This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json)
Hash identifier: q7kW3XAoD/4AMprSogFU6/VHVmt3WkEo527+PDB2fNE=
Subject key identifier: FD:2D:25:2A:23:77:6C:98:FC:47:DE:5D:EF:E9:17:8F:75:A5:C5:25
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019BF6BEB48522163E798352FB6859CEA365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
Manifest number: 189A
Signing time: Sun 25 Jan 2026 20:00:51 +0000
Manifest this update: Sun 25 Jan 2026 20:00:51 +0000
Manifest next update: Mon 26 Jan 2026 20:00:51 +0000
Files and hashes: 1: 7Yt7YHW5_hNd1-7nBpalAtt61w8.roa (hash: Sw5wITefxDXkzEsytQjW7irD74Qb8SCqP1PXR/rp+n4=)
2: 8NBwLg2Jd6z7vXzz5jIrTEs15DE.roa (hash: BkN95demKqt6JdCZ/hfVmo8HPxrz006awTfG+ICNnYE=)
3: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (hash: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os=)
4: JaTBpeRblrIhygW_gFmMKDRL-xY.roa (hash: XOLrGZWvuFxuajEEcwc2+dK1DU4S8gk1g1IkQdEtpLk=)
5: M7DJ5sQeBaPrW-9SK5kjPY2w4ro.roa (hash: 49VJ22eio/lNKcwB9hzDWcB2B1aMdYReYFHkhobdgRo=)
6: X7cs_9cXQnCA-Rr7Px3vNYdFzRE.roa (hash: NJmnnq1FIG8l/hwx+95PtO4bN/7PHxQ5kKMPFnnLBaM=)
7: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (hash: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA=)
8: dZEx9OWUD23x5uuc5D0RvUQs0J0.roa (hash: JOuDISNyvO4jasphChNmyvtme6bkbF6emnrz73RUw1U=)
9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Cr5P6DI3pCNBiuMOU2XKfAG2fRoeA2RwOlMjWfZBQP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:b4:85:22:16:3e:79:83:52:fb:68:59:ce:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 25 20:00:51 2026 GMT
Not After : Jan 26 20:00:51 2026 GMT
Subject: CN=fd2d252a23776c98fc47de5defe9178f75a5c525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:3a:52:3b:2c:fb:85:b2:ec:0c:6e:54:5a:
6b:9c:a6:52:8c:c8:35:97:21:31:79:d2:7b:6c:8f:
5a:ea:7c:a8:71:6f:55:0b:bb:b1:31:d8:a1:e8:ec:
25:d4:e4:00:3b:b2:37:4a:e5:25:c2:af:8b:16:f4:
b8:d3:1e:b7:0b:b0:82:64:49:14:b4:7a:03:8e:50:
d2:da:7b:f7:14:f9:a0:ea:f3:7c:7d:6b:6e:43:2a:
9c:01:26:52:89:25:f9:1c:55:c3:85:b3:13:11:fa:
04:51:92:0f:ed:e9:62:2c:a8:fb:3c:1c:64:d2:d6:
22:7c:99:8c:e0:1c:97:51:54:c9:e7:a7:d6:10:af:
ea:40:59:94:2b:09:82:36:7f:58:ff:d1:b2:a4:16:
c9:50:4b:2c:28:37:7f:be:52:38:37:54:21:33:06:
14:2d:fc:d7:c2:07:a6:a7:a1:f4:d9:fd:dc:91:44:
ca:6e:e5:31:40:46:64:d1:d6:51:af:70:13:de:f0:
b6:a8:3a:c3:41:d8:f1:ff:af:c0:bc:34:3b:fa:9e:
f0:5d:50:24:d0:27:38:83:01:71:7d:92:27:8f:65:
5a:f0:fd:83:3f:31:ab:8a:b2:93:a4:08:cc:04:68:
e2:ee:68:27:34:7f:b2:8a:d1:08:29:0e:55:86:e6:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:25:2A:23:77:6C:98:FC:47:DE:5D:EF:E9:17:8F:75:A5:C5:25
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b5:84:14:8e:44:fd:11:c1:f6:4a:74:13:ab:c3:18:0a:e4:
27:78:41:0b:03:40:11:72:3a:20:24:e3:eb:dc:bf:a4:ce:c2:
c1:d3:bf:8c:71:60:25:7d:51:3c:73:1f:dc:e3:3e:5d:3f:4d:
50:ef:e5:31:d3:f5:22:65:54:71:f2:4f:17:35:d1:c1:12:82:
d6:3d:0f:31:b1:3d:2f:87:18:c1:ee:4b:49:15:78:74:50:6a:
9e:89:5a:5c:8c:5e:b6:34:8e:6e:34:db:cc:52:59:0a:ea:50:
5c:84:21:85:1a:23:96:ca:65:8b:d5:8d:17:4a:a2:1c:01:b3:
9a:59:12:6b:2a:a2:48:1f:36:2d:6e:2e:8a:ec:55:c4:a4:74:
23:0c:4f:2c:35:16:09:99:0e:74:44:e9:7b:fd:28:8b:e5:4b:
40:cd:e1:38:1b:5c:10:0b:b0:ef:cc:aa:ef:4c:a1:1d:ca:c0:
0a:38:a0:66:76:15:a0:db:b9:c0:ba:72:f5:62:d3:69:89:6c:
77:c9:ff:da:80:9d:47:a8:7e:ec:f1:0a:f9:c4:27:5c:e6:7f:
0a:68:df:7f:79:45:71:23:0b:30:be:ed:3f:b5:ee:13:0d:8c:
c9:f9:bc:02:df:e8:10:b7:c2:89:fe:d8:c2:e2:76:9a:c8:a6:
a6:8e:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:31 2026 by rpki-client