This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier: M1rt0mkRJ2ROWiZOCe8OTLRIUgOfSX2Duwou+5ZXSYE=
Subject key identifier: 1B:C4:72:C5:DD:02:2C:34:60:18:52:F7:2A:91:19:63:30:87:AE:B3
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019BF79AE215116236D40F6DE33104ABC72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number: 1335
Signing time: Mon 26 Jan 2026 00:01:21 +0000
Manifest this update: Mon 26 Jan 2026 00:01:21 +0000
Manifest next update: Tue 27 Jan 2026 00:01:21 +0000
Files and hashes: 1: BX-wklLdDD8XzxHJksQRCy4pE1o.roa (hash: uIUm6XT6o4/miIBu0V3ZQSH97iCpXkbo1bhxbJYRoCE=)
2: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: 4LqBZ/RGQN5Uv7NdDG5lk3Jxf1O5aCboHa9yrgflfhU=)
3: il3y8Onxh5fLAIfmtOQN8b7m1WY.roa (hash: ZV1R7FC5O8+fdS5U8RdGxw7AX7F0UkiAYpEfs6LZIkI=)
4: p-OtpG7NAZq6sk3lKJLX_TdhJx0.roa (hash: 6ANbLODWbSBjq2JK8gNSvCXV+On0WKNrg0hi8XNLiSM=)
5: zqqNdPd2jN90nFzH_xKr7SBp6k0.roa (hash: 4bJ5x444099qNpfBFVyMLNFC0y78xdbHZoBQBCBD0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:e2:15:11:62:36:d4:0f:6d:e3:31:04:ab:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 26 00:01:21 2026 GMT
Not After : Jan 27 00:01:21 2026 GMT
Subject: CN=1bc472c5dd022c34601852f72a9119633087aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:aa:0e:3c:d5:26:19:2d:da:f9:ba:34:c8:7f:
d2:6d:e0:f8:a6:ab:db:fa:9d:14:ec:28:ca:98:ce:
8f:f5:af:8f:15:cb:e2:46:5b:10:7d:ff:ba:5c:17:
6c:4b:98:24:56:a4:b2:35:63:77:b6:7b:40:e1:94:
c6:02:d6:6c:eb:b8:05:52:e4:b2:ff:52:8d:1b:b7:
03:21:ef:85:cf:ab:74:8d:32:40:c4:ed:0d:63:51:
81:4a:53:0a:32:9f:bd:d5:70:ca:4c:97:bb:98:b9:
36:fd:0c:eb:78:14:d4:e5:74:eb:20:cf:4b:03:6e:
f1:8f:14:e3:42:e1:32:a0:ac:be:a1:ea:df:b9:e0:
ba:c1:71:ea:15:dd:70:df:87:a0:cb:a8:e6:7e:fd:
3b:b0:b0:6d:1b:da:31:d8:02:e9:46:8c:a5:61:db:
79:0d:70:09:e7:89:af:7d:48:ff:47:7a:f8:3e:d2:
18:a4:48:46:a7:cb:55:24:50:85:89:49:2a:7f:0c:
a2:d7:52:3d:95:ba:1f:74:34:41:75:e9:88:68:bf:
38:4d:05:a2:53:fe:f5:b8:13:55:f9:11:4e:b5:16:
9a:5c:30:c2:b5:ef:61:1a:0d:87:df:b0:c2:28:ec:
f3:eb:04:11:1d:bf:fc:47:d5:1f:d2:16:0f:65:76:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:72:C5:DD:02:2C:34:60:18:52:F7:2A:91:19:63:30:87:AE:B3
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dc:33:f8:d0:61:90:02:eb:1b:3b:d6:d0:cc:8a:80:23:47:
3d:b2:2a:33:78:3a:5c:cb:4c:96:56:a3:3a:39:d6:67:3e:5d:
f1:78:cc:0a:a1:df:de:67:e4:13:bb:83:24:c9:85:91:4e:db:
08:c0:12:4d:b6:03:c1:da:c0:c2:06:35:83:6f:8e:08:36:ea:
ea:fb:72:d5:36:d7:96:56:d2:53:ff:b3:67:45:f3:17:f9:ec:
d9:b2:7f:1c:58:b6:e7:b3:af:4d:12:c4:c0:f9:22:8f:e4:18:
f2:c1:dc:19:99:df:78:39:d5:b8:5e:64:3f:fd:c3:b3:7c:00:
3b:63:c1:42:74:ad:72:16:05:6d:66:27:6c:2e:0f:45:d4:88:
d9:00:15:14:72:b3:fa:76:28:3d:f5:3e:fe:92:bd:5d:e9:37:
96:ac:02:5a:30:bf:f9:a2:7f:ae:10:e7:70:7e:5f:e6:47:72:
f9:5a:48:f9:e5:db:a4:98:ef:de:c2:3b:9b:c0:e1:48:b1:13:
d9:a3:67:52:67:20:3d:c9:e9:a5:d7:da:6c:75:12:41:43:85:
1b:86:71:39:dc:54:49:b2:33:06:09:07:c4:12:c2:a4:53:0c:
a7:3d:08:5e:58:69:c2:21:86:c4:51:cf:35:0f:3f:98:09:b3:
28:a4:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:48:26 2026 by rpki-client