This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: N3oIQS7fUzHxR+XXluvRKcxM2R1E9na4gSnK842J+98=
Subject key identifier: 83:28:CB:5A:6A:DF:50:CC:75:44:95:23:5E:93:34:39:96:11:DD:37
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 019BF951F4A9CC7327F8A023BCA0C8E1DD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 17ED
Signing time: Mon 26 Jan 2026 08:00:56 +0000
Manifest this update: Mon 26 Jan 2026 08:00:56 +0000
Manifest next update: Tue 27 Jan 2026 08:00:56 +0000
Files and hashes: 1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: BIHXEBN+vLCTuXqDgvlRBlgkTNzQTSds6CPGjrQavjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:f4:a9:cc:73:27:f8:a0:23:bc:a0:c8:e1:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jan 26 08:00:56 2026 GMT
Not After : Jan 27 08:00:56 2026 GMT
Subject: CN=8328cb5a6adf50cc754495235e9334399611dd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:14:12:73:9a:2c:6c:28:86:c2:e1:04:1f:
0c:84:3f:1f:6e:2f:79:30:6d:47:f4:b3:66:f7:ff:
68:9a:10:82:a1:ae:8e:20:0b:17:5c:b0:e2:aa:36:
90:69:a7:f7:dc:5e:36:8d:a4:91:c3:e0:e0:bf:08:
7f:70:45:12:59:6a:73:11:e2:dd:39:77:2e:61:2d:
ef:d7:52:cb:b3:b1:04:c9:cf:08:4a:ac:4e:5e:c9:
a5:b3:8c:2f:c3:d4:62:6c:99:2c:34:cd:44:e6:24:
92:3d:f5:6e:c7:a6:7b:d3:91:e0:95:9f:ec:d4:fb:
a2:27:62:c0:7e:1c:00:62:dc:bb:c1:55:f0:fd:0d:
47:4e:c5:cf:5f:2d:d8:19:f6:c2:00:6d:6b:e5:95:
b7:14:99:cb:37:29:d9:c6:92:30:2c:70:5f:f5:bc:
85:db:6d:1f:b2:3e:4f:67:5d:fb:98:ff:cb:c2:b4:
8c:c2:c5:7d:8d:b9:69:ee:16:ef:77:88:20:47:d0:
aa:52:af:25:6a:70:41:9e:d4:5d:34:00:8f:42:29:
61:5c:7c:d1:b8:e8:28:59:2f:f1:b8:86:9e:19:05:
24:18:7d:ac:99:7d:4e:44:b4:7c:5b:8f:bb:a4:23:
49:6a:32:08:20:fb:ca:61:f6:80:8e:03:97:0d:ee:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:CB:5A:6A:DF:50:CC:75:44:95:23:5E:93:34:39:96:11:DD:37
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:9b:01:64:89:ff:6b:73:40:0b:b5:b3:8d:0d:32:1e:f3:
d1:54:8d:f1:84:e9:89:d9:7f:ed:08:81:07:0d:d3:04:06:74:
d7:07:76:1f:34:99:a4:ac:5a:59:53:1a:28:74:1f:54:76:de:
5b:1f:cb:a5:33:4b:ba:d5:83:15:11:5f:74:fd:e2:6d:22:12:
62:3f:4d:6e:9b:07:a4:7a:55:76:28:37:a0:82:3e:a6:24:dc:
da:d5:fb:98:fe:b2:97:90:80:a9:a5:32:23:03:d7:73:0b:44:
ee:13:48:d9:fd:82:cc:87:98:3b:e3:a4:6a:2e:5f:14:b8:93:
8b:12:3a:9c:39:f1:2f:73:f3:eb:60:44:ca:9f:4e:51:d5:20:
ca:ba:ec:9a:dd:fd:81:61:e1:6a:89:e1:9c:4a:00:de:58:23:
b3:50:51:ea:e4:f9:5e:26:3a:41:ad:fb:5f:1e:6a:4b:93:fb:
f4:ed:f1:17:e4:00:f6:30:82:f4:a5:93:84:3b:f3:38:de:5e:
13:1b:eb:af:4f:f1:e8:87:af:3c:30:34:08:0f:33:19:1c:fc:
05:5b:bf:85:b6:77:f5:57:03:f4:21:26:55:18:53:30:1e:4d:
86:77:2a:9d:a2:4f:f2:5a:d7:bd:47:b5:0f:05:8d:e3:44:37:
af:a3:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:41 2026 by rpki-client