This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier: Cp9T5vRN4PfQ3bYQgShhz0nHEYjBPAizPqEL3o5kJHU=
Subject key identifier: 40:C1:F7:A0:9E:CF:00:53:2E:4E:89:4C:8F:1B:CE:73:70:37:EC:DF
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial: 019BF6BE9ADF8258A2D1122A157EC1ED73BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number: 071F
Signing time: Sun 25 Jan 2026 20:00:45 +0000
Manifest this update: Sun 25 Jan 2026 20:00:45 +0000
Manifest next update: Mon 26 Jan 2026 20:00:45 +0000
Files and hashes: 1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: an8pNh3UTZLviiAF21HlkIop2zqNx3v87B7gxv6kYcA=)
2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:9a:df:82:58:a2:d1:12:2a:15:7e:c1:ed:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
Validity
Not Before: Jan 25 20:00:45 2026 GMT
Not After : Jan 26 20:00:45 2026 GMT
Subject: CN=40c1f7a09ecf00532e4e894c8f1bce737037ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:d3:85:dc:88:ad:d6:86:53:2e:1e:ea:a6:
69:f5:d1:5a:b2:b7:d1:94:fc:10:dd:19:4f:c5:86:
ef:9b:62:68:6b:0a:58:76:c0:1d:08:c6:dc:d1:a6:
4e:e1:b5:c3:b7:05:51:89:14:bb:23:20:40:14:d4:
7c:60:d2:8e:88:a2:7d:b8:a5:0a:42:03:d2:dd:49:
35:51:37:81:21:67:d8:1c:c3:76:8a:48:41:2a:13:
37:2e:44:fe:30:13:2f:3d:63:93:f3:c5:55:c0:ca:
21:02:85:eb:71:30:bd:b8:ab:aa:b6:fd:ad:0a:53:
b0:ff:98:ca:0b:45:0e:a1:bb:11:32:3a:d7:fe:15:
8a:96:07:6d:cd:4a:08:34:7a:a0:20:47:07:ff:ca:
16:b5:fb:a4:10:f0:01:4a:66:5d:ae:8e:17:1c:c9:
f7:09:b8:ca:b9:9e:fe:77:9c:19:c9:85:b4:82:9d:
ef:da:7f:8d:c7:ca:fc:f1:b3:d9:73:a6:65:80:94:
ca:df:d6:86:16:61:07:3f:b9:4f:7e:dd:43:ee:aa:
e6:67:a5:5e:17:fd:94:f5:13:13:13:d2:d0:02:2f:
18:fb:35:8c:9d:ec:3c:7b:f5:09:c4:32:ee:5e:14:
fd:72:63:2b:7e:31:1f:89:95:25:3e:9d:91:f8:bd:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:F7:A0:9E:CF:00:53:2E:4E:89:4C:8F:1B:CE:73:70:37:EC:DF
X509v3 Authority Key Identifier:
keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b2:e3:a2:7c:c2:e4:2e:f3:91:37:46:c6:f0:58:a3:97:fd:
43:fd:65:3f:6d:8c:07:cc:63:a2:b1:da:f2:b0:02:d2:2a:a7:
e1:14:27:e7:bc:a7:6d:0b:8a:e5:31:bd:ba:e6:e5:dd:d7:16:
be:bf:53:f2:51:d2:23:96:1d:be:8b:90:82:f7:bc:3c:4f:5b:
72:84:68:17:1c:09:d5:e8:f5:51:c0:51:d5:c1:f5:97:17:64:
c3:68:83:d0:2c:49:dc:8f:f9:8d:d5:d6:cd:c9:84:0e:c9:1e:
d5:f7:d1:72:04:43:ca:ff:8c:87:fb:9a:aa:39:de:5b:33:ea:
0e:99:03:9d:50:6e:d2:dd:a1:8b:8e:f9:25:e1:20:66:bd:7a:
20:01:b0:6f:b6:83:8c:d9:af:0f:db:0c:ec:c8:0e:86:7b:47:
04:02:92:06:fc:8b:fa:52:ff:b9:5c:03:8b:55:63:11:d4:3e:
17:01:68:e8:89:fa:49:fd:6c:76:69:83:b9:bb:2e:b0:54:50:
0b:05:0c:0b:a9:22:60:14:85:77:98:ad:cc:32:c3:07:0d:c8:
ca:af:db:cf:08:2e:9d:ea:1c:e1:6e:65:bb:49:68:c1:82:84:
04:9a:0c:a1:16:07:b7:d4:ee:70:b5:28:b4:40:ee:ac:b4:ec:
0b:31:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:21 2026 by rpki-client