This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: 5yl/oydpQ5mAjWb10niftHCZSt59/MlaNhdSzVsJyII=
Subject key identifier: 07:39:97:73:3F:E5:CA:5D:80:B2:35:AE:62:CA:E5:80:22:3C:18:39
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 019BF5750A2CB1181C3AD5404B17445A3D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0EDE
Signing time: Sun 25 Jan 2026 14:00:46 +0000
Manifest this update: Sun 25 Jan 2026 14:00:46 +0000
Manifest next update: Mon 26 Jan 2026 14:00:46 +0000
Files and hashes: 1: HJcs-w12XR1Oa3_7Fjrfjatz6Nk.roa (hash: N2c+1xmqIJ2oL3KdyPfmWmiUkJmY9BIkjqzElqkXBQ0=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: nhCROqfIpMtKe/EpOGTDhjMMX8U5g7JvQCJEEYUgH/s=)
3: xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa (hash: 4iBkWP8qWume/2A2mXJkWl5EI5fYnKSC+vvo5StFXVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:0a:2c:b1:18:1c:3a:d5:40:4b:17:44:5a:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Jan 25 14:00:46 2026 GMT
Not After : Jan 26 14:00:46 2026 GMT
Subject: CN=073997733fe5ca5d80b235ae62cae580223c1839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:f1:ab:51:30:e1:9a:93:bf:18:5b:e8:da:
f7:36:6a:ab:f7:b6:73:a0:0d:19:d9:a7:a4:70:c9:
d4:1c:ec:8a:18:94:44:02:98:01:41:57:9a:39:15:
a3:d5:76:77:91:5a:55:24:56:9f:26:c4:0d:8d:96:
26:b2:9d:24:66:18:79:da:d7:8e:2f:89:6f:79:51:
c8:03:4c:75:e7:a3:80:53:18:fc:13:b7:55:4f:08:
44:49:99:d5:87:3d:13:b0:4e:15:f3:e4:8c:0d:8d:
33:be:07:f0:dd:28:a7:c0:23:7b:ce:7f:0b:49:62:
82:d9:ff:4e:98:ef:ed:1c:21:2b:4f:fa:bf:7f:7b:
5d:29:0d:11:7e:10:12:49:f4:81:87:31:49:0c:c6:
72:4d:93:0a:c2:06:20:53:d3:12:38:f6:15:8e:e1:
a9:47:3d:18:4b:c6:de:17:f5:d5:12:1a:4f:f3:29:
fd:eb:5d:d3:2c:9c:bd:55:25:ba:2e:eb:61:ab:fe:
0e:aa:ca:5d:33:19:ab:c1:93:7e:01:70:2d:ce:2f:
47:ac:6e:35:35:fd:f8:0e:7a:76:a6:b4:63:82:68:
d3:bc:f8:01:fb:e1:44:a9:cc:d0:fc:72:d8:28:ec:
2d:ec:55:96:2d:cf:68:3b:27:3a:bd:9e:74:46:0f:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:97:73:3F:E5:CA:5D:80:B2:35:AE:62:CA:E5:80:22:3C:18:39
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2d:9e:69:af:7c:64:72:77:c7:e8:35:cb:19:dc:c8:5e:87:
a2:26:9d:33:07:d5:75:66:f3:f6:51:af:37:99:ff:2b:c0:cb:
c4:d5:29:ee:24:8b:5b:ca:dd:80:47:d5:37:52:75:46:d1:aa:
b2:c3:41:d7:ce:02:df:89:df:7e:b8:77:67:bb:02:b5:9a:df:
cf:ea:a7:db:1a:83:2e:ff:19:87:c2:0c:fd:53:ea:d4:59:42:
b3:bd:7a:b7:b7:f8:26:77:46:64:5f:49:f7:92:74:05:73:8a:
28:89:58:19:0c:7c:9d:32:13:c2:aa:75:cd:d0:97:89:3a:d6:
65:21:e0:ea:f5:28:b0:82:50:7e:d0:b2:08:17:05:ef:5a:ad:
29:cf:26:a1:d0:bf:5f:82:ad:71:1c:91:2a:81:37:10:84:4e:
a9:a2:4c:d3:ce:aa:ab:79:c0:e2:aa:ec:a7:f6:fa:f5:68:6b:
52:f7:43:12:47:a5:49:59:08:db:78:14:85:7c:67:99:29:b4:
9f:c6:18:2a:96:99:85:61:0f:0d:a3:2a:70:cb:d6:9d:d6:7b:
b2:68:3e:84:51:59:ab:81:15:41:b8:47:c8:c4:b6:4e:18:bc:
b6:c3:b5:09:f8:92:a1:40:1d:ea:e1:38:65:45:68:2f:01:29:
1e:e7:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:29 2026 by rpki-client