This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: HcpETPI0ZR+CN0Kvq+mM1xTqrLdKxABSwa6h5Mam/R8=
Subject key identifier: FC:97:C8:51:6D:9E:B4:6E:44:37:E1:5D:1B:5B:64:50:6E:C4:F3:79
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019BF3F52C475E797F73CCFB241A4D2085DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 07B8
Signing time: Sun 25 Jan 2026 07:01:29 +0000
Manifest this update: Sun 25 Jan 2026 07:01:29 +0000
Manifest next update: Mon 26 Jan 2026 07:01:29 +0000
Files and hashes: 1: CaBEFYDtaQzQxhyXo4MA7Dtx2rE.roa (hash: knYWc/a4bI5GtK7g0Qth1pZAN74E2q8jYjqFwaqxRKI=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: HV0AZ6MoUQJlwJUlLGlNShqhpc5Dvby8AYLkB2YOzc8=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:2c:47:5e:79:7f:73:cc:fb:24:1a:4d:20:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jan 25 07:01:29 2026 GMT
Not After : Jan 26 07:01:29 2026 GMT
Subject: CN=fc97c8516d9eb46e4437e15d1b5b64506ec4f379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:84:77:4e:11:b7:5c:be:bb:17:4d:a7:50:
74:82:08:4c:2c:8d:47:a2:82:a7:37:d4:3b:92:19:
25:89:a0:11:dc:7c:05:de:b4:b0:50:8d:72:db:39:
cc:74:f5:da:27:ab:6c:9d:7a:3f:41:14:98:86:8f:
73:a2:3b:f3:f0:fd:63:05:95:72:a1:6e:2d:95:a2:
4a:2c:2a:2d:60:04:b8:ae:c3:77:48:1a:67:61:1f:
10:00:2c:38:20:2f:db:7b:f1:ab:41:93:02:b6:34:
f0:f0:8a:6a:fc:92:31:bf:8d:32:2e:2a:ba:68:f8:
20:fe:dd:09:30:5e:a1:52:ff:cc:f7:07:f7:fc:28:
b8:36:e1:d0:74:81:d0:14:41:0a:23:56:6b:ff:eb:
38:21:3f:bc:a5:99:a7:1f:03:9f:97:8d:7a:6e:0a:
8e:db:2e:0d:89:39:b8:ca:74:a3:07:37:b7:64:c8:
11:0a:b6:58:09:87:d7:4c:e5:4b:22:27:fd:ed:fd:
9a:73:28:fe:bd:9b:c4:0a:62:d4:00:38:cb:a2:a7:
4f:e5:65:0f:08:80:ce:10:eb:0c:03:d6:d5:53:21:
1f:6e:b5:ed:f3:44:35:83:fb:1a:94:c7:92:ba:9b:
be:a6:b3:df:d8:c4:d5:fa:8b:d6:2a:37:16:e5:37:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:C8:51:6D:9E:B4:6E:44:37:E1:5D:1B:5B:64:50:6E:C4:F3:79
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:d5:25:b7:11:9c:13:b7:69:2c:dd:b5:40:81:a6:9f:ca:
19:57:e1:75:36:32:df:fe:d4:d0:85:14:91:cd:ed:ff:f8:c2:
8e:1f:1c:d9:0f:52:73:66:50:01:b7:34:b3:3f:e9:c9:05:e9:
29:80:a2:d1:b2:c4:86:c7:94:32:09:71:c4:d5:5f:f4:a1:64:
45:cc:4b:88:5f:7e:c3:33:3e:84:46:ae:1c:77:c5:41:b2:ff:
87:e8:b4:82:58:72:a5:68:d7:c7:29:ff:ec:04:a8:ef:b8:75:
f7:f4:c4:dd:91:7d:24:f5:82:d3:2e:b1:8d:bb:4d:15:ac:ea:
ff:11:8e:77:0b:2c:3c:ba:8c:2e:67:bb:b2:cd:05:2e:9a:78:
cf:52:a6:d6:bc:9e:b0:c4:83:af:ec:bb:78:ce:21:73:59:db:
cd:c2:c7:f5:87:78:7d:dd:ec:6c:8b:cc:bd:04:12:ad:28:47:
b2:13:1e:c9:ae:ee:d3:17:bc:9a:8c:21:68:f6:37:74:9a:dc:
6b:a1:4a:be:7a:ce:f8:cc:28:2a:d1:8d:95:d4:0d:32:ac:c5:
ff:97:fa:b8:18:4d:19:f6:6a:5d:a0:97:9e:ba:62:d3:9a:fa:
4c:22:07:02:78:27:b8:6a:12:c8:7f:a0:a6:10:16:83:bb:85:
c2:13:98:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9SxHXnl/c8z7JBpNIIXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh
Njc3MGIwHhcNMjYwMTI1MDcwMTI5WhcNMjYwMTI2MDcwMTI5WjAzMTEwLwYDVQQD
EyhmYzk3Yzg1MTZkOWViNDZlNDQzN2UxNWQxYjViNjQ1MDZlYzRmMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4OEd04Rt1y+uxdNp1B0gghMLI1H
ooKnN9Q7khkliaAR3HwF3rSwUI1y2znMdPXaJ6tsnXo/QRSYho9zojvz8P1jBZVy
oW4tlaJKLCotYAS4rsN3SBpnYR8QACw4IC/be/GrQZMCtjTw8Ipq/JIxv40yLiq6
aPgg/t0JMF6hUv/M9wf3/Ci4NuHQdIHQFEEKI1Zr/+s4IT+8pZmnHwOfl416bgqO
2y4NiTm4ynSjBze3ZMgRCrZYCYfXTOVLIif97f2acyj+vZvECmLUADjLoqdP5WUP
CIDOEOsMA9bVUyEfbrXt80Q1g/salMeSupu+prPf2MTV+ovWKjcW5TefMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyXyFFtnrRuRDfhXRtbZFBuxPN5MB8GA1UdIwQY
MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt
ZTA4MDJmNDc0NDQ0LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0
LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKTVJbcR
nBO3aSzdtUCBpp/KGVfhdTYy3/7U0IUUkc3t//jCjh8c2Q9Sc2ZQAbc0sz/pyQXp
KYCi0bLEhseUMglxxNVf9KFkRcxLiF9+wzM+hEauHHfFQbL/h+i0glhypWjXxyn/
7ASo77h19/TE3ZF9JPWC0y6xjbtNFazq/xGOdwssPLqMLme7ss0FLpp4z1Km1rye
sMSDr+y7eM4hc1nbzcLH9Yd4fd3sbIvMvQQSrShHshMeya7u0xe8mowhaPY3dJrc
a6FKvnrO+MwoKtGNldQNMqzF/5f6uBhNGfZqXaCXnrpi05r6TCIHAngnuGoSyH+g
phAWg7uFwhOYQg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:44 2026 by rpki-client