This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: tgxay8Vuv8SO5FlunbbbHaDwFzTEmUHwLqLMAOSOkUM=
Subject key identifier: 7D:2D:95:C6:33:DA:58:2B:37:20:F3:22:95:A2:42:F3:D7:79:8A:29
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 019BF9F6AE950EC9337F1FA789086750D20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 17EE
Signing time: Mon 26 Jan 2026 11:00:51 +0000
Manifest this update: Mon 26 Jan 2026 11:00:51 +0000
Manifest next update: Tue 27 Jan 2026 11:00:51 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: Tw0BqfKf6ymQIL5MUjGI87dy9WiRwuGNE5Z7TGd3f+I=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:f6:ae:95:0e:c9:33:7f:1f:a7:89:08:67:50:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Jan 26 11:00:51 2026 GMT
Not After : Jan 27 11:00:51 2026 GMT
Subject: CN=7d2d95c633da582b3720f32295a242f3d7798a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:82:6f:49:6d:f4:75:36:90:e3:a4:28:e3:
37:e7:d7:0a:92:2c:20:ec:72:35:de:7d:8c:a7:0d:
3e:c0:59:81:7a:65:13:3e:6f:9e:98:38:b8:a7:2c:
dd:bc:a2:77:3e:fd:e7:76:30:61:3e:ef:85:c6:c8:
e7:57:aa:e2:eb:d0:41:bc:b0:78:61:ce:bf:cb:d0:
0f:85:a5:44:69:fc:e7:a2:c6:e5:02:b4:9a:72:1d:
c5:60:1b:94:24:d3:db:df:63:a8:d1:db:c3:64:87:
79:a7:61:d5:e4:b8:3f:24:7a:b2:ae:be:14:98:89:
f7:f8:a5:16:07:f9:a5:d3:5c:b6:dd:58:e6:65:e7:
7a:5f:77:dd:61:90:16:5c:78:2b:cc:6c:3b:10:7c:
80:44:9e:21:2d:3d:41:99:b2:b5:7a:11:f8:f1:73:
27:c6:32:ef:83:8d:d3:38:b3:10:5a:06:0c:37:27:
be:0b:d5:da:05:8e:24:98:21:88:ce:71:ab:68:97:
76:0a:f1:3f:44:09:0a:61:a4:6f:1e:0b:08:de:00:
d6:d7:21:fb:7d:06:e9:93:14:9f:4d:35:3b:e8:9f:
6d:5c:e9:69:29:ef:46:c3:7d:d8:53:4d:f3:57:55:
ee:41:5b:3a:df:29:d3:75:e4:94:e6:b0:b0:84:98:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:95:C6:33:DA:58:2B:37:20:F3:22:95:A2:42:F3:D7:79:8A:29
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b5:53:9c:50:5e:ea:fa:3b:b9:e9:86:8e:22:9b:1c:72:00:
90:51:89:4a:b3:45:ba:0e:80:a3:2f:64:82:53:f2:e6:cf:61:
cc:64:6a:0e:58:a1:4e:2d:7d:fa:90:12:43:03:5b:24:7c:89:
7e:11:ee:ca:36:1e:79:40:d0:74:cd:5a:08:16:88:26:7f:f1:
30:07:b3:48:59:47:30:fa:a5:ee:18:e8:af:e2:25:35:92:5b:
f9:29:7d:28:a7:b1:8a:e7:b0:97:ed:67:f7:e1:05:24:03:64:
42:fb:09:38:d4:43:d8:bf:17:1a:b5:83:67:3b:12:17:1f:0a:
a5:e1:2c:4b:0e:ee:45:9c:a3:c2:a5:71:e7:50:95:28:27:be:
fb:f4:10:65:39:7a:eb:ea:61:ad:c1:7d:84:19:b4:60:db:9e:
cb:35:4e:8a:1d:08:b0:0d:60:8c:93:1e:82:72:7a:f3:9a:af:
40:41:d0:b0:4b:e8:39:0f:bf:b7:df:e9:5d:f9:08:21:4b:19:
b3:84:f6:11:f7:04:00:8a:08:54:d6:3d:b7:0d:23:82:72:fb:
8b:57:a6:3a:77:09:8a:59:53:be:13:eb:e4:37:bf:80:38:a5:
a4:41:00:a4:c1:7b:1d:e5:6b:f9:15:01:82:4d:94:86:95:ed:
a7:b9:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:26 2026 by rpki-client