78:4d:46:b2:65:52:da:
48:b6:ff:44:c3:46:38:be:4e:61:00:78:56:37:eb:f5:76:4d:
19:bf:fc:ed:f0:02:ea:06:67:be:6d:84:1c:4c:c5:4b:1d:00:
23:5b:dc:d3:8e:e3:84:21:4f:29:72:ae:91:1c:2d:4b:15:48:
98:c5:21:dc:a3:9d:21:97:4c:0d:6b:6e:b5:10:8c:7b:56:c4:
35:ce:57:0f:0c:43:a8:3e:21:f0:ea:f9:f9:25:32:b4:de:bb:
55:84:bd:8b:5d:d8:c0:af:3d:ae:31:73:1c:2b:85:7f:e1:94:
94:dd:d4:f3:5d:2e:0a:22:3c:2d:b5:a1:dc:d8:3e:6d:6d:5e:
39:ce:d5:dc:58:d1:ec:7e:e2:fe:ee:40:98:3b:b3:45:41:db:
ff:f7:36:00:9e:38:da:32:00:03:b1:9b:26:da:b7:17:af:2e:
d3:d9:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:53 2026 by rpki-client